2024

EasyRange Ver 1.41 contains an issue with the executable file search path when displaying an extracted file on Explorer,

OS command injection vulnerability exists in WebProxy 1.7.8 and 1.7.9, which may allow a remote unauthenticated attacker

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Contact Form With

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Etoile Web Design

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdevelop / Oplugi

NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted captur

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KlbTheme Cosmetsy

PyAnsys Geometry is a Python client library for the Ansys Geometry service and other CAD Ansys products. On file src/ans

The Check & Log Email plugin for WordPress is vulnerable to Unauthenticated Hook Injection in all versions up to, and in

SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee.php.

SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-admin.php?admin_id=

Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via

By leveraging the vulnerability, lower-privileged users of Content Manager can manipulate Content Manager clients to ele

Stack-buffer-overflow vulnerability in ReadyMedia (MiniDLNA) v1.3.3 allows attackers to cause a denial of service via vi

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper traffic throttling i

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in

File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via upload

WP Crontrol controls the cron events on WordPress websites. WP Crontrol includes a feature that allows administrative u

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. A SQL injection

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The category imag

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. A SQL injection v

In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.

In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.

The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. A crafted svg fil

An issue in axonaut v.3.1.23 and before allows a remote attacker to obtain sensitive information via the log.txt compone

Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows unauthorized users full access t

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaineLabs Youzify

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a NULL pointer dereference in pnfs_mark_

In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Avoid smp_processor_id() in pre

In the Linux kernel, the following vulnerability has been resolved: net/sched: fq_pie: fix OOB access in the traffic pa

In the Linux kernel, the following vulnerability has been resolved: tipc: wait and exit until all work queues are done

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: fix VLAN traffic leaks PCR_MATRI

In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix a crash if ->get_sset_count() fails

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: add error handling in sja1105_se

In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Don't generate an interrupt on bus reset

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data stream corruption Maxim reported s

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix a buffer overflow in otx2_set_rxf

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix a use-after-free looks like we for

In the Linux kernel, the following vulnerability has been resolved: cxgb4: avoid accessing registers when clearing filt

In the Linux kernel, the following vulnerability has been resolved: net: zero-initialize tc skb extension on allocation

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler ao

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in openEuler A-Tune-Co

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Improper Privilege Managemen

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler ga

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-C

Versions of the package web3-utils before 4.2.1 are vulnerable to Prototype Pollution via the utility functions format a

The CM Download Manager WordPress plugin before 2.9.1 does not have CSRF checks in some places, which could allow attac

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated at

HGW BL1500HM Ver 002.001.013 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary comm