2024

Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter

Projectworlds Online Examination System v1.0 is vulnerable to SQL Injection via the subject parameter in feed.php.

Insecure Permissions vulnerability in xxl-job v.2.4.1 allows a remote attacker to execute arbitrary code via the Sub-Tas

IBM InfoSphere Information Server could allow an authenticated user to consume file space resources due to unrestricted

IBM InfoSphere Information Server 11.7 could allow a privileged user to obtain sensitive information from authentication

IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failu

Authentication Bypass in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to gain a privi

Information Disclosure in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to read the Wi

Identical Hardcoded Root Password for All Devices in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with phy

Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.17

Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16

* Unprotected privileged mode access through UDS session in the Blind Spot Detection Sensor ECU firmware in Nissan Alti

webcrack is a tool for reverse engineering javascript. An arbitrary file write vulnerability exists in the webcrack modu

A vulnerability was found in D-Link DI-8100 16.07. It has been classified as critical. This affects the function upgrade

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-

An issue in Super easy enterprise management system v.1.0.0 and before allows a local attacker to obtain the server abso

SQL Injection vulnerability in Super easy enterprise management system v.1.0.0 and before allows a local attacker to exe

Cross Site Scripting vulnerability in Super easy enterprise management system v.1.0.0 and before allows a local attacker

An issue in Huizhi enterprise resource management system v.1.0 and before allows a local attacker to obtain sensitive in

File Upload vulnerability in Huizhi enterprise resource management system v.1.0 and before allows a remote attacker to e

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L,

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DNS-120, DNR

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L,

The Newsletters plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 4.9.9.

The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all vers

The ElementsKit Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and incl

A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. Affecte

A vulnerability, which was classified as problematic, was found in CodeAstro Online Railway Reservation System 1.0. Affe

Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to

A vulnerability, which was classified as problematic, has been found in SourceCodester Prison Management System 1.0. Thi

A vulnerability classified as problematic was found in SourceCodester Best House Rental Management System 1.0. This vuln

A vulnerability classified as critical has been found in SourceCodester Daily Expenses Monitoring App 1.0. This affects

The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to authentication bypa

The Zephyr Project Manager plugin for WordPress is vulnerable to limited privilege escalation in all versions up to, and

The Insert PHP Code Snippet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and

Directus v10.13.0 allows an authenticated external attacker to execute arbitrary JavaScript on the client. This is possi

IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores u

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been rated as critical. Affected b

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been declared as problematic. Affe

A vulnerability was found in code-projects Job Portal 1.0. It has been classified as critical. Affected is an unknown fu

A vulnerability classified as critical has been found in SourceCodester Simple Online Bidding System 1.0. This affects a

A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been rated as critical. Affected by

A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been declared as critical. Affected

A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as critical. Affect

In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vul

The Trix editor, versions prior to 2.1.4, is vulnerable to XSS when pasting malicious code. This vulnerability is a bypa

A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been rated as critical. Affected by this

A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been declared as problematic. Affected by

WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the re