2024

Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0

An issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges via the password verification co

SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/adm

An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to

Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the npss parameter at rooms.ph

Cypress Solutions CTM-200 v2.7.1.5600 and below was discovered to contain an OS command injection vulnerability via the

Go SDK for CloudEvents is the official CloudEvents SDK to integrate applications with CloudEvents. Prior to version 2.15

Shopware is an open commerce platform based on Symfony Framework and Vue. The Symfony Session Handler pops the Session C

Mio is a Metal I/O library for Rust. When using named pipes on Windows, mio will under some circumstances return invalid

RobotsAndPencils go-saml, a SAML client library written in Go, contains an authentication bypass vulnerability in all kn

Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap c

Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exp

Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of b

electron-builder is a solution to package and build a ready for distribution Electron, Proton Native app for macOS, Wind

pgx is a PostgreSQL driver and toolkit for Go. Prior to version 4.18.2, SQL injection can occur when all of the followin

Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of

CasaOS-UserService provides user management functionalities to CasaOS. Prior to version 0.4.7, path filtering of the URL

Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to

A missing permission check in an HTTP endpoint in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers wit

Jenkins iceScrum Plugin 1.1.6 and earlier does not sanitize iceScrum project URLs on build views, resulting in a stored

Jenkins GitBucket Plugin 0.8 and earlier does not sanitize Gitbucket URLs on build views, resulting in a stored cross-si

A vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could allow an authenticated, l

A vulnerability in the SAML authentication process of Cisco Secure Client could allow an unauthenticated, remote attacke

This vulnerability exists in AppSamvid software due to the usage of a weaker cryptographic algorithm (hash) SHA1 in user

This vulnerability exists in USB Pratirodh due to the usage of a weaker cryptographic algorithm (hash) SHA1 in user logi

In the Linux kernel, the following vulnerability has been resolved: ipmr: fix kernel panic when forwarding mcast packet

In the Linux kernel, the following vulnerability has been resolved: llc: call sock_orphan() at release time syzbot rep

In the Linux kernel, the following vulnerability has been resolved: pds_core: Prevent race issues involving the adminq

In the Linux kernel, the following vulnerability has been resolved: powerpc/lib: Validate size for vector operations S

In the Linux kernel, the following vulnerability has been resolved: FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree

In the Linux kernel, the following vulnerability has been resolved: UBSAN: array-index-out-of-bounds in dtSplitRoot Sy

In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds Read in dtSearch Curre

In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in dbAdjTree Cu

In the Linux kernel, the following vulnerability has been resolved: jfs: fix uaf in jfs_evict_inode When the execution

In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diNewExt [Sy

In the Linux kernel, the following vulnerability has been resolved: s390/ptrace: handle setting of fpc register correct

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: Fix potential array-index-out-of-bound

In the Linux kernel, the following vulnerability has been resolved: reiserfs: Avoid touching renamed directory if paren

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Avoid touching renamed directory if parent d

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to tag gcing flag on page during block mi

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add mutex lock in control vblank irq

A stack-based buffer overflow in the built-in web server in Moxa NPort W2150A/W2250A Series firmware version 2.3 and pri

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=

Buffer Overflow vulnerability in eza before version 0.18.2, allows local attackers to execute arbitrary code via the .gi

Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the webs

TP-Link JetStream Smart Switch TL-SG2210P 5.0 Build 20211201 allows attackers to escalate privileges via modification of

An issue in Multilaser RE160 firmware v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01 allows attackers to bypass the access cont

Directory Traversal vulnerability in Jeewms v.3.7 and before allows a remote attacker to obtain sensitive information vi

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condit

The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is