2024

In WhatsUp Gold versions released before 2023.1.3, a Server Side Request Forgery vulnerability exists in the GetASPRepor

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service vulnerability was identified. 

In WhatsUp Gold versions released before 2023.1.3, there is a missing authentication vulnerability in WUGDataAccess.Cred

ai-client-html is an Aimeos e-commerce HTML client component. Debug information revealed sensitive information from envi

An issue in Nepstech Wifi Router xpon (terminal) NTPL-Xpon1GFEVN, hardware verstion 1.0 firmware 2.0.1 allows a remote a

Craft CMS up to v3.7.31 was discovered to contain a SQL injection vulnerability via the GraphQL API endpoint.

An issue in Daemon PTY Limited FarCry Core framework before 7.2.14 allows attackers to access sensitive information in t

An issue was discovered in VirtoSoftware Virto Kanban Board Web Part before 5.3.5.1 for SharePoint 2019. There is /_layo

GigaDevice GD32E103C8T6 devices have Incorrect Access Control.

Artery AT32F415CBT7 and AT32F421C8T7 devices have Incorrect Access Control.

Geehy APM32F103CCT6, APM32F103RCT6, APM32F103RCT7, and APM32F103VCT6 devices have Incorrect Access Control.

A security vulnerability has been identified in HPE Athonet Mobile Core software. The core application contains a code i

A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data.  Likely imp

In WhatsUp Gold versions released before 2023.1.3, an uncontrolled resource consumption vulnerability exists. A speciall

In WhatsUp Gold versions released before 2023.1.3, a vulnerability exists in the TestController functionality.  A specia

In WhatsUp Gold versions released before 2023.1.3, an Improper Access Control vulnerability in Wug.UI.Controllers.Instal

In WhatsUp Gold versions released before 2023.1.3, an authenticated user with certain permissions can upload an arbitr

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress Wh

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress Wh

In WhatsUp Gold versions released before 2023.1.3, a Remote Code Execution issue exists in Progress WhatsUp Gold. This v

A Path Traversal and Remote File Inclusion (RFI) vulnerability exists in the parisneo/lollms-webui application, affectin

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when ass

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users are able to see b

A nil pointer dereference in PingCAP TiDB v8.2.0-alpha-216-gfe5858b allows attackers to crash the application via expres

MAP-OS 4.45.0 and earlier is vulnerable to Cross-Site Scripting (XSS). This vulnerability allows malicious users to inse

A vulnerability was found in itsourcecode Simple Online Hotel Reservation System 1.0. It has been declared as critical.

HashiCorp’s go-getter library can be coerced into executing Git update on an existing maliciously modified Git Configura

pgAdmin <= 8.8 has an installation Directory permission issue. Because of this issue, attackers can gain unauthorised ac

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread wi

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injectio

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or r

Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low privileged attacker could potent

Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This i

Improper Authentication vulnerability in Progress MOVEit Gateway (SFTP modules) allows Authentication Bypass.This issue

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add error handle to avoid out-of-bounds

In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix a possible null pointer dereference in

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix nilfs_empty_dir() misjudgment and long

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix deadlock in smb2_find_smb_tcon()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on i_xattr_nid in sani

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/qcom/lmh: Check for SCM availabilit

In the Linux kernel, the following vulnerability has been resolved: media: mgb4: Fix double debugfs remove Fixes an er

In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Fix notifier list entry init st

In the Linux kernel, the following vulnerability has been resolved: 9p: add missing locking around taking dentry fid li

In the Linux kernel, the following vulnerability has been resolved: clk: bcm: dvp: Assign ->num before accessing ->hws

In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Assign ->num before accessing ->hws

In the Linux kernel, the following vulnerability has been resolved: io_uring: check for non-NULL file pointer in io_fil

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix uninit-value in p9_client_rpc() Syzbot

In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix handling of dissolved but no

In the Linux kernel, the following vulnerability has been resolved: bonding: fix oops during rmmod "rmmod bonding" cau

In the Linux kernel, the following vulnerability has been resolved: Revert "xsk: Support redirect to any socket bound t