2024

Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, using the `s

Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Prior to version 0.3.0, default functions

Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, using the `c

Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, using the `s

Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, incorrect va

A security vulnerability has been discovered within rpm-ostree, pertaining to the /etc/shadow file in default builds hav

Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Starting in version 0.3.8 and prior to ver

MeterSphere is an open source continuous testing platform. Prior to version 2.10.14-lts, members without space permissio

An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in

An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in

Cross Site Scripting vulnerability in TWCMS v.2.6 allows a local attacker to execute arbitrary code via a crafted script

Cross Site Scripting vulnerability in ED01-CMS v.1.0 allows an attacker to obtain sensitive information via the categori

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plai

Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary code via a crafted payl

The GLPI Agent is a generic management agent. Prior to version 1.7.2, a local user can modify GLPI-Agent code or used DL

The GLPI Agent is a generic management agent. A vulnerability that only affects GLPI-Agent installed on windows via MSI

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations.

A flaw was discovered in the RESTEasy Reactive implementation in Quarkus. Due to security checks for some JAX-RS endpoin

A flaw was found in the ansible automation platform. An insecure WebSocket connection was being used in installation fro

A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote att

A vulnerability was found in jberet-core logging. An exception in 'dbProperties' might display user credentials such as

A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented cac

A flaw was found in Keycloak that occurs from an error in the re-authentication mechanism within org.keycloak.authentica

A flaw was found in the SAML client registration in Keycloak that could allow an administrator to register malicious Jav

An incomplete fix was shipped for the Rapid Reset (CVE-2023-44487/CVE-2023-39325) vulnerability for an OpenShift Contain

A flaw was found in the Keycloak package. This issue occurs due to a permissive regular expression hardcoded for filteri

A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the

A flaw was found in Quarkus. When a Quarkus RestEasy Classic or Reactive JAX-RS endpoint has its methods declared in the

Server-Side Request Forgery (SSRF) vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a throu

An out-of-bounds read vulnerability exists in the RAWCodec::DecodeBytes functionality of Mathieu Malaterre Grassroot DIC

A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroo

An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malater

A vulnerability classified as problematic was found in idcCMS 1.35. Affected by this vulnerability is an unknown functio

A vulnerability classified as critical has been found in Tenda W30E 1.0/1.0.1.25. Affected is the function fromWizardHan

An issue has been discovered in GitLab CE/EE affecting all versions starting from 7.8 before 16.9.6, all versions starti

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 before 16.9.6, all versions start

A vulnerability was found in Tenda 4G300 1.01.42. It has been rated as critical. This issue affects the function sub_429

A vulnerability was found in Tenda 4G300 1.01.42. It has been declared as critical. This vulnerability affects the funct

Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin-manage-user.php.

IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 are vul

A flaw was found in Keycloak, where it does not correctly validate its client step-up authentication in org.keycloak.aut

Unicode transformation vulnerability in Hyperion affecting version 2.0.15. This vulnerability could allow an attacker to

Cross-Site Scripting (XSS) vulnerability in Hyperion Web Server affecting version 2.0.15. This vulnerability could allow

A vulnerability was found in Tenda 4G300 1.01.42. It has been classified as critical. This affects the function sub_4260

A vulnerability was found in Tenda 4G300 1.01.42 and classified as critical. Affected by this issue is the function sub_

A vulnerability has been found in Tenda 4G300 1.01.42 and classified as critical. Affected by this vulnerability is the

A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.17(9502). Affected is the function modi

A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.17(9502). This issue affects the f

The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swpm_paypal_su

Improper Restriction of Excessive Authentication Attempts vulnerability in LoginPress LoginPress Pro allows Removing Imp