2024

A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affec

A vulnerability classified as problematic has been found in jeanmarc77 123solar 1.8.4.5. This affects an unknown part of

A vulnerability was found in jeanmarc77 123solar 1.8.4.5. It has been rated as critical. Affected by this issue is some

The reference validator is a tool to perform advanced validation of FHIR resources for TI applications and interoperabil

sofa-hessian is an internal improved version of Hessian3/4 powered by Ant Group CO., Ltd. The SOFA Hessian protocol uses

Puma is a Ruby/Rack web server built for parallelism. In affected versions clients could clobber values set by intermedi

Traefik is a golang, Cloud Native Application Proxy. When a HTTP request is processed by Traefik, certain HTTP headers s

Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native

A vulnerability classified as critical has been found in D-Link DAR-7000 up to 20240912. Affected is an unknown function

A vulnerability was found in Jinan Chicheng Company JFlow 2.0.0. It has been rated as problematic. This issue affects th

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. This vulnerability affects the

An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS Server v4.5.2 allow

Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overw

Couchbase Server 7.6.x before 7.6.2, 7.2.x before 7.2.6, and all earlier versions allows HTTP Host header injection.

Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted func

In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page

In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible

In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a pro

A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific

A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific

A vulnerability in NetCat CMS allows an attacker to send a specially crafted http request that can be used to check whet

Microsoft Office Visio Remote Code Execution Vulnerability

libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly

There exists a use after free vulnerability in Reverb. Reverb supports the VARIANT datatype, which is supposed to repres

A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through

A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEX

Kastle Systems firmware prior to May 1, 2024, stored machine credentials in cleartext, which may allow an attacker to ac

Kastle Systems firmware prior to May 1, 2024, contained a hard-coded credential, which if accessed may allow an attacker

logiops through 0.3.4, in its default configuration, allows any unprivileged user to configure its logid daemon via an u

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ece Softwar

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add

A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via

The grafana plugin SDK bundles build metadata into the binaries it compiles; this metadata includes the repository URI f

A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to

A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a

A vulnerability was found in Performance Co-Pilot (PCP).  This flaw allows an attacker to send specially crafted data to

This vulnerability exists in the Apex Softcell LD Geo due to improper validation of the transaction token ID in the API

This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attemp

This vulnerability exists in Apex Softcell LD Geo due to improper validation of the certain parameters (Client ID, DPID

This vulnerability exists in Apex Softcell LD DP Back Office due to improper implementation of OTP validation mechanism

This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters (cCdslClic

langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbit

The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'email'

The WP Custom Fields Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpcfs-pre

The Limit Login Attempts Plus plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including