2024

`oak` is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers a

Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. Prior to 1.4.0, there is a

Nix is a package manager for Linux and other Unix systems. On macOS, built-in builders (such as `builtin:fetchurl`, expo

Validate.js provides a declarative way of validating javascript objects. All versions as of 30 November 2020 contain one

Validate.js provides a declarative way of validating javascript objects. Versions 0.11.3 and prior contain one or more r

HTML2Markdown is a Javascript implementation for converting HTML to Markdown text. All available versions contain one or

Knwl.js is a Javascript library that parses through text for dates, times, phone numbers, emails, places, and more. Vers

This vulnerability exists in Philips lighting devices due to storage of Wi-Fi credentials in plain text within the devic

VIMESA VHF/FM Transmitter Blue Plus is suffering from a Denial-of-Service (DoS) vulnerability. An unauthenticated attack

Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-

Cursor is a code editor built for programming with AI. Prior to Sep 27, 2024, if a user generated a terminal command via

A vulnerability in Jamf Pro's Jamf Remote Assist tool allows a local, non-privileged user to escalate their privileges t

In versions of Zend Server 8.5 and prior to version 9.2 a format string injection was discovered. Reported by Dylan Ma

secp256k1-node is a Node.js binding for an Optimized C library for EC operations on curve secp256k1. In `elliptic`-based

ACON is a widely-used library of tools for machine learning that focuses on adaptive correlation optimization. A potenti

### Impact When this library is used to deserialize messagepack data from an untrusted source, there is a risk of a den

The affected product is vulnerable to an attacker being able to use commands without providing a password which may allo

The affected product is vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute code.

The affected product is vulnerable to a cross-site scripting attack which may allow an attacker to bypass authentication

The affected product is vulnerable due to insufficiently protected credentials, which may allow an attacker to impersona

In LAquis SCADA version 4.7.1.511, a cross-site scripting vulnerability could allow an attacker to inject arbitrary code

RDS Light is a simplified version of the Reflective Dialogue System (RDS), a self-reflecting AI framework. Versions prio

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9

Action Text brings rich text content and editing to Rails. Starting in version 6.0.0 and prior to versions 6.1.7.9, 7.0.

Action Pack is a framework for handling and responding to web requests. Starting in version 4.0.0 and prior to versions

Action Pack is a framework for handling and responding to web requests. Starting in version 3.1.0 and prior to versions

Untrusted Search Path vulnerability in OpenText™ Application Lifecycle Management (ALM),Quality Center allows Code Inclu

Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view.

A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a

Agent Dart is an agent library built for Internet Computer for Dart and Flutter apps. Prior to version 1.0.0-dev.29, cer

Starlette is an Asynchronous Server Gateway Interface (ASGI) framework/toolkit. Prior to version 0.40.0, Starlette treat

matrix-react-sdk is react-based software development kit for inserting a Matrix chat/VOIP client into a web page. Starti

Element is a Matrix web client built using the Matrix React SDK. Element Web versions 1.11.70 through 1.11.80 contain a

Element Desktop is a Matrix client for desktop platforms. Element Desktop versions 1.11.70 through 1.11.80 contain a vul

matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. In matrix-js-sdk versions versions 9.11.0 t

When the XML is read from the codes in the PDF and parsed using a DocumentBuilder, the default settings of the DocumentB

foxmarks is a CLI read-only interface for Firefox's bookmarks and history. A temporary file was created under the /tmp d

pac4j is a security framework for Java. `pac4j-core` prior to version 4.0.0 is affected by a Java deserialization vulner

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TE Informatics Nov

A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view th

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TRtek Software Dis

Local File Inclusion vulnerability in pretix Widget WordPress plugin pretix-widget on Windows allows PHP Local File Incl

An improper authorization vulnerability exists in the Rockwell Automation affected products that could allow an unauthor

CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the ser

Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run

SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secr

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - PageTri

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields

** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in D3D Security IP Camera D8801 due to usage of insecure Real-

** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in D3D Security IP Camera D8801 due to usage of weak authentic