2024

In the Linux kernel, the following vulnerability has been resolved: net/tcp: Disable TCP-AO static key after RCU grace

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check in resource_log_pip

SQL injection vulnerability in ATISolutions CIGES affecting versions lower than 2.15.5. This vulnerability allows a remo

Passwords of agents and customers are displayed in plain text in the OTRS admin log module if certain configurations reg

Improper Neutralization of Input done by an attacker with admin privileges ('Cross-site Scripting') in Process Managemen

Improper Neutralization of Input done by an attacker with admin privileges ('Cross-site Scripting') in  OTRS (System Con

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Add error handling to pair_device(

An arbitrary file write issue in the exfiltration endpoint in BYOB (Build Your Own Botnet) 2.0 allows attackers to overw

A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf (False Alarm Management) through 2024-08-09 allow

The Shield Security WordPress plugin before 20.0.6 does not sanitise and escape a parameter before outputting it back i

The Quiz and Survey Master (QSM) WordPress plugin before 9.1.1 fails to validate and escape certain Quiz fields before

Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is use

Improper Input Validation vulnerability in Hillstone Networks Hillstone Networks Web Application Firewall on 5.5R6 allow

A vulnerability classified as critical was found in ContiNew Admin 3.2.0. Affected by this vulnerability is the function

A vulnerability classified as problematic has been found in SourceCodester QR Code Bookmark System 1.0. Affected is an u

A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been rated as problematic. This issue af

A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been declared as problematic. This vulne

A bug in the 9p authentication implementation within lib9p allows an attacker with an existing valid user within the con

A vulnerability was found in SourceCodester Interactive Map with Marker 1.0. It has been classified as problematic. This

A vulnerability was found in ContiNew Admin 3.2.0 and classified as critical. Affected by this issue is the function top

The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost

PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and

Logitech Options+ on MacOS prior 1.72 allows a local attacker to inject dynamic library within Options+ runtime and abus

A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as critical. This issue affects

A vulnerability has been found in code-projects Pharmacy Management System 1.0 and classified as critical. This vulnerab

CyberArk - CWE-602: Client-Side Enforcement of Server-Side Security

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unk

A vulnerability classified as problematic was found in ClassCMS 4.8. Affected by this vulnerability is an unknown functi

A vulnerability was found in SourceCodester Daily Calories Monitoring Tool 1.0. It has been declared as problematic. Thi

A vulnerability was found in SourceCodester Daily Calories Monitoring Tool 1.0. It has been classified as problematic. T

A vulnerability was found in SourceCodester Task Progress Tracker 1.0 and classified as problematic. Affected by this is

Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has a timestamp within the expecte

A vulnerability has been found in itsourcecode E-Commerce Website 1.0 and classified as critical. Affected by this vulne

A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. Affected i

A vulnerability has been found in SourceCodester Record Management System 1.0 and classified as problematic. This vulner

The TikTok (aka com.zhiliaoapp.musically) application before 34.5.5 for Android allows the takeover of Lynxview JavaScri

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor ca

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor ca

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor ca

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor ca

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor ca

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor ca

A vulnerability, which was classified as problematic, was found in SourceCodester Record Management System 1.0. This aff

A vulnerability classified as critical has been found in Go-Tribe gotribe up to cd3ccd32cd77852c9ea73f986eaf8c301cfb6310

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-32

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-32

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-32