2024

Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacke

An issue the background management system of Shanxi Internet Chuangxiang Technology Co., Ltd v1.0.1 allows a remote atta

Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v.8.0 and before allows

An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a pu

Virtual Programming Lab for Moodle up to v4.2.3 was discovered to contain a cross-site scripting (XSS) vulnerability via

Cross Site Scripting vulnerability in Anchor CMS v.0.12.7 allows a remote attacker to execute arbitrary code via a craft

Hangzhou Meisoft Information Technology Co., Ltd. FineSoft <=8.0 is affected by Cross Site Scripting (XSS) which allows

Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v.8.0 and before allows

An issue in Shenzhen Weitillage Industrial Co., Ltd the access management specialist V6.62.51215 allows a remote attacke

TruDesk Help Desk/Ticketing Solution v1.1.11 is vulnerable to a Cross-Site Request Forgery (CSRF) attack which would all

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Z

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryable

FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a b

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The content of

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileD

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. It discloses full pathname

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileD

Incorrect Calculation vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code. When checking whet

Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware. An integer underflow in image rang

Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit al

The CRUDDIY project is vulnerable to shell command injection via sending a crafted POST request to the application serve

In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winch_handlers before registering

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_

In the Linux kernel, the following vulnerability has been resolved: riscv: prevent pt_regs corruption for secondary idl

In the Linux kernel, the following vulnerability has been resolved: drm: zynqmp_dpsub: Always register bridge We must

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix list corruption from resetting io s

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix list corruption from reorder of WRI

An issue in EnvisionWare Computer Access & Reservation Control SelfCheck v1.0 (fixed in OneStop 3.2.0.27184 Hotfix May 2

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Only use reserved BCS instances for usm mig

In the Linux kernel, the following vulnerability has been resolved: fpga: manager: add owner module and take its refcou

In the Linux kernel, the following vulnerability has been resolved: fpga: bridge: add owner module and take its refcoun

In the Linux kernel, the following vulnerability has been resolved: fpga: region: add owner module and take its refcoun

In the Linux kernel, the following vulnerability has been resolved: PCI: of_property: Return error for int_map allocati

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover {reserve,release}_comp

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: don't allow unaligned truncation on

Buffer Overflow vulnerability in ASUS router RT-AX88U with firmware versions v3.0.0.4.388_24198 allows a remote attacker

In the Linux kernel, the following vulnerability has been resolved: media: ti: j721e-csi2rx: Fix races while restarting

Improper Restriction of Excessive Authentication Attempts vulnerability in Mia Technology Inc. Mia-Med Health Aplication

A Cross-Site Request Forgery (CSRF) vulnerability exists in the 'Servers Configurations' function of the parisneo/lollms

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Mia Technology Inc. Mia-Med Health Aplication allows S

Improper Authentication vulnerability in Play.Ht allows Accessing Functionality Not Properly Constrained by ACLs.This is

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salon Booking System Sal

Unrestricted Upload of File with Dangerous Type vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affe

Missing Authorization vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from

Improper Control of Generation of Code ('Code Injection') vulnerability in Membership Software WishList Member X allows

Improper Privilege Management vulnerability in Membership Software WishList Member X allows Privilege Escalation.This is

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consultin

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in StylemixThemes Cons

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consultin

Zoho ManageEngine ITOM products versions from 128234 to 128248 are affected by the stored cross-site scripting vulnerabi