2024

A vulnerability has been found in SourceCodester School Fees Payment System 1.0 and classified as critical. This vulnera

A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B20200504. It has been classified as critical. This affects th

The MSI installer for Splashtop Streamer for Windows before 3.6.0.0 uses a temporary folder with weak permissions during

The MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with weak permissions during

The MSI installer for Splashtop Streamer for Windows before 3.6.2.0 uses a temporary folder with weak permissions during

The MSI installer for Splashtop Streamer for Windows before 3.7.0.0 uses a temporary folder with weak permissions during

A vulnerability was found in Tenda O3 1.0.0.10(2478). It has been rated as critical. This issue affects the function fro

A vulnerability was found in Tenda O3 1.0.0.10(2478). It has been declared as critical. This vulnerability affects the f

The Media.net Ads Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validati

The Flipbox Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.5

Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate privileges via the web-view

Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable

Directory Traversal vulnerability in Severalnines Cluster Control 1.9.8 before 1.9.8-9778, 2.0.0 before 2.0.0-9779, and

streamlit-geospatial is a streamlit multipage app for geospatial applications. Prior to commit c4f81d9616d40c60584e36abb

An issue in Solar-Log 1000 before v2.8.2 and build 52-23.04.2013 was discovered to store plaintext passwords in the expo

A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated priv

A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an aut

A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authe

A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated priv

A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC t

ChurchCRM is an open-source church management system. Versions of the application prior to 5.9.2 are vulnerable to an au

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection i

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection i

txtdot is an HTTP proxy that parses only text, links, and pictures from pages, removing ads and heavy scripts. Starting

txtdot is an HTTP proxy that parses only text, links, and pictures from pages, removing ads and heavy scripts. Prior to

phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/widgets/edit.php

phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\groups\edit-group.php

An issue in skteco.com Central Control Attendance Machine web management platform v.3.0 allows an attacker to obtain sen

Insecure Permissions vulnerability in Deepin dde-file-manager 6.0.54 and earlier allows privileged operations to be call

phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edit.php.

In the module "PayPal Official" for PrestaShop 7+ releases prior to version 6.4.2 and for PrestaShop 1.6 releases prior

Nimble Commander suffers from a privilege escalation vulnerability due to the server (info.filesmanager.Files.Privileged

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to transmission of password in plain text. A remote

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing HTTPOnly flag for the session cookies ass

Invalid Accept-Encoding header can cause Apache Traffic Server to fail cache lookup and force forwarding requests. This

Apache Traffic Server forwards malformed HTTP chunked trailer section to origin servers. This can be utilized for reques

Apache Traffic Server accepts characters that are not allowed for HTTP field names and forwards malformed requests to or

Softaculous Webuzo contains a command injection vulnerability in the FTP management functionality. A remote, authenticat

Softaculous Webuzo contains a command injection in the password reset functionality. A remote, authenticated attacker ca

OpenObserve is an open-source observability platform. Starting in version 0.4.4 and prior to version 0.10.0, OpenObserve

The OpenObserve open-source observability platform provides the ability to filter logs in a dashboard by the values uplo

A command-injection issue in the Certificate Signing Request (CSR) functionality in R-HUB TurboMeeting through 8.x allow

An arbitrary file upload vulnerability in Webkul Qloapps v1.6.0.0 allows attackers to execute arbitrary code via uploadi

There is an elevation of privilege vulnerability in server and client components of Absolute Secure Access prior to vers

Insecure permissions in kuma v2.7.0 allows attackers to access sensitive data and escalate privileges by obtaining the s

A vulnerability, which was classified as critical, has been found in ForIP Tecnologia Administração PABX 1.x. This issue

Memory request logic vulnerability in the memory module. Impact: Successful exploitation of this vulnerability will affe

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to,

A stored XSS issue was discovered in Archer Platform 6 before version 2024.06. A remote authenticated malicious Archer u

A stored XSS issue was discovered in Archer Platform 6.8 before 2024.06. A remote authenticated malicious Archer user co