2024

A vulnerability allows a remote unauthenticated attacker to modify the prod uct’s IP address over the Sopas ET interface

A path traversal vulnerability exists in the Rockwell Automation affected product. If exploited, the threat actor could

The Rockwell Automation affected product contains a vulnerability that allows a threat actor to view sensitive informati

A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due t

A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are

whatsapp-api-js is a TypeScript server agnostic Whatsapp's Official API framework. It's possible to check the payload va

An invalid read size in Nanomq v0.21.9 allows attackers to cause a Denial of Service (DoS).

A memory allocation issue in vernemq v2.0.1 allows attackers to cause a Denial of Service (DoS) via excessive memory con

A vulnerability in Cisco Meraki Systems Manager (SM) Agent for Windows could allow an authenticated, local attacker to e

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.1.7, from 17.2 prior

An issue was discovered with pipeline execution policies in GitLab EE affecting all versions from 17.2 prior to 17.2.5,

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 pr

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.5 prior to 17.1.7, starting from 17.2 pr

A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus

Discourse Calendar plugin adds the ability to create a dynamic calendar in the first post of a topic to Discourse. Rende

An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds che

An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. An improper bounds ch

The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the securit

User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists i

ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting (XSS) vulnerability

ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password functi

An issue in Mirapolis LMS 4.6.XX allows authenticated users to exploit an Insecure Direct Object Reference (IDOR) vulner

A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a mal

A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious e

An issue in Texas Instruments Fusion Digital Power Designer v.7.10.1 allows a local attacker to obtain sensitive informa

Cross Site Scripting (XSS) Vulnerability in Firewall menu in Control Panel in KASDA KW5515 version 4.3.1.0, allows attac

An issue has been discovered in GitLab EE/CE affecting all versions from 16.9.7 prior to 17.1.7, 17.2 prior to 17.2.5, a

An issue has been discovered in GitLab EE affecting all versions starting from 16.11 prior to 17.1.7, from 17.2 prior to

A server-side request forgery issue has been discovered in GitLab EE affecting all versions starting from 16.8 prior to

A privilege escalation issue has been discovered in GitLab EE affecting all versions starting from 16.6 prior to 17.1.7,

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.1.7, starting from 17.2 pr

An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S A

An issue has been discovered in GitLab affecting all versions starting from 17.1 to 17.1.7, 17.2 prior to 17.2.5 and 17.

An issue was discovered in GitLab-CE/EE affecting all versions starting with 17.0 before 17.1.7, 17.2 before 17.2.5, and

An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 15.10 before 17.1.7, all ve

An issue has been discovered in GitLab EE affecting all versions starting from 11.2 before 17.1.7, all versions starting

An issue has been discovered in GitLab EE affecting all versions starting from 12.9 before 17.1.7, 17.2 before 17.2.5, a

An issue was discovered in GitLab-EE starting with version 13.3 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.

Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage.

Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type.

Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name.

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.This is

Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileg

CVE-2024-45826 IMPACT Due to improper input validation, a path traversal and remote code execution vulnerability exists

CVE-2024-45825 IMPACT A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a

CVE-2024-45823 IMPACT An authentication bypass vulnerability exists in the affected product. The vulnerability exists

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound (OOB) vulnerability was discov

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered

CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chai

No-IP Dynamic Update Client (DUC) v3.x uses cleartext credentials that may occur on a command line or in a file. NOTE: t