2024

A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been declared as critical. This

A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been classified as critical. Thi

A vulnerability was found in code-projects Human Resource Integrated System 1.0 and classified as critical. Affected by

A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affecte

Lif Auth Server is a server for validating logins, managing information, and account recovery for Lif Accounts. The issu

A vulnerability, which was classified as problematic, was found in Acritum Femitter Server 1.04. Affected is an unknown

A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.

A vulnerability classified as critical has been found in code-projects Online Faculty Clearance 1.0. This affects an unk

A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The qemu_clipboard_request() f

NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed b

NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication issue for a critical functi

NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer o

NVIDIA DGX A100 BMC contains a vulnerability where an attacker may cause an LDAP user injection. A successful exploit of

A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been rated as critical. Affected by this

A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been declared as critical. Affected by t

A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been classified as critical. Affected is

By sending a specific reset UDS request via OBDII port of Skoda vehicles, it is possible to cause vehicle engine shutdow

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attac

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote atta

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote atta

A vulnerability was found in code-projects Faculty Management System 1.0 and classified as critical. This issue affects

A vulnerability has been found in Blood Bank & Donor Management 5.6 and classified as critical. This vulnerability affec

In PHPGurukul Art Gallery Management System v1.1, "Update Artist Image" functionality of "imageid" parameter is vulnerab

The Real-Time Streaming Protocol implementation in the MIB3 infotainment incorrectly handles requests to /logs URI, when

The secret value used for access to critical UDS services of the MIB3 infotainment is hardcoded in the firmware. Vulner

An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminal_tool.cgi" path. It c

User browser may be forced to execute JavaScript and pass the authentication cookie to the attacker leveraging the XSS v

A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6,

When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an i

File Upload vulnerability in Ujcms v.8.0.2 allows a local attacker to execute arbitrary code via a crafted file.

Cross Site Scripting vulnerability in piwigo v.14.0.0 allows a remote attacker to obtain sensitive information via the l

An issue was discovered on GL.iNet devices before version 4.5.0. They assign the same session ID after each user reboot,

An issue was discovered in CentralSquare Click2Gov Building Permit before October 2023. Lack of access control protectio

Improper input validation vulnerability in WordPress Quiz Maker Plugin prior to 6.5.0.6 allows a remote authenticated at

An issue was discovered in the GlobalBlocking extension in MediaWiki before 1.40.2. For a Special:GlobalBlock?uselang=x-

An issue was discovered in the Phonos extension in MediaWiki before 1.40.2. PhonosButton.js allows i18n-based XSS via th

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageSt

An issue was discovered in the PageTriage extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, an

An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.4

An issue was discovered in the CheckUser extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and

An issue was discovered in the CampaignEvents extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6

A vulnerability was found in Weitong Mall 1.0.0. It has been declared as critical. Affected by this vulnerability is an

An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause a denial of s

ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof se

In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in bu

An Incomplete Cleanup vulnerability in Nonstop active routing (NSR) component of Juniper Networks Junos OS allows an ad

A Missing Release of Memory after Effective Lifetime vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks

An Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on MX Series and EX9200 Series allows an un

An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Network Junos OS on MX S

A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the Flow