2024

The "reset password" login page accepted an HTML injection via URL parameters. This has already been rectified via patc

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Softaculous Webuzo contains a command injection vulnerability in the FTP management functionality. A remote, authenticat

Softaculous Webuzo contains a command injection in the password reset functionality. A remote, authenticated attacker ca

Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, ano

A vulnerability classified as problematic was found in Spina CMS 2.18.0. Affected by this vulnerability is an unknown fu

A vulnerability classified as critical has been found in ForIP Tecnologia Administração PABX 1.x. Affected is an unknown

OpenObserve is an open-source observability platform. Starting in version 0.4.4 and prior to version 0.10.0, OpenObserve

HMS Industrial Networks Anybus-CompactCom 30 products are vulnerable to a XSS attack caused by the lack of input sanita

The OpenObserve open-source observability platform provides the ability to filter logs in a dashboard by the values uplo

A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR) and Line Feed (LF) charac

A boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoint in R-HUB TurboMeeting through 8.x all

A command-injection issue in the Certificate Signing Request (CSR) functionality in R-HUB TurboMeeting through 8.x allow

The password-reset mechanism in the Forgot Password functionality in R-HUB TurboMeeting through 8.x allows unauthenticat

In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap

In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is

An arbitrary file upload vulnerability in Webkul Qloapps v1.6.0.0 allows attackers to execute arbitrary code via uploadi

In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict w

There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prio

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored cros

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session ex

Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass exploit that could allow an

OpenProject is open source project management software. Prior to version 14.3.0, using a forged HOST header in the defau

Craft is a content management system (CMS). Craft CMS 5 allows reuse of TOTP tokens multiple times within the validity p

There is an elevation of privilege vulnerability in server and client components of Absolute Secure Access prior to vers

Insecure permissions in kuma v2.7.0 allows attackers to access sensitive data and escalate privileges by obtaining the s

A vulnerability, which was classified as critical, has been found in ForIP Tecnologia Administração PABX 1.x. This issue

The Open edX Platform is a learning management platform. Instructors can upload csv files containing learner information

KubePi is a K8s panel. Starting in version 1.6.3 and prior to version 1.8.0, there is a defect in the KubePi JWT token v

Plaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this vulnerability will affect

Vulnerability of serialisation/deserialisation mismatch in the iAware module. Impact: Successful exploitation of this vu

Memory request logic vulnerability in the memory module. Impact: Successful exploitation of this vulnerability will affe

Access control vulnerability in the security verification module. Impact: Successful exploitation of this vulnerability

Privilege escalation vulnerability in the account synchronisation module. Impact: Successful exploitation of this vulner

Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnerability will affect a

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to,

In Spring Cloud Data Flow versions prior to 2.11.4,  a malicious user who has access to the Skipper server api can use a

An issue was discovered in Archer Platform 6 before 2024.06. Authenticated users can achieve HTML content injection. A r

A stored XSS issue was discovered in Archer Platform 6 before version 2024.06. A remote authenticated malicious Archer u

A stored XSS issue was discovered in Archer Platform 6.8 before 2024.06. A remote authenticated malicious Archer user co

In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed

In affected versions of Octopus Server under certain conditions, a user with specific role assignments can access restri

An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 16.7 prior to 17.0.5, start

A cross site scripting vulnerability exists in GitLab CE/EE affecting all versions from 16.6 prior to 17.0.5, 17.1 prior

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.6 prior to 17.0.5, starting from 17.1 pr

An information disclosure vulnerability in GitLab CE/EE in project/group exports affecting all versions from 15.4 prior

An issue was discovered in GitLab EE affecting all versions starting from 16.11 prior to 17.0.5, starting from 17.1 prio

A resource misdirection vulnerability in GitLab CE/EE versions 12.0 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prio

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been rated as critical. Affected by th

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at i