2024

wac commit 385e1 was discovered to contain a heap overflow.

wac commit 385e1 was discovered to contain a heap overflow via the load_module function at /wac-asan/wa.c. This vulnerab

wac commit 385e1 was discovered to contain a heap overflow via the setup_call function at /wac-asan/wa.c. This vulnerabi

wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerabil

wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function

wasm3 139076a contains a Use-After-Free in ForEachModule.

wasm3 139076a contains memory leaks in Read_utf8.

wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution.

wasm3 139076a is vulnerable to Denial of Service (DoS).

A vulnerability was found in Intelligent Apps Freenow App 12.10.0 on Android. It has been rated as problematic. Affected

07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http://erp.07fly.net:80/

The theme.php file in SDCMS 2.8 has a command execution vulnerability that allows for the execution of system commands

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9 are susceptible to a Denial of Service (DoS) vulnerab

Trustee is a set of tools and components for attesting confidential guests and providing secrets to them. The ART (**Att

SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the resetuserinfo.php file. The

An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php componen

hopetree izone lts c011b48 contains a server-side request forgery (SSRF) vulnerability in the active push function as \\

hopetree izone lts c011b48 contains a Cross Site Scripting (XSS) vulnerability in the article comment function. In \apps

An Improper Authorization (Access Control Misconfiguration) vulnerability in MGT-COMMERCE GmbH CloudPanel v2.0.0 to v2.4

A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcS

File Upload vulnerability in Laravel CMS v.1.4.7 and before allows a remote attacker to execute arbitrary code via the s

A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 allo

A Cross-site Scripting (XSS) vulnerability in manage_account.php in Sourcecodester Cab Management System 1.0 allows remo

A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows r

An incorrect access control issue in HomeServe Home Repair' android app - 3.3.4 allows a physically proximate attacker t

An incorrect access control issue in Life: Personal Diary, Journal android app 17.5.0 allows a physically proximate atta

A vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform privilege escalation using

Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.

Northern.tech Hosted Mender before 2024.07.11 allows SSRF.

Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control.

Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF.

Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an

Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. A

Airflow versions before 2.10.3 have a vulnerability that allows authenticated users with audit log access to see sensiti

An attacker with local access the to medical office computer can escalate his Windows user privileges to "NT AUTHORITY\

An attacker with local access to the medical office computer can access restricted functions of the Elefant Service too

An attacker with local access the to medical office computer can escalate his Windows user privileges to "NT AUTHORITY\

Attackers with local access to the medical office computer can escalate their Windows user privileges to "NT AUTHORITY\

An unauthenticated attacker with access to the local network of the medical office can query an unprotected Fast Health

The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entit

The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, Woo

An unauthenticated attacker with access to the local network of the medical office can use known default credentials to

Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Comput

A vulnerability classified as problematic was found in CodeAstro Real Estate Management System 1.0. Affected by this vul

A vulnerability classified as problematic has been found in CodeAstro Real Estate Management System 1.0. Affected is an

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. This issue af