2024

When BIG-IP is deployed in high availability (HA) and an iControl REST API token is updated, the change does not sync to

When running in appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iContro

When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed tra

When a BIG-IP ASM/Advanced WAF security policy is configured on a virtual server, undisclosed requests can cause an i

For unspecified traffic patterns, BIG-IP AFM IPS engine may spend an excessive amount of time matching the traffic agai

When BIG-IP AFM Device DoS or DoS profile is configured with NXDOMAIN attack vector and bad actor detection, undisclose

CWE-287: Improper Authentication vulnerability exists that could cause unauthorized tampering of device configuration o

CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file prot

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists

CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project

The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote atta

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to c

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.p

The JSON datasource plugin ( https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ ) is a Grafana Labs maint

Improper access control in some Intel(R) SUR software before version 2.4.10587 may allow an unauthenticated user to pote

Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentia

Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) oneAPI Toolk

Buffer underflow in some Intel(R) PCM software before version 202307 may allow an unauthenticated user to potentially en

Improper access control for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 m

Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenti

Improper input validation in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authen

Improper access control in the Intel(R) Thunderbolt(TM) DCH drivers for Windows may allow an authenticated user to poten

Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent una

Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.

Improper authentication vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1

Blind SQL Injection vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a re

In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4

Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has

Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of pr

A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated re

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions of TYPO

Insecure Permissions issue in Raiden Professional Server RaidenFTPD v.2.4 build 4005 allows a local attacker to gain pri

Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leadin

Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the A

sidekiq-unique-jobs is an open source project which prevents simultaneous Sidekiq jobs with the same unique arguments to

mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server that imp

A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor rol

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Internet Shortcut Files Security Feature Bypass Vulnerability

Windows Printing Service Spoofing Vulnerability

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

.NET Denial of Service Vulnerability

Microsoft Outlook Elevation of Privilege Vulnerability

Dynamics 365 Sales Spoofing Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Dynamics 365 Field Service Spoofing Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability