2024

Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SFS Consulting Ins

TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWizardCfg function via the ssid5

TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWiFiAclRules function via the de

Deserialization of Untrusted Data vulnerability in Apache Seata.  When developers disable authentication on the Seata-S

Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenti

Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN p

The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which

The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may becom

The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the 'options'

Improper permission configurationDomain configuration vulnerability of the mobile application (com.afmobi.boomplayer) ca

SQL Injection vulnerability in Best Free Law Office Management Software-v1.0 allows an attacker to execute arbitrary cod

Tenda O6 V3.0 firmware V1.0.0.7(2054) contains a stack overflow vulnerability in the formexeCommand function.

Tenda FH451 v1.0.0.9 has a command injection vulnerability in the formexeCommand function i

Tenda FH451 v1.0.0.9 has a stack overflow vulnerability located in the RouteStatic function.

Tenda CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the frmL7PlotForm function.

CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the fromqossetting function.

ColdFusion versions 2023.9, 2021.15 and earlier are affected by a Deserialization of Untrusted Data vulnerability that c

Use of Hard-coded Credentials vulnerability in TNB Mobile Solutions Cockpit Software allows Read Sensitive Strings Withi

In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure that nfsd4_fattr_args.context is zeroe

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix potential UAF in nfsd4_cb_getattr_release

In the Linux kernel, the following vulnerability has been resolved: selinux,smack: don't bypass permissions check in in

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd4_deleg_getattr_conflict in presence

A path traversal vulnerability exists in the Rockwell Automation affected product. If exploited, the threat actor could

The Rockwell Automation affected product contains a vulnerability that allows a threat actor to view sensitive informati

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 pr

A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a mal

A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious e

CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chai

No-IP Dynamic Update Client (DUC) v3.x uses cleartext credentials that may occur on a command line or in a file. NOTE: t

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability. If exploite

A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a J

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_fields' parameter o

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_only_fields' parame

Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows

evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action

In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAX_SKB_FRAGS Sabrina reports

In the Linux kernel, the following vulnerability has been resolved: nvme: move stopping keep-alive into nvme_uninit_ctr

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4. Attackers can send POST request mes

A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool. With this

A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool. If the pub

An unauthenticated Insecure Direct Object Reference (IDOR) to the database has been found in the SO Planning tool that o

A unauthenticated SQL Injection has been found in the SO Planning tool that occurs when the public view setting is enabl

A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist s

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing restrictions for excessive failed authenticati

The WooCommerce Photo Reviews Premium plugin for WordPress is vulnerable to authentication bypass in all versions up to,

An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate database reco

Renwoxing Enterprise Intelligent Management System before v3.0 was discovered to contain a SQL injection vulnerability v

The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in <= 12.2 and 1.13.0 <= 1.