2024

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. User with Admin role can create a Device Gro

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerab

Scriptcase 9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_unzip function.

Scriptcase v.9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in nm_cor.php via the form and field parame

Scriptcase v9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_zip function.

A vulnerability classified as problematic has been found in OFCMS 1.1.2. This affects the function add of the file /admi

A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the get_station_info()function loca

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized b

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file pa

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious p

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious p

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in proj_new.php via the Descricao parameter.

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow an unauthen

Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code vi

Logicytics is designed to harvest and collect data for forensic analysis. Logicytics has a basic vuln affecting compromi

Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that w

Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence

Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these b

A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a spe

A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a d

By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if

A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permiss

It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain obj

A specially crafted filename containing a large number of spaces could obscure the file's extension when displayed in th

An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtoo

An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js

A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability aff

A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full scr

NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handli

go-tuf is a Go implementation of The Update Framework (TUF). The go-tuf client inconsistently traces the delegations. Fo

OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authent

The WebDAV service in Infinera TNMS (Transcend Network Management System) 19.10.3 allows a low-privileged remote attacke

In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP s

Pagekit 1.0.18 is vulnerable to Cross Site Scripting (XSS) in index.php/admin/site/widget.

eLabFTW is an open source electronic lab notebook for research labs. An incorrect permission check has been found that c

PCAN-Ethernet Gateway FD before 1.3.0 and PCAN-Ethernet Gateway before 2.11.0 are vulnerable to Command injection via sh

Decidim is a participatory democracy framework. The version control feature used in resources is subject to potential XS

In Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive information in memory of

Cleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19.10.3 allows attackers (w

eLabFTW is an open source electronic lab notebook for research labs. In the context of eLabFTW, an administrator is a us

Bluetooth LE and BR/EDR Secure Connections pairing and Secure Simple Pairing using the Passkey entry protocol in Bluetoo

cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_chunk() function at cute_png.h.

cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_stored() function at cute_png.h.

cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_block() function at cute_png.h.

cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_find() function at cute_png.h.

cute_png v1.05 was discovered to contain a stack overflow via the cp_dynamic() function at cute_png.h.

cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_make32() function at cute_png.h.

cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_unfilter() function at cute_png.h.

cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_load_png_mem() function at cute_png.h.

An issue in Malwarebytes Premium Security v5.0.0.883 allows attackers to execute arbitrary code via placing crafted bina