2024

A vulnerability has been found in code-projects Simple CRUD Functionality 1.0 and classified as problematic. This vulner

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary H

Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skyla

A vulnerability, which was classified as problematic, was found in DedeCMS 5.7.116. This affects the function RemoveXSS

A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7.116. Affected by this issue is some

A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown fun

A vulnerability classified as problematic has been found in DedeCMS 5.7.116. Affected is an unknown function of the file

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from

In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding

In JetBrains YouTrack before 2024.3.51866 improper access control allowed listing of project names during app import wit

In JetBrains YouTrack before 2024.3.51866 unauthenticated database backup download was possible via vulnerable query par

Seecms v4.8 was discovered to contain a SQL injection vulnerability in the SEMCMS_SeoAndTag.php page.

An issue was discovered in the installer in Samsung Magician 8.1.0 on Windows. An attacker can create arbitrary folders

Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch

Authentication Bypass Using an Alternate Path in Dex Mode prior to SMR Dec-2024 Release 1 allows physical attackers to t

A vulnerability was discovered in FreePBX 17.0.19.17. It does not verify the type of uploaded (valid FreePBX module) fil

A security vulnerability in HPE IceWall products could be exploited remotely to cause Unauthorized Data Modification.

A vulnerability classified as problematic has been found in code-projects Wazifa System 1.0. Affected is an unknown func

A vulnerability was found in code-projects Blood Bank System 1.0. It has been rated as problematic. This issue affects s

A vulnerability was found in code-projects Farmacia 1.0. It has been classified as problematic. This affects an unknown

A vulnerability was found in code-projects Farmacia 1.0 and classified as problematic. Affected by this issue is some un

A vulnerability has been found in code-projects Farmacia 1.0 and classified as problematic. Affected by this vulnerabili

pyjwt is a JSON Web Token implementation in Python. An incorrect string comparison is run for `iss` checking, resulting

Multiple FCNT Android devices provide the original security features such as "privacy mode" where arbitrary applications

A vulnerability classified as problematic was found in Guizhou Xiaoma Technology jpress 5.1.2. Affected by this vulnerab

A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SUSE mana

A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in the Setup

Centurion ERP (Enterprise Rescource Planning) is a simple application developed to provide open source IT management wit

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type

The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read

The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with addit

In the src/libs/zbxembed/browser.c file, the es_browser_ctor method retrieves a heap pointer from the Duktape JavaScript

The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function

When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allo

The reported vulnerability is a stack buffer overflow in the zbx_snmp_cache_handle_engineid function within the Zabbix s

A vulnerability, which was classified as problematic, has been found in code-projects Crud Operation System 1.0. This is

A vulnerability, which was classified as problematic, has been found in SourceCodester Best House Rental Management Syst

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the s

Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have a sufficie

A vulnerability was found in CodeAstro Hospital Management System 1.0. It has been declared as problematic. This vulnera

A vulnerability was found in CodeAstro Hospital Management System 1.0. It has been classified as problematic. This affec

A vulnerability was found in CodeAstro Hospital Management System 1.0 and classified as problematic. Affected by this is

A vulnerability has been found in CodeAstro Hospital Management System 1.0 and classified as problematic. Affected by th

A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file th

A vulnerability was found in code-projects Farmacia 1.0. It has been classified as problematic. This affects an unknown

The WPForms WordPress plugin before 1.9.1.6 does not sanitise and escape some of its settings, which could allow high p

The YaDisk Files WordPress plugin through 1.2.5 does not sanitise and escape some of its settings, which could allow hig

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerabili

Tungsten Automation Power PDF OXPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerabil

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerabili