2024

ThinkSAAS v3.7.0 was discovered to contain a SQL injection vulnerability via the name parameter at \system\action\update

An arbitrary file deletion vulnerability in ThinkSAAS v3.7 allows attackers to delete arbitrary files via a crafted requ

This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data Center and Server. This

Exposure of Sensitive Information in edge browser session proxy feature in Devolutions Remote Desktop Manager 2024.2.14.

An issue in H3C Technologies Co., Limited H3C Magic RC3000 RC3000V100R009 allows a remote attacker to execute arbitrary

An issue in Tenda AX12 v.16.03.49.18_cn+ allows a remote attacker to cause a denial of service via the Routing functiona

Simple Library Management System Project Using PHP/MySQL v1.0 was discovered to contain an arbitrary file upload vulnera

Online Clinic Management System In PHP With Free Source code v1.0 was discovered to contain a SQL injection vulnerabilit

SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code 1.0

open5gs v2.6.4 is vulnerable to Buffer Overflow. via /lib/core/abts.c.

Open5GS v2.6.4 is vulnerable to Buffer Overflow. via /lib/pfcp/context.c.

SeaCMS v12.9 is vulnerable to Arbitrary File Read via admin_safe.php.

File Upload vulnerability in Nanjin Xingyuantu Technology Co Sparkshop (Spark Mall B2C Mall v.1.1.6 and before allows a

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.1 has some DoS vulnerabilities when it parses an XML that ha

JupyterLab extension template is a `copier` template for JupyterLab extensions. Repositories created using this templat

Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parame

There is an SSRF vulnerability in the Fluid Topics platform that affects versions prior to 4.3, where the server can be

An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A mali

The v6.40 release of Rockwell Automation FactoryTalk® Policy Manager CVE-2021-22681 https://www.rockwellautomation.com/e

An input validation vulnerability exists in the Rockwell Automation 5015 - AENFTXT when a manipulated PTP packet is sent

Outline is an open source, collaborative document editor. A type confusion issue was found in ProseMirror’s rendering pr

A formula injection vulnerability exists in Tenable Identity Exposure where an authenticated remote attacker with admini

An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attac

An issue was found in upload.php on the Ruijie EG-2000 series gateway. A parameter passed to the class UploadFile is mis

An issue was found on the Ruijie EG-2000 series gateway. There is a newcli.php API interface without access control, whi

An issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext stored passwords in /data

An issue was discovered in JFinalCMS v.5.0.0. There is a SQL injection vulnerablity via /admin/div_data/data

Tenda i29V1.0 V1.0.0.5 was discovered to contain a hardcoded password for root.

Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId paramet

Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId paramet

The vulnerability could be remotely exploited to bypass authentication.

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK ap

Under certain circumstances the impacted Software House C•CURE 9000 installer will utilize unnecessarily wide permission

Sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affec

A privilege escalation vulnerability exists in the affected products which could allow a malicious user with basic privi

In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix OOB read in thrustmaster

In the Linux kernel, the following vulnerability has been resolved: tipc: fix kernel panic when enabling bearer When e

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ

In the Linux kernel, the following vulnerability has been resolved: mISDN: Fix memory leak in dsp_pipeline_build() dsp

In the Linux kernel, the following vulnerability has been resolved: vhost: fix hung thread due to erroneous iotlb entri

In the Linux kernel, the following vulnerability has been resolved: vdpa: fix use-after-free on vp_vdpa_remove When vp

In the Linux kernel, the following vulnerability has been resolved: ethernet: Fix error handling in xemaclite_of_probe

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: Add missing of_node_put() i

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix a race on command flush flow Fix a r

In the Linux kernel, the following vulnerability has been resolved: NFC: port100: fix use-after-free in port100_send_co

In the Linux kernel, the following vulnerability has been resolved: gianfar: ethtool: Fix refcount leak in gfar_get_ts_

In the Linux kernel, the following vulnerability has been resolved: sctp: fix kernel-infoleak for SCTP sockets syzbot

In the Linux kernel, the following vulnerability has been resolved: net: arc_emac: Fix use after free in arc_mdio_probe

In the Linux kernel, the following vulnerability has been resolved: swiotlb: fix info leak with DMA_FROM_DEVICE The pr

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Unregister codec device on unbind O