2024

A vulnerability, which was classified as critical, was found in Totolink LR1200GB 9.1.0u.6619_B20230130. This affects th

A vulnerability, which was classified as critical, has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected b

IBM Db2 for Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a local user to escalate their privil

A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of th

A vulnerability was found in Uniway Router up to 2.0. It has been rated as critical. Affected by this issue is some unkn

A vulnerability, which was classified as critical, has been found in Kashipara Hospital Management System up to 1.0. Aff

A vulnerability classified as critical was found in Totolink X2000R_V2 2.0.0-B20230727.10434. This vulnerability affects

A vulnerability classified as critical was found in Kashipara Hospital Management System up to 1.0. Affected by this vul

A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as critical. This vulnerabil

** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with access to the

Insecure Permissions vulnerability in fit2cloud Cloud Explorer Lite version 1.4.1, allow local attackers to escalate pri

D-Tale is a visualizer for Pandas data structures. Users hosting versions D-Tale prior to 3.9.0 publicly can be vulnerab

A vulnerability classified as critical was found in CodeAstro Online Food Ordering System 1.0. This vulnerability affect

An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow a

An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could a

A prototype pollution vulnerability has been reported to affect several QNAP operating system versions. If exploited, th

The caching invalidation guidelines from the AMD-Vi specification (48882—Rev 3.07-PUB—Oct 2022) is incorrect on some har

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to wh

For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mod

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Naa986 WP Stripe Checkout.This issue affects

Buffer Overflow vulnerability in Tenda i29 versions 1.0 V1.0.0.5 and 1.0 V1.0.0.2, allows remote attackers to cause a de

Cross-Site Request Forgery (CSRF) vulnerability in Ovation S.R.L. Dynamic Content for Elementor.This issue affects Dynam

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This is

Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read

encoded_id-rails versions before 1.0.0.beta2 are affected by an uncontrolled resource consumption vulnerability. A remot

A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly up

SideQuest is a place to get virtual reality applications for Oculus Quest. The SideQuest desktop application uses deep l

Online Notice Board System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'f' parameter of user/upda

A vulnerability has been identified in syngo fastView (All versions). The affected application lacks proper validation o

A vulnerability has been identified in syngo fastView (All versions). The affected application lacks proper validation o

A vulnerability has been identified in syngo fastView (All versions). The affected application lacks proper validation o

A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus T

Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive in

Use after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap

Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit hea

Heap buffer overflow in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit

Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had compromised the rende

Amazon Ion is a Java implementation of the Ion data notation. Prior to version 1.10.5, a potential denial-of-service iss

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registratio

Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client (UDC) that could allow an a

Unauthenticated access permitted to web interface page The Genie Company Aladdin Connect (Retrofit-Kit Model ALDCM) "Gar

When the Genie Company Aladdin Connect garage door opener (Retrofit-Kit Model ALDCM) is placed into configuration mode t

An issue discovered in GPAC 2.3-DEV-rev605-gfc9e29089-master in MP4Box in gf_avc_change_vui /afltest/gpac/src/media_tool

Apktool is a tool for reverse engineering Android APK files. In versions 2.9.1 and prior, Apktool infers resource files'

PeterO.Cbor versions 4.0.0 through 4.5.0 are vulnerable to a denial of service vulnerability. An attacker may trigger t

Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data

An issue in Tamaki_hamanoki Line v.13.6.1 allows attackers to send crafted notifications via leakage of the channel acce

Directory Traversal in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 allows a remote attacker to obtain sensiti

An issue in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 allows a remote attacker to obtain sensitive informat

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.