2024

A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as critical. Affect

A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). Depending on configuration,

A security vulnerability has been identified in HPE Data Management Framework (DMF) Suite (CXFS). Depending on configura

FlightPath 7.5 contains a Cross Site Scripting (XSS) vulnerability, which allows authenticated remote attackers with adm

GLPI is a free asset and IT management software package. Starting in 9.2.0 and prior to 11.0.0, it is possible to downlo

A vulnerability, which was classified as critical, was found in SourceCodester Student Record Management System 1.0. Aff

In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to resou

In the read() function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions

Trial installer for McAfee Total Protection (legacy trial installer software) 16.0.53 allows local privilege escalation

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

A vulnerability was found in the OAuth-server. OAuth-server logs the OAuth2 client secret when the logLevel is Debug hig

In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto. This cou

Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disc

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking an

A security bypass vulnerability exists in the Removable Media Encryption (RME)component of Digital Guardian Windows Agen

An invalid memory access when handling the ProtocolIE_ID field of S1Setup Request messages in Athonet vEPC MME v11.4.0 a

An invalid memory access when handling the ENB Configuration Transfer messages containing invalid PLMN Identities in Ath

An invalid memory access when handling the ProtocolIE_ID field of E-RAB Setup List Context SURes messages in Athonet vEP

An invalid memory access when handling a UE Context Release message containing an invalid UE identifier in Athonet vEPC

An invalid memory access when handling the ProtocolIE_ID field of E-RAB Modify Request messages in Athonet vEPC MME v11.

An invalid memory access when handling the ProtocolIE_ID field of E-RAB NotToBeModifiedBearerModInd information element

An invalid memory access when handling the ProtocolIE_ID field of E-RAB Release Indication messages in Athonet vEPC MME

An issue in UltiMaker Cura v.4.41 and 5.8.1 and before allows a local attacker to execute arbitrary code via Inter-proce

Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows an attacker to execute arbitrary code via the svkey p

An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature

GLPI is a free asset and IT management software package. An authenticated user can perfom a SQL injection by changing it

GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI

GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI

GLPI is a free asset and IT management software package. An authenticated user can exploit a SQL injection vulnerability

An uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Ser

Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amf_as_establish_req f

The web interface in RSA NetWitness 11.7.2.0 allows Cross-Site Scripting (XSS) via the Where textbox on the Reports scre

Nextcloud Server is a self hosted personal cloud system. After a user received a share with some files inside being bloc

Nextcloud Tables allows users to to create tables with individual columns. By directly specifying the ID of a table or v

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. The Desktop client

Cross Site Scripting vulnerability in M2000 Smart4Web before v.5.020241004 allows a remote attacker to execute arbitrary

GLPI is a free Asset and IT management software package. An technician can upload a SVG containing a malicious script. T

GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI

Stack-based memcpy buffer overflow in the ngap_handle_pdu_session_resource_setup_response routine in OpenAirInterface CN

An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows at

A buffer overflow in the ngap_amf_handle_pdu_session_resource_setup_response function of oai-cn5g-amf up to v2.0.0 allow

A vulnerability was found in erzhongxmu Jeewms up to 20241108. It has been rated as critical. This issue affects some un

A vulnerability was found in code-projects Inventory Management up to 1.0. It has been declared as critical. This vulner

Nextcloud Server is a self hosted personal cloud system. After setting up a user or administrator defined external stora

Nextcloud Server is a self hosted personal cloud system. Due to a pre-flighted HEAD request, the link reference provider

Nextcloud Server is a self hosted personal cloud system. After an attacker got access to the session of a user or admini

Nextcloud Server is a self hosted personal cloud system. After storing "Global credentials" on the server, the API retur

Nextcloud Server is a self hosted personal cloud system. After an admin enables the default-disabled SVG preview provide

emlog pro <=2.3.18 is vulnerable to Cross Site Scripting (XSS), which allows attackers to write malicious JavaScript cod