2024

projectdiscovery/nuclei is a fast and customisable vulnerability scanner based on simple YAML based DSL. A significant s

tls-listener is a rust lang wrapper around a connection listener to support TLS. With the default configuration of tls-l

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. If you have a NetFraming b

Zephyr OS IP packet handling does not properly drop IP packets arriving on an external interface with a source address e

TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in MAC Filtering

Some Sciener-based locks support plaintext message processing over Bluetooth Low Energy, allowing unencrypted malicious

Sciener server does not validate connection requests from the GatewayG2, allowing an impersonation attack that provides

TTLock App virtual keys and settings are only deleted client side, and if preserved, can access the lock after intended

gpac 2.3-DEV-rev921-g422b78ecf-master was discovered to contain a out of boundary write vulnerability via swf_get_string

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Etoile Web Design

Cross Site Scripting (XSS) vulnerability in Joel Starnes postMash – custom post order allows Reflected XSS.This issue af

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PayU India PayU In

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Reilly Confi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Concerted Action A

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP GiveWP g

A vulnerability classified as critical was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the functi

Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to correctl

A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formSetQosBand

A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function form

A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the fu

A vulnerability was found in Tenda AC18 15.03.05.05. It has been classified as critical. This affects the function formQ

There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker

A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function f

GLPI through 10.0.12 allows CSV injection by an attacker who is able to create an asset with a crafted title.

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to SQL Injection via the 'na

A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimg_library::CImg<unsigned char>::_lo

An issue in NETGEAR-DGND4000 v.1.1.00.15_1.00.15 allows a remote attacker to escalate privileges via the next_file param

A user who can create objects in a database with plv8 3.2.1 installed is able to cause deferred triggers to execute as t

The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj function at /templates/

zenml v0.55.4 was discovered to contain an arbitrary file upload vulnerability in the load function at /materializers/cl

Support App is an opensource application specialized in managing Apple devices. It's possible to abuse a vulnerability i

IBM Maximo Application Suite 7.6.1.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML

Db2 for IBM i 7.2, 7.3, 7.4, and 7.5 infrastructure could allow a local user to gain elevated privileges due to an unqua

A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.13.1 for Windows. A local attacker ma

turbo_boost-commands is a set of commands to help you build robust reactive applications with Rails & Hotwire. TurboBoo

On-chip debug and test interface with improper access control in some 4th Generation Intel(R) Xeon(R) Processors when us

Race condition in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalatio

Pega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation.

Insufficient session timeout vulnerability in the FAST3686 V2 Vodafone router from Sagemcom. This vulnerability could al

Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenticated user with limited permiss

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the SonicOS SSLVPN portal allows

This vulnerability allows an already authenticated admin user to create a malicious payload that could be leveraged for

In Delinea PAM Secret Server 11.4, it is possible for a user assigned "Administer Reports" permission and/or with access

This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker

This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated

Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerify

Improper authentication vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.0 and 12.5.1. The vulnerabilit

Allocation of Resources Without Limits or Throttling vulnerability in OpenText NetIQ Privileged Account Manager on Linux

SQL Injection vulnerability in Code-projects Computer Science Time Table System 1.0 allows attackers to run arbitrary co