2024

In OPPO Usercenter Credit SDK, there's a possible escalation of privilege due to loose permission check, This could lead

The permission model protects itself against path traversal attacks by calling path.resolve() on any paths given by the

Torrentpier version 2.4.1 allows executing arbitrary commands on the server. This is possible because the application i

Suite CRM version 7.14.2 allows including local php files. This is possible because the application is vulnerable to LF

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Brivo ACS100

eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object M

pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the

An unquoted service path vulnerability in the 12d Synergy Server and File Replication Server components may allow an att

Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service conf

Vulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerabili

Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause

Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availabi

The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to union base

The Piraeus Bank WooCommerce Payment Gateway plugin for WordPress is vulnerable to time-based blind SQL Injection via th

A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP). If exploited,

Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFF_ID parameter at /af

An issue in idocv v.14.1.3_20231228 allows a remote attacker to execute arbitrary code and obtain sensitive information

An arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to execute arbitrary code vi

In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input

The Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15 allows authentication byp

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulner

The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vu

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited,

Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sen

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSTAHSİL Online P

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Improper Neutralization of Special E

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a stored Cross-Site Scripting (XSS) vul

Adobe FrameMaker Publishing Server versions 2022.1 and earlier are affected by an Improper Authentication vulnerability

DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability i

Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input val

Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection vulnerability when using remot

Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured. A

INPRAX "iZZi connect" application on Android contains hard-coded MQTT queue credentials. The same MQTT queue is used by

The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-

EBM Technologies RISWEB's specific query function parameter does not properly restrict user input, and this feature page

The functionality for file download in HGiga OAKlouds' certain modules contains an Arbitrary File Read and Delete vulner

The functionality for synchronization in HGiga OAKlouds' certain moudules has an OS Command Injection vulnerability, all

4ipnet EAP-767 v3.42.00 is vulnerable to Incorrect Access Control. The device uses the same set of credentials, regardle

Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminV

Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManage

Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the taskID parameter at /TaskManager/E

Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /om

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /apro

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aproces

An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload int

Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the category parameter at /endpo

Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the expense parameter at /endpoi

Barangay Population Monitoring System 1.0 was discovered to contain a SQL injection vulnerability via the resident param