2024

An issue in HummerRisk HummerRisk v.1.10 thru 1.4.1 allows an authenticated attacker to execute arbitrary code via a cra

SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain s

SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute arbitrary code via the /Di

In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a u

A use-after-free flaw was found in the Linux Kernel. When a disk is removed, bdi_unregister is called to stop further wr

The JSM file_get_contents() Shortcode WordPress plugin before 2.7.1 does not validate one of its shortcode's parameters

The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using

The EazyDocs WordPress plugin before 2.3.6 does not have authorization and CSRF checks when handling documents and does

The DeMomentSomTres WordPress Export Posts With Images WordPress plugin through 20220825 does not check authorization of

Traccar is an open source GPS tracking system. Prior to 5.11, Traccar is affected by an unrestricted file upload vulnera

PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and

PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for command executi

PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execution of ar

A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been rated as critical. Affected by this issue is the functi

A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been declared as critical. Affected by this vulnerability is

A vulnerability was found in Tenda W9 1.0.0.7(4456) and classified as critical. This issue affects the function formQosM

A vulnerability has been found in Tenda W9 1.0.0.7(4456) and classified as critical. This vulnerability affects the func

A vulnerability, which was classified as critical, was found in Tenda W9 1.0.0.7(4456). This affects the function setWrl

A vulnerability, which was classified as critical, has been found in Tenda W9 1.0.0.7(4456). Affected by this issue is t

A vulnerability classified as critical was found in Tenda PA6 1.0.1.21. Affected by this vulnerability is the function c

A vulnerability classified as critical has been found in Tenda A15 15.13.07.13. Affected is an unknown function of the f

A vulnerability was found in Tenda A15 15.13.07.13. It has been rated as critical. This issue affects some unknown proce

NetVision Information airPASS has a path traversal vulnerability within its parameter in a specific URL. An unauthen

A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as critical. This vulnerability affects the fun

A vulnerability was found in Tenda A15 15.13.07.13. It has been classified as critical. This affects an unknown part of

A vulnerability, which was classified as critical, has been found in HaoKeKeJi YiQiNiu up to 3.1. Affected by this issue

A vulnerability was found in Taokeyun up to 1.0.5. It has been declared as critical. Affected by this vulnerability is t

A vulnerability was found in Taokeyun up to 1.0.5. It has been classified as critical. Affected is the function login of

An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, explo

An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, explo

An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers

An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allo

Incorrect access control in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers

QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cross Site S

An issue in rymcu forest v.0.02 allows a remote attacker to obtain sensitive information via manipulation of the HTTP bo

Lack of authentication in NPM's package @evershop/evershop before version 1.0.0-rc.8, allows remote attackers to obtain

An issue was discovered in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote attackers with low-level authen

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Profile

A vulnerability classified as critical was found in code-projects Dormitory Management System 1.0. Affected by this vuln

A directory traversal vulnerability in the SOAP Server integrated in Atos Unify OpenScape Voice V10 before V10R3.26.1 al

Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows befor

Discourse is a platform for community discussion. The message serializer uses the full list of expanded chat mentions (@

Wazuh is a free and open source platform used for threat prevention, detection, and response. This bug introduced a stac

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be us

NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access. A s

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a re

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-de

Verydows v2.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /protected/controller/back

The "tokenKey" value used in user authorization is visible in the HTML source of the login page.

The authentication cookies are generated using an algorithm based on the username, hardcoded secret and the up-time, and