2024

Stored XSS in inventory tree rendering in Checkmk before 2.3.0p7, 2.2.0p28, 2.1.0p45 and 2.0.0 (EOL)

Openfind's MailGates and MailAudit fail to properly filter user input when analyzing email attachments. An unauthenticat

Reusing a nonce, key pair in encryption issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for An

Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in "FreeFrom -

Improper verification of cryptographic signature issue exists in "FreeFrom - the nostr client" App versions prior to 1.3

DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation. If an at

Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote

The Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin before 4.1.0 does not validate and escape som

The Popup Builder WordPress plugin before 1.1.33 does not sanitise and escape some of its Notification fields, which cou

Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on

Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same loc

Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account secu

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This af

A vulnerability was found in itsourcecode Real Estate Management System 1.0. It has been rated as critical. Affected by

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this

A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of

Ghost through 5.85.1 allows remote attackers to bypass an authentication rate-limit protection mechanism by using many X

An issue was discovered in iTerm2 3.5.x before 3.5.2. Unfiltered use of an escape sequence to report a window title, in

Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor.

Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API.

Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized user information retrieval via the queryUser API

Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password.

Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of i

iRODS before 4.3.2 provides an msiSendMail function with a problematic dependency on the mail binary, such as in the mai

irodsServerMonPerf in iRODS before 4.3.2 attempts to proceed with use of a path even if it is not a directory.

In SonarQube before 10.4 and 9.9.4 LTA, encrypted values generated using the Settings Encryption feature are potentially

langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an o

Xenforo before 2.2.16 allows code injection.

Xenforo before 2.2.16 allows CSRF.

ExpressionEngine before 7.4.11 allows XSS.

htags in GNU Global through 6.6.12 allows code execution in situations where dbpath (aka -d) is untrusted, because shell

C/sorting/binary_insertion_sort.c in The Algorithms - C through e5dad3f has a segmentation fault for deep recursion, whi

Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to '

Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, beca

Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN

Vantiva - MediaAccess DGA2232 v19.4 - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site S

url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be inse

In International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in CIccTagXmlProfileSequenceId::ParseXml in Ic

In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution mi

Mismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kerne

A vulnerability, which was classified as critical, has been found in itsourcecode Online Laundry Management System 1.0.

A vulnerability classified as critical was found in itsourcecode Online House Rental System 1.0. Affected by this vulner

A vulnerability classified as critical has been found in itsourcecode Document Management System 1.0. Affected is an unk

A vulnerability was found in itsourcecode Online Book Store 1.0. It has been rated as critical. This issue affects some

A vulnerability has been found in itsourcecode Event Calendar 1.0 and classified as critical. Affected by this vulnerabi

A vulnerability, which was classified as critical, was found in itsourcecode Online Book Store up to 1.0. Affected is an

IBM Db2 for i 7.2, 7.3, 7.4, and 7.5 supplies user defined table function is vulnerable to user enumeration by a local a

IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability caused by an insufficient authority req

A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects

A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been rated as problematic. Affected by this iss