2024

WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The custom action

WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. When a bundle runs

OneUptime is a solution for monitoring and managing online services. The vulnerability lies in the improper validation o

A vulnerability, which was classified as critical, has been found in Tenda AC10 16.03.10.13/16.03.10.20. Affected by thi

A vulnerability classified as critical was found in Tenda AC15 15.03.05.18/15.03.05.19/15.03.20. Affected by this vulner

A vulnerability was found in Tenda AC15 15.03.20_multi. It has been declared as critical. This vulnerability affects the

A vulnerability was found in Tenda AC15 15.03.05.18 and classified as critical. Affected by this issue is the function s

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, all

Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POS

ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses. There is in

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file.

Missing Authorization vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9.

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler ao

The "BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages" plugin for WordPress is vulnerable

.NET Framework Information Disclosure Vulnerability

Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of perfor

A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier st

Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/users/delete/2.

A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware <= v1.01KRb03.

FreeScout is a self-hosted help desk and shared mailbox. A Stored Cross-Site Scripting (XSS) vulnerability has been iden

This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user

In the Windows installer in Atos Eviden CardOS API before 5.5.5.2811, Local Privilege Escalation can occur.(from a regul

Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/composer/ins

A cross-site request forgery vulnerability has been identified in LoadMaster.  It is possible for a malicious actor, who

An OS command injection vulnerability has been identified in LoadMaster.  An authenticated UI user with any permission s

An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPri

Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent plugin before Checkmk 2.3.0b

Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Typ

Least privilege violation in the Checkmk agent plugins mk_oracle, mk_oracle.ps1, and mk_oracle_crs before Checkmk 2.3.0b

A vulnerability classified as critical has been found in Tenda AC15 15.03.20_multi. Affected is the function R7WebsSecur

A vulnerability was found in Tenda AC15 15.03.20_multi. It has been rated as critical. This issue affects the function f

A vulnerability was found in Tenda AC15 15.03.20_multi. It has been declared as critical. This vulnerability affects the

A vulnerability was found in Tenda AC15 15.03.20_multi and classified as critical. Affected by this issue is the functio

A vulnerability has been found in Tenda AC15 15.03.05.18/15.03.20_multi and classified as critical. Affected by this vul

A vulnerability, which was classified as critical, was found in Tenda AC15 15.03.05.18/15.03.20_multi. Affected is the f

A vulnerability, which was classified as critical, has been found in Tenda AC15 15.03.05.18/15.03.20_multi. This issue a

A vulnerability classified as critical was found in Tenda AC15 15.03.05.18/15.03.20_multi. This vulnerability affects th

A vulnerability classified as critical has been found in Tenda AC15 15.03.05.18/15.03.20_multi. This affects the functio

Cross-site Request Forgery (CSRF) vulnerability in Lychee version 3.1.6, allows remote attackers to execute arbitrary co

A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi. It has been rated as critical. Affected by this issu

Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructur

It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specif

SQL injection vulnerability exists in GetDIAE_astListParameters.

Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If

SQL injection vulnerability exists in GetDIAE_slogListParameters.

SQL injection vulnerability exists in GetDIAE_unListParameters.

SQL injection vulnerability exists in the script Handler_CFG.ashx.

SQL Injection vulnerability in Netcome NS-ASG Application Security Gateway v.6.3.1 allows a local attacker to execute ar

Grav is an open-source, flat-file content management system. Prior to version 1.7.45, due to the unrestricted access to