2024

Uncontrolled resource consumption refers to a software vulnerability where a attacker or system uses excessive resources

Within Zabbix, users have the ability to directly modify memory pointers in the JavaScript engine.

The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain te

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session rec

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate report

A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local

File read and write vulnerability in Apache DolphinScheduler ,  authenticated users can illegally access additional reso

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandbox

Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, softwa

Setting SMS media allows to set GSM modem file. Later this file is used as Linux device. But due everything is a file fo

Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validat

A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integri

An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts

User with no permission to any of the Hosts can access and view host count & other statistics through System Information

Inadequate Encryption Strength vulnerability allow an authenticated attacker to execute arbitrary OS Commands via encryp

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability via the url parameter

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability through an url paramet

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Enphase IQ Gateway

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability through a url parameter in

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability via a URL parameter in Enph

NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may caus

NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cau

In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability exists in the U-Boot compon

In certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt_7615.ko wireless driver does not properly

IBM Aspera Shares 1.10.0 PL2 does not invalidate session after a password change which could allow an authenticated user

Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM c

Dorsett Controls InfoScan is vulnerable due to a leak of possible sensitive information through the response headers an

The InfoScan client download page can be intercepted with a proxy, to expose filenames located on the system, which cou

Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, so

Dorsett Controls Central Server update server has potential information leaks with an unprotected file that contains pa

An issue discovered in import host feature in Ab Initio Metadata Hub and Authorization Gateway before 4.3.1.1 allows att

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a us

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02 fails

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR16, 4.0.0 SR06, 4.1.0 SR04, 4.2.0 SR03, and 4.3.0 SR01 fails

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR15, 4.0.0 SR05, 4.1.0 SR03, and 4.2.0 SR02 fails to validate

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR4 fails to validate /etc/initab during the Pre-Boot Authoriz

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR10 fails to validate /etc/mtab during the Pre-Boot Authoriza

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR12, 4.0.0 SR04, 4.1.0 SR02, and 4.2.0 SR01 fails to validate

Concrete CMS versions 9 through 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in getAttributeSetName(). A rogue a

VRCX is an assistant/companion application for VRChat. In versions prior to 2024.03.23, a CefSharp browser with over-per

Asterisk is an open source private branch exchange (PBX) and telephony toolkit. Prior to asterisk versions 18.24.2, 20.9

NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean u

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular use

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm, where an attacker can cause an out-of-bounds

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter

An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interfa

A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privil

A SQL injection vulnerability in /smsa/student_login.php in Kashipara Responsive School Management System v1.0 allows an

Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause

Shopware is an open commerce platform. Prior to versions 6.6.5.1 and 6.5.8.13, the Shopware application API contains a s