2024

adolph_dudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerabili

jrburke requirejs v2.3.6 was discovered to contain a prototype pollution via the function s.contexts._.configure. This v

adolph_dudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vu

ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.merg

amoyjs amoy common v1.0.10 was discovered to contain a prototype pollution via the function extend. This vulnerability a

rjrodger jsonic-next v2.12.1 was discovered to contain a prototype pollution via the function empty. This vulnerability

airvertco frappejs v0.0.11 was discovered to contain a prototype pollution via the function registerView. This vulnerabi

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability al

Tada5hi sp-common v0.5.4 was discovered to contain a prototype pollution via the function mergeDeep. This vulnerability

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability

In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia

In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia

In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia

In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Valhall GPU Firmware, A

The Form Maker by 10Web WordPress plugin before 1.15.26 does not sanitise and escape some of its settings, which could

The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 does not validate and escape some of its Quiz fields bef

CHANGING Mobile One Time Password's uploading function in a hidden page does not filter file type properly. Remote attac

CHANGING Mobile One Time Password does not properly filter parameters for the file download functionality, allowing remo

"Piccoma" App for Android and iOS versions prior to 6.20.0 uses a hard-coded API key for an external service, which may

In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

In gnss service, there is a possible escalation of privilege due to improper certificate validation. This could lead to

In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service

A vulnerability classified as critical was found in SourceCodester Medicine Tracker System 1.0. This vulnerability affec

A vulnerability classified as critical has been found in SourceCodester Medicine Tracker System 1.0. This affects an unk

A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been rated as critical. Affected by

A vulnerability was found in SeaCMS 12.9. It has been declared as critical. Affected by this vulnerability is an unknown

Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier o

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a

IBM InfoSphere Information Server 11.7 could allow an authenticated user to read or modify sensitive information by bypa

IBM InfoSphere Information Server 11.7 is vulnerable stored to cross-site scripting. This vulnerability allows users to

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed tec

IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery (SSRF). This may allow an authentica

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed tec

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to exec

IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to

IBM InfoSphere Information Server 11.7 returns sensitive information in URL information that could be used in further at

A reflected Cross-Site Scripting (XSS) vulnerability was identified in zenml-io/zenml version 0.57.1. The vulnerability

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a

IBM InfoSphere Information Server 11.7 could allow a local user to update projects that they do not have the authorizati

A vulnerability classified as problematic was found in Ingenico Estate Manager 2023. Affected by this vulnerability is a

A vulnerability classified as problematic has been found in Parsec Automation TrakSYS 11.x.x. Affected is an unknown fun

A path traversal vulnerability in the get-project-files functionality of stitionai/devika allows attackers to read arbit

Internet2 Grouper before 5.6 allows authentication bypass when LDAP authentication is used in certain ways. This is rela

NewPass before 1.2.0 stores passwords (rather than password hashes) directly, which makes it easier to obtain unauthoriz

Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the