2024

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing secure flag for the session cookies assoc

Insufficient input validation and sanitation in Profile name & screenname, Bookmark name & description and blogroll name

During testing of the Master Slider WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an un

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricke

A vulnerability, which was classified as critical, was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. Th

A vulnerability, which was classified as critical, has been found in MD-MAFUJUL-HASAN Online-Payroll-Management-System u

An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This

A vulnerability classified as critical was found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. Af

A vulnerability classified as critical has been found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 2023091

A vulnerability was found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. It has been rated as crit

A vulnerability was found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. It has been declared as c

A vulnerability was found in Tianchoy Blog up to 1.8.8. It has been classified as critical. This affects an unknown part

The "reset password" login page accepted an HTML injection via URL parameters. This has already been rectified via patc

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

A vulnerability classified as problematic was found in Spina CMS 2.18.0. Affected by this vulnerability is an unknown fu

A vulnerability classified as critical has been found in ForIP Tecnologia Administração PABX 1.x. Affected is an unknown

HMS Industrial Networks Anybus-CompactCom 30 products are vulnerable to a XSS attack caused by the lack of input sanita

A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR) and Line Feed (LF) charac

In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap

In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is

In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict w

There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prio

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored cros

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session ex

OpenProject is open source project management software. Prior to version 14.3.0, using a forged HOST header in the defau

Craft is a content management system (CMS). Craft CMS 5 allows reuse of TOTP tokens multiple times within the validity p

The Open edX Platform is a learning management platform. Instructors can upload csv files containing learner information

KubePi is a K8s panel. Starting in version 1.6.3 and prior to version 1.8.0, there is a defect in the KubePi JWT token v

Plaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this vulnerability will affect

Vulnerability of serialisation/deserialisation mismatch in the iAware module. Impact: Successful exploitation of this vu

Privilege escalation vulnerability in the account synchronisation module. Impact: Successful exploitation of this vulner

Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnerability will affect a

An issue was discovered in Archer Platform 6 before 2024.06. Authenticated users can achieve HTML content injection. A r

In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed

An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 16.7 prior to 17.0.5, start

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.6 prior to 17.0.5, starting from 17.1 pr

An issue was discovered in GitLab EE affecting all versions starting from 16.11 prior to 17.0.5, starting from 17.1 prio

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been rated as critical. Affected by th

An authenticated command injection vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateways Command

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been declared as problematic. Affect

Dolibarr ERP CRM before 19.0.2-php8.2 was discovered to contain a remote code execution (RCE) vulnerability via the Comp

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD has a Web-based terminal that allows u

There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center. Versions of Bitbu

A flaw was found in the Openshift console. The /API/helm/verify endpoint is tasked to fetch and verify the installation

A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Loggi

An issue in Huawei Technologies opengauss (openGauss 5.0.0 build) v.7.3.0 allows a local attacker to cause a denial of s

A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attack

Multiple stored cross-site scripting (XSS) vulnerabilities on AdTran NetVanta 3120 18.01.01.00.E devices allow remote at

A vulnerability was found in kirilkirkov Ecommerce-Laravel-Bootstrap up to 1f1097a3448ce8ec53e034ea0f70b8e2a0e64a87. It

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored DOM-based Cross-Site Scripting via