2024

The WANotifier WordPress plugin before 2.6.1 does not sanitise and escape some of its settings, which could allow high

os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows

A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been declared as critica

A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been classified as criti

A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. This

A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as problemat

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface wit

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface wit

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface wit

A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacker

A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker

A vulnerability has been found in Dahua products.  After obtaining the administrator's username and password, the attack

A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface with

A vulnerability, which was classified as problematic, was found in SourceCodester Lot Reservation Management System 1.0.

A vulnerability, which was classified as critical, has been found in SourceCodester Lot Reservation Management System 1.

A vulnerability classified as critical was found in SourceCodester Lot Reservation Management System 1.0. Affected by th

A vulnerability classified as critical has been found in SourceCodester Lot Reservation Management System 1.0. Affected

A vulnerability was found in SourceCodester Lot Reservation Management System 1.0. It has been rated as critical. This i

A vulnerability was found in SourceCodester Lot Reservation Management System 1.0. It has been declared as critical. Thi

A vulnerability was found in itsourcecode Alton Management System 1.0. It has been classified as critical. This affects

A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to delete any J

A vulnerability was found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this issue

A vulnerability has been found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this

A vulnerability, which was classified as critical, was found in itsourcecode Alton Management System 1.0. Affected is an

A vulnerability, which was classified as critical, has been found in itsourcecode Alton Management System 1.0. This issu

An issue was discovered in Kibana where a user with Viewer role could cause a Kibana instance to crash by sending a larg

A vulnerability classified as critical was found in itsourcecode Alton Management System 1.0. This vulnerability affects

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid widge

Prototype Pollution in alykoshin mini-deep-assign v0.0.8 allows an attacker to execute arbitrary code or cause a Denial

fuels-ts is a library for interacting with Fuel v2. The typescript SDK has no awareness of to-be-spent transactions cau

In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers

D-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01_TC contains hardcoded credentials in the Telnet service, enabling attacker

ais-ltd strategyen v0.4.0 was discovered to contain a prototype pollution via the function mergeObjects. This vulnerabil

Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Ser

chase-moskal snapstate v0.0.9 was discovered to contain a prototype pollution via the function attemptNestedProperty. Th

Prototype Pollution in 75lb deep-merge 1.1.1 allows attackers to execute arbitrary code or cause a Denial of Service (Do

Prototype Pollution in lukebond json-override 0.2.0 allows attackers to to execute arbitrary code or cause a Denial of S

Prototype pollution in allpro form-manager 0.7.4 allows attackers to run arbitrary code and cause other impacts via the

TensorFlow is an end-to-end open source platform for machine learning. `array_ops.upper_bound` causes a segfault when no

In versions of Akana API Platform prior to 2024.1.0 overly verbose errors can be found in SAML integrations

In versions of Akana API Platform prior to 2024.1.0, SAML tokens can be replayed.

A stack overflow in the function cp_dynamic() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a Denial

A heap buffer overflow in the function png_quantize() of hicolor v0.5.0 allows attackers to cause a Denial of Service (D

A heap buffer overflow in the function cp_block() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a Den

A heap buffer overflow in the function cp_stored() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a De

A heap buffer overflow in the function cp_unfilter() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a

In versions of Akana API Platform prior to 2024.1.0 a flaw resulting in XML External Entity (XXE) was discovered.

I, Librarian is an open-source version of a PDF managing SaaS. PDF notes are displayed on the Item Summary page without

A Server-Side Request Forgery (SSRF) in the Plugins Page of WonderCMS v3.4.3 allows attackers to force the application t

An arbitrary file upload vulnerability in the uploadFileAction() function of WonderCMS v3.4.3 allows attackers to execut