2024

There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System

An access control issue in Wvp GB28181 Pro 2.0 allows authenticated attackers to escalate privileges to Administrator vi

An access control issue in Wvp GB28181 Pro 2.0 allows users to continue to access information in the application after d

An issue in vektah gqlparser open-source-library v.2.5.10 allows a remote attacker to cause a denial of service via a cr

Vault and Vault Enterprise did not properly validate the JSON Web Token (JWT) role-bound audience claim when using the V

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of serv

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5is vulnerable to a denial of servi

CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could cause denial of service, devic

SummerNote v0.9.1 is vulnerable to Cross Site Scripting (XSS) via the Code View Function.

CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of servic

Improper input validation of printing files in Monoprice Select Mini V2 V37.115.32 allows attackers to instruct the devi

CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in a

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privile

A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for c

A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local

A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious admin

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local low p

A vulnerability was found in itsourcecode Payroll Management System 1.0 and classified as critical. Affected by this iss

CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the device’s web interface when a

CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists that could cause escalation of privilege

CWE-532: Insertion of Sensitive Information into Log File vulnerability exists that could cause exposure of SNMP credent

Cross Site Scripting vulnerability in TWCMS v.2.0.3 allows a remote attacker to execute arbitrary code via the /TWCMS-gh

CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists that could allow a

CWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the device when an attacker s

CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the de

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists that could a

CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed

A cross-site scripting (XSS) vulnerability in the User Maintenance section of ITSS iMLog v1.307 allows attackers to exec

A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as pro

A vulnerability, which was classified as critical, was found in SourceCodester Employee and Visitor Gate Pass Logging Sy

An improper privilege management vulnerability exists in Tenable Security Center where an authenticated, remote attacker

OAuthenticator is software that allows OAuth2 identity providers to be plugged in and used with JupyterHub. JupyterHub <

naga v0.14.0 was discovered to contain a stack overflow via the component /wgsl/parse/mod.rs.

A stored cross site scripting vulnerability exists in Tenable Security Center where an authenticated, remote attacker co

A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Loggi

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects u

A vulnerability classified as critical has been found in SourceCodester Cab Management System 1.0. This affects an unkno

NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to it

WooCommerce is an open-source e-commerce platform built on WordPress. A vulnerability introduced in WooCommerce 8.8 allo

SQL Injection vulnerability in Boelter Blue System Management v.1.3 allows a remote attacker to execute arbitrary code a

Insecure permissions in the AdminController.AjaxSave() method of PPGo_Jobs v2.8.0 allows authenticated attackers to arbi

** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core. This issue affec

Strapi is an open-source content management system. By combining two vulnerabilities (an `Open Redirect` and `session to

Strapi is an open-source content management system. Prior to version 4.22.0, a denial-of-service vulnerability is presen

HP Advance Mobile Applications for iOS and Android are potentially vulnerable to information disclosure when using an ou

Strapi is an open-source content management system. Prior to version 4.19.1, a super admin can create a collection where

Dell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization vulnerability in CAVATools. A

A vulnerability was found in Quay. If an attacker can obtain the client ID for an application, they can use an OAuth tok

** UNSUPPORTED WHEN ASSIGNED ** Improper Authentication vulnerability in Apache Submarine Commons Utils. If the user do