2024

A SQL Injection has been found on SCAN_VISIO eDocument Suite Web Viewer of Abast. This vulnerability allows an unauthent

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: mark set as dead when unbindi

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow anonymous set with t

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow timeout for anonymou

Download of Code Without Integrity Check vulnerability in Apache Doris. The jdbc driver files used for JDBC catalog is n

Possible race condition vulnerability in Apache Doris. Some of code using `chmod()` method. This method run the risk of

Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from

Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from

Weak access control in OpenText PVCS Version Manager allows potential bypassing of authentication and uploading of files

Weak access control in OpenText PVCS Version Manager allows potential bypassing of authentication and download of files.

A vulnerability classified as critical has been found in SourceCodester Complete E-Commerce Site 1.0. Affected is an unk

An OS Command Injection vulnerability in Kiloview NDI allows a low-privileged user to execute arbitrary code remotely on

Use of Hard-coded Credentials in Kiloview NDI allows un-authenticated users to bypass authenticationThis issue affects K

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially cra

Distrobox before 1.7.0.1 allows attackers to execute arbitrary code via command injection into exported executables.

The Kerlink firewall in ChirpStack chirpstack-mqtt-forwarder before 4.2.1 and chirpstack-gateway-bridge before 4.0.11 wr

In MISP before 2.4.187, add_misp_export in app/Controller/EventsController.php does not properly check for a valid file

In MISP before 2.4.187, __uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid l

Cross Site Scripting (XSS) vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute ar

An issue was discovered in osCommerce v4, allows local attackers to bypass file upload restrictions and execute arbitrar

The File Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,

Stored Cross-Site Scripting (XSS) vulnerability in tramyardg autoexpress 1.3.0, allows remote unauthenticated attackers

An issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated remote attackers to escalate priv

A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute

A vulnerability, which was classified as critical, was found in Campcodes Complete Online DJ Booking System 1.0. Affecte

A vulnerability, which was classified as critical, has been found in Campcodes Complete Online DJ Booking System 1.0. Th

The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users

The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users

A vulnerability, which was classified as critical, was found in ZhiCms 4.0. Affected is the function index of the file a

A vulnerability, which was classified as critical, has been found in ZhiCms 4.0. This issue affects the function getinde

A vulnerability classified as critical was found in Panabit Panalog 202103080942. This vulnerability affects unknown cod

A vulnerability was found in OpenBMB XAgent 1.0.0. It has been declared as critical. Affected by this vulnerability is a

In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServer_handleFileCloseRequest.c f

Wasmi is an efficient and lightweight WebAssembly interpreter with a focus on constrained and embedded systems. In the W

JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to version 1.5.6, an attacker can

The Apollo Router is a graph router written in Rust to run a federated supergraph that uses Apollo Federation. Versions

Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. Starting in version 1.32.1 and prior to

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.35.1 and prior to version 1.36.3, a vul

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.36.2 and prior to version 1.40.3, use o

Deno is a JavaScript, TypeScript, and WebAssembly runtime. In version 1.39.0, use of raw file descriptors in `op_node_ip

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.8.0 and prior to version 1.40.4, Deno i

RSSHub is an open source RSS feed generator. Prior to version 1.0.0-master.a429472, RSSHub allows remote attackers to us

RSSHub is an open source RSS feed generator. Starting in version 1.0.0-master.cbbd829 and prior to version 1.0.0-master.

Grav is a content management system (CMS). Prior to version 1.7.43, users who may write a page may use the `frontmatter`

TOMP Bare Server implements the TompHTTP bare server. A vulnerability in versions prior to 2.0.2 relates to insecure han

Coder allows oragnizations to provision remote development environments via Terraform. Prior to versions 2.6.1, 2.7.3, a

Minder is a software supply chain security platform. Prior to version 0.0.33, a Minder user can use the endpoints `GetRe

A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in Dotclear version 2.29. The flaw exists withi

Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain

Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, it is possible to create a