2024

An open redirect vulnerability, the exploitation of which could allow an attacker to create a custom URL and redirect a

A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged atta

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been declared as critical. Affected by

Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 al

A vulnerability has been identified in SENTRON 7KM PAC3120 AC/DC (7KM3120-0BA01-1DA0) (All versions >= V3.2.3 < V3.2.4 o

A vulnerability has been identified in Siveillance Control (All versions >= V2.8 < V3.1.1). The affected product does no

The LadiApp plugn for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the init_end

The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the publish

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on

The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the save_co

The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the ladiflo

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on

Information exposure vulnerability in Korenix JetI/O 6550 affecting firmware version F208 Build:0817. The SNMP protocol

Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.

An unauthenticated remote attacker can gain service level privileges through an incomplete cleanup during service restar

An unauthenticated remote attacker can read memory out of bounds due to improper input validation in the MQTT stack. The

An unauthenticated remote attacker can perform a log injection due to improper input validation. Only a certain log file

An unauthenticated remote attacker can perform a remote code execution due to an origin validation error. The access is

An unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload desti

The Newsletter2Go plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ parameter in all ver

The f(x) Private Site plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in

Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prio

Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability. If an attacker tricks the user to access

Reflected cross-site scripting (XSS) vulnerability in Racktables v0.22.0 and before, allows local attackers to execute a

HTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote attacker to execute arbitrary code, esca

Insertion of Sensitive Information into Log File vulnerability in Hitachi Cosminexus Component Container allows local us

Under certain conditions, Support Web Pages of SAP NetWeaver Process Integration (PI) - versions 7.50, allows an attacke

Applications based on SAP GUI for HTML in SAP NetWeaver AS ABAP - versions 7.89, 7.93, do not sufficiently encode user-c

Due to missing authorization check, attacker with business user account in SAP ABAP Platform - version 758, 795, can cha

Under certain condition SAP NetWeaver (Enterprise Portal) - version 7.50 allows an attacker to access information which

Under certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwi

SAP Fiori Front End Server - version 605, allows altering of approver details on the read-only field when sending leave

codeium-chrome is an open source code completion plugin for the chrome web browser. The service worker of the codeium-ch

Postal is an open source SMTP server. Postal versions less than 3.0.0 are vulnerable to SMTP Smuggling attacks which may

Nix is a package manager for Linux and other Unix systems. A fixed-output derivations on Linux can send file descriptors

Cross Site Scripting (XSS) vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbit

The Mollie Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on

The Mollie Forms plugin for WordPress is vulnerable to unauthorized post or page duplication due to a missing capability

The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a

OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication. By manual

In wipe_ns_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic error in the code. This

In plugin_extern_func of , there is a possible out of bounds read due to a missing bounds check. This could lead to loca

In fvp_set_target of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to loc

In ProtocolPsKeepAliveStatusAdapter::getCode() of protocolpsadapter.cpp, there is a possible out of bounds read due to a

In sendHciCommand of bluetooth_hci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could

In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a m

In update_freq_data of , there is a possible out of bounds read due to a missing bounds check. This could lead to local

In pktproc_perftest_gen_rx_packet_sktbuf_mode of link_rx_pktproc.c, there is a possible out of bounds write due to a rac

In gpu_slc_liveness_update of pixel_gpu_slc.c, there is a possible out of bounds read due to a missing bounds check. Thi