2024

A cross site scripting vulnerability exists in GitLab CE/EE affecting all versions from 16.6 prior to 17.0.5, 17.1 prior

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at i

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parame

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at i

CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via Supply_Management_System/admin/view_invoice

A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remot

A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remot

A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remot

Insecure permissions in hwameistor v0.14.3 allows attackers to access sensitive data and escalate privileges by obtainin

A vulnerability in the web-based management interface of HPE Aruba Networking EdgeConnect SD-WAN gateway could allow an

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute a

Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtain

DuckDB is a SQL database management system. In versions 1.0.0 and prior, content in filesystem is accessible for reading

OpenAM is an open access management solution. In versions 15.0.3 and prior, the `getCustomLoginUrlTemplate` method in Re

VNote is a note-taking platform. A Cross-Site Scripting (XSS) vulnerability has been identified in the Markdown renderin

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obt

AdTran SRG 834-5 HDC17600021F1 devices (with SmartOS 11.1.1.1 and fixed in Version 12.1.3.1) have SSH enabled by default

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated re

AdTran 834-5 HDC17600021F1 (SmartOS 11.1.1.1) devices enable the SSH service by default and have a hidden, undocumented,

Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via s

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated re

In Progress® Telerik® Reporting versions prior to 18.1.24.709, a code execution attack is possible through object inject

A vulnerability was found in F-logic DataCube3 1.0. It has been declared as critical. Affected by this vulnerability is

libcurl's ASN1 parser has this utf8asn1str() function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid fi

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Pinot. This issue affects Apache Pin

XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file

The WooCommerce - PDF Vouchers plugin for WordPress is vulnerable to authentication bypass in versions up to, and includ

The Social Auto Poster plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation

The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mapTypes’ parameter in

The Social Auto Poster plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to

Sentry is an error tracking and performance monitoring platform. Starting in version 10.0.0 and prior to version 24.7.1,

An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate pri

Okta Browser Plugin versions 6.5.0 through 6.31.0 (Chrome/Edge/Firefox/Safari) are vulnerable to cross-site scripting. T

The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data se

AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the command queue can use i

An attacker could exploit the vulnerability by injecting garbage data or specially crafted data. Depending on the data i

Exposure of temporary credentials in logs in Apache Arrow Rust Object Store (`object_store` crate), version 0.10.1 and e

An issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local attacker to escalate th

Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result

TF2 Item Format helps users format TF2 items to the community standards. Versions of `tf2-item-format` since at least `4

go-chart v2.1.1 was discovered to contain an infinite loop via the drawCanvas() function.

If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from

Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYP

A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the atta

A stack-based buffer overflow vulnerability due to a missing bounds check in the NI I/O Trace Tool may result in arbitra

A memory corruption issue due to an improper length check in NI LabVIEW may disclose information or result in arbitrary

A memory corruption issue due to an improper length check in LabVIEW tdcore.dll may disclose information or result in ar