2024

Azure SDK Spoofing Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability

Skype for Consumer Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Microsoft Authenticator Elevation of Privilege Vulnerability

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

In RPyC before 6.0.0, when a server exposes a method that calls the attribute named __array__ for a client-provided netr

Vulnerability in CMS Made Simple 2.2.14, which does not sufficiently encode user-controlled input, resulting in a Cross-

CMS Made Simple version 2.2.14, does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting

Information exposure vulnerability in Badger Meter Monitool affecting versions up to 4.6.3 and earlier. A local attacker

An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiOS version 7.4.0 through 7.4.1, 7.2.

A search path or unquoted item vulnerability in Faronics Deep Freeze Server Standard, which affects versions 8.30.020.46

The software does not neutralize or incorrectly neutralizes certain characters before the data is included in outgoing H

An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and ve

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiO

A improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0

A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains an

A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.1 SP1). The product places sensit

A vulnerability has been identified in SENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75) (All versions). Affect

A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72x

A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72x

An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a

An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or

An unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which may prevent or disrupt th

An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by c

An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack. Th

An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent

An unauthenticated remote attacker can perform a command injection in the OCPP Service with limited privileges due to im

Path traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Seri

SQL injection vulnerability in Employee Management System v.1.0 allows a local attacker to obtain sensitive information

Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior

phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting

GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path.

Zitadel is an open source identity management system. Zitadel uses a cookie to identify the user agent (browser) and its

SOY CMS is an open source CMS (content management system) that allows you to build blogs and online shops. SOY CMS versi

In aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This could lead to local es

In ppcfw_init_secpolicy of ppcfw.c, there is a possible permission bypass due to uninitialized data. This could lead to

In ss_SendCallBarringPwdRequiredIndMsg of ss_CallBarring.c, there is a possible null pointer deref due to a missing null

In tmu_config_gov_params of , there is a possible out of bounds write due to a missing bounds check. This could lead to

In strncpy of strncpy.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local

In onSkipButtonClick of FaceEnrollFoldPage.java, there is a possible way to access the file the app cannot access due t

In update_policy_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to loc

In lpm_req_handler of , there is a possible out of bounds memory access due to a missing bounds check. This could lead t

In tmu_set_pi of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local

In BroadcastSystemMessage of servicemgr.cpp, there is a possible Remote Code Execution due to a use after free. This cou

In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escala

In AtiHandleAPOMsgType of ati_Main.c, there is a possible OOB write due to a missing null check. This could lead to loca

In policy_check of fvp.c, there is a possible out of bounds write due to a missing bounds check. This could lead to loca