2024

SAP S/4HANA Finance (Advanced Payment Management) does not perform necessary authorization check for an authenticated us

SAP Transportation Management (Collaboration Portal) allows an attacker with non-administrative privileges to send a cra

Due to missing verification of file type or content, SAP Enable Now allows an authenticated attacker to upload arbitrary

WebFlow Services of SAP Business Workflow allows an authenticated attacker to enumerate accessible HTTP endpoints in the

The Product Table by WBW plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and includin

SAP CRM (WebClient UI Framework) allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal

In SAP Commerce, a user can misuse the forgotten password functionality to gain access to a Composable Storefront B2B si

SAP Landscape Management allows an authenticated user to read confidential data disclosed by the REST Provider Definitio

Elements of PDCE does not perform necessary authorization checks for an authenticated user, resulting in escalation of p

Custom CSS support option in SAP CRM WebClient UI does not sufficiently encode user-controlled inputs resulting in Cross

Due to insufficient input validation, SAP CRM WebClient UI allows an unauthenticated attacker to craft a URL link whic

Due to weak encoding of user-controlled input in SAP NetWeaver Knowledge Management XMLEditor which allows malicious scr

A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management

A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user t

The Media Hygiene: Remove or Delete Unused Images and More! plugin for WordPress is vulnerable to unauthorized loss of d

The Houzez Theme - Functionality plugin for WordPress is vulnerable to SQL Injection via the ‘currency_code’ parameter i

UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URL

A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The v

A CORS misconfiguration in the stitionai/devika repository allows attackers to steal sensitive information such as logs,

A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, wh

OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which

A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers

Undici is an HTTP/1.1 client, written from scratch for Node.js. Depending on network and process conditions of a `fetch(

The /n software IPWorks SSH library SFTPServer component can be induced to make unintended filesystem or network path re

A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tr

A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd). If a remote attacke

The user may be redirected to an arbitrary site in Sitefinity 15.1.8321.0 and previous versions.

Directus is a real-time API and App dashboard for managing SQL database content. When relying on SSO providers in combin

tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which

Directus is a real-time API and App dashboard for managing SQL database content. A denial of service (DoS) attack by fie

Directus is a real-time API and App dashboard for managing SQL database content. Directus >=9.23.0, <=v10.5.3 improperly

Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier o

Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier o

Buffer overflow in "rcar_dev_init" due to using due to using untrusted data (rcar_image_number) as a loop counter befor

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Renesas arm-trusted-firmware all

Directus is a real-time API and App dashboard for managing SQL database content. There was already a reported SSRF vulne

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image file

A cross-site scripting (XSS) vulnerability in the Backend Theme Management module of Z-BlogPHP v1.7.3 allows attackers t

D-Link DIR-823X firmware - 240126 was discovered to contain a remote command execution (RCE) vulnerability via the dhcpd

Buffer Overflow vulnerability in SILA Embedded Solutions GmbH freemodbus v.2018-09-12 allows a remtoe attacker to cause

A security vulnerability in HCL Domino could allow disclosure of sensitive configuration information. A remote unauthen

A heap-based buffer overflow vulnerability exists in the configuration file mib_init_value_array functionality of Realte

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11.

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11.

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11.

A stack-based buffer overflow vulnerability exists in the boa getInfo functionality of Realtek rtl819x Jungle SDK v3.4.1

Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v

Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v

Two stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819