2024

Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high pri

udn News Android APP stores the unencrypted user session in the local database when user log into the application. A mal

udn News Android APP stores the user session in logcat file when user log into the APP. A malicious APP or an attacker w

A Cross-Site Request Forgery (CSRF) vulnerability exists in the 'Servers Configurations' function of the parisneo/lollms

A remote code execution vulnerability exists in the create_conda_env function of the parisneo/lollms repository, version

A Path Traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'add_reference_to_local_mode

A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0. Affected b

A vulnerability has been found in Zorlan SkyCaiji up to 2.8 and classified as problematic. Affected by this vulnerabilit

A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the

Use of Less Trusted Source vulnerability in SolidWP Solid Security allows HTTP DoS.This issue affects Solid Security: fr

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected

Spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for custom

A vulnerability was found in LabVantage LIMS 2017. It has been rated as problematic. This issue affects some unknown pro

A vulnerability was found in LabVantage LIMS 2017. It has been declared as problematic. This vulnerability affects unkno

Wasmer is a web assembly (wasm) Runtime supporting WASIX, WASI and Emscripten. If the preopened directory has a symlink

A vulnerability, which was classified as problematic, was found in spa-cartcms 1.9.0.6. Affected is an unknown function

A vulnerability was found in Keycloak. The LDAP testing endpoint allows changing the Connection URL  independently witho

In JetBrains Hub before 2024.2.34646 stored XSS via project description was possible

When Bazel Plugin in intellij imports a project (either using "import project" or "Auto import") the dialog for trusting

A vulnerability, which was classified as problematic, has been found in PHPVibe 11.0.46. This issue affects some unknown

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been classified as problematic. This affects

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this issue

A vulnerability has been found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this

A vulnerability, which was classified as problematic, has been found in Ingenico Estate Manager 2023. This issue affects

A vulnerability classified as problematic has been found in LabVantage LIMS 2017. This affects an unknown part of the fi

A vulnerability was found in nasirkhan Laravel Starter up to 11.8.0. It has been rated as problematic. Affected by this

Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. This vulnerability allowed a user to create a val

Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Preliminary checks on actions computed by the cla

IBM Db2 for i 7.2, 7.3, 7.4, and 7.5 supplies user defined table function is vulnerable to user enumeration by a local a

A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been rated as problematic. Affected by this iss

A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been declared as problematic. Affected by this

HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application.

HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header.  This could allow an attacke

Nextcloud Server is a self hosted personal cloud system. Private shared calendar events' recurrence exceptions can be re

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection i

Nextcloud Server is a self hosted personal cloud system. A malicious user was able to send delete requests for old versi

Nextcloud Server is a self hosted personal cloud system. An attacker with read-only access to a file is able to restore

Nextcloud Photos is a photo management app. Users can remove photos from the album of registered users. It is recommende

Mattermost Desktop App versions <=5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC rest

DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an a

IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally

The Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin plugin for WordPress is vulnerable to information ex

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that cou

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that cou

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that cou

An issue in vektah gqlparser open-source-library v.2.5.10 allows a remote attacker to cause a denial of service via a cr

Vault and Vault Enterprise did not properly validate the JSON Web Token (JWT) role-bound audience claim when using the V

A stored cross site scripting vulnerability exists in Tenable Security Center where an authenticated, remote attacker co

Strapi is an open-source content management system. Prior to version 4.19.1, a super admin can create a collection where

A vulnerability classified as problematic has been found in playSMS up to 1.4.7. Affected is an unknown function of the