2024

Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a

A vulnerability, which was classified as problematic, has been found in SourceCodester Food Ordering Management System 1

A vulnerability classified as critical was found in code-projects Inventory Management 1.0. Affected by this vulnerabili

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affecte

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. It has been rated as problematic. T

An External XML Entity (XXE) vulnerability in the provisioning web service of Ivanti EPM before 2022 SU6, or the 2024 Se

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated a

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated a

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated a

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated a

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated a

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated a

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated a

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated a

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated a

Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows

A vulnerability was found in 云课网络科技有限公司 Yunke Online School System up to 3.0.6. It has been declared as problematic. Thi

A vulnerability was found in JFinalCMS up to 20240903. It has been classified as problematic. This affects the function

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.1.0.0 and 9.3.0.8, including 8.3.x, discloses da

A vulnerability was found in Shandong Star Measurement and Control Equipment Heating Network Wireless Monitoring System

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

A vulnerability, which was classified as problematic, was found in JFinalCMS up to 20240903. This affects the function u

A vulnerability, which was classified as problematic, has been found in Kaon CG3000 1.01.43. Affected by this issue is s

A vulnerability classified as critical was found in TDuckCloud TDuckPro up to 6.3. Affected by this vulnerability is an

evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action

SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /ap

A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated Glob

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with W

A problem with the ActiveMQ integration for both Cortex XSOAR and Cortex XSIAM can result in the cleartext exposure of t

An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface (CL

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user

A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Payara Platform Payara Server (Logging modul

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the time_date function.

RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could caus

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys_conf function.

A stored cross-site scripting (XSS) vulnerability in the VLAN configuration of RELY-PCIe v22.2.1 to v23.1.0 allows attac

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys_mgmt function.

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain incorrect access control in the mService function at phpinf.php.

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a code injection vulnerability via the getParams function in phpi

A vulnerability in the storage method of the PON Controller configuration file could allow an authenticated, local attac

Multiple vulnerabilities in Cisco Routed PON Controller Software, which runs as a docker container on hardware that is s

A vulnerability in the segment routing feature for the Intermediate System-to-Intermediate System (IS-IS) protocol of Ci

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to obtain read/write fi

A vulnerability in the Dedicated XML Agent feature of Cisco IOS XR Software could allow an unauthenticated, remote attac

A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD that is use

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to read any file in the

A vulnerability in the handling of specific Ethernet frames by Cisco IOS XR Software for various Cisco Network Convergen