2024

EnGenius ENH1350EXT A8J-ENH1350EXT devices through 3.9.3.2_c1.9.51 allow (blind) OS Command Injection via shell metachar

An issue in SourceCodester Purchase Order Management System v1.0 allows a remote attacker to execute arbitrary code via

A SQL injection vulnerability in Sourcecodester Packers and Movers Management System v1.0 allows remote authenticated us

A prompt injection vulnerability in the chatbox of Netangular Technologies ChatNet AI Version v1.0 allows attackers to a

A prompt injection vulnerability in the chatbox of Fusion Chat Chat AI Assistant Ask Me Anything v1.2.4.0 allows attacke

A lack of rate limiting in the OTP validation component of Digitory Multi Channel Integrated POS v1.0 allows attackers t

A prompt injection vulnerability in the chatbox of Butterfly Effect Limited Monica ChatGPT AI Assistant v2.4.0 allows at

A prompt injection vulnerability in the chatbox of Zhipu AI CodeGeeX v2.17.0 allows attackers to access and exfiltrate a

A prompt injection vulnerability in the chatbox of Butterfly Effect Limited Monica Your AI Copilot powered by ChatGPT4 v

A prompt injection vulnerability in the chatbox of Blackbox AI v1.3.95 allows attackers to access and exfiltrate all pre

Aimeos is an e-commerce framework. All SaaS and marketplace setups using the Aimeos GraphQL API admin interface version

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Ed

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Bl

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in HTTP 4

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog p

php-heic-to-jpg <= 1.0.5 is vulnerable to code injection (fixed in 1.0.6). An attacker who can upload heic images is abl

Incorrect access control in Shenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router NR500-EA RG500UEAABxCOMSLICv3.2

Wuhan Tianyu Information Industry Co., Ltd Tianyu CPE Router CommonCPExCPETS_v3.2.468.11.04_P4 was discovered to contain

Shenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router NR500-EA RG500UEAABxCOMSLICv3.2.2543.12.18 was discovered t

HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681.

IBM Maximo Application Suite - Monitor Component 8.10, 8.11, and 9.0 could disclose information in the form of the hard-

A vulnerability classified as critical was found in SourceCodeHero Clothes Recommendation System 1.0. Affected by this v

A vulnerability classified as critical has been found in SourceCodeHero Clothes Recommendation System 1.0. Affected is a

iniNet Solutions SpiderControl SCADA PC HMI Editor has a path traversal vulnerability. When the software loads a malici

A flaw was found in Gateway. Sending a non-base64 'basic' auth with special characters can cause APICast to incorrectly

VIMESA VHF/FM Transmitter Blue Plus is suffering from a Denial-of-Service (DoS) vulnerability. An unauthenticated attack

The APK file in Cloud Smart Lock v2.0.1 has a leaked a URL that can call an API for binding physical devices. This vulne

Incorrect access control in the firmware update and download processes of DreamCatcher Life v1.8.7 allows attackers to a

Incorrect access control in the firmware update and download processes of Wear Sync v1.2.0 allows attackers to access se

Incorrect access control in the firmware update and download processes of IVY Smart v4.5.0 allows attackers to access se

Incorrect access control in the firmware update and download processes of Sylvania Smart Home v3.0.3 allows attackers to

Incorrect access control in the firmware update and download processes of Yamaha Headphones Controller v1.6.7 allows att

Incorrect access control in the firmware update and download processes of Ruochan Smart v4.4.7 allows attackers to acces

Incorrect access control in XIAO HE Smart 4.3.1 allows attackers to access sensitive information by analyzing the code a

Neye3C v4.5.2.0 was discovered to contain a hardcoded encryption key in the firmware update mechanism.

An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in Safari 17.6, iOS 17.

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.9 an

The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. A person with physical access to

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6. An

A vulnerability was found in SourceCodeHero Clothes Recommendation System 1.0. It has been rated as critical. This issue

A vulnerability was found in SourceCodester Garbage Collection Management System 1.0. It has been declared as critical.

Incorrect access control in the firmware update and download processes of Neye3C v4.5.2.0 allows attackers to access sen

When editing objects in the Syncope Console, incomplete HTML tags could be used to bypass HTML sanitization. This made i

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in robosoft Robo Gall

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins WP

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kraft Plugins Mega

A Cross-Site Scripting vulnerability has been found in Janto v4.3r11 from Impronta. This vulnerability allows an attacke

The Contact Form 7 – Repeatable Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin'