2024

A symlink following vulnerability in the pouch cp function of AliyunContainerService pouch v1.3.1 allows attackers to es

A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privil

Sony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution Vulnerability. This vulnerability all

Sony XAV-AX5500 WMV/ASF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allo

Sony XAV-AX5500 CarPlay TLV Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows p

Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability. This vulnerability allows p

PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting (XSS) via the pname parameter in

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Exnet Infor

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Exnet Informatics

Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared mem

In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix compose size exceed boundary syz

Local active protection service settings manipulation due to unnecessary privileges assignment. The following products a

Xiaomi Router AX9000 has a post-authorization command injection vulnerability. This vulnerability is caused by the lack

Bypass of two factor authentication in RestAPI in Checkmk < 2.3.0p16 and < 2.2.0p34 allows authenticated users to bypass

The Quiz and Survey Master (QSM) WordPress plugin before 9.1.3 does not sanitise and escape some of its settings, which

YITH WooCommerce Ajax Search is vulnerable to a XSS vulnerability due to insufficient sanitization of user supplied bloc

iRedAdmin before 2.6 allows XSS, e.g., via order_name.

A vulnerability classified as critical was found in code-projects Blood Bank System 1.0. This vulnerability affects unkn

A vulnerability classified as critical has been found in SourceCodester Profile Registration without Reload Refresh 1.0.

A vulnerability was found in SourceCodester Profile Registration without Reload Refresh 1.0. It has been rated as proble

Authentication Bypass by Spoofing vulnerability in Peter Hardy-vanDoorn Maintenance Redirect jf3-maintenance-mode.This i

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ElementsKit ElementsKit

A vulnerability was found in code-projects Student Record System 1.0. It has been declared as critical. Affected by this

A vulnerability was found in SourceCodester Modern Loan Management System 1.0. It has been classified as critical. Affec

A vulnerability was found in SourceCodester Modern Loan Management System 1.0 and classified as problematic. This issue

Server-Side Request Forgery (SSRF) vulnerability in Firsh Justified Image Grid justified-image-grid.This issue affects J

A vulnerability has been found in SourceCodester Telecom Billing Management System 1.0 and classified as critical. This

A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. This affects an un

A vulnerability classified as critical has been found in code-projects Restaurant Reservation System 1.0. Affected is an

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and IBM Cognos Analytics Re

A vulnerability classified as problematic was found in code-projects Blood Bank System 1.0. This vulnerability affects u

A vulnerability classified as problematic has been found in SourceCodester Employee Management System 1.0. This affects

A vulnerability was found in code-projects Restaurant Reservation System 1.0. It has been rated as critical. This issue

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been rated as critical. Affected by this iss

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this

A vulnerability was found in code-projects Student Record System 1.0. It has been classified as critical. Affected is an

A vulnerability was found in code-projects Student Record System 1.0 and classified as critical. This issue affects some

A vulnerability has been found in code-projects Student Record System 1.0 and classified as critical. This vulnerability

A vulnerability classified as problematic has been found in dingfangzu up to 29d67d9044f6f93378e6eb6ff92272217ff7225c. A

A stored cross-site scripting (XSS) vulnerability exists in NetBox 4.1.0 within the "Configuration History" feature of t

A vulnerability was found in DedeCMS up to 5.7.115. It has been rated as critical. This issue affects some unknown proce

CheckUser in ScadaServerEngine/MainLogic.cs in Rapid SCADA through 5.8.4 allows an empty password.

An issue was discovered in vesoft NebulaGraph through 3.8.0. It allows shell command injection.

An issue was discovered in vesoft NebulaGraph through 3.8.0. It allows bypassing authentication.

A vulnerability was found in Stirling-Tools Stirling-PDF up to 0.28.3. It has been declared as problematic. This vulnera

Gladys Assistant before 4.45.1 allows Privilege Escalation (a user changing their own role) because req.body.role can be

SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating).  This vulnerability can only be

A vulnerability was found in y_project RuoYi up to 4.7.9. It has been declared as problematic. Affected by this vulnerab

The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings