2024

Apache Airflow versions before 2.10.1 have a vulnerability that allows DAG authors to add local settings to the DAG fold

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin

DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the value para

DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the name param

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. T

Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stac

An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially

When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a p

An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability co

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If exploited, the vulnerability

An improper restriction of excessive authentication attempts vulnerability has been reported to affect several QNAP oper

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability cou

A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability

A cross-site scripting (XSS) vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could a

A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploi

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploite

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploi

A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow aut

An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could a

An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability coul

An OS command injection vulnerability has been reported to affect legacy QTS. If exploited, the vulnerability could allo

A missing authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited,

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnera

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacke

A vulnerability was found in Forklift Controller.  There is no verification against the authorization header except to e

H2O.ai H2O through 3.46.0.4 allows attackers to arbitrarily set the JDBC URL, leading to deserialization attacks, file r

The HL7 FHIR Core Artifacts repository provides the java core object handling code, with utilities (including validator)

D-Link DIR-823G v1.0.2B05_20181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration

D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via msp_info.htm.

D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via sub47A60C function in the upgrade_filter.asp file

Dovecot accepts dot LF DOT LF symbol as end of DATA command. RFC requires that it should always be CR LF DOT CR LF. This

The ForumWP – Forum & Discussion Board Plugin plugin for WordPress is vulnerable to Privilege Escalation via Insecure Di

The Revision Manager TMC plugin for WordPress is vulnerable to unauthorized arbitrary email sending due to a missing cap

The Enter Addons – Ultimate Template Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scrip

The Advanced Sermons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘sermon_video_embed’ para

The WPCOM Member plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.5.2.