2024

In JetBrains TeamCity before 2024.03.3 private key could be exposed via testing GitHub App Connection

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109, an a

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.2.2403.100, an a

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, an a

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator cred

Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, a

A command for refining a collection shard key is missing an authorization check. This may cause the command to run direc

GeoServer is an open source server that allows users to share and edit geospatial data. Starting in version 2.10.0 and p

Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of th

Information disclosure while parsing sub-IE length during new IE generation.

Information disclosure while handling SA query action frame.

INformation disclosure while handling Multi-link IE in beacon frame.

Information Disclosure while parsing beacon frame in STA.

Improper Neutralization of Input During Web Page Generation vulnerability in SOKRATES-software SOWA OPAC allows a Reflec

phpok 6.4.003 contains a Cross Site Scripting (XSS) vulnerability in the ok_f() method under the framework/api/upload_co

adolph_dudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerabilit

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This v

rjrodger jsonic-next v2.12.1 was discovered to contain a prototype pollution via the function util.clone. This vulnerabi

ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component _ModuleSupport.jsonApply. T

adolph_dudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerabili

adolph_dudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vu

Tada5hi sp-common v0.5.4 was discovered to contain a prototype pollution via the function mergeDeep. This vulnerability

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability

In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia

In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia

In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia

In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia

The Form Maker by 10Web WordPress plugin before 1.15.26 does not sanitise and escape some of its settings, which could

The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 does not validate and escape some of its Quiz fields bef

CHANGING Mobile One Time Password does not properly filter parameters for the file download functionality, allowing remo

"Piccoma" App for Android and iOS versions prior to 6.20.0 uses a hard-coded API key for an external service, which may

In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

A vulnerability classified as critical was found in SourceCodester Medicine Tracker System 1.0. This vulnerability affec

A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been rated as critical. Affected by

A vulnerability was found in SeaCMS 12.9. It has been declared as critical. Affected by this vulnerability is an unknown

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a

IBM InfoSphere Information Server 11.7 could allow an authenticated user to read or modify sensitive information by bypa

IBM InfoSphere Information Server 11.7 is vulnerable stored to cross-site scripting. This vulnerability allows users to

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed tec

IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery (SSRF). This may allow an authentica

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed tec

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to exec

IBM InfoSphere Information Server 11.7 returns sensitive information in URL information that could be used in further at