2024

A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8), Cerberus PRO EN Fire Panel

A vulnerability has been identified in SENTRON 7KM PAC3120 AC/DC (7KM3120-0BA01-1DA0) (All versions >= V3.2.3 < V3.2.4 o

A vulnerability has been identified in Siveillance Control (All versions >= V2.8 < V3.1.1). The affected product does no

The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks. Users are recommended

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application cons

The LadiApp plugn for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the init_end

The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the publish

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on

The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the save_co

The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the ladiflo

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on

Information exposure vulnerability in Korenix JetI/O 6550 affecting firmware version F208 Build:0817. The SNMP protocol

Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.

An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a

An unauthenticated remote attacker can gain service level privileges through an incomplete cleanup during service restar

An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or

An unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which may prevent or disrupt th

An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by c

An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack. Th

An unauthenticated remote attacker can read memory out of bounds due to improper input validation in the MQTT stack. The

An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent

An unauthenticated remote attacker can perform a command injection in the OCPP Service with limited privileges due to im

An unauthenticated remote attacker can perform a log injection due to improper input validation. Only a certain log file

An unauthenticated remote attacker can perform a remote code execution due to an origin validation error. The access is

An unauthenticated remote attacker can modify configurations to perform a remote code execution, gain root rights or per

An unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload desti

The Newsletter2Go plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ parameter in all ver

The f(x) Private Site plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in

Path traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Seri

SQL injection vulnerability in Employee Management System v.1.0 allows a local attacker to obtain sensitive information

Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prio

Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior

Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability. If an attacker tricks the user to access

Reflected cross-site scripting (XSS) vulnerability in Racktables v0.22.0 and before, allows local attackers to execute a

DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01 suffer from a LAN-Side Unauthenticated Remo

HTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote attacker to execute arbitrary code, esca

Insertion of Sensitive Information into Log File vulnerability in Hitachi Cosminexus Component Container allows local us

Under certain conditions, Support Web Pages of SAP NetWeaver Process Integration (PI) - versions 7.50, allows an attacke

Applications based on SAP GUI for HTML in SAP NetWeaver AS ABAP - versions 7.89, 7.93, do not sufficiently encode user-c

Due to missing authorization check, attacker with business user account in SAP ABAP Platform - version 758, 795, can cha

Under certain condition SAP NetWeaver (Enterprise Portal) - version 7.50 allows an attacker to access information which

Under certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwi

SAP Fiori Front End Server - version 605, allows altering of approver details on the read-only field when sending leave

SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high priv

NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2

phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting

codeium-chrome is an open source code completion plugin for the chrome web browser. The service worker of the codeium-ch

Postal is an open source SMTP server. Postal versions less than 3.0.0 are vulnerable to SMTP Smuggling attacks which may

Nix is a package manager for Linux and other Unix systems. A fixed-output derivations on Linux can send file descriptors