2024

Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via networ

TYPO3 is an open source PHP based web content management system released under the GNU GPL. The TYPO3-specific `t3://` U

TYPO3 is an open source PHP based web content management system released under the GNU GPL. The plaintext value of `$GLO

TYPO3 is an open source PHP based web content management system released under the GNU GPL. Password hashes were being r

A user changing their email after signing up and verifying it can change it without verification in profile settings. T

Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an

Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.

Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to

sf_event_mgt is an event management and registration extension for the TYPO3 CMS based on ExtBase and Fluid. In affected

Cross-site Scripting in the tag name pattern field in the tag protections UI in GitHub Enterprise Server allows a malici

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker to gain unauthorized

Microsoft Azure File Sync Elevation of Privilege Vulnerability

Microsoft Azure Active Directory B2C Spoofing Vulnerability

Windows DNS Information Disclosure Vulnerability

Microsoft Teams for Android Information Disclosure Vulnerability

Windows Kernel Security Feature Bypass Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Windows Network Address Translation (NAT) Denial of Service Vulnerability

Windows Network Address Translation (NAT) Denial of Service Vulnerability

Windows Kernel Remote Code Execution Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows USB Generic Parent Driver Remote Code Execution Vulnerability

Trusted Compute Base Elevation of Privilege Vulnerability

Skype for Business Information Disclosure Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Azure Stack Hub Spoofing Vulnerability

Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI.

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. XSS, with resultant session stealing, can o

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. An attacker can send a PDF document through

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. Through the help document endpoint in webma

In Zimbra Collaboration (ZCS) 8.8.15 and 9.0, a closed account (with 2FA and generated passwords) can send e-mail messag

Twister Antivirus v8.17 is vulnerable to an Out-of-bounds Read vulnerability by triggering the 0x801120B8 IOCTL code of

Twister Antivirus v8.17 is vulnerable to a Denial of Service vulnerability by triggering the 0x80112067, 0x801120CB 0x80

An unauthenticated attacker can send a ping request from one network to another through an error in the origin verificat

Uncontrolled Resource Consumption vulnerability in Honeywell Niagara Framework on Windows, Linux, QNX allows Content Spo

If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache d

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Icon Link in al

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button URL in a

A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote authentica

A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions <

A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions <

Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08/16/32/

Cross-Site Request Forgery (CSRF) vulnerability in Photoboxone SMTP Mail.This issue affects SMTP Mail: from n/a through

Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify functio

The SAP Fiori app (My Overtime Request) - version 605, does not perform the necessary authorization checks for an authen

SAP Master Data Governance for Material Data - versions 618, 619, 620, 621, 622, 800, 801, 802, 803, 804, does not perfo

SAP Companion - version <3.1.38, has a URL with parameter that could be vulnerable to XSS attack. The attacker could sen

SAP CRM WebClient UI - version S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, WEBCUIF 701, WEBCUIF 731, WEBCUIF

SAP NetWeaver Application Server (ABAP) - versions KERNEL 7.53, KERNEL 7.54, KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERN