2024

The Responsive Gallery Grid WordPress plugin before 2.3.11 does not sanitise and escape some of its settings, which coul

The ABAP Application Server of SAP NetWeaver as well as ABAP Platform allows an attacker to prevent legitimate users fro

Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in

Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in

The Resource Settings page allows a high privilege attacker to load exploitable payload to be stored and reflected whene

The application allows a high privilege attacker to append a malicious GET query parameter to Service invocations, which

A race condition was identified through which privilege escalation was possible in certain configurations.

SAP Group Reporting Data Collection does not perform necessary authorization checks for an authenticated user, resulting

An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets

SAP Asset Accounting could allow a high privileged attacker to exploit insufficient validation of path information provi

Self-Registration and Modify your own profile in User Admin Application of NetWeaver AS Java does not enforce proper sec

SAP NetWeaver application, due to insufficient input validation, allows an attacker to send a crafted request from a vul

Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to acce

An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service

The NMAP Importer service​ may expose data store credentials to authorized users of the Windows Registry.

Apfloat v1.10.1 was discovered to contain an ArrayIndexOutOfBoundsException via the component org.apfloat.internal.Doubl

ThreeTen Backport v1.6.8 was discovered to contain a NullPointerException via the component org.threeten.bp.LocalDate::c

JGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org.jgrapht.alg.util.ToleranceDou

JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /chart/annotations/CategoryLineAnno

An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the form_hea

NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause a cross-site scripting error

NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause improper privilege management

A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been declared as critical. Affected by

A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been classified as critical. Affected

Cross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges

Insecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker to delete arbitrary fil

A vulnerability was found in SourceCodester Laundry Management System 1.0 and classified as critical. This issue affects

A vulnerability has been found in SourceCodester Laundry Management System 1.0 and classified as problematic. This vulne

An issue in secdiskapp 1.5.1 (management program for NewQ Fingerprint Encryption Super Speed Flash Disk) allows attacker

Apfloat v1.10.1 was discovered to contain a stack overflow via the component org.apfloat.internal.DoubleModMath::modPow(

Apfloat v1.10.1 was discovered to contain a NullPointerException via the component org.apfloat.internal.DoubleScramble::

JGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org.jgrapht.alg.util.ToleranceDou

An issue discovered in web-flash v3.0 allows attackers to reset passwords for arbitrary users via crafted POST request t

Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, there

A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerabilit

A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects

ThreeTen Backport v1.6.8 was discovered to contain an integer overflow via the component org.threeten.bp.format.DateTime

The BackWPup WordPress plugin before 4.0.4 does not prevent Directory Listing in its temporary backup folder, allowing u

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affect

A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been declared as critical. This vulner

Shopware 6 is an open commerce platform based on Symfony Framework and Vue. Starting in version 6.3.5.0 and prior to ver

Redon Hub is a Roblox Product Delivery Bot, also known as a Hub. In all hubs before version 1.0.2, all commands are capa

GPT Academic provides interactive interfaces for large language models. A vulnerability was found in gpt_academic versio

A vulnerability was found in Wangshen SecGate 3600 up to 20240408. It has been classified as critical. This affects an u

A vulnerability classified as problematic was found in SourceCodester Prison Management System 1.0. This vulnerability a

A vulnerability classified as critical has been found in SourceCodester Prison Management System 1.0. This affects an un

Sunshine is a self-hosted game stream host for Moonlight. Starting in version 0.10.0 and prior to version 0.23.0, after

Saleor is an e-commerce platform. Starting in version 3.10.0 and prior to versions 3.14.64, 3.15.39, 3.16.39, 3.17.35, 3

DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnera