2024

In Splunk Enterprise versions below 9.3.1, and 9.2.0 versions below 9.2.3, and Splunk Cloud Platform versions below 9.2.

In Splunk Enterprise for Windows versions below 9.3.1, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "a

There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized u

Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine . It includes a utility class,

Jetty PushSessionCacheFilter can be exploited by unauthenticated users to launch remote DoS attacks by exhausting the s

DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary comm

D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_451208 function.

An issue was discovered in version of Warp Terminal prior to 2024.07.18 (v0.2024.07.16.08.02). A command injection vulne

Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed thro

There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote

Cloudlog 2.6.15 allows Oqrs.php request_form SQL injection via station_id or callsign.

Wavelog 1.8.5 allows Oqrs_model.php get_worked_modes station_id SQL injectioin.

Wavelog 1.8.5 allows Activated_gridmap_model.php get_band_confirmed SQL injection via band, sat, propagation, or mode.

Wavelog 1.8.5 allows Gridmap_model.php get_band_confirmed SQL injection via band, sat, propagation, or mode.

When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially lea

When the XML is read from the codes in the PDF and parsed using a DocumentBuilder, the default settings of the DocumentB

VULNERABILITY DETAILS Rockwell Automation used the latest versions of the CVSS scoring system to assess the following v

Cloudlog 2.6.15 allows Oqrs.php get_station_info station_id SQL injection.

Cloudlog 2.6.15 allows Oqrs.php delete_oqrs_line id SQL injection.

X2CRM v8.5 is vulnerable to a stored Cross-Site Scripting (XSS) in the "Opportunities" module. An attacker can inject ma

Vtiger CRM v8.2.0 has a HTML Injection vulnerability in the module parameter. Authenticated users can inject arbitrary H

The affected product permits OS command injection through improperly restricted commands, potentially allowing attackers

The affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulner

Cross-site Resource Forgery (CSRF), Privilege escalation vulnerability in Apache Roller. On multi-blog/user Roller websi

Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory

Exposure of CSRF tokens in query parameters on specific requests in Checkmk GmbH's Checkmk versions <2.3.0p18, <2.2.0p35

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p18, <2.2.0p35, <2.1.0p48 and

The fix for CVE-2024-26261 was incomplete, and and the specific package for OAKlouds from Hgiga remains at risk. Unauthe

The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with

QUIC in HAProxy 3.1.x before 3.1-dev7, 3.0.x before 3.0.5, and 2.9.x before 2.9.11 allows opening a 0-RTT session with a

The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing unauthenticated remote

The Team+ from TEAMPLUS TECHNOLOGY does not properly validate specific page parameter, allowing unauthenticated remote a

netease-youdao/qanything version 1.4.1 contains a vulnerability where unsafe data obtained from user input is concatenat

A vulnerability has been found in HuangDou UTCMS V9 and classified as critical. This vulnerability affects the function

A vulnerability, which was classified as critical, was found in HuangDou UTCMS V9. This affects an unknown part of the f

CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that exposes test credentials in the firmware b

A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some u

A vulnerability classified as critical was found in D-Link DIR-619L B1 2.06. Affected by this vulnerability is the funct

A vulnerability classified as critical has been found in D-Link DIR-619L B1 2.06. Affected is the function formSetWizard

A vulnerability was found in D-Link DIR-619L B1 2.06. It has been rated as critical. This issue affects the function for

A vulnerability was found in D-Link DIR-619L B1 2.06. It has been declared as critical. This vulnerability affects the f

A vulnerability was found in D-Link DIR-619L B1 2.06. It has been classified as critical. This affects the function form

A vulnerability was found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this issue is the function

A vulnerability has been found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this vulnerability is

A vulnerability in parisneo/lollms-webui version 9.8 allows for a Denial of Service (DOS) attack when uploading an audio

A vulnerability, which was classified as critical, was found in D-Link DIR-619L B1 2.06. Affected is the function formSe

A vulnerability classified as problematic was found in QileCMS up to 1.1.3. This vulnerability affects the function send

A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is a

A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue

A vulnerability classified as critical was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0. This vulnerability aff