2024

A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacker

A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker

A vulnerability has been found in Dahua products.  After obtaining the administrator's username and password, the attack

A vulnerability, which was classified as critical, has been found in SourceCodester Lot Reservation Management System 1.

A vulnerability classified as critical was found in SourceCodester Lot Reservation Management System 1.0. Affected by th

A vulnerability classified as critical has been found in SourceCodester Lot Reservation Management System 1.0. Affected

A vulnerability was found in SourceCodester Lot Reservation Management System 1.0. It has been rated as critical. This i

A vulnerability was found in itsourcecode Alton Management System 1.0. It has been classified as critical. This affects

A vulnerability was found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this issue

A vulnerability has been found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this

A vulnerability, which was classified as critical, was found in itsourcecode Alton Management System 1.0. Affected is an

A vulnerability, which was classified as critical, has been found in itsourcecode Alton Management System 1.0. This issu

An issue was discovered in Kibana where a user with Viewer role could cause a Kibana instance to crash by sending a larg

A vulnerability classified as critical was found in itsourcecode Alton Management System 1.0. This vulnerability affects

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid widge

In versions of Akana API Platform prior to 2024.1.0, SAML tokens can be replayed.

A stack overflow in the function cp_dynamic() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a Denial

A heap buffer overflow in the function png_quantize() of hicolor v0.5.0 allows attackers to cause a Denial of Service (D

A heap buffer overflow in the function cp_block() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a Den

A heap buffer overflow in the function cp_stored() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a De

A heap buffer overflow in the function cp_unfilter() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a

In versions of Akana API Platform prior to 2024.1.0 a flaw resulting in XML External Entity (XXE) was discovered.

I, Librarian is an open-source version of a PDF managing SaaS. PDF notes are displayed on the Item Summary page without

A Server-Side Request Forgery (SSRF) in the Plugins Page of WonderCMS v3.4.3 allows attackers to force the application t

An arbitrary file upload vulnerability in the uploadFileAction() function of WonderCMS v3.4.3 allows attackers to execut

A vulnerability exists in the use of shared SPF records in multi-tenant hosting providers, allowing attackers to use net

A vulnerability in multi-tenant hosting allows an authenticated sender to spoof the identity of a shared, hosted domain,

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access

Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the `report/data/proofofplay

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access

IBM Aspera Orchestrator 4.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malic

IBM Aspera Orchestrator 4.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST

IBM Aspera Orchestrator 4.0.1 does not invalidate session after a password change which could allow an authenticated use

Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API route inside the CMS

Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API routes inside the CM

Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Navigating to `/admin/index/statistics` wi

Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, the vulnerability allows an attacker to

Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, crafting requests to submit very long t

Discourse is an open source discussion platform. Prior to 3.2.3 and 3.3.0.beta3, improperly sanitized Onebox data could

Improper Neutralization of Input During Web Page Generation vulnerability in Stackposts Social Marketing Tool allows Cro

AccuPOS - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in SourceCodester Medicine Tracker System 1.0. It has been declared as problematic. This vulne

Cybonet - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Mashov - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Stored cross-site scripting vulnerability exists in EC-CUBE Web API Plugin. When there are multiple users using OAuth Ma

FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 allow a re

Matrix Tafnit v8 - CWE-646: Reliance on File Name or Extension of Externally-Supplied File

Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy

Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

A vulnerability was found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected b