2024

Malformed S2 Nonce Get command classes can be sent to crash the gateway. A hard reset is required to recover the gateway

Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device. Any frames sent

Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensit

Cross Site Scripting vulnerability in MiniCMS v.1.11 allows a remote attacker to run arbitrary code via crafted string i

Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete a

An issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v.10013 allows an attacker to execute arbi

SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allo

A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been rated as critical. This issue affects the function form

A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been declared as critical. This vulnerability affects the fu

A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been classified as critical. This affects the function formQ

A vulnerability was found in Tenda AX1806 1.0.0.1 and classified as critical. Affected by this issue is the function for

Sidekiq is simple, efficient background processing for Ruby. Sidekiq is reflected XSS vulnerability. The value of substr

MCUboot is a secure bootloader for 32-bits microcontrollers. MCUboot uses a TLV (tag-length-value) structure to represen

Danswer is the AI Assistant connected to company's docs, apps, and people. Danswer is vulnerable to unauthorized access

Llama.cpp is LLM inference in C/C++. There is a use of uninitialized heap variable vulnerability in gguf_init_from_file,

An issue in Beijing Panabit Network Software Co., Ltd Panalog big data analysis platform v. 20240323 and before allows a

An issue in Insurance Management System v.1.0.0 and before allows a remote attacker to escalate privileges via a crafted

A vulnerability has been found in Tenda AX1806 1.0.0.1 and classified as critical. Affected by this vulnerability is the

Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access

Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords.

JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions. This allows privilege

A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker ma

A vulnerability, which was classified as critical, was found in Tenda AX1806 1.0.0.1. Affected is the function R7WebsSec

Asus RT-N12+ B1 router stores user passwords in plaintext, which could allow local attackers to obtain unauthorized acce

Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to obtain unauthorized access

A vulnerability, which was classified as critical, has been found in Tenda AX1803 1.0.0.1. This issue affects the functi

A vulnerability classified as problematic was found in Netgear DG834Gv5 1.6.01.34. This vulnerability affects unknown co

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of upload_firmware.cgi, which allows r

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allo

D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows r

gitoxide is a pure Rust implementation of Git. `gix-transport` does not check the username part of a URL for text that t

pyload is an open-source Download Manager written in pure Python. An authenticated user can change the download folder a

Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component parser_parse_class at je

Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component scanner_seek at jerry-co

Jerryscript commit ff9ff8f was discovered to contain a segmentation violation via the component vm_loop at jerry-core/vm

Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

A missing authentication for critical function vulnerability has been reported to affect myQNAPcloud Link. If exploited,

CSV Injection vulnerability in the Asus RT-N12+ router allows administrator users to inject arbitrary commands or formul

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If e

Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions. If exploite

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

An exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on. If exploited, the

A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authe