2024

Dispatch's notification service uses Jinja templates to generate messages to users. Jinja permits code execution within

A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot f

When the device is shared, the homepage module are before 2.19.0  in eWeLink Cloud Service allows Secondary user to take

Unprotected Transport of Credentials vulnerability in OpenText™ Documentum™ Server could allow Credential Stuffing.This

The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t suppo

Improper Authentication vulnerability in OpenText OpenText Directory Services may allow Multi-factor Authentication Bypa

Automation Anywhere Automation 360 v21-v32 is vulnerable to Server-Side Request Forgery in a web API component. An attac

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to presence of root terminal access on a serial inte

Improper privilege management in Yugabyte Platform allows authenticated admin users to escalate privileges to SuperAdmin

Insufficient authentication in user account management in Yugabyte Platform allows local network attackers with a compro

Information exposure in the logging system in Yugabyte Platform allows local attackers with access to application logs t

A flaw exists in FlashBlade whereby a local account is permitted to authenticate to the management interface using an un

The vulnerability allows a malicious low-privileged PAM user to access information about other PAM users and their group

A specific authentication strategy allows a malicious attacker to learn ids of all PAM users defined in its database.

This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected P

This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by

The vulnerability allows an unauthenticated attacker to read arbitrary information from the database.

The vulnerability allows a malicious low-privileged PAM user to perform server upgrade related actions.

The vulnerability allows an attacker to bypass the authentication requirements for a specific PAM endpoint.

This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by

An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected PAM

Under certain circumstances the camera may be susceptible to known vulnerabilities associated with the JQuery versions p

An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to bypass the Cortex XDR a

Under certain circumstances the Software House C●CURE 9000 installer will utilize weak credentials.

Insecure handling of POST header parameter body included in requests being sent to an instance of the open-source projec

Insecure handling of GET header parameter file included in requests being sent to an instance of the open-source project

Exposure of Sensitive Information to an Unauthorized Actor in Samsung Galaxy SmartTag2 prior to 0.20.04 allows attackes

PingOne MFA Integration Kit contains a vulnerability where the skipMFA action can be configured such that user authentic

PingOne MFA Integration Kit contains a vulnerability related to the Prompt Users to Set Up MFA configuration. Under cert

SQL Injection vulnerability in parameter "w" in file "druk.php" in MegaBIP software allows unauthorized attacker to disc

Longse model LBH30FE200W cameras, as well as products based on this device, make use of telnet passwords which follow a

Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attack

Longse NVR (Network Video Recorder) model NVR3608PGE2W, as well as products based on this device, create a WiFi network

Longse NVR (Network Video Recorder) model NVR3608PGE2W, as well as products based on this device, are transmitting user'

The user may be redirected to an arbitrary site in Sitefinity 15.1.8321.0 and previous versions.

In versions of Akana in versions prior to and including 2022.1.3 validation is broken when using the SAML Single Sign-On

In Helix ALM versions prior to 2024.2.0, a local command injection was identified. Reported by Bryan Riggins.

SDG Technologies PnPSCADA allows a remote attacker to attach various entities without requiring system authentication. T

An information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with access to the log files to

A Cross-Site Scripting (XSS) vulnerability on the My Cloud, My Cloud Home, SanDisk ibi, and WD Cloud web apps was found

SQL Injection vulnerability in MegaBIP software allows attacker to disclose the contents of the database, obtain session

Allocation of Resources Without Limits or Throttling vulnerability in LG Electronics LG SuperSign CMS allows Port Scanni

A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent for

Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cros

Logs storing credentials are insufficiently protected and can be decoded through the use of open source tools.

Transmitted data is logged between the device and the backend service. An attacker could use these logs to perform a rep

Sensitive customer information is stored in the device without encryption.

Utilizing default credentials, an attacker is able to log into the camera's operating system which could allow changes t

There is a vulnerability in AVEVA PI Web API that could allow malicious code to execute on the PI Web API environment un

Allow attackers to intercept or falsify data exchanges between the client and the server