2024

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The API server does not enforce project source

In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521

A Stack Overflow vulnerability in Tenda AC15 v15.03.05.18 allows attackers to cause a denial of service via the LISTEN p

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom securi

SQL Injection vulnerability in Macrob7 Macs CMS 1.1.4f, allows remote attackers to execute arbitrary code, cause a denia

A vulnerability classified as critical was found in Vesystem Cloud Desktop up to 20240408. This vulnerability affects un

SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, allows remote attackers to execute a

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitr

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitr

An issue discovered in silex technology DS-600 Firmware v.1.4.1 allows a remote attacker to cause a denial of service vi

An issue discovered in silex technology DS-600 Firmware v.1.4.1 allows a remote attacker to edit device settings via the

An issue discovered in silex technology DS-600 Firmware v.1.4.1 allows a remote attacker to obtain sensitive information

Discourse-reactions is a plugin that allows user to add their reactions to the post. When whispers are enabled on a site

A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevat

Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM roles associated with Amplify

A buffer overflow vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Win

A vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 ope

HCL DevOps Deploy / Launch is generating an obsolete HTTP header.

An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows attackers to gain escalated p

An authentication bypass vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to exe

A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute arbi

A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevat

iTop is an IT service management platform. Files from the `env-production` folder can be retrieved even though they sho

iTop is an IT service management platform. When exporting data from backoffice or portal in CSV or Excel files, users'

iTop is an IT service management platform. When displaying/editing the user's personal tokens, XSS attacks are possible

iTop is an IT service management platform. When dashlet are refreshed, XSS attacks are possible. This vulnerability is

iTop is an IT service management platform. By filling malicious code in an object friendlyname / complementary name, an

iTop is an IT service management platform. When creating or updating an object, extkey values aren't checked to be in t

iTop is an IT service management platform. Dashlet edits ajax endpoints can be used to produce XSS. Fixed in iTop 2.7.1

iTop is an IT service management platform. By manipulating HTTP queries, a user can inject malicious content in the fie

iTop is an IT service management platform. Dashboard editor : can load multiple files and URL, and full path disclosure

A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been declared as critical. This vulnerab

Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through Devi

Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through Devi

Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through S3 A

The Backup Agents section in WBSAirback 21.02.04 is affected by a Path Traversal vulnerability, allowing a user with low

Cross-Site Request Forgery vulnerability in WBSAirback 21.02.04, which could allow an attacker to create a manipulated H

Command injection vulnerability in the operating system. Improper neutralisation of special elements in Active Directory

A vulnerability of Information Exposure has been found on Technicolor CGA2121 affecting the version 1.01, this vulnerabi

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Le

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Le

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Freshworks Freshdesk (official).This issue affects

Missing Authorization vulnerability in supsystic Popup by Supsystic popup-by-supsystic.This issue affects Popup by Supsy

Cross-Site Request Forgery (CSRF) vulnerability in Ertano MihanPanel.This issue affects MihanPanel: from n/a before 12.7

Cross-Site Request Forgery (CSRF) vulnerability in Pauple Table & Contact Form 7 Database – Tablesome.This issue affects

Cross-Site Request Forgery (CSRF) vulnerability in Reservation Diary ReDi Restaurant Reservation.This issue affects ReDi

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Spa and Salon.This issue affects Spa and Salon: from n/a t

Cross-Site Request Forgery (CSRF) vulnerability in Pagelayer PopularFX.This issue affects PopularFX: from n/a through 1.

Cross-Site Request Forgery (CSRF) vulnerability in creativethemeshq Blocksy blocksy.This issue affects Blocksy: from n/a

Cross-Site Request Forgery (CSRF) vulnerability in RebelCode Spotlight Social Media Feeds.This issue affects Spotlight S