2024

A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.

Insecure Permissions vulnerability in VITEC AvediaServer (Model avsrv-m8105) 8.6.2-1 allows a remote attacker to escalat

A vulnerability classified as critical has been found in Kashipara College Management System 1.0. Affected is an unknown

Install-type password disclosure vulnerability in Universal Installer including the Silent Installer in TIBCO Hawk versi

In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and

A vulnerability in Cisco AppDynamics Network Visibility Agent could allow an unauthenticated, local attacker to cause a

A vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an

A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attacke

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager c

A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow

A vulnerability in the Tail-f High Availability Cluster Communications (HCC) function pack of Cisco Crosswork Network Se

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager a

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway could all

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager a

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gai

If misconfigured, alpitronic Hypercharger EV charging devices can expose a web interface protected by authentication. I

An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earli

In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.514), a code execution attack is possible through an

In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.2.514), a code execution attack is possible by a loca

Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senst

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code ex

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code ex

A local code execution vulnerability is possible in Telerik UI for WinForms beginning in v2021.1.122 but prior to v2024.

File Upload vulnerability in unauthenticated session found in OpenText™ iManager 3.2.6.0200. The vulnerability could all

Broken Authentication vulnerability discovered in OpenText™ iManager 3.2.6.0200. This vulnerability allows an attacker t

XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to information discl

Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senst

Path Traversal found in OpenText™ iManager 3.2.6.0200. This can lead to privilege escalation or file disclosure.

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger command inject

Grav is a file-based Web platform. Prior to version 1.7.46, a low privilege user account with page edit privilege can re

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions

SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in PowerSYSTEM Center.

A stored cross-site scripting (XSS) vulnerability in the Filter function of Eramba Version 3.22.3 Community Edition allo

A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead t

Multiple functions use archives without properly validating the filenames therein, rendering the application vulnerable

A vulnerability was found in Tongda OA 2017. It has been declared as critical. This vulnerability affects unknown code o

An issue was identified in the Identity Security Cloud (ISC) Transform preview and IdentityProfile preview API endpoints

A file path traversal vulnerability was identified in the DelimitedFileConnector Cloud Connector that allowed an authent

An improper access control was identified in the Identity Security Cloud (ISC) message server API that allowed an authen

Stalwart Mail Server is an open-source mail server. Prior to version 0.8.0, when using `RUN_AS_USER`, the specified user

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git,

On Windows systems, the Arc configuration files resulted to be world-readable. This can lead to information disclosur

On Unix systems (Linux, MacOS), Arc uses a temporary file with unsafe privileges. By tampering with such file, a mali

When configuring Arc (e.g. during the first setup), a local web interface is provided to ease the configuration process.

Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter.

Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting (XSS) via the budget parameter.

A memory corruption vulnerability in SdHost and SdMmcDevice in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 b

A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38

A memory corruption vulnerability in StorageSecurityCommandDxe in Insyde InsydeH2O before kernel 5.2: IB19130163 in 05.2

The All-in-One Video Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and inclu