2024

A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC R

A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions

A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SI

A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application

A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.17.0 only if the basic authentication mech

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP

The Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.4.

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP

Improper Control of Generation of Code ('Code Injection') in Electron Fuses in Logitech Options Plus version 1.60.496306

An low privileged remote attacker can execute OS commands with root privileges due to improper neutralization of special

A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount C

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, pa

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, pa

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, pa

A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding

A low privileged remote attacker can perform configuration changes of the ospf service through OSPF_INTERFACE.SIMPLE_KEY

A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validatio

A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in

A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralizati

A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralizati

Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Access of Memory Location After End of Buffer

Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a Use of a Broken or Risky Cryptographic Algorithm vulnera

Dell PowerScale InsightIQ, version 5.0, contain a Use of hard coded Credentials vulnerability. A high privileged attacke

Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a File or Directories Accessible to External Parties vulne

Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains an Improper Access Control vulnerability. A high privilege

Dell PowerScale InsightIQ, version 5.1, contain an Improper Privilege Management vulnerability. A high privileged attack

An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing

The Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin for WordPress is vulnerable to

The Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin for WordPress is vulnerable to

An unauthenticated remote attacker can run malicious c# code included in curve files and execute commands in the users c

Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command ('Command

Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Improper Input Validation vulnerability. A hig

OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in

The Starbox WordPress plugin before 3.5.2 does not sanitise and escape some of its settings, which could allow high pri

The Floating Contact Button WordPress plugin before 2.8 does not sanitise and escape some of its settings, which could a

During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device t

Amin Aliakbari, member of the AXIS OS Bug Bounty Program, has found a broken access control which would lead to less-pri

Marinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API alwaysmulti.cgi was vulnerable for fil

51l3nc3, member of the AXIS OS Bug Bounty Program, has found that a Guard Tour VAPIX API parameter allowed the use of ar

Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow

The RFC enabled function module allows a low privileged user to perform denial of service on any user and also change or

An authenticated attacker with high privilege can use functions of SLCM transactions to which access should be restricte

SAP NetWeaver AS for Java allows an authorized attacker to obtain sensitive information. The attacker could obtain the u

SAP BusinessObjects Business Intelligence Platform allows a high privilege user to run client desktop applications even

Due to insufficient encoding of user-controlled inputs, SAP NetWeaver AS Java allows malicious scripts to be executed in

Due to insufficient input validation, CRM Blueprint Application Builder Panel of SAP NetWeaver Application Server for AB

Under certain conditions Statutory Reports in SAP S/4 HANA allows an attacker with basic privileges to access informatio

SAP NetWeaver Enterprise Portal is vulnerable to reflected cross site scripting due to insufficient encoding of user-con

The RFC enabled function module allows a low privileged user to perform various actions, such as modifying the URLs of a