2024

This vulnerability occurs when an attacker exploits a race condition between the time a file is checked and the time it

The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling the

The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the conf

eNMS up to 4.7.1 is vulnerable to Directory Traversal via download/folder.

eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via scan_folder.

eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via upload_files.

eNMS up to 4.7.1 is vulnerable to Directory Traversal via /download/file.

eNMS 4.0.0 is vulnerable to Directory Traversal via get_tree_files.

eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via edit_file.

SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check

SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php.

GDidees CMS <= v3.9.1 has a file upload vulnerability.

Confidant is a open source secret management service that provides user-friendly storage and access to secrets. The foll

Navidrome is an open source web-based music collection server and streamer. Navidrome automatically adds parameters in t

Plate is a javascript toolkit that makes it easier for you to develop with Slate, a popular framework for building text

A stored cross-site scripting (XSS) vulnerability in the Add Scheduled Task module of Maccms10 v2024.1000.4040 allows at

The Versa Director offers REST APIs for orchestration and management. By design, certain APIs, such as the login screen,

Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools,

Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools,

A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueue_push as set

Cross Site Scripting vulnerability in Leotheme Leo Product Search Module v.2.1.6 and earlier allows a remote attacker to

A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. Thi

A vulnerability, which was classified as problematic, was found in code-projects Blood Bank Management System 1.0. This

Arc before 2024-08-26 allows remote code execution in JavaScript boosts. Boosts that run JavaScript cannot be shared by

Improper input validation in /admin/config/save in User-friendly SVN (USVN) before v1.0.12 and below allows administrato

An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the set*id () functi

A vulnerability, which was classified as critical, has been found in SourceCodester Best House Rental Management System

A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerabili

A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown

A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been rated as critical. This issue affects some u

Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability in the fromAdvSetMacMtuWan function.

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. This af

A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by

A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as problematic.

A vulnerability, which was classified as critical, was found in SourceCodester Simple Forum-Discussion System 1.0. Affec

A vulnerability, which was classified as problematic, has been found in CodeCanyon CRMGo SaaS up to 7.2. This issue affe

A vulnerability classified as problematic was found in CodeCanyon CRMGo SaaS 7.2. This vulnerability affects unknown cod

Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated

The Webo-facto plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.40 due to

An insufficient boundary validation in the USB code could lead to an out-of-bounds read on the heap, which could potenti

A vulnerability, which was classified as critical, was found in code-projects Crud Operation System 1.0. Affected is an

A vulnerability, which was classified as critical, has been found in code-projects Online Quiz Site 1.0. This issue affe

Zitadel is an open source identity management platform. In Zitadel, even after an organization is deactivated, associate

Zitadel is an open source identity management platform. ZITADEL's user account deactivation mechanism did not work corre

Zitadel is an open source identity management platform. ZITADEL's user grants deactivation mechanism did not work correc

Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy will crash when the http async client is handl

Envoy is a cloud-native high-performance edge/middle/service proxy. Jwt filter will lead to an Envoy crash when clear ro

Envoy is a cloud-native high-performance edge/middle/service proxy. A vulnerability has been identified in Envoy that al

Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's 1.31 is using `oghttp` as the default HTTP/2

Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external cl