2024

Discourse is an open source platform for community discussion. Sites that are using discourse connect but still have loc

In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Ac

Altair is a fork of Misskey v12. Affected versions lack of request validation and lack of authentication in the image pr

Astro is a web framework for content-driven websites. A bug in the build process allows any unauthenticated user to read

Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cl

cjwt is a C JSON Web Token (JWT) Implementation. Algorithm confusion occurs when a system improperly verifies the type o

The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by memory buffer overflow.

IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive infor

IBM MQ Appliance 9.3 LTS, 9.3 CD, and 9.4 LTS web console could allow an authenticated user to cause a denial-of-service

IBM Security Guardium 11.5 and 12.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to pa

A vulnerability, which was classified as critical, was found in Codezips E-Commerce Site 1.0. This affects an unknown pa

A vulnerability, which was classified as problematic, has been found in PbootCMS up to 5.2.3. Affected by this issue is

A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an u

A vulnerability was found in Codezips E-Commerce Site 1.0. It has been rated as critical. This issue affects some unknow

A specially crafted message can be sent to the TTLock App that downgrades the encryption protocol used for communication

An XML External Entity (XXE) injection vulnerability in the component /datagrip/upload of Chat2DB v0.3.5 allows attacker

IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive infor

Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback version 0.1 to 1.3.14 and 1.4.0 to 1.5.12  on t

A vulnerability was found in code-projects Hostel Management Site 1.0. It has been declared as problematic. This vulnera

A vulnerability was found in PbootCMS up to 3.2.3. It has been classified as critical. This affects an unknown part of t

A vulnerability was found in Codezips Technical Discussion Forum 1.0 and classified as critical. Affected by this issue

Improper Restriction of XML External Entity Reference vulnerability in OpenText™ Operations Bridge Manager allows Input

A code injection vulnerability in HMS Networks Ewon Flexy 205 allows executing commands on system level on the device. T

A Server-Side Request Forgery (SSRF) in the endpoint http://{your-server}/url-to-pdf of Stirling-PDF 0.35.1 allows attac

Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk < 2.3.0p23, < 2.2.0p38 and <= 2.1.0p49 (E

ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core upto including version 0.1 to 1.3.14 and 1.4.0 t

A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Af

A SQL Injection vulnerability was found in /index.php in PHPGurukul Pre-School Enrollment System v1.0, which allows remo

Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS

A flaw was found in the MustGather.managed.openshift.io Custom Defined Resource (CRD) of OpenShift Dedicated. A non-priv

A vulnerability, which was classified as critical, was found in X1a0He Adobe Downloader up to 1.3.1 on macOS. Affected i

A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been declared as critical. Affected by t

phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LD

A reflected cross-site scripting (XSS) vulnerability in the 'Entry Chooser' of phpLDAPadmin (version 1.2.1 through the l

A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been classified as critical. Affected is

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ISDO Software Web

A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remot

A vulnerability was found in itsourcecode Vehicle Management System 1.0 and classified as problematic. This issue affect

A vulnerability has been found in Fujifilm Business Innovation Apeos C3070, Apeos C5570 and Apeos C6580 up to 24.8.28 an

A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below

PVH guests have their ACPI tables constructed by the toolstack. The construction involves building the tables in local

The hypervisor contains code to accelerate VGA memory accesses for HVM guests, when the (virtual) VGA is in "standard" m

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Agency Dominion In

The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordP

The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing

An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a lo

An execution with unnecessary privileges vulnerability in the VCM engine of FortiClient for Linux versions 6.2.7 and bel

Under non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and below, version 5.6.12 and b

Netskope was made aware of a security vulnerability in Netskope Endpoint DLP’s Content Control Driver where a double-fet