2024

An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploita

An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requir

An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploit

Privilege escalation in windows agent plugin in Checkmk before 2.2.0p23, 2.1.0p40 and 2.0.0 (EOL) allows local user to e

An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces

Amazon AWS aws-js-s3-explorer (aka AWS JavaScript S3 Explorer) 1.0.0 allows XSS via a crafted S3 bucket name to index.ht

Student Information Chatbot a0196ab allows SQL injection via the username to the login function in index.php.

Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printe

A vulnerability classified as problematic was found in Musicshelf 1.0/1.1 on Android. Affected by this vulnerability is

A vulnerability classified as problematic has been found in Musicshelf 1.0/1.1 on Android. Affected is an unknown functi

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in AOL AIM Triton 1.0.4. It has been declared as problematic.

If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attack

If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged a

A vulnerability has been found in keerti1924 Secret-Coder-PHP-Project 1.0 and classified as problematic. Affected by thi

A vulnerability, which was classified as problematic, was found in Dreamer CMS 4.1.3. Affected is an unknown function of

A vulnerability, which was classified as critical, has been found in Totolink X6000R 9.4.0cu.852_20230719. This issue af

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via

A vulnerability, which was classified as critical, has been found in 1Panel up to 1.10.1-lts. Affected by this issue is

A vulnerability classified as critical was found in CodeAstro Ecommerce Site 1.0. Affected by this vulnerability is an u

A vulnerability classified as critical has been found in CodeAstro Membership Management System 1.0. Affected is an unkn

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. This issu

A vulnerability was found in SourceCodester Tourist Reservation System 1.0. It has been declared as critical. This vulne

The Colibri Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by t

An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to t

Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity (who has access to th

The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocks in all versions up

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site Scripting

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized loss of data d

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized email sending

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized modification o

A command injection vulnerability exists in local RACADM. A malicious authenticated user could gain control of the under

An issue was discovered in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary c

Heap-based Buffer Overflow vulnerability in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to ex

An issue was discovered in Grandstream GXP14XX 1.0.8.9 and GXP16XX 1.0.7.13, allows remote attackers to escalate privile

An issue was discovered in Newland Nquire 1000 Interactive Kiosk version NQ1000-II_G_V1.00.011, allows remote attackers

An issue was discovered in Newland Nquire 1000 Interactive Kiosk version NQ1000-II_G_V1.00.011, allows remote attackers

WeasyPrint helps web developers to create PDF documents. Since version 61.0, there's a vulnerability which allows attach

Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An atta

jose is JavaScript module for JSON Object Signing and Encryption, providing support for JSON Web Tokens (JWT), JSON Web

JWX is Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. This vulnerabili

RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to cause a persistent denial of service (bricking) via

RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request.

CWE-1385 vulnerability in OpenText Documentum D2 affecting versions16.5.1 to CE 23.2. The vulnerability could allow uplo

PostgreSQL Anonymizer v1.2 contains a vulnerability that allows a user who owns a table to elevate to superuser. A user

PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to supe

IBM SPSS Statistics 26.0, 27.0.1, and 28.0 IO Module could allow a local user to create multiple files that could exhaus

A SQL injection vulnerability has been reported to affect myQNAPcloud. If exploited, the vulnerability could allow authe

An injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnera