2024

Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5

Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5

Next.js is a React framework. A Denial of Service (DoS) condition was identified in Next.js. Exploitation of the bug can

CodiMD allows realtime collaborative markdown notes on all platforms. The notebook feature of Hackmd.io permits the rend

CodiMD allows realtime collaborative markdown notes on all platforms. CodiMD before 2.5.4 is missing authentication and

EVerest is an EV charging software stack. An integer overflow in the "v2g_incoming_v2gtp" function in the v2g_server.cpp

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices. The Nonce used for on-the-f

An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices. The bootrom function respon

A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as pro

Sensitive information disclosure in NetScaler Console

An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to

An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to bypass the Cortex XDR a

An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write admin

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account

Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScale

Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

Decidim is a participatory democracy framework. The pagination feature used in searches and filters is subject to potent

Decidim is a participatory democracy framework. The admin panel is subject to potential XSS attach in case the attacker

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City go

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Croogo up to 4.0.7. This affect

A vulnerability was found in Netgear WN604 up to 20240710. It has been rated as problematic. Affected by this issue is s

14Finger v1.1 was discovered to contain a remote command execution (RCE) vulnerability in the fingerprint function. This

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team FileBird Document Library.This is

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pauple Table & Contact Form 7 Database – Tab

Insertion of Sensitive Information into Log File vulnerability in TrustedLogin TrustedLogin Vendor.This issue affects Tr

Insertion of Sensitive Information into Log File vulnerability in SERVIT Software Solutions.This issue affects affiliate

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Automattic Newspack Blocks.This issue affect

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This i

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This i

Under certain circumstances the Software House C●CURE 9000 installer will utilize weak credentials.

A vulnerability was found in WuKongOpenSource Wukong_nocode up to 20230807. It has been declared as critical. Affected b

A vulnerability was found in zmops ArgusDBM up to 0.1.0. It has been classified as critical. Affected is the function ge

ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earl

ServiceNow has addressed a sensitive file read vulnerability that was identified in the Washington DC, Vancouver, and Ut

ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platfo

Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0.

A vulnerability was found in Tenda AX1806 1.0.0.1. Affected by this issue is the function formSetRebootTimer of the file

Tenda AX12 v1.0 v22.03.01.46 contains a stack overflow in the deviceList parameter of the sub_42E410 function.

A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high priv

IBM Security QRadar EDR 3.12 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which

IBM Security QRadar EDR 3.12 does not set the secure attribute on authorization tokens or session cookies. Attackers may

IBM Security QRadar EDR 3.12 could disclose sensitive information due to an observable login response discrepancy. IBM

idccms v1.35 is vulnerable to Cross Site Scripting (XSS) within the 'Image Advertising Management.'

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL_deal.php?

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile_deal.php?

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mud