2024

A stack-buffer-overflow vulnerability exists in the read_charset_decl function of html2xhtml 1.3. This vulnerability occ

Dell Data Protection Advisor, version(s) 19.9, contain(s) an Inadequate Encryption Strength vulnerability. A low privile

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific e

The EmbedAI application is susceptible to security issues that enable Data Poisoning attacks. This weakness could result

The application does not change the session token when using the login or logout functionality. An attacker can set a se

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a use

Improper restriction of local upload and download paths in check_sftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and

In the Linux kernel, the following vulnerability has been resolved: ppdev: Add an error check in register_device In re

The AppPresser plugin for WordPress is vulnerable to improper missing encryption exception handling on the 'decrypt_valu

Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitizatio

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Remote Code

The Swiss Toolkit For WP plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1

An issue discovered in OpenWrt 18.06, 19.07, 21.02, 22.03, and beyond allows off-path attackers to hijack TCP sessions,

Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. In a

TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted SVG

An issue was discovered in Apiris Kafeo 6.4.4. It permits DLL hijacking, allowing a user to trigger the execution of arb

Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, potentially enabling them to execute remote co

An issue discovered in Wavlink QUANTUM D2G routers allows attackers to hijack TCP sessions which could lead to a denial

An issue discovered in Comfast Comfast CF-616AC routers allows attackers to hijack TCP sessions which could lead to a de

An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Unrestricted Upload of a File with a Dangerous T

ansibleguy-webui is an open source WebUI for using Ansible. Multiple forms in versions < 0.0.21 allowed injection of HTM

CoCalc is web-based software that enables collaboration in research, teaching, and scientific publishing. In affected ve

SQL Injection in Finereport v.8.0 allows a remote attacker to obtain sensitive information

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the inte

Incorrect access control in the firewall management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows

Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged web interface account. The user is not asked

Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows r

Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows r

An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which could lea

An issue discovered in Linksys E5600 routers allows attackers to hijack TCP sessions which could lead to a denial of ser

A SQL injection vulnerability in /model/approve_petty_cash.php in campcodes Complete Web-Based School Management System

Certain Anpviz products allow unauthenticated users to download the running configuration of the device via a HTTP GET r

Amazon AWS Client VPN before 3.9.1 on macOS has a buffer overflow that could potentially allow a local actor to execute

SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in Substation Server.

Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of

Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of

Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of

Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of

Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of

Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of

A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of Automa

A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of Automa

A heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of Automat

A read-what-where vulnerability exists in the Programming Software Connection IMM 01A1 Memory Read functionality of Auto

XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to remote code execu

TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the password parameter in the func

TOTOLINK CP900L v4.1.5cu.798_B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithHo

A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper

Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially cr

Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially cr