2024

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parame

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at i

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword param

An authenticated command injection vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateways Command

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been declared as problematic. Affect

CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via Supply_Management_System/admin/view_order_i

CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via Supply_Management_System/admin/view_invoice

A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remot

A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remot

A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remot

Insecure permissions in meshery v0.7.51 allows attackers to access sensitive data and escalate privileges by obtaining t

Insecure permissions in hwameistor v0.14.3 allows attackers to access sensitive data and escalate privileges by obtainin

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining th

A vulnerability in the web-based management interface of HPE Aruba Networking EdgeConnect SD-WAN gateway could allow an

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute a

Dolibarr ERP CRM before 19.0.2-php8.2 was discovered to contain a remote code execution (RCE) vulnerability via the Comp

Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtain

Insecure permissions in fabedge v0.8.1 allows attackers to access sensitive data and escalate privileges by obtaining th

DuckDB is a SQL database management system. In versions 1.0.0 and prior, content in filesystem is accessible for reading

OpenAM is an open access management solution. In versions 15.0.3 and prior, the `getCustomLoginUrlTemplate` method in Re

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD has a Web-based terminal that allows u

IBM InfoSphere Information Server 11.7 could disclose sensitive user information to another user with physical access to

There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center. Versions of Bitbu

VNote is a note-taking platform. A Cross-Site Scripting (XSS) vulnerability has been identified in the Markdown renderin

Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detect

Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and escalate privileges by ob

Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining t

A flaw was found in the Openshift console. The /API/helm/verify endpoint is tasked to fetch and verify the installation

A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Loggi

An issue in Huawei Technologies opengauss (openGauss 5.0.0 build) v.7.3.0 allows a local attacker to cause a denial of s

The snapshot_path parameter in the /api/get-browser-snapshot endpoint in stitionai devika v1 is susceptible to a path tr

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obt

AdTran SRG 834-5 HDC17600021F1 devices (with SmartOS 11.1.1.1 and fixed in Version 12.1.3.1) have SSH enabled by default

A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attack

A vulnerability classified as problematic has been found in SourceCodester Insurance Management System 1.0. This affects

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated re

AdTran 834-5 HDC17600021F1 (SmartOS 11.1.1.1) devices enable the SSH service by default and have a hidden, undocumented,

Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via s

Multiple stored cross-site scripting (XSS) vulnerabilities on AdTran NetVanta 3120 18.01.01.00.E devices allow remote at

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated re

A vulnerability was found in kirilkirkov Ecommerce-Laravel-Bootstrap up to 1f1097a3448ce8ec53e034ea0f70b8e2a0e64a87. It

In Progress® Telerik® Report Server versions prior to 2024 Q2 (10.1.24.709), a remote code execution attack is possible

In Progress® Telerik® Reporting versions prior to 18.1.24.709, a code execution attack is possible through object inject

Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastruct

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored DOM-based Cross-Site Scripting via