2024

DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software developer,

OpenFGA is an authorization/permission engine. OpenFGA v1.5.7 and v1.5.8 are vulnerable to authorization bypass when cal

openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. S

openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. P

openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. C

openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. I

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. In versions 2.10.0 and prior, Litestar's `docs-pr

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In versions on the 3.10 branch prior to

The function "generate_app_certificates" in controllers/saml2/saml2.js of FIWARE Keyrock <= 8.4 does not neutralize spec

The function "generate_app_certificates" in lib/app_certificates.js of FIWARE Keyrock <= 8.4 does not neutralize special

Insufficiently random values for generating activation token in FIWARE Keyrock <= 8.4 allow attackers to activate accoun

Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to disable two

Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to take over t

An improper authentication vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeate

A directory traversal vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software v

Missing Release of Resource after Effective Lifetime vulnerability in Apache Answer. This issue affects Apache Answer:

Missing Release of Resource after Effective Lifetime vulnerability in Apache Answer. This issue affects Apache Answer:

An arbitrary file upload vulnerability in the Ueditor component of productinfoquick v1.0 allows attackers to execute arb

An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send

Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the MathJax component.

Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the Mermaid component.

AMTT Hotel Broadband Operation System (HiBOS) V3.0.3.151204 and before is vulnerable to SQL Injection via /manager/card/

Incorrect access control in the delete_category function of Sourcecodester Computer Laboratory Management System v1.0 al

A Cross-Site Request Forgery (CSRF) vulnerability was found in the Kashipara Live Membership System v1.0. This could lea

A Stored Cross Site Scripting (XSS) vulnerability was found in "/view_type.php" of Kashipara Live Membership System v1.0

A SQL injection vulnerability in "/index.php" of Kashipara Live Membership System v1.0 allows remote attackers to execut

A Reflected Cross Site Scripting (XSS) vulnerability was found in "/oahms/search.php" in PHPGurukul Old Age Home Managem

An Unrestricted file upload vulnerability was found in "/Membership/edit_member.php" of Kashipara Live Membership System

A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/view-enquiry.php" in PHPGurukul Old Age Home Mana

A Broken Access Control vulnerability was found in /admin/update.php and /admin/dashboard.php in Kashipara Online Exam S

A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers

A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/afeedback.php" in Kashipara Online Exam System v1

A SQL injection vulnerability in "/oahms/admin/forgot-password.php" in PHPGurukul Old Age Home Management System v1.0 al

A Cross-Site Request Forgery (CSRF) vulnerability was found in SourceCodester Best House Rental Management System v1.0.

SourceCodester Best House Rental Management System v1.0 is vulnerable to Incorrect Access Control via /rental/payment_re

A Reflected Cross Site Scripting (XSS) vulnerability was found in "edit-cate.php" in SourceCodester House Rental Managem

A Stored Cross Site Scripting (XSS) vulnerability was found in "manage_houses.php" in SourceCodester Best House Rental M

Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete-calorie.php."

An improper access control vulnerability exists in the mintplex-labs/anything-llm application, specifically within the i

Improper check or handling of exceptional conditions vulnerability affecting Vonets industrial wifi bridge relays

Stack-based buffer overflow vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeat

axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative

izatop bunt v0.29.19 was discovered to contain a prototype pollution via the component /esm/qs.js. This vulnerability al

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (HTML-based) Memory Corruption Vulnerability

Microsoft Office Spoofing Vulnerability

A NULL pointer dereference in vercot Serva v4.6.0 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP

An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the lo

Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeater

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface a