2024

A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04.x before 24.04.3, 23.1

Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function fromSetIpBind.

D-Link DI_8004W 16.07.26A1 contains a command execution vulnerability in the jhttpd upgrade_filter_asp function.

D-Link DI_8004W 16.07.26A1 contains a command execution vulnerability in jhttpd msp_info_htm function.

autMan v2.9.6 allows attackers to bypass authentication via a crafted web request.

autMan v2.9.6 was discovered to contain an access control issue.

An issue in Netgear DGN1000WW v.1.1.00.45 allows a remote attacker to execute arbitrary code via the Diagnostics page

DedeCMS V5.7.115 has a command execution vulnerability via file_manage_view.php?fmdo=newfile&activepath.

publiccms V4.0.202302.e and before is vulnerable to Any File Upload via publiccms/admin/cmsTemplate/saveMetaData

Homepage is a highly customizable homepage with Docker and service API integrations. The default setup of homepage 0.9.1

Stored XSS in organizer and event settings of pretix up to 2024.7.0 allows malicious event organizers to inject HTML tag

A vulnerability was found in thinkgem JeeSite 5.3. It has been rated as problematic. This issue affects some unknown pro

RequestStore provides per-request global storage for Rack. The files published as part of request_store 1.3.2 have 0666

This openedx-translations repository contains translation files from Open edX repositories to be kept in sync with Trans

A host header injection vulnerability in Staff Appraisal System v1.0 allows attackers to obtain the password reset token

Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php.

A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attacker

Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via /deleteTicket.php.

Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 2002 (3861aa5) up to today o

An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDe

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configu

Collabora Online is a collaborative online office suite based on LibreOffice. In affected versions of Collabora Online,

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in extranet loc

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports modu

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate re

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lock

Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below are vulnerable to the aut

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts modul

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. N

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. N

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary

In the Linux kernel, the following vulnerability has been resolved: usb: vhci-hcd: Do not drop references before new re

A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensiti

The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Imag

Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature v

Mattermost Plugin Channel Export versions <=1.0.0 fail to restrict concurrent runs of the /export command which allows a

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially lea

The Ditty WordPress plugin before 3.1.46 re-introduced a previously fixed security issue (https://wpscan.com/vulnerabil

The WP Table Builder WordPress plugin through 1.5.0 does not sanitise and escape some of its Table data, which could al

The WooCommerce Google Feed Manager plugin for WordPress is vulnerable to unauthorized loss of data due to a missing cap

The File Manager Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation an

Improper access control in Decentralized Identity Services resulted in a vulnerability that allows an unauthenticated at

A vulnerability was found in SourceCodester E-Commerce System 1.0. It has been classified as critical. Affected is an un

A vulnerability was found in SourceCodester E-Commerce System 1.0 and classified as critical. This issue affects some un

A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as critical. This vulnerability af

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge for Android Spoofing Vulnerability

A vulnerability, which was classified as problematic, was found in SourceCodester Online Computer and Laptop Store 1.0.

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0