2024

The referrer URL used by MFA required additional sanitizing, rather than being used directly.

An issue in coap_msg.c in Keith Cullen's FreeCoAP v.0.7 allows remote attackers to cause a Denial of Service or potentia

casgate is an Open Source Identity and Access Management system. In affected versions `casgate` allows remote unauthenti

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vu

Type confusion in Snapchat LensCore could lead to denial of service or arbitrary code execution prior to version 12.88.

Missing authorization vulnerability exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary co

Improper neutralization of special elements used in a command ('Command Injection') exists in SkyBridge MB-A100/MB-A110

The OpenDaylight 0.15.3 controller allows topology poisoning via API requests because an application can manipulate the

A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to e

LenelS2 NetBox access control and event monitoring system was discovered to contain an unauthenticated RCE in versions p

LenelS2 NetBox access control and event monitoring system was discovered to contain Hardcoded Credentials in versions pr

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentif

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentif

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentif

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentif

An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to pre

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix nfsd4_encode_fattr4() crasher Ensure tha

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Leak pages if set_memory_encryp

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Track decrypted status in vmbus

In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Don't free decrypted memory In CoCo VMs

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Don't free ring buffers that co

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix access violation during port device

In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in error path Sam Page (sam4k) worki

In the Linux kernel, the following vulnerability has been resolved: keys: Fix overwrite of key expiration on instantiat

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentif

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentif

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Vadi Corporate Inf

MinMax CMS from MinMax Digital Technology contains a hidden administrator account with a fixed password that cannot be r

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gai

In the Linux kernel, the following vulnerability has been resolved: tcp: do not accept ACK of bytes we never sent This

The WP STAGING WordPress Backup Plugin – Migration Backup Restore plugin for WordPress is vulnerable to arbitrary file u

The Site Reviews WordPress plugin before 7.0.0 retrieves client IP addresses from potentially untrusted headers, allowin

The Login with phone number plugin for WordPress is vulnerable to authentication bypass in versions up to, and including

An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.114 allows attackers to execute

Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged telnet account. The user is not asked to cha

CDG-Server-V5.6.2.126.139 and earlier was discovered to contain a SQL injection vulnerability via the permissionId param

Certain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device. This affects IPC-D25

Certain Anpviz products allow unauthenticated users to download arbitrary files from the device's filesystem via a HTTP

F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`

Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php.

A SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based School Management System 1.0 a

A SQL injection vulnerability in /model/get_grade.php in campcodes Complete Web-Based School Management System 1.0 allow

A SQL injection vulnerability in /model/get_student.php in campcodes Complete Web-Based School Management System 1.0 all

A SQL injection vulnerability in /model/get_subject_routing.php in campcodes Complete Web-Based School Management System

A SQL injection vulnerability in /model/get_student1.php in campcodes Complete Web-Based School Management System 1.0 al

A SQL injection vulnerability in /model/get_teacher.php in campcodes Complete Web-Based School Management System 1.0 all

A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of Au

A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of Au

A code injection vulnerability exists in the scan_lib.bin functionality of AutomationDirect P3-550E 1.2.10.9. A speciall

The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow