2024

An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.

libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in blockmason credit-protocol. It has been declared as problem

A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue ma

A vulnerability was found in mpedraza2020 Intranet del Monterroso up to 4.50.0. It has been classified as critical. This

IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability al

IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1020.00 through FW1020.40, and FW1030.00 through FW1030.30 could rev

curl inadvertently kept the SSL session ID for connections in its cache even when the verify status (*OCSP stapling*) te

The Jinja templating in Logpoint SIEM 6.10.0 through 7.x before 7.3.0 does not correctly sanitize log data being display

HCL DevOps Deploy / HCL Launch (UCD) could disclose sensitive user information when installing the Windows agent.

The Anonymous Restricted Content plugin for WordPress is vulnerable to information disclosure in all versions up to, and

The PDF Flipbook, 3D Flipbook – DearFlip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via outline s

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an att

A vulnerability was found in Jspxcms 10.2.0 and classified as problematic. Affected by this issue is some unknown functi

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V

A vulnerability has been found in CodeAstro Employee Task Management System 1.0 and classified as problematic. Affected

A vulnerability, which was classified as critical, was found in openBI up to 6.0.3. Affected is the function addxinzhi o

A vulnerability classified as problematic was found in SourceCodester Testimonial Page Manager 1.0. This vulnerability a

A vulnerability classified as critical was found in iTop VPN up to 4.0.0.1. Affected by this vulnerability is an unknown

A vulnerability has been found in AMPPS 2.7 and classified as problematic. Affected by this vulnerability is an unknown

A reflected cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly al

AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to 1.7.5,

MRCMS 3.0 contains a Cross-Site Scripting (XSS) vulnerability via /admin/system/saveinfo.do.

mailcow is a dockerized email package, with multiple containers linked in one bridged network. The application is vulner

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability co

An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. I

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploite

A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploi

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploite

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions. If exploite

Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable Timing Discrepancy Vulnerability.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in National Keep Cybe

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in National Keep Cybe

IBM Storage Protect Plus Server 10.1.0 through 10.1.15.2 Admin Console could allow a remote attacker to obtain sensitive