2024

NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability. This v

Linux Kernel Bluetooth CMTP Module Double Free Privilege Escalation Vulnerability. This vulnerability allows local attac

Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote

Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote

Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attacker

Foxit PDF Reader print Method Use of Externally-Controlled Format String Information Disclosure Vulnerability. This vuln

Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attack

Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote at

Database scanning using username and password stores the credentials in plaintext or encoded format within files at the

In multiple functions of AppOpsService.java, there is a possible way to saturate the content of /data/system/appops_acce

In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote

In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to resource exhaustion. Thi

In multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due to resource exhaustion.

In multiple functions of CompanionDeviceManagerService.java, there is a possible launch NotificationAccessConfirmationAc

IBM Watson CP4D Data Stores 4.0.0 through 4.8.4 stores potentially sensitive information in log files that could be read

Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially explo

CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the file_get_contents function in the

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker al

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subs

Process Explorer before 17.04 allows attackers to make it functionally unavailable (a denial of service for analysis) by

An issue was discovered in Logpoint before 7.4.0. It allows Local File Inclusion (LFI) when an arbitrary File Path is us

An issue was discovered in Logpoint before 7.4.0. HTML code sent through logs wasn't being escaped in the "Interesting F

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the unallocatedL

A medium severity vulnerability has been identified in the update mechanism of the Phish Alert Button for Outlook, which

The team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed

Trix is a rich text editor. The Trix editor, versions prior to 2.1.1, is vulnerable to arbitrary code execution when cop

An issue was discovered in Logpoint before 7.4.0. A path injection vulnerability is seen while adding a CSV enrichment s

An issue was discovered in Logpoint before 7.4.0. An attacker can enumerate a valid list of usernames by observing the r

Cross-site scripting (XSS) vulnerability in the search function in Maven net.mingsoft MS Basic 2.1.13.4 and earlier.

A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is the fun

A vulnerability, which was classified as problematic, was found in DedeCMS 5.7. Affected is an unknown function of the f

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the topic parameter in the list() function.

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to ob

A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7. This issue affects some unknown pro

A vulnerability classified as problematic was found in DedeCMS 5.7. This vulnerability affects unknown code of the file

A vulnerability classified as problematic has been found in DedeCMS 5.7. This affects an unknown part of the file /src/d

A vulnerability was found in DedeCMS 5.7. It has been rated as problematic. Affected by this issue is some unknown funct

MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::SilentMultiPprfReceiver::e

MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::copyOut at /Tools/SilentPp

An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a

A vulnerability was found in DedeCMS 5.7. It has been declared as problematic. Affected by this vulnerability is an unkn

A vulnerability was found in DedeCMS 5.7. It has been classified as problematic. Affected is an unknown function of the

A vulnerability was found in DedeCMS 5.7 and classified as problematic. This issue affects some unknown processing of th

A vulnerability has been found in DedeCMS 5.7 and classified as problematic. This vulnerability affects unknown code of

In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, in the EDC Connector component ( https://github.com/eclipse

 An improper authorization level has been detected in the login panel. It may lead to unauthenticated Server Side Reques

Missing Authorization vulnerability in Tilda Publishing.This issue affects Tilda Publishing: from n/a through 0.3.23.

An incorrect authentication vulnerability has been found in Socomec Net Vision affecting version 7.20. This vulnerabilit