2024

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_deal.php?mu

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/banner_deal.php?mudi

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/share_switch.php?mud

D-Link DIR-822+ v1.0.5 was discovered to contain a stack-based buffer overflow vulnerability in the SetNetworkTomography

php-censor v2.1.4 and fixed in v.2.1.5 was discovered to utilize a weak hashing algorithm for its remember_key value. Th

A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 2). The affected applications contain a

A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 4). The affected applications contain an

A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 2). The affected application is vulnerab

PrestaShop is an open source e-commerce web application. In PrestaShop 8.1.5, any invoice can be downloaded from front-o

PrestaShop is an open source e-commerce web application. A cross-site scripting (XSS) vulnerability that only affects Pr

The Hoppscotch Browser Extension is a browser extension for Hoppscotch, a community-driven end-to-end open-source API de

sshproxy is used on a gateway to transparently proxy a user SSH connection on the gateway to an internal host via SSH. P

Oceanic is a NodeJS library for interfacing with Discord. Prior to version 1.10.4, input to functions such as `Client.re

SAP NetWeaver Application Server for ABAP and ABAP Platform do not sufficiently encode user controlled inputs, resulting

TYPO3 is an enterprise content management system. Starting in version 9.0.0 and prior to versions 9.5.48 ELTS, 10.4.45 E

TYPO3 is an enterprise content management system. Starting in version 9.0.0 and prior to versions 9.5.48 ELTS, 10.4.45 E

TYPO3 is an enterprise content management system. Starting in version 9.0.0 and prior to versions 9.5.48 ELTS, 10.4.45 E

TYPO3 is an enterprise content management system. Starting in version 13.0.0 and prior to version 13.1.1, the history ba

OFCMS V1.1.2 is vulnerable to SQL Injection via the new table function.

Konga v0.14.9 is vulnerable to Cross Site Scripting (XSS) via the username parameter.

htmly v2.9.6 was discovered to contain an arbitrary file deletion vulnerability via the delete_post() function at admin.

A vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter Visualization V14.1 (All versions <

A vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter Visualization V14.1 (All versions <

An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection.

An issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt.

An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/{GUID] XSS.

An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api

An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via re

An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file inclusion.

A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The Apache Lucene based query engine in th

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC

A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain a stack

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC

A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an

A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an

A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an

A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an

A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected application is vulnerab

SAP Global Label Management is vulnerable to SQL injection. On exploitation the attacker can use specially crafted input

SAP Replication Server allows an attacker to use gateway for executing some commands to RSSD. This could result in crash

PDFViewer is a control delivered as part of SAPUI5 product which shows the PDF content in an embedded mode by default. I

An unauthenticated attacker can upload a malicious file to the server which when accessed by a victim can allow an atta

SAP Business Objects Business Intelligence Platform is vulnerable to Insecure Storage as dynamic web pages are getting c

Document Service handler (obsolete) in Data Provisioning Service does not sufficiently encode user-controlled inputs, re

SAP Bank Account Management does not perform necessary authorization check for an authorized user, resulting in escalati