2024

Langflow versions prior to 1.0.13 suffer from a Privilege Escalation vulnerability, allowing a remote and low privileged

A vulnerability exists in the use of shared SPF records in multi-tenant hosting providers, allowing attackers to use net

A vulnerability in multi-tenant hosting allows an authenticated sender to spoof the identity of a shared, hosted domain,

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access

Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the `report/data/proofofplay

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote at

IBM Aspera Orchestrator 4.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malic

IBM Aspera Orchestrator 4.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST

IBM Aspera Orchestrator 4.0.1 does not invalidate session after a password change which could allow an authenticated use

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could allow a remote attacke

Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API route inside the CMS

Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API routes inside the CM

Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API routes inside the CM

Unprotected Transport of Credentials vulnerability in OpenText™ Documentum™ Server could allow Credential Stuffing.This

Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Navigating to `/admin/index/statistics` wi

Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, the vulnerability allows an attacker to

Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, crafting requests to submit very long t

Discourse is an open source discussion platform. Prior to 3.2.3 and 3.3.0.beta3, improperly sanitized Onebox data could

Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension betwee

Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwor

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mikafon Electronic

Improper Neutralization of Input During Web Page Generation vulnerability in Stackposts Social Marketing Tool allows Cro

SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

AccuPOS - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in SourceCodester Medicine Tracker System 1.0. It has been declared as problematic. This vulne

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This

Acceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4 series. If this vulnerabilit

Priority PRI WEB Portal Add-On for Priority ERP on prem - CWE-200: Exposure of Sensitive Information to an Unauthoriz

Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory

Cybonet - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Mashov - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Stored cross-site scripting vulnerability exists in EC-CUBE Web API Plugin. When there are multiple users using OAuth Ma

FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 allow a re

Matrix Tafnit v8 - CWE-646: Reliance on File Name or Extension of Externally-Supplied File

Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy

Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Matrix Tafnit v8 -  CWE-552: Files or Directories Accessible to External Parties

Web Authentication vulnerability in Apache SeaTunnel. Since the jwt key is hardcoded in the application, an attacker can

A vulnerability was found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected b

A vulnerability has been found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affec

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix calc_available_free_space() for z

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix scv instruction crash with kex

In the Linux kernel, the following vulnerability has been resolved: crypto: aead,cipher - zeroize key buffer after use

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value *size when ca

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix overlapping copy within dml_co

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: replace skb_put with skb_put_zero Avoi

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Correct check for empty list

In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: tda10048: Fix integer overflo

In the Linux kernel, the following vulnerability has been resolved: gve: Account for stopped queues when reading NIC st