2024

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ven

Improper handling of requests in Routing Release > v0.273.0 and <= v0.297.0 allows an unauthenticated attacker to degrad

The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Ventura 13.6.5,

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13. An app may

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5. Processin

An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.5. Processing

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and

Emlog pro2.3 is vulnerable to Cross Site Request Forgery (CSRF) via twitter.php which can be used with a XSS vulnerabili

Fuji Electric Monitouch V-SFT is vulnerable to a type confusion, which could cause a crash or code execution.

A sym-linked file accessed via the repair function in Avast Antivirus <24.2 on Windows may allow user to elevate privile

Uniview NVR301-04S2-P4 is vulnerable to reflected cross-site scripting attack (XSS). An attacker could send a user a URL

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ovic Team Ovic Importer

Authentication Bypass by Spoofing vulnerability in Acurax Under Construction / Maintenance Mode from Acurax allows Authe

Improper Restriction of Excessive Authentication Attempts vulnerability in wpdevart Contact Form Builder, Contact Widget

Unrestricted Upload of File with Dangerous Type vulnerability in Asghar Hatampoor BuddyPress Cover allows Code Injection

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Gabriel Somoza / Joseph

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ravidhu Dissanayake Upun

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Siteclean SC filechecker

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Them

SeaCMS 12.9 has a file deletion vulnerability via admin_template.php.

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Jordy Meow Database Clea

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in YITHEMES YITH WooCommerce

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes MegaMenu

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeHigh Checkout Field

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

A Directory Traversal vulnerability in iceice666 ResourcePack Server before v1.0.8 allows a remote attacker to disclose

Missing Authorization vulnerability in Crafthemes Crafthemes Demo Import crafthemes-demo-import allows Exploiting Incorr

Vulnerability discovered by executing a planned security audit. Improper Limitation of a Pathname to a Restricted Direc

Vulnerability discovered by executing a planned security audit. Improper Control of Generation of Code ('Code Injection

An issue in SiSoftware SANDRA v31.66 (SANDRA.sys 15.18.1.1) and before allows an attacker to escalate privileges via a c

BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery (CSRF) in name="head_code" or name="foot_code."

An issue in FinalWire AIRDA Extreme, AIDA64 Engineer, AIDA64 Business, AIDA64 Network Audit v.7.00.6700 and before allow

A Cross-Site Request Forgery (CSRF) vulnerability exists in the restart_program function of the parisneo/lollms-webui v9

In the Linux kernel, the following vulnerability has been resolved: af_unix: Update unix_sk(sk)->oob_skb under sk_recei

nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code execution via the /admi

nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization vulnerability which results in co

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to e

OS Command injection in Ajax PHP files via HTTP Request, allows to execute system commands by exploiting variables. This

Unauth Time-Based SQL Injection in API allows to exploit HTTP request Authorization header. This issue affects Pandora F

System command injection through Netflow function due to improper input validation, allowing attackers to execute arbitr

An issue was discovered in LIVEBOX Collaboration vDesk through v018. Stored Cross-site Scripting (XSS) can occur under t

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur und

Cross-Site Request Forgery vulnerability in Comtrend router WLD71-T1_v2.0.201820, affecting the GRG-4280us version. This

Command injection vulnerability in Comtrend router WLD71-T1_v2.0.201820, affecting the GRG-4280us version. This vulnerab