2024

Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users on

Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability.

Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly

Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability. C

Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword se

The Awesome buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's btn2 shortcode in

The BuddyPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 14.1.0 vi

The Comments – wpDiscuz plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including

The WooCommerce UPS Shipping – Live Rates and Access Points plugin for WordPress is vulnerable to unauthorized modificat

The Order Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a mis

A vulnerability classified as problematic was found in chidiwilliams buzz 1.1.0. This vulnerability affects the function

A vulnerability classified as critical has been found in SourceCodester Payroll Management System 1.0. This affects the

A vulnerability was found in Codezips Sales Management System 1.0. It has been rated as critical. Affected by this issue

A vulnerability was found in Codezips Sales Management System 1.0. It has been declared as critical. Affected by this vu

A vulnerability was found in Codezips Sales Management System 1.0. It has been classified as critical. Affected is an un

A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0.

A vulnerability classified as critical was found in SourceCodester Petrol Pump Management Software 1.0. Affected by this

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown f

A vulnerability was found in Tenda RX9 Pro 22.03.02.20. It has been rated as critical. This issue affects the function s

A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulner

Pterodactyl is a free, open-source game server management panel. When a user disables two-factor authentication via the

OpenRefine is a free, open source tool for working with messy data. The load-language command expects a `lang` parameter

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflak

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all

Money Manager EX WebApp (web-money-manager-ex) 1.2.2 is vulnerable to SQL Injection in the `transaction_delete_group` fu

Money Manager EX WebApp (web-money-manager-ex) 1.2.2 is vulnerable to Incorrect Access Control. The `redirect_if_not_log

A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as critical. Affected

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. It has been classified as problemat

In WhatsUp Gold versions released before 2024.0.0,  an Authentication Bypass issue exists which allows an attacker to o

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In versions below 1.5.0,

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all

A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz t

A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function within the

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp

An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function wi

pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the

The OpenRefine fork of the MIT Simile Butterfly server is a modular web application framework. The Butterfly framework u

OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the built-in "Something went

OpenRefine is a free, open source tool for working with messy data. Starting in version 3.4-beta and prior to version 3.

OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the `export-rows` command ca

OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, lack of cross-site request f

OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the `/extension/gdata/author

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The upl

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The par

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The SID

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. Users w

A vulnerability in Okta Verify for iOS versions 9.25.1 (beta) and 9.27.0 (including beta) allows push notification respo

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. By inte