2024

A vulnerability, which was classified as critical, was found in lakernote EasyAdmin up to 20240315. Affected is the func

A vulnerability, which was classified as critical, has been found in lakernote EasyAdmin up to 20240315. This issue affe

A vulnerability classified as problematic was found in lakernote EasyAdmin up to 20240315. This vulnerability affects un

A vulnerability classified as critical has been found in lakernote EasyAdmin up to 20240315. This affects an unknown par

A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier st

A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function Prin

Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET

A vulnerability has been found in DedeCMS 5.7 and classified as problematic. This vulnerability affects unknown code of

A vulnerability, which was classified as problematic, was found in DedeCMS 5.7. This affects an unknown part of the file

Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/users/delete/2.

DIR-845L router <= v1.01KRb03 has an Unauthenticated remote code execution vulnerability in the cgibin binary via soapcg

A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware <= v1.01KRb03.

Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/categories/delete/2.

Bref is an open-source project that helps users go serverless on Amazon Web Services with PHP. When Bref prior to versio

FreeScout is a self-hosted help desk and shared mailbox. Versions prior to 1.8.128 are vulnerable to OS Command Injectio

FreeScout is a self-hosted help desk and shared mailbox. A Stored Cross-Site Scripting (XSS) vulnerability has been iden

Translate is a package that allows users to convert text to different languages on Node.js and the browser. Prior to ver

Symfony 1 is a community-driven fork of the 1.x branch of Symfony, a PHP framework for web projects. Starting in version

Kaspersky has fixed a security issue in Kaspersky Password Manager (KPM) for Windows that allowed a local user to recove

A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7. Affected by this issue is some unkn

A vulnerability classified as problematic was found in DedeCMS 5.7. Affected by this vulnerability is an unknown functio

This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user

This vulnerability allows access to arbitrary files in the application server file system due to a path traversal vulner

IBM Security Verify Directory 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed techn

IBM Security Verify Directory 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb

IBM Security Verify Directory 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to

IBM Security Verify Directory 10.0.0 could disclose sensitive server information that could be used in further attacks a

Logpoint before 7.1.0 allows Self-XSS on the LDAP authentication page via the username to the LDAP login form.

The Chat activity in Moodle 4.3.3 allows students to insert a potentially unwanted HTML A element or IMG element, or HTM

In the Windows installer in Atos Eviden CardOS API before 5.5.5.2811, Local Privilege Escalation can occur.(from a regul

Information exposure vulnerability in the CIGESv2 system. This vulnerability could allow a local attacker to intercept t

HTML injection vulnerability affecting the CIGESv2 system, which allows an attacker to inject arbitrary code and modify

Stored Cross-Site Scripting (Stored-XSS) vulnerability affecting the CIGESv2 system, allowing an attacker to execute and

Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/composer/ins

SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' parameter. Th

SQL injection vulnerability in the CIGESv2 system, through /ajaxSubServicios.php, in the 'idServicio' parameter. The exp

SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter. The exploitation

A cross-site request forgery vulnerability has been identified in LoadMaster.  It is possible for a malicious actor, who

An OS command injection vulnerability has been identified in LoadMaster.  An authenticated UI user with any permission s

An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds chec

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the delete

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPri

SQL injection vulnerability in snow snow v.2.0.0 allows a remote attacker to execute arbitrary code via the dataScope pa

Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent plugin before Checkmk 2.3.0b

Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Typ

Invocation of the sqlplus command with sensitive information in the command line in the mk_oracle Checkmk agent plugin b

Least privilege violation in the Checkmk agent plugins mk_oracle, mk_oracle.ps1, and mk_oracle_crs before Checkmk 2.3.0b

A vulnerability, which was classified as problematic, has been found in Tenda AC15 15.03.05.18. Affected by this issue i

A vulnerability classified as problematic was found in Tenda AC15 15.03.05.18. Affected by this vulnerability is the fun