2024

Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote atta

Substance3D - Stager versions 3.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to d

An issue in Owncloud android apk v.4.3.1 allows a physically proximate attacker to escalate privileges via the PassCodeV

A reflected cross-site scripting (XSS) vulnerability in Gladinet CentreStack v13.12.9934.54690 allows attackers to injec

Incorrect access control in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to ar

An issue in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to control or disrupt

An issue in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to cause a Denial of

Cross Site Scripting vulnerability in Public Knowledge Project PKP Platform OJS/OMP/OPS- before v.3.3.0.16 allows an att

An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If e

A server-side request forgery (SSRF) vulnerability has been reported to affect Notes Station 3. If exploited, the vulner

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploite

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploite

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploite

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability co

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability co

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability co

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability co

Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.5.0000.

Possible Reflected Cross-Site Scripting (XSS) Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4

Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

Microsoft Edge (Chromium-based) Spoofing Vulnerability

A potential security vulnerability has been identified in the HPE NonStop DISK UTIL (T9208) product. This vulnerability

IBM PowerVM Platform KeyStore (IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1030.00 through FW1030.60, FW1050.00

Possible out of bound access in audio module due to lack of validation of user provided input.

Certain unprivileged processes are able to perform IOCTL calls.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Special Minds Desi

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the clie

The GEO my WP WordPress plugin before 4.5, gmw-premium-settings WordPress plugin before 3.1 does not sufficiently valida

The MailMunch – Grow your Email List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use

The Control horas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ch_registro' short

The Ultimate YouTube Video & Shorts Player With Vimeo plugin for WordPress is vulnerable to unauthorized access of data

The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Reflected Cross-Site Scripti

The Easy Twitter Feed – Twitter feeds plugin for WP plugin for WordPress is vulnerable to Information Exposure in all ve

The Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native ga

Dell Edge Gateway 3200, versions prior to 15.40.30.2879, and Edge Gateway 5200, versions prior to 12.0.94.2380, contain

AIPHONE IXG SYSTEM IXG-2C7 firmware Ver.2.03 and earlier and IXG-2C7-L firmware Ver.2.03 and earlier contain an issue wi

Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A networ

Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticate

Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to delete any

Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to read any f

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementi

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies at

Multiple endpoints in `oracle-sidecar` in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections.

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Mark hrtimer to expire in hard inte

TOTOLINK EX200 v4.0.3c.7646_B20201211 was found to contain a command insertion vulnerability in the setUssd function. Th