2024

A potential vulnerability has been identified in OpenText / Micro Focus ArcSight Enterprise Security Manager (ESM). The

Lack of proper input validation and constraint enforcement in Apache Ambari prior to 2.7.8    Impact : As it will be st

A vulnerability has been found in rahman SelectCours 1.0 and classified as problematic. Affected by this vulnerability i

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the init_nvram functio

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the apn_name_3g parameter in the setupEC20Apn fun

LBT T300- T390 v2.2.1.8 were discovered to contain a stack overflow via the vpn_client_ip parameter in the config_vpn_pp

Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive informatio

Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive informatio

A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0.

A vulnerability classified as critical was found in SourceCodester Petrol Pump Management Software 1.0. This vulnerabili

A vulnerability classified as critical has been found in SourceCodester Petrol Pump Management Software 1.0. This affect

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain an improper authorization vulnerability. An adja

Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the

Dell Update Package (DUP), Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user

A Cross-Site Scripting (XSS) vulnerability has been found in HelpDeskZ affecting version 2.0.2 and earlier. This vulnera

A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been rated as critical. Affected

A vulnerability was found in LangChain langchain_community 0.0.26. It has been classified as critical. Affected is the f

A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been declared as critical. Affec

Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all i

The NextMove Lite – Thank You Page for WooCommerce and Finale Lite – Sales Countdown Timer & Discount for WooCommerce pl

Missing Authorization vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <=

Server-Side Request Forgery (SSRF) vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n

In mongo-express 1.0.2, /admin allows CSRF, as demonstrated by deletion of a Collection.

IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.2 could provide weaker than expected security for outbo

IBM CP4BA - Filenet Content Manager Component 5.5.8.0, 5.5.10.0, and 5.5.11.0 could allow a user to gain the privileges

IBM Filenet Content Manager Component 5.5.8.0, 5.5.10.0, and 5.5.11.0 could allow a remote attacker to traverse director

IBM Cognos Command Center 10.2.4.1 and 10.2.5 exposes details the X-AspNet-Version Response Header that could allow an a

IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by defaul

IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an a

IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting. This vulnerability allows users t

Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affect

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. Affe

Recipes version 1.5.10 allows arbitrary HTTP requests to be made through the server. This is possible because the appli

In the Linux kernel, the following vulnerability has been resolved: soc/tegra: regulators: Fix locking up when voltage-

In the Linux kernel, the following vulnerability has been resolved: mt76: fix potential DMA mapping leak With buf unin

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Use online_vcpus, not created_vcpus, to i

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - fix result memory leak on error

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Fix memory leak of object d when

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - ADF_STATUS_PF_RUNNING should be set a

In the Linux kernel, the following vulnerability has been resolved: bus: qcom: Put child node before return Put child

In the Linux kernel, the following vulnerability has been resolved: soundwire: stream: fix memory leak in stream config

In the Linux kernel, the following vulnerability has been resolved: m68k: mvme147,mvme16x: Don't wipe PCC timer config

A vulnerability was found in Nway Pro 9. It has been rated as problematic. Affected by this issue is the function ajax_l

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_4110f4(). This vulnerability al

D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allo

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_41C488(). This vulnerability al

D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_42AF30(). This vulnerability allo

D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allo

Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count(