2024

Information disclosure while handling beacon or probe response frame in STA.

A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchro

Improper filering of special characters result in a command ('command injection') vulnerability in Korenix JetPort 5601v

Missing encryption of sensitive data in Korenix JetPort 5601v3 allows Eavesdropping.This issue affects JetPort 5601v3: t

An authentication bypass vulnerability in Korenix JetPort 5601v3 allows an attacker to access functionality on the devic

A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to co

Certificate Validation user interface in LibreOffice allows potential vulnerability. Signed macros are scripts that

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Ge

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Ge

The com.cascadialabs.who (aka Who - Caller ID, Spam Block) application 15.0 for Android places sensitive information in

** UNSUPPORTED WHEN ASSIGNED ** Server-Side Request Forgery (SSRF) vulnerability in Apache IoTDB Workbench. This issue

Incorrect Authorization vulnerability in Apache OFBiz. This issue affects Apache OFBiz: through 18.12.14. Users are re

Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB. This issue affects Apache Airflow Provid

The Ditty WordPress plugin before 3.1.45 does not sanitise and escape some parameters, which could allow users with a r

The Chatbot for WordPress by Collect.chat ⚡️ WordPress plugin before 2.4.4 does not sanitise and escape some of its sett

The Community Events WordPress plugin before 1.5.1 does not sanitise and escape some of its settings, which could allow

The wp-eMember WordPress plugin before v10.7.0 does not have CSRF check in some places, and is missing sanitisation as w

The Pinpoint Booking System WordPress plugin before 2.9.9.4.8 does not sanitise and escape some of its settings, which

The lacks CSRF checks allowing a user to invite any user to any group (including private groups)

A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 all

A Unrestricted upload of file with dangerous type vulnerability in meeting management function in Hamastar MeetingHub Pa

Multiple Pimax products accept WebSocket connections from unintended endpoints. If this vulnerability is exploited, arbi

Incorrect permission assignment for critical resource issue exists in ZWX-2000CSW2-HN firmware versions prior to Ver.0.3

ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 uses hard-coded credentials, which may allow a network-adjacent at

A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been rated as critical. This i

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been declared as critical. Thi

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been classified as critical. T

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90 and classified as critical. Affected b

A vulnerability has been found in PMWeb 7.2.00 and classified as problematic. Affected by this vulnerability is an unkno

A vulnerability, which was classified as critical, was found in TOTOLINK CP450 4.1.0cu.747_B20191224. Affected is the fu

A vulnerability, which was classified as critical, has been found in TOTOLINK CP900 6.3c.566. This issue affects the fun

A vulnerability classified as critical was found in TOTOLINK CP900 6.3c.566. This vulnerability affects the function Upl

A vulnerability classified as critical has been found in TOTOLINK N350RT 9.3.5u.6139_B20201216. This affects the functio

A vulnerability was found in ForIP Tecnologia Administração PABX 1.x. It has been rated as critical. Affected by this is

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been declared as problematic. Affected by

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been classified as problematic. Affected

A vulnerability was found in elunez eladmin up to 2.7 and classified as critical. This issue affects some unknown proces

IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is

A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affec

A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.

A vulnerability was found in FastAdmin 1.5.0.20240328. It has been declared as problematic. This vulnerability affects u

A vulnerability was found in itsourcecode Placement Management System 1.0. It has been classified as critical. This affe

A vulnerability was found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by this i

A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by t

A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. Affected i

stitionai/devika main branch as of commit cdfb782b0e634b773b10963c8034dc9207ba1f9f is vulnerable to Local File Read (LFI

A vulnerability, which was classified as critical, was found in itsourcecode Ticket Reservation System 1.0. This affects

A vulnerability, which was classified as critical, has been found in itsourcecode Ticket Reservation System 1.0. Affecte

A vulnerability classified as critical was found in itsourcecode Ticket Reservation System 1.0. Affected by this vulnera