2024

TEM Opera Plus FM Family Transmitter allows access to an unprotected endpoint that allows MPFS File System binary image

The TEM Opera Plus FM Family Transmitter application interface allows users to perform certain actions via HTTP requests

XZ Utils provide a general-purpose data-compression library plus command-line tools. When built for native Windows (MinG

Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited am

Tonic is a native gRPC client & server implementation with async/await support. When using tonic::transport::Server ther

go-tuf is a Go implementation of The Update Framework (TUF). The go-tuf client inconsistently traces the delegations. Fo

Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz (legacy) Visual Studio Code extension in ver

Cross Application Scripting vulnerability in Vercom S.A. Redlink SDK in specific situations allows local code injection

In versions of the PEADM Forge Module prior to 3.24.0 a security misconfiguration was discovered.

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Western Digital My Cloud ddns-s

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RSM Design Website

Products for macOS enables a user logged on to the system to perform a denial-of-service attack, which could be misused

The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file

In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to writ

The device enables an unauthorized attacker to execute system commands with elevated privileges. This exploit is facilit

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Soft

In versions of Helix Core prior to 2024.1 Patch 2 (2024.1/2655224) a Windows ANSI API Unicode "best fit" argument inject

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Exnet Infor

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Exnet Informatics

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ece Softwar

The grafana plugin SDK bundles build metadata into the binaries it compiles; this metadata includes the repository URI f

Files or Directories Accessible to External Parties vulnerability in Eliz Software Panel allows Collect Data from Common

Missing Authentication for Critical Function, Missing Authorization vulnerability in Yordam Information Technology Mobil

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Encoding or Escapi

A problem with the ActiveMQ integration for both Cortex XSOAR and Cortex XSIAM can result in the cleartext exposure of t

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Payara Platform Payara Server (Logging modul

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in OpenText™ Network Node Manager i (NNMi) allows URL

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ N

There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting "zipfile.Path". Note that the mo

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText Pe

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in OpenText Performance Center on Windows allow

A tampering vulnerability in the CylanceOPTICS Windows Installer Package of CylanceOPTICS for Windows version 3.2 and 3.

AVEVA Historian Server has a vulnerability, if exploited, could allow a malicious SQL command to execute under the privi

CVE-2024-6078 IMPACT An improper authentication vulnerability exists in the affected product, which could allow a malic

A denial-of-service vulnerability exists via the CIP/Modbus port in the Rockwell Automation Micro850/870 (2080 -L50E/208

A vulnerability exists in the Rockwell Automation Emulate3D™, which could be leveraged to execute a DLL Hijacking attack

If exploited, this vulnerability could cause a SuiteLink server to consume excessive system resources and slow down proc

In Ocean Data Systems Dream Report, an incorrect permission vulnerability could allow a local unprivileged attacker to e

In Ocean Data Systems Dream Report, a path traversal vulnerability could allow an attacker to perform remote code execut

Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious tr

This vulnerability exists in InstaRISPACS software due to insufficient validation of user supplied input for the loginTo

A Denial of Service in CLFS.sys in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windo

Authentication Bypass Using an Alternate Path or Channel vulnerability in GST Electronics inohom Nova Panel N7 allows Au

Enabled IP Forwarding feature in B&R Automation Runtime versions before 6.0.2 may allow remote attack-ers to compromise

Inadequate Encryption Strength vulnerability allow an authenticated attacker to execute arbitrary OS Commands via encryp

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gitea Gitea

Improper filering of special characters result in a command ('command injection') vulnerability in Korenix JetPort 5601v

Missing encryption of sensitive data in Korenix JetPort 5601v3 allows Eavesdropping.This issue affects JetPort 5601v3: t

An authentication bypass vulnerability in Korenix JetPort 5601v3 allows an attacker to access functionality on the devic

WD Discovery versions prior to 5.0.589 contain a misconfiguration in the Node.js environment settings that could allow c