2024

filestash v0.4 is configured to skip TLS certificate verification when using the FTPS protocol, possibly allowing attack

goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-m

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function i

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located i

A path hijacking vulnerability was reported in Lenovo Driver Manager prior to version 3.1.1307.1308 that could allow a l

A command injection vulnerability could allow an authenticated user to execute operating system commands as root via a s

An authentication bypass vulnerability could allow an attacker to access API functions without authentication.

A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to esc

A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to esc

A vulnerability was found in IObit Driver Booster 11.0.0.0. It has been rated as critical. Affected by this issue is som

Stack-based buffer overflow vulnerability in Tenda AC18 V15.03.3.10_EN allows a remote attacker to execute arbitrary cod

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. The hostinfo page has missing/improp

FOG is a cloning/imaging/rescue suite/inventory management system. An improperly restricted file upload feature allows a

A vulnerability was found in IObit iTop Data Recovery Pro 4.4.0.687. It has been declared as critical. Affected by this

Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file. This issue affects SDP Clien

Cato Networks Windows SDP Client Local Privilege Escalation via self-upgradeThis issue affects SDP Client: before 5.10.3

Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34.

Haystack is an end-to-end LLM framework that allows you to build applications powered by LLMs, Transformer models, vecto

The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation

A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by remote attackers to perform state-changing operations

A “CWE-732: Incorrect Permission Assignment for Critical Resource” in the ThermoscanIP installation folder allows a loca

A “CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')” allows malicious users

A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. This affe

A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been rated as critical. This issue af

Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker

Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker

Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacke

The Lifetime free Drag & Drop Contact Form Builder for WordPress VForm plugin for WordPress is vulnerable to Stored Cros

os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows

A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. This

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface wit

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface wit

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface wit

A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface with

A vulnerability was found in SourceCodester Lot Reservation Management System 1.0. It has been declared as critical. Thi

A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to delete any J

TensorFlow is an end-to-end open source platform for machine learning. `array_ops.upper_bound` causes a segfault when no

Langflow versions prior to 1.0.13 suffer from a Privilege Escalation vulnerability, allowing a remote and low privileged

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote at

Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API routes inside the CM

Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwor

Acceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4 series. If this vulnerabilit

Priority PRI WEB Portal Add-On for Priority ERP on prem - CWE-200: Exposure of Sensitive Information to an Unauthoriz

Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory

Matrix Tafnit v8 -  CWE-552: Files or Directories Accessible to External Parties

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value *size when ca

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: replace skb_put with skb_put_zero Avoi

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Correct check for empty list

In the Linux kernel, the following vulnerability has been resolved: gve: Account for stopped queues when reading NIC st

In the Linux kernel, the following vulnerability has been resolved: f2fs: check validation of fault attrs in f2fs_build