2024

Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search.

A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 1.0. Affecte

A vulnerability classified as critical was found in PHPGurukul Complaint Management System 1.0. Affected by this vulnera

A vulnerability in Drupal Core allows File Manipulation.This issue affects Drupal Core: from 10.0.0 before 10.2.10.

A vulnerability in Drupal Core allows Excessive Allocation.This issue affects Drupal Core: from 10.2.0 before 10.2.2, fr

CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions.

A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by

Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup

User Interface (UI) Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Display

A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote authentica

A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buf

Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote aut

A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. Affected is an unkn

A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the f

Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and un

Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a clien

Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher p

This vulnerability exists in the TP-Link Archer C50 due to presence of terminal access on a serial interface without pro

This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upg

Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials since

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default cred

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default cred

Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in

Absolute File Traversal vulnerabilities allows access and modification of un-intended resources.  Affected products:

Dangerous File Upload vulnerabilities allow upload of malicious scripts.  Affected products: ABB ASPECT - Enterprise v

Credentials Disclosure vulnerabilities allow access to on board project back-up bundles.  Affected products: ABB ASPEC

Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions. 

Service Control vulnerabilities allow access to service restart requests and vm configuration settings.  Affected produc

Information Disclosure vulnerabilities allow access to application configuration information.  Affected products: ABB

Configuration Download vulnerabilities allow access to dependency configuration information.  Affected products: ABB A

Local File Inclusion vulnerabilities allow access to sensitive system information.  Affected products: ABB ASPECT - En

MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or

Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or chan

Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that cou

Denial of Service vulnerabilities where found providing a potiential for device service disruptions.  Affected products:

Denial of Service vulnerabilities where found providing a potiential for device service disruptions.  Affected products:

Unauthorized Access vulnerabilities allow Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.08.02;

Improper Input Validation vulnerability allows Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.0

This vulnerability exists in the Tinxy mobile app due to storage of logged-in user information in plaintext on the devic

Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportuni

Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product.  Affected produc

User Interface (UI) Misrepresentation of Critical Information vulnerability in DropBox Sign(HelloSign) allows Content Sp

Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX f

UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier allow a remote authenticated attacker

Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/E

The WIP WooCarousel Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wip_woocaro

The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Contact Info Block link parameter i

The Simple Redirection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu

The Accounting for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of ad

The NewsMunch theme for WordPress is vulnerable to Stored Cross-Site Scripting via a malicious display name in all versi