2024

Discourse is an open source platform for community discussion. A maliciously crafted email address could allow an attack

Discourse is an open source platform for community discussion. A user can create a post with many replies, and then atte

Cacti is an open source performance and fault management framework. The`consolenewsection` parameter is not properly san

Cacti is an open source performance and fault management framework. The `title` parameter is not properly sanitized when

Cacti is an open source performance and fault management framework. An admin user can create a device with a malicious h

Cacti is an open source performance and fault management framework. The `fileurl` parameter is not properly sanitized wh

Improper access removal handling in firmware of some Solidigm DC Products may allow an attacker with physical access to

Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially control the p

Improper error handling in firmware of some SSD DC Products may allow an attacker to enable denial of service.

Meshtastic is an open source, off-grid, decentralized, mesh network built to run on affordable, low-power devices. Mesht

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The security scanner responsible for pre

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. `\PhpOffice\PhpSpreadsheet\Writer\Html`

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua

Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service b

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may creat

Improper access control validation in firmware of some Solidigm DC Products may allow an attacker with physical access t

Authenticated RCE via Path Traversal

Authenticated RCE via Path Traversal

Pre-Auth RCE via Path Traversal

Pre-Auth RCE via Path Traversal

BlueCMS 1.6 suffers from Arbitrary File Deletion via the file_name parameter in an /admin/database.php?act=del request.

An issue was discovered in the m2m scaler driver in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 9

Missing Authentication - User & System Configuration

RuoYi v4.7.9 and before has a security flaw that allows escaping from comments within the code generation feature, enabl

D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub_24E28, the HTTP_REFERER is obtained thr

A reflected cross-site scripting (XSS) vulnerability in Elaine's Realtime CRM Automation v6.18.17 allows attackers to ex

itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Full Name field in regi

A potential security vulnerability has been identified in the HP Hotkey Support software, which might allow local escala

A vulnerability was found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this issue is the function

Mecha CMS 3.0.0 is vulnerable to Directory Traversal. An attacker can construct cookies and URIs that bypass user identi

Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay.

IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validation

Krayin CRM v1.3.0 is vulnerable to Cross Site Scripting (XSS) via the organization name field in /admin/contacts/organiz

Cross Site Scripting vulnerability in LimeSurvey before 6.5.0+240319 allows a remote attacker to execute arbitrary code

Cross Site Scripting vulnerability in LimeSurvey before 6.5.12+240611 allows a remote attacker to execute arbitrary code

Vulnerability in Distro Linux Workbooth v2.5 that allows to escalate privileges to the root user by manipulating the net

SQL injection vulnerability in SOPlanning <1.45, via /soplanning/www/user_groupes.php in the by parameter, which could a

SQL injection vulnerability in SOPlanning <1.45, through /soplanning/www/groupe_list.php, in the by parameter, which cou

Cross-Site Scripting (XSS) vulnerability in SOPlanning <1.45, due to lack of proper validation of user input via /soplan

Cross-Site Scripting (XSS) vulnerability in SOPlanning <1.45, due to lack of proper validation of user input via /soplan

A vulnerability has been found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this vulnerability is

A vulnerability, which was classified as critical, was found in D-Link DIR-619L B1 2.06. Affected is the function formAd

OnlineNewsSite v1.0 is vulnerable to Cross Site Scripting (XSS) which allows attackers to execute arbitrary code via the

A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buf

A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buf

A vulnerability, which was classified as critical, has been found in D-Link DIR-619L B1 2.06. This issue affects the fun

A vulnerability classified as critical was found in D-Link DIR-619L B1 2.06. This vulnerability affects the function for

TP-Link WR740N V6 has a stack overflow vulnerability via the ssid parameter in /userRpm/popupSiteSurveyRpm.htm url.

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t