2024

pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind m

electron-builder is a solution to package and build a ready for distribution Electron, Proton Native app for macOS, Wind

go-zero is a web and rpc framework. Go-zero allows user to specify a CORS Filter with a configurable allows param - whic

pgx is a PostgreSQL driver and toolkit for Go. Prior to version 4.18.2, SQL injection can occur when all of the followin

1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.10.1-lts, users can

ESPHome is a system to control your ESP8266/ESP32 for Home Automation systems. Starting in version 2023.12.9 and prior t

Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of

CasaOS-UserService provides user management functionalities to CasaOS. Starting in version 0.4.4.3 and prior to version

CasaOS-UserService provides user management functionalities to CasaOS. Starting in version 0.4.4.3 and prior to version

CasaOS-UserService provides user management functionalities to CasaOS. Prior to version 0.4.7, path filtering of the URL

Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to

eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object M

Pega Platform from 7.1.7 to 23.1.1 is affected by an XSS issue with editing/rendering user html content.

A missing permission check in an HTTP endpoint in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers wit

A cross-site request forgery (CSRF) vulnerability in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers

In JetBrains TeamCity before 2023.11.4 presigned URL generation requests in S3 Artifact Storage plugin were authorized i

In JetBrains TeamCity between 2023.11 and 2023.11.4 custom build parameters of the "password" type could be disclosed

In Jenkins Delphix Plugin 3.0.1 through 3.1.0 (both inclusive) a global option for administrators to enable or disable S

In Jenkins Delphix Plugin 3.0.1, a global option for administrators to enable or disable SSL/TLS certificate validation

Jenkins iceScrum Plugin 1.1.6 and earlier does not sanitize iceScrum project URLs on build views, resulting in a stored

A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers with

A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier

Jenkins GitBucket Plugin 0.8 and earlier does not sanitize Gitbucket URLs on build views, resulting in a stored cross-si

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b_3f and earlier does not escape Build Monitor View names, resultin

Jenkins AppSpider Plugin 1.0.16 and earlier does not perform permission checks in several HTTP endpoints, allowing attac

Jenkins MQ Notifier Plugin 1.4.0 and earlier logs potentially sensitive build parameters as part of debug information in

Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check rep

In Jenkins Bitbucket Branch Source Plugin 866.vdea_7dcd3008e and earlier, except 848.850.v6a_a_2a_234a_c81, when discove

Jenkins HTML Publisher Plugin 1.32 and earlier archives invalid symbolic links in report directories on agents and recre

Jenkins HTML Publisher Plugin 1.32 and earlier does not escape job names, report names, and index page titles shown as p

Jenkins HTML Publisher Plugin 1.16 through 1.32 (both inclusive) does not properly sanitize input, allowing attackers wi

A vulnerability in the web-based management interface of Cisco AppDynamics Controller could allow an authenticated, remo

A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote at

A vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could allow an authenticated, l

A vulnerability in the SAML authentication process of Cisco Secure Client could allow an unauthenticated, remote attacke

A vulnerability in the web-based user interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allo

A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs coul

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authentica

In Apache Linkis <=1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source

In Blue Planet® products through 22.12, a misconfiguration in the SAML implementation allows for privilege escalation.

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.8.0 through 1.

This vulnerability exists in AppSamvid software due to the usage of vulnerable and outdated components. An attacker with

This vulnerability exists in AppSamvid software due to the usage of a weaker cryptographic algorithm (hash) SHA1 in user

This vulnerability exists in USB Pratirodh due to the usage of a weaker cryptographic algorithm (hash) SHA1 in user logi

Cross-Site Scripting stored vulnerability in Gophish affecting version 0.12.1. This vulnerability could allow an attacke

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Move scsi_host_busy() out of host lock

In the Linux kernel, the following vulnerability has been resolved: ipmr: fix kernel panic when forwarding mcast packet

In the Linux kernel, the following vulnerability has been resolved: llc: call sock_orphan() at release time syzbot rep

In the Linux kernel, the following vulnerability has been resolved: pds_core: Prevent race issues involving the adminq