2024

A vulnerability, which was classified as critical, was found in Tenda AX1806 1.0.0.1. Affected is the function R7WebsSec

Asus RT-N12+ B1 router stores user passwords in plaintext, which could allow local attackers to obtain unauthorized acce

A vulnerability, which was classified as critical, has been found in Tenda AX1803 1.0.0.1. This issue affects the functi

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allo

D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows r

Jerryscript commit ff9ff8f was discovered to contain a segmentation violation via the component vm_loop at jerry-core/vm

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul

An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions. If exploite

The WP SMTP plugin for WordPress is vulnerable to SQL Injection via the 'search' parameter in versions 1.2 to 1.2.6 due

Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the camera. An attacker

Vladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. fir

Vladimir Kononovich, a Security Researcher has found a flaw that allows for a remote code execution on the DVR. An atta

Denial of service condition in M-Files Server in versions before 24.4.13592.4 and after 23.11 (excluding 24.2 LTS) allow

The MM-email2image WordPress plugin through 0.2.5 does not validate and escape some of its shortcode attributes before o

A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user who can cr

Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1 allows a remote attacker to execut

The Skylab IGX IIoT Gateway allowed users to connect to it via a limited shell terminal (IGX). However, it was discovere

cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of func

An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access controls allow for DLL Hijacki

An issue was discovered in Veritas NetBackup before 10.4. The Multi-Threaded Agent used in NetBackup can be leveraged to

An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. The Backup Exec Deduplication Multi-threaded S

An issue was discovered in Zammad before 6.3.0. Users with customer access to a ticket could have accessed time accounti

Cross Site Scripting (XSS) vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and

Buffer Overflow vulnerability in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v.3.2 allows a local attacker to exe

A flaw was found in Quay, where Quay's database is stored in plain text in mirror-registry on Jinja's config.yaml file.

A flaw was found in how Quay's database is stored in plain-text in mirror-registry on the jinja's config.yaml file. This

A flaw was found when using mirror-registry to install Quay. It uses a default secret, which is stored in plain-text for

An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in

The GLPI Agent is a generic management agent. Prior to version 1.7.2, a local user can modify GLPI-Agent code or used DL

The GLPI Agent is a generic management agent. A vulnerability that only affects GLPI-Agent installed on windows via MSI

A flaw was found in the ansible automation platform. An insecure WebSocket connection was being used in installation fro

A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote att

An incomplete fix was shipped for the Rapid Reset (CVE-2023-44487/CVE-2023-39325) vulnerability for an OpenShift Contain

A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroo

An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malater

A vulnerability classified as critical has been found in Tenda W30E 1.0/1.0.1.25. Affected is the function fromWizardHan

An issue has been discovered in GitLab CE/EE affecting all versions starting from 7.8 before 16.9.6, all versions starti

A vulnerability was found in Tenda 4G300 1.01.42. It has been rated as critical. This issue affects the function sub_429

A vulnerability was found in Tenda 4G300 1.01.42. It has been declared as critical. This vulnerability affects the funct

Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin-manage-user.php.

A vulnerability was found in Tenda 4G300 1.01.42. It has been classified as critical. This affects the function sub_4260

A vulnerability was found in Tenda 4G300 1.01.42 and classified as critical. Affected by this issue is the function sub_

A vulnerability has been found in Tenda 4G300 1.01.42 and classified as critical. Affected by this vulnerability is the

A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.17(9502). Affected is the function modi

A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.17(9502). This issue affects the f

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.5 before 16.9.6, all versions start

An issue has been discovered in GitLab affecting all versions of GitLab CE/EE 16.9 prior to 16.9.6, 16.10 prior to 16.1