2024

An issue in EQ Enterprise Management System before v2.0.0 allows attackers to execute a directory traversal via crafted

An issue in the component EXR!ReadEXR+0x4eef0 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a

An issue in the component EXR!ReadEXR+0x3df50 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a

An issue in the component EXR!ReadEXR+0x40ef1 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a

Beijing Digital China Cloud Technology Co., Ltd. DCME-320 v.7.4.12.60 has a command execution vulnerability, which can b

A SQL injection vulnerability in /smsa/admin_login.php in Kashipara Responsive School Management System v3.2.0 allows an

In WS_FTP Server versions before 8.8.8 (2022.0.8), a Missing Critical Step in Multi-Factor Authentication of the Web Tra

In WS_FTP Server versions before 8.8.8 (2022.0.8), an Improper Limitation of a Pathname to a Restricted Directory ('Path

Improper access control in the clipboard synchronization feature in TeamViewer Full Client prior version 15.57 and TeamV

JustEnoughItems (JEI) 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in In

EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in I

A vulnerability in the software upgrade component of Cisco Application Policy Infrastructure Controller (APIC) and Cisco

A vulnerability in the DHCPv6 relay agent of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cau

A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash

A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to execu

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local at

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local at

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local at

A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (

Ruoyi v4.7.9 and before was discovered to contain a cross-site scripting (XSS) vulnerability via the sql parameter of th

Roughly Enough Items (REI) v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset

TOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow. The formWlEncrypt CGI ha

The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability

The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for WordPress

HyperView Geoportal Toolkit in versions lower than 8.5.0 is vulnerable to Reflected Cross-Site Scripting (XSS). An unaut

HyperView Geoportal Toolkit in versions lower than 8.5.0 does not restrict cross-domain requests when fetching remote co

Improper Neutralization of Input During Web Page Generation vulnerability in "Update of Personal Details" form in ConnX

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affect

In the Linux kernel, the following vulnerability has been resolved: mm: gup: stop abusing try_grab_folio A kernel warn

A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the veri

A code execution vulnerability exists in the Xiaomi App market product. The vulnerability is caused by unsafe configurat

A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the veri

A path traversal vulnerability exists in the Xiaomi File Manager application product(international version). The vulnera

The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including,

The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Ma

Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specif

Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. Thi

The Xiaomi Security Center expresses heartfelt thanks to Ken Gannon and Ilyes Beghdadi of NCC Group working with Trend M

A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and d

Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific

A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled fun

A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack

A vulnerability identified in NetIQ Advance Authentication that leaks sensitive server information. This issue affects N

A vulnerability identified in storing and reusing information in Advance Authentication. This issue can lead to leakage

QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may a

Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with lo

Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation result

ntfs3 in the Linux kernel through 6.8.0 allows a physically proximate attacker to read kernel memory by mounting a files