2024

Deserialization of untrusted data in Microsoft Update Catalog allows an unauthorized attacker to elevate privileges on t

XWiki Platform is a generic wiki platform. Starting in version 3.3-milestone-1 and prior to versions 15.10.9 and 16.3.0,

A SQL Injection vulnerability was found in /preschool/admin/password-recovery.php in PHPGurukul Pre-School Enrollment Sy

A SQL Injection vulnerability was found in /admin/index.php in phpgurukul Online Nurse Hiring System v1.0, which allows

A SQL injection vulnerability was found in phpgurukul Online Nurse Hiring System v1.0 in /admin/password-recovery.php vi

The issue stems from a missing validation of the pip field in a POST request sent to the /customnode/install endpoint us

The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized arbitr

The Sign In With Google plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including

SiYuan is a personal knowledge management system. Prior to version 3.1.16, SiYuan's `/api/template/renderSprig` endpoint

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPa

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. An

A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2. An app may be abl

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1

In the Mullvad VPN client 2024.6 (Desktop), 2024.8 (iOS), and 2024.8-beta1 (Android), the exception-handling alternate s

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has be

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identifi

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gst_wavp

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been found in

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identifi

GStreamer is a library for constructing graphs of media-handling components. An OOB-Write has been detected in the funct

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability ha

GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in t

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discover

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the functi

GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerabili

GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was id

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected i

GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memo

Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback

From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is pos

GFI Archiver Telerik Web UI Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute a

File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params to enable paths traversal an

CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of confidential

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that c

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that c

Phpgurukul's Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in `login.php` via the `emailcont` par

TL-WR845N(UN)_V4_201214, TP-Link TL-WR845N(UN)_V4_200909, and TL-WR845N(UN)_V4_190219 was discovered to transmit user cr

An issue in the BYD Dilink Headunit System v3.0 to v4.0 allows attackers to bypass authentication via a bruteforce attac

SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with ad

Command injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker wit

An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to

Command injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allo

Argument injection in Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker with admin pr

The package manager pnpm prior to version 9.15.0 seems to mishandle overrides and global cache: Overrides from one works