2024

U-Boot environment is read from unauthenticated partition.

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It has been discovered that m

FluxCP is a web-based Control Panel for rAthena servers written in PHP. A javascript injection is possible via venders/b

decidim is a Free Open-Source participatory democracy, citizen participation and open government for cities and organiza

decidim is a Free Open-Source participatory democracy, citizen participation and open government for cities and organiza

Concrete CMS versions 9.0.0 to 9.3.3 and below 8.5.19 are vulnerable to Stored XSS in the "Next&Previous Nav" block. A r

A Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative quantities to the shoppin

Improper access control in Intel(R) RAID Web Console software all versions may allow an authenticated user to potentiall

Improper access control in Intel(R) RAID Web Console all versions may allow an authenticated user to potentially enable

Improper input validation in some Intel(R) RAID Web Console software all versions may allow an authenticated user to pot

Improper access control in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potent

Uncontrolled search path element in Intel(R) RAID Web Console software for all versions may allow an authenticated user

Uncaught exception in Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially ena

Improper access control in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potent

NULL pointer dereference in Intel(R) RAID Web Console software for all versions may allow an authenticated user to poten

Improper access control in Intel(R) RAID Web Console all versions may allow an authenticated user to potentially enable

Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may allow an privileged user to pote

Observable discrepancy in RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable

Race condition in Seamless Firmware Updates for some Intel(R) reference platforms may allow a privileged user to potenti

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enabl

Improper input validation in UEFI firmware error handler for some Intel(R) Processors may allow a privileged user to pot

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to enable informatio

Improper conditions check in some Intel(R) Processors with Intel(R) SGX may allow a privileged user to potentially enabl

Improper access control in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable

Untrusted pointer dereference in UEFI firmware for some Intel(R) reference processors may allow a privileged user to pot

A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalat

Out-of-bounds read in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable denia

NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially en

Out-of-bounds write in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable esca

The Windows version of WebIQ 2.15.9 is affected by a directory traversal vulnerability that allows remote attackers to r

An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the child_process.j

Improper Control of Generation of Code ('Code Injection') vulnerability in SFS Consulting ww.Winsure allows Code Injecti

Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SFS Consulting Ins

Mattermost Desktop App versions <=5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather

Mattermost Desktop App versions <=5.8.0 fail to safeguard screen capture functionality which allows an attacker to silen

IBM Aspera Shares 1.0 through 1.10.0 PL3 does not invalidate session after a password reset which could allow an authent

TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWizardCfg function via the ssid5

An improper access control (IDOR) vulnerability in the /api-selfportal/get-info-token-properties endpoint in MFASOFT Sec

TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWiFiAclRules function via the de

TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the UploadCustomModule function, which

Deserialization of Untrusted Data vulnerability in Apache Seata.  When developers disable authentication on the Seata-S

In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible

Mattermost Mobile Apps versions <=2.18.0 fail to disable autocomplete during login while typing the password and visible

Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenti

Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN p

Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service,

The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which

The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which

Mattermost Desktop App versions <=5.8.0 fail to specify an absolute path when searching the cmd.exe file, which allows