2024

Incorrect authorization vulnerability in HTTP POST method in Govee Home application on Android and iOS allows remote att

Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allow

External Control of File Name or Path vulnerability in Edgecross Basic Software for Windows versions 1.00 and later and

Incorrect Default Permissions vulnerability in Edgecross Basic Software for Windows versions 1.00 and later and Edgecros

An access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a loc

A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions 5.6

The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Sensitive Inf

The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content due to im

The The Download Manager plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and

A unrestricted upload of file with dangerous type vulnerability in epaper draft function in Corporate Training Managemen

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerabi

IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to exe

The Broken Link Checker | Finder plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions

The WP Project Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and i

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of servic

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploi

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploi

An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. I

An insecure library loading vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerabilit

IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 could allow a user with psychical access to the system to obta

IBM Cognos Analytics Mobile for Android 1.1.14 uses weaker than expected cryptographic algorithms that could allow an at

Kanboard is project management software that focuses on the Kanban methodology. In affected versions sessions are still

Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are

Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affe

Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affe

Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affe

Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affe

Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affe

Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affe

Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affe

Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affe

Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affe

IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By per

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnera

In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before e3277eb, unlimited user label appends in a userla

In raw\TCP.cpp in Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before 27ca6ec, there is a NULL pointer d

In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0, the WriteAcl function deletes all existing ACL entries

A Cross-Site Request Forgery vulnerability in Amiro.CMS before 7.8.4 allows remote attackers to create an administrator

A vulnerability in Amiro.CMS before 7.8.4 exists due to the failure to take measures to neutralize special elements. It

An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 (version with 0 updates) enables an attacker to ex

SeaCMS <=13.0 is vulnerable to command execution in phome.php via the function Ebak_RepPathFiletext().

A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar

iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.

A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Ex

A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. A specially crafted library can leverag

A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially

A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Wor

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage

A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.27