2024

Db2 for IBM i 7.2, 7.3, 7.4, and 7.5 infrastructure could allow a local user to gain elevated privileges due to an unqua

A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.13.1 for Windows. A local attacker ma

turbo_boost-commands is a set of commands to help you build robust reactive applications with Rails & Hotwire. TurboBoo

follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows

Incorrect calculation in microcode keying mechanism for some Intel(R) Xeon(R) D Processors with Intel(R) SGX may allow a

Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to pot

Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized

Uncontrolled resource consumption for some Intel(R) SPS firmware versions may allow a privileged user to potentially ena

On-chip debug and test interface with improper access control in some 4th Generation Intel(R) Xeon(R) Processors when us

Improper input validation in the Intel(R) CSME installer software before version 2328.5.5.0 may allow an authenticated u

Race condition in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalatio

Information exposure through microarchitectural state after transient execution from some register files for some Intel(

Incorrect default permissions in some Intel(R) CSME installer software before version 2328.5.5.0 may allow an authentica

Insertion of sensitive information into log file for some Intel(R) Local Manageability Service software before version 2

Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel

In TP-Link Omada er605 1.0.1 through (v2.6) 2.2.3, a cloud-brd binary is susceptible to an integer overflow that leads t

Pega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation.

The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a pot

A path traversal vulnerability exists in GoAnywhere MFT prior to 7.4.2 which allows attackers to circumvent endpoint-sp

Webedition CMS 9.2.2.0 has a File upload vulnerability via /webEdition/we_cmd.php

Webedition CMS 9.2.2.0 has a Stored XSS vulnerability via /webEdition/we_cmd.php.

Tenda AX12 v1.0 v22.03.01.16 was discovered to contain a stack overflow via the ssid parameter in the sub_431CF0 functio

Insufficient session timeout vulnerability in the FAST3686 V2 Vodafone router from Sagemcom. This vulnerability could al

Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenticated user with limited permiss

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Livemesh Elementor

A malicious insider exploiting this vulnerability can circumvent existing security controls put in place by the organiza

A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password.

A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code.

SQL injection vulnerability in FME Modules quickproducttable module for PrestaShop v.1.2.1 and before, allows a remote a

An issue in Advanced Plugins ultimateimagetool module for PrestaShop before v.2.2.01, allows a remote attacker to escala

An improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in SonicWall Email Securit

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the SonicOS SSLVPN portal allows

An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions

This is a Server-Side Request Forgery (SSRF) vulnerability in the PaperCut NG/MF server-side module that allows an atta

This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit

This vulnerability allows an already authenticated admin user to create a malicious payload that could be leveraged for

SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote atta

Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allows unprivileged users, when Unli

In Delinea PAM Secret Server 11.4, it is possible for a user assigned "Administer Reports" permission and/or with access

User enumeration can occur in the Authentication REST API in Delinea PAM Secret Server 11.4. This allows a remote attack

In Delinea PAM Secret Server 11.4, it is possible for an attacker (with Administrator access to the Secret Server machin

This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker

This vulnerability potentially allows unauthorized enumeration of information from the embedded device APIs. An attacker

This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated

This vulnerability potentially allows files on a PaperCut NG/MF server to be exposed using a specifically formed payload

Insecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3 allows a PAM administrator

Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerify

Querybook is a Big Data Querying UI, combining collocated table metadata and a simple notebook interface. Querybook's da

The Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘active-tab’ parameter i

The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the p