2024

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a heap overflow in the

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via

Tungsten Automation (Kofax) TotalAgility in versions all through 7.9.0.25.0.954 is vulnerable to a Reflected XSS attacks

Tungsten Automation (Kofax) TotalAgility in versions all through 7.9.0.25.0.954 is vulnerable to a Reflected XSS attacks

Jirafeau normally prevents browser preview for SVG files due to the possibility that manipulated SVG files could be expl

NVIDIA Base Command Manager and Bright Cluster Manager for Linux contain an insecure temporary file vulnerability. A suc

NVIDIA UFM Enterprise, UFM Appliance, and UFM CyberAI contain a vulnerability where an attacker can cause an improper au

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses an inherently dangerous function which could allow

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could give attackers the ability to force Ruijie's prox

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to subscribe to partial possibl

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to obtain the devices serial nu

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow MQTT clients connecting with device credent

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses weak credential mechanism that could allow an atta

The affected product is vulnerable to an integer underflow. An unauthenticated attacker could send a malformed HTTP requ

The affected product is vulnerable to a command injection. An unauthenticated attacker could send commands through a mal

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a feature that could enable attackers to inval

The affected product is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious

PhpGurukul Medical Card Generation System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/search-medicalcard.

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a weak mechanism for its users to change their

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could enable an attacker to correlate a device serial n

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a a feature that could enable sub accounts or

A local low-level user on the server machine with credentials to the running OAS services can create and execute a repor

A Reflected Cross Site Scripting (XSS) vulnerability was found in /covidtms/registered-user-testing.php in PHPGurukul CO

Ubiquiti U7-Pro 7.0.35 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attacke

openwrt/asu is an image on demand server for OpenWrt based distributions. The request hashing mechanism truncates SHA-25

A link following vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul

A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow re

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the

A SQL injection vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote a

An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerabil

A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln

An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP o

An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP o

An improper handling of URL encoding (Hex Encoding) vulnerability has been reported to affect several QNAP operating sys

An improper certificate validation vulnerability has been reported to affect several QNAP operating system versions. If

A command injection vulnerability has been reported to affect License Center. If exploited, the vulnerability could allo

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploite

Ubiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attacker

WAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attacke

WAVLINK WN701AE M01AE_V240305 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A co

ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 5.5.1 Revision 199 and below is vulnera

ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 2.0 to Version 5.5.1 Revision 199 are v

A cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or

The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the

Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "pause" writing and signa

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Prior to 4.0.0, p

HCL Launch stores potentially sensitive information in log files that could be read by a local user with access to HTTP