2024

A stack-based buffer overflow vulnerability due to a missing bounds check in the NI I/O Trace Tool may result in arbitra

A memory corruption issue due to an improper length check in NI LabVIEW may disclose information or result in arbitrary

A memory corruption issue due to an improper length check in LabVIEW tdcore.dll may disclose information or result in ar

An out of bounds read due to a missing bounds check in LabVIEW may disclose information or result in arbitrary code exec

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that cou

InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a NULL Pointer Dereference vulnerability that cou

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

EvilVideo vulnerability allows sending malicious apps disguised as videos in Telegram for Android application affecting

On versions before 2.1.4, session is not invalidated after logout. When the user logged in successfully, the Backend ser

In the Linux kernel, the following vulnerability has been resolved: filelock: Remove locks reliably when fcntl/close ra

The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect W

The Request a Quote WordPress plugin before 2.4.1 does not sanitise and escape some of its settings, which could allow h

The Page Builder Gutenberg Blocks WordPress plugin before 3.1.12 does not prevent users from pinging arbitrary hosts vi

The MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles plugin for WordPress is vulnerable to arbitrary file

The Redux Framework plugin for WordPress is vulnerable to unauthenticated JSON file uploads due to missing authorization

The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions

HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to p

Cross Site Scripting vulnerability in Act-On 2023 allows a remote attacker to execute arbitrary code via the newUser par

Execution with unnecessary privileges in PerkinElmer ProcessPlus allows an attacker to spawn a remote shell on the windo

Use of hard-coded MSSQL credentials in PerkinElmer ProcessPlus on Windows allows an attacker to login remove on all pron

Files on the Windows system are accessible without authentication to external parties due to a local file inclusion in P

The NI VeriStand Gateway is missing authorization checks when an actor attempts to access Project resources. These miss

The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources. Thes

A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in r

A deserialization of untrusted data vulnerability exists in NI VeriStand DataLogging Server that may result in remote c

A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote co

SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute ar

A deserialization of untrusted data vulnerability exists in NI VeriStand that may result in remote code execution. Succ

An integer overflow vulnerability due to improper input validation when reading TDMS files in LabVIEW may result in an i

An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may r

An out-of-date version of Redis shipped with NI SystemLink Server is susceptible to multiple vulnerabilities, including

EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in t

Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch al

In veilid-core in Veilid before 0.3.4, the protocol's ping function can be misused in a way that decreases the effective

Laravel v11.x was discovered to contain an XML External Entity (XXE) vulnerability.

An issue in Intelight X-1L Traffic controller Maxtime v.1.9.6 allows a remote attacker to execute arbitrary code via the

A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to APs meshed to UniFi U6+

llama.cpp provides LLM inference in C/C++. Prior to b3427, llama.cpp contains a null pointer dereference in gguf_init_fr

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. This report details a security vulnerability i

IP Guard v4.81.0307.0 was discovered to contain an arbitrary file read vulnerability via the file name parameter.

Directory Traversal vulnerability in Marimer LLC CSLA .Net before 8.0 allows a remote attacker to execute arbitrary code

Directory Traversal vulnerability in Punkbuster pbsv.d64 2.351, allows remote attackers to execute arbitrary code.

Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the data_dir variable is concatenated wi

Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the data_dir variable is used directly i

Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the data_dir variable is used directly i

In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connection

In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time

In JetBrains TeamCity before 2024.07 access tokens could continue working after deletion or expiration

In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page

In JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tab