2024

A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out

A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application is vulnerable to

A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type

A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out

A vulnerability has been identified in Parasolid V35.1 (All versions < V35.1.256), Parasolid V36.0 (All versions < V36.0

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.30), SICORE Base syste

A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central Pr

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC

SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a pa

A local attacker with low privileges can perform a privil

A local attacker with low privileges can use a command injection vulnerability to gain root privileges due to improper i

An unauthenticated remote attacker can extract a session

A local low privileged attacker can use an untrusted search path in a CHARX system utility

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The bulk import feature of the affected

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow a privileged

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow a privileged

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any unauthen

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected client systems do not prop

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any authenti

VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing (HGFS) func

VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious acto

VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious acto

An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller i

OS command injection vulnerabilities in GE HealthCare ultrasound devices

Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for Intel Gemini Lake.This issue af

Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices

Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for select Intel platforms This i

Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which a

A vulnerability classified as critical was found in Contemporary Control System BASrouter BACnet BASRT-B 2.7.2. This vul

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Propovoice Propovo

An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabl

The Breakdance plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.7.1 v

All versions of EnterpriseDB Postgres Advanced Server (EPAS) from 15.0 prior to 15.7.0 and from 16.0 prior to 16.3.0 ma

The XML Sitemap & Google News plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and incl

The access control in CemiPark software does not properly validate user-entered data, which allows the authentication by

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file t

Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to

The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could le

A deserialization of untrusted data vulnerability exists in common code used by FlexLogger and InstrumentStudio that may

The Ditty plugin for WordPress is vulnerable to PHP Object Injection in all versions up to 3.1.38 via deserialization of

The reCAPTCHA Jetpack WordPress plugin through 0.2.2 does not have CSRF check in place when updating its settings, which

The Add Custom CSS and JS WordPress plugin through 1.20 does not have CSRF check in some places, and is missing sanitisa

The Spectra Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.1.5.

The Porto Theme - Functionality plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and in

The Porto Theme - Functionality plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and in

The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via 'por

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authentica

In KioWare for Windows (versions all through 8.34) it is possible to exit this software and use other already opened app

KioWare for Windows (versions all through 8.34) allows to escape the environment by downloading PDF files, which then by

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based