2024

Improper Privilege Management vulnerability in realmag777 HUSKY allows Privilege Escalation.This issue affects HUSKY: fr

A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly valid

In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an u

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to PHP Code Injection lead

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder is affected by a time-based

TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the http_host parameter in the loginauth

TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the password parameter in the loginauth f

TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the ssid parameter in setWizardCfg functio

TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the http_host parameter in the loginauth f

Pro Macros provides XWiki rendering macros. Missing escaping in the Viewpdf macro allows any user with view right on the

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText OpenText Direct

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Veribilim So

TOTOLINK A3002R v4.0.0-B20230531.1404 contains a buffer overflow vulnerability in /bin/boa via formParentControl.

llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbi

The Open eClass platform (formerly known as GUnet eClass) is a complete Course Management System. An arbitrary file uplo

The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in versions up to, and includ

openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. P

openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. I

The function "generate_app_certificates" in controllers/saml2/saml2.js of FIWARE Keyrock <= 8.4 does not neutralize spec

The function "generate_app_certificates" in lib/app_certificates.js of FIWARE Keyrock <= 8.4 does not neutralize special

An arbitrary file upload vulnerability in the Ueditor component of productinfoquick v1.0 allows attackers to execute arb

An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send

AMTT Hotel Broadband Operation System (HiBOS) V3.0.3.151204 and before is vulnerable to SQL Injection via /manager/card/

A SQL injection vulnerability in "/index.php" of Kashipara Live Membership System v1.0 allows remote attackers to execut

An Unrestricted file upload vulnerability was found in "/Membership/edit_member.php" of Kashipara Live Membership System

A Broken Access Control vulnerability was found in /admin/update.php and /admin/dashboard.php in Kashipara Online Exam S

A SQL injection vulnerability in "/oahms/admin/forgot-password.php" in PHPGurukul Old Age Home Management System v1.0 al

Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete-calorie.php."

An improper access control vulnerability exists in the mintplex-labs/anything-llm application, specifically within the i

Improper check or handling of exceptional conditions vulnerability affecting Vonets industrial wifi bridge relays

Stack-based buffer overflow vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeat

izatop bunt v0.29.19 was discovered to contain a prototype pollution via the component /esm/qs.js. This vulnerability al

Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeater

Within Zabbix, users have the ability to directly modify memory pointers in the JavaScript engine.

An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Enphase IQ Gateway

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability via a URL parameter in Enph

VRCX is an assistant/companion application for VRChat. In versions prior to 2024.03.23, a CefSharp browser with over-per

Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause

Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may af

The Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress plugin for WordPress is vulnerable t

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw

A SQL injection vulnerability in /smsa/teacher_login.php in Kashipara Responsive School Management System v1.0 allows an

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco

In the Linux kernel, the following vulnerability has been resolved: libceph: fix race between delayed_work() and ceph_m

SourceCodester Computer Laboratory Management System 1.0 allows admin/category/view_category.php id SQL Injection.

SourceCodester Computer Laboratory Management System 1.0 allows classes/Master.php id SQL Injection.

An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker w

An issue discovered in the RunHTTPServer function in Gorush v1.18.4 allows attackers to intercept and manipulate data du