2024

Cross-Site Scripting vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability c

User enumeration vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could

Improper access control vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerabilit

NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow

An issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the pr

An error in the evaluation of the fetch metadata headers could allow a bypass of the CSRF protection in Apache Wicket. T

Improper Input Validation vulnerability in Apache Hop Engine.This issue affects Apache Hop Engine: before 2.8.0. Users

Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability. A physical high pri

Dell PowerEdge Server BIOS contains a heap-based buffer overflow vulnerability. A local high privileged attacker could p

Directory Traversal vulnerability in Speedy11CZ MCRPX v.1.4.0 and before allows a local attacker to execute arbitrary co

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs local_list.cgi, create_overlay.cgi

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lan_ipaddr pa

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lan_netmask p

An issue in the HistoryQosPolicy component of FastDDS v2.12.x, v2.11.x, v2.10.x, and v2.6.x leads to a SIGABRT (signal a

A vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack through resource exhaustio

setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid(). This allows th

Versions of the package livewire/livewire from 3.3.5 and before 3.4.9 are vulnerable to Cross-site Scripting (XSS) when

Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines

A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318. It has been clas

A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as

A vulnerability has been found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classifi

An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page param

An issue was discovered in OpenClinic GA 5.247.01. A Reflected Cross-Site Scripting (XSS) vulnerability has been discove

An issue was discovered in OpenClinic GA 5.247.01. An Unauthenticated File Download vulnerability has been discovered in

An issue was discovered in OpenClinic GA 5.247.01. It allows retrieval of patient lists via queries such as findFirstnam

django-wiki is a wiki system for Django. Installations of django-wiki prior to version 0.10.1 are vulnerable to maliciou

SecureProps is a PHP library designed to simplify the encryption and decryption of property data in objects. A vulnerabi

ZITADEL, open source authentication management software, uses Go templates to render the login UI. Due to a improper use

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 an

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.13.13, 1.

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.13.9 an

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3

RaspberryMatic is an open-source operating system for HomeMatic internet-of-things devices. RaspberryMatic / OCCU prior

A vulnerability was found in SourceCodester File Manager App 1.0. It has been declared as critical. This vulnerability a

LDAP Account Manager (LAM) is a webfrontend for managing entries stored in an LDAP directory. LAM's log configuration al

ClickHouse is an open-source column-oriented database management system. A bug exists in the cloud ClickHouse offering p

An open redirect in the Login/Logout functionality of web management in AVSystem Unified Management Platform (UMP) 23.07

Improper input validation in AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS can result in unauthenticated

Insecure storage of LDAP passwords in the authentication functionality of AVSystem Unified Management Platform (UMP) 23.

Insecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allow members (with l

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.8.13, 2.9.9, and 2.10.4, a

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.8.13, 2.9.9, and 2.10.4, a

The Widget for Social Page Feeds WordPress plugin before 6.4 does not sanitise and escape some of its settings, which co

The Advanced Social Feeds Widget & Shortcode WordPress plugin through 1.7 does not sanitise and escape some of its setti

The Innovs HR WordPress plugin through 1.0.3.4 does not have CSRF checks in some places, which could allow attackers to

The Jobs for WordPress plugin before 2.7.4 does not sanitise and escape some parameters, which could allow users with a

The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation when reset

The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation and CSRF i