2024

A potential security vulnerability has been identified in certain HP PC products using AMI BIOS, which might allow arbit

Linkerd is an open source, ultralight, security-first service mesh for Kubernetes. In affected versions when the applica

An authenticated stored cross-site scripting (XSS) exists in the TP-Link TL-SG1016DE affecting version TL-SG1016DE(UN) V

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

Fastapi OPA is an opensource fastapi middleware which includes auth flow. HTTP `OPTIONS` requests are always allowed by

TorrentPier is an open source BitTorrent Public/Private tracker engine, written in php. In `torrentpier/library/includes

@jmondi/url-to-png is an open source URL to PNG utility featuring parallel rendering using Playwright for screenshots an

@jmondi/url-to-png is an open source URL to PNG utility featuring parallel rendering using Playwright for screenshots an

Thruk is a multibackend monitoring webinterface for Naemon, Nagios, Icinga and Shinken using the Livestatus API. This au

web-auth/webauthn-lib is an open source set of PHP libraries and a Symfony bundle to allow developers to integrate that

Discourse is an open source platform for community discussion. In affected versions by creating replacement words with a

Plate media is an open source, rich-text editor for React. Editors that use `MediaEmbedElement` and pass custom `urlPars

An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.25, 4.4.0 through 4.7.5, and 4.8.0. Cert

eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check

An SMM callout vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmw

An arbitrary memory write vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with

An arbitrary memory write vulnerability was discovered in Supermicro X11DPG-HGX2, X11PDG-QT, X11PDG-OT, and X11PDG-SN mo

An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.41, 3.10.0 through 3.11.29, 4.0 through

A vulnerability in /goform/SetVirtualServerCfg in the sub_6320C function in Tenda AX1806 1.0.0.1 firmware leads to stack

A vulnerability in /goform/SetStaticRouteCfg in the sub_519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-b

Improper input validation in the installer for Zoom Workplace Desktop App for Windows before version 6.0.10 may allow an

Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct

Race condition in the installer for Zoom Workplace App for Windows and Zoom Rooms App for Windows may allow an authentic

Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may all

Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to co

Mengshen Wireless Door Alarm M70 2024-05-24 allows Authentication Bypass via a Capture-Replay approach.

Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via

Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a p

Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated

A vulnerability in /goform/SetNetControlList in the sub_656BC function in Tenda AX1806 1.0.0.1 firmware leads to stack-b

Tmall_demo before v2024.07.03 was discovered to contain a SQL injection vulnerability.

Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability.

An access control issue in Tmall_demo v2024.07.03 allows attackers to obtain sensitive information.

Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage.

The vulnerability allows a malicious low-privileged PAM user to access information about other PAM users and their group

A specific authentication strategy allows a malicious attacker to learn ids of all PAM users defined in its database.

Local Privilege Escalation in MSI-Installer in baramundi Management Agent v23.1.172.0 on Windows allows a local unprivil

This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected P

A reflected cross-site scripting (XSS) vulnerability exists in the PAM UI web interface. A remote attacker able to convi

This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by

The vulnerability allows an unauthenticated attacker to read arbitrary information from the database.

The vulnerability allows a malicious low-privileged PAM user to perform server upgrade related actions.

The vulnerability allows an attacker to bypass the authentication requirements for a specific PAM endpoint.

This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by

An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected PAM

A vulnerability classified as problematic was found in NaiboWang EasySpider 0.6.2 on Windows. Affected by this vulnerabi

Unquoted Search Path or Element vulnerability in ABB Mint Workbench. A local attacker who successfully exploited this

A vulnerability classified as critical has been found in code-projects Simple Ticket Booking 1.0. Affected is an unknown

Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed. Unauthenticated remote attackers c

An information disclosure vulnerability in SWG in versions 12.x prior to 12.2.10 and 11.x prior to 11.2.24 allows inform