2024

Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Esc

Improper access control vulnerability in M-Files Aino in versions before 24.10 allowed an authenticated user to access o

Missing input validation in the SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertec

Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security

The pathname of the root directory to a Restricted Directory ('Path Traversal') vulnerability in Korenix JetPort 5601 al

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure h

Budget Control Gateway acts as an entry point for incoming requests and routes them to the appropriate microservices for

Giskard is an evaluation and testing framework for AI systems. A Remote Code Execution (ReDoS) vulnerability was discove

common-user-management is a robust Spring Boot application featuring user management services designed to control user a

The default TCL Camera application exposes a provider vulnerable to path traversal vulnerability. Malicious application

Improper Neutralization of Input During Web Page Generation vulnerability in DInGO dLibra software in the parameter 'fil

A null pointer dereference in Palo Alto Networks PAN-OS software on PA-800 Series, PA-3200 Series, PA-5200 Series, and P

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ITG Compute

A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2.  This issue affects Nexus Rep

A stored Cross-site Scripting vulnerability has been discovered in Sonatype Nexus Repository 2 This issue affects Nexus

Umbrel is a home server OS for self-hosting. The login functionality of Umbrel before version 1.2.2 contains a reflected

A vulnerability in Grafana Labs Grafana OSS and Enterprise allows Privilege Escalation allows users to gain access to re

Insecure creation of temporary files allows local users on systems with non-default configurations to cause denial of se

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks.

An information disclosure vulnerability exists in the backup configuration process where the SAS token is not masked in

XSS Attack in mar.jar, Monitoring Archive Utility (MAR Utility), monitoringconsolecommon.jar in TIBCO Software Inc TIBCO

XSS Attack in mar.jar, Monitoring Archive Utility (MAR Utility), monitoringconsolecommon.jar in TIBCO Software Inc TIBCO

Zoraxy is a general purpose HTTP reverse proxy and forwarding tool. A command injection vulnerability in the Web SSH fea

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. matrix-js-sdk before 34.11.0 is vulnerabl

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ A

Missing Authentication for Critical Function, Missing Authorization vulnerability in Nomysoft Informatics Nomysem allows

Improper handling of canonical URL-encoding may lead to bypass not properly constrained by request rules.

Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. In affected

In Gliffy Online an insecure configuration was discovered in versions before 4.14.0-6. Reported by Alpha Inferno PVT LTD

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the refuse function was id

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the auto-generation functi

Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be use

The BGP daemon in Extreme Networks ExtremeXOS (aka EXOS) 30.7.1.1 allows an attacker (who is not on a directly connected

MediaCMS is an open source video and media CMS, written in Python/Django and React, featuring a REST API. MediaCMS has b

Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe modu

Filament is a collection of full-stack components for accelerated Laravel development. All Filament features that intera

Rapid7 Velociraptor MSI Installer versions below 0.73.3 suffer from a vulnerability whereby it creates the installation

jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cau

happy-dom is a JavaScript implementation of a web browser without its graphical user interface. Versions of happy-dom pr

The cap-std project is organized around the eponymous `cap-std` crate, and develops libraries to make it easy to write c

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthK

Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity. gitsign may select the

Osmedeus is a Workflow Engine for Offensive Security. Cross-site Scripting (XSS) occurs on the Osmedues web server when

cobalt is a media downloader that doesn't piss you off. A malicious cobalt instance could serve links with the `javascri

WebFeed is a lightweight web feed reader extension for Firefox/Chrome. Multiple HTML injection vulnerabilities in WebFee

Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delet

loona is an experimental, HTTP/1.1 and HTTP/2 implementation in Rust on top of io-uring. `loona-hpack` suffers from the

Refit is an automatic type-safe REST library for .NET Core, Xamarin and .NET The various header-related Refit attributes

changedetection.io is free, open source web page change detection software. Prior to version 0.47.5, when a WebDriver is