2024

A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function uploadIcon o

TrueLayer.NET is the .Net client for TrueLayer. The vulnerability could potentially allow a malicious actor to gain con

A security vulnerability has been identified in the pkcs11-provider, which is associated with Public-Key Cryptography St

In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files.

The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Mul

A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function

ModSecurity / libModSecurity 3.0.0 to 3.0.11 is affected by a WAF bypass for path-based payloads submitted via specially

A vulnerability, which was classified as critical, was found in openBI up to 1.0.8. This affects the function uploadFile

A vulnerability classified as critical was found in openBI up to 1.0.8. Affected by this vulnerability is the function t

Directory Traversal vulnerability in Qiyu iFair version 23.8_ad0 and before, allows remote attackers to obtain sensitive

The 'HTML5 Video Player' WordPress Plugin, version < 2.5.25 is affected by an unauthenticated SQL injection vulnerabilit

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5

An issue was discovered in the Feed Me plugin 4.6.1 for Craft CMS. It allows remote attackers to cause a denial of servi

Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the child_proce

Incorrect Default Permissions vulnerability in Hitachi Storage Plug-in for VMware vCenter allows local users to read and

Insecure Permissions vulnerability in BossCMS v.1.3.0 allows a local attacker to execute arbitrary code and escalate pri

The post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21(AAZF.15)C0 and N

react-dashboard 1.4.0 is vulnerable to Cross Site Scripting (XSS) as httpOnly is not set.

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows OS Command Injection. The AppBu

Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on W

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbit

Sourcecodester Daily Habit Tracker App 1.0 allows SQL Injection via the parameter 'tracker.'

Sourcecodester Login System with Email Verification 1.0 allows SQL Injection via the 'user' parameter.

An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16.

Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and be

Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to an authenticated arbitrary command execu

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by t

Missing Authorization vulnerability in Forcepoint F|One SmartEdge Agent on Windows (bgAutoinstaller service modules) all

A vulnerability was found in Shanxi Diankeyun Technology NODERP up to 6.0.2 and classified as critical. This issue affec

A vulnerability, which was classified as critical, was found in Totolink N200RE 9.3.5u.6139_B20201216. This affects the

A vulnerability, which was classified as critical, has been found in Totolink N200RE 9.3.5u.6139_B20201216. Affected by

The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the cloning process which provid

The WP SOCIAL BOOKMARK MENU WordPress plugin through 1.2 does not have CSRF check in place when updating its settings, w

The Autotitle for WordPress plugin through 1.0.3 does not have CSRF check in place when updating its settings, which cou

The Custom User CSS WordPress plugin through 0.2 does not have CSRF check in place when updating its settings, which cou

The WordPress Users WordPress plugin through 1.4 does not have CSRF check in place when updating its settings, which cou

The Woostify Sites Library WordPress plugin before 1.4.8 does not have authorisation in an AJAX action, allowing any aut

A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a

The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible to an Insecure Direct Object Reference (I

A vulnerability classified as critical was found in Totolink N200RE 9.3.5u.6139_B20201216. Affected by this vulnerabilit

A vulnerability classified as critical has been found in Totolink N200RE 9.3.5u.6139_B20201216. Affected is the function

A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been rated as critical. This issue affects th

A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been declared as critical. This vulnerability

A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been classified as critical. This affects the

A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as critical. Affected by this issue is

In Apache Kylin version 2.0.0 to 4.0.3, there is a Server Config web interface that displays the content of file 'kylin.

Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This

Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for

The Cloudflare Wordpress plugin was found to be vulnerable to improper authentication. The vulnerability enables attacke

The POP3 service in YahooPOPs (aka YPOPs!) 1.6 allows a remote denial of service (reboot) via a long string to TCP port