2024

The pwrstudio web application of EV Charger (in the server in Circontrol Raption through 5.6.2) is vulnerable to OS comm

A vulnerability classified as critical has been found in code-projects E-Health Care System 1.0. This affects an unknown

A vulnerability was found in code-projects E-Health Care System 1.0. It has been rated as critical. Affected by this iss

A vulnerability was found in code-projects E-Health Care System 1.0. It has been declared as critical. Affected by this

Dell PowerProtect DD, versions prior to 7.7.5.50, contains an Exposure of Sensitive Information to an Unauthorized Actor

Dell PowerProtect DD, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an access control vulnerab

Dell PowerProtect Data Domain, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an escalation of

Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe modu

changedetection.io is a free open source web page change detection tool. The validation for the file URI scheme falls sh

Duende.AccessTokenManagement.OpenIdConnect is a set of .NET libraries that manage OAuth and OpenId Connect access tokens

XStream is a simple library to serialize objects to XML and back again. This vulnerability may allow a remote attacker t

A GitHub App installed in organizations could upgrade some permissions from read to write access without approval from a

Inconsistent <plaintext> tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier.

SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter.

Adobe Experience Manager versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

The Inshot com.downloader.privatebrowser (aka Video Downloader - XDownloader) application through 1.3.5 for Android allo

The ASD com.rocks.video.downloader (aka HD Video Downloader All Format) application through 7.0.129 for Android allows a

The NLL com.nll.cb (aka ACR Phone) application through 0.330-playStore-NoAccessibility-arm8 for Android allows any insta

The Goodwy com.goodwy.dialer (aka Right Dialer) application through 5.1.0 for Android enables any application (with no p

The com.callassistant.android (aka AI Call Assistant & Screener) application 1.174 for Android enables any installed app

An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed unauthorized internal user

A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Zimbra Collaboration Suite (ZCS) 8.8.15, aff

Nomad Community and Nomad Enterprise ("Nomad") volume specification is vulnerable to arbitrary cross-namespace volume cr

A path collision and arbitrary code execution vulnerability was identified in GitHub Enterprise Server that allowed cont

An issue was discovered on One2Track 2019-12-08 devices. Any SIM card used with the device cannot have a PIN configured.

An issue was discovered on One2Track 2019-12-08 devices. Confidential information is needlessly stored on the smartwatch

An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device comes with a serial interface at the board leve

An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device uses a custom UDP protocol to start and control

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests don't require (anti-)CSRF tok

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. Affected by t

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected b

Combodo iTop is a web based IT Service Management tool. An attacker can request any `route` we want as long as we specif

Combodo iTop is a web based IT Service Management tool. In affected versions uploading a text file containing some java

Combodo iTop is a web based IT Service Management tool. An attacker accessing a backup file or the database can read som

Password Pusher is an open source application to communicate sensitive information over the web. A cross-site scripting

Filament is a collection of full-stack components for accelerated Laravel development. All Filament features that intera

An issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service (DoS) via a crafted data channel pack

An issue in the Bluetooth Low Energy implementation of Realtek RTL8762E BLE SDK v1.4.0 allows attackers to cause a Denia

DataEase is an open source data visualization analysis tool that helps users quickly analyze data and gain insights into

devtron is an open source tool integration platform for Kubernetes. In affected versions an authenticated user (with min

A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an

A vulnerability, which was classified as critical, has been found in TOTOLINK X18 9.1.0cu.2024_B20220329. Affected by th

An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Clients can authenticate themselves to the d

An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to

An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. There is no CSRF protection.

An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. When a backup file is created through the web interfa

An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. It uses a default SSID value, which makes it easier f

An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user is hashed using an old

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. With the SNMPv1 public community, all value