2024

If exploited an attacker could traverse the file system to access files or directories that would otherwise be inaccess

An uncontrolled resource consumption of file descriptors in SEH Computertechnik utnserver Pro, SEH Computertechnik utnse

Missing input validation and OS command integration of the input in the utnserver Pro, utnserver ProMAX, INU-100 web-int

Missing input validation in the SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertec

An authentication bypass vulnerability has been identified in the REST and SOAP API components of Tripwire Enterprise (T

Missing Authentication for Critical Function vulnerability in EMTA Grup PDKS allows Exploiting Incorrectly Configured Ac

HTTP request desynchronization in Ping Identity PingAccess, all versions prior to 8.0.1 affected allows an attacker to s

Insufficiently Protected Credentials vulnerability in Baxter Welch Allyn Configuration Tool may allow Remote Services wi

Use of Default Cryptographic Key vulnerability in Baxter Welch Allyn Connex Spot Monitor may allow Configuration/Environ

The Campbell Scientific CSI Web Server stores web authentication credentials in a file with a specific file name. Passwo

The Campbell Scientific CSI Web Server supports a command that will return the most recent file that matches a given exp

If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Grup Arge Energy a

The affected device expose a network service called "rftest" that is vulnerable to unauthenticated command injection on

Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows allows Malicious Software

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Netflix ConsoleMe a

An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote c

A vulnerability in the web-based management interface of multiple Ligowave devices could allow an authenticated remote a

If misconfigured, alpitronic Hypercharger EV charging devices can expose a web interface protected by authentication. I

An issue in Laravel Framework 8 through 11 might allow a remote attacker to discover database credentials in storage/log

ThreeTen Backport v1.6.8 was discovered to contain an integer overflow via the component org.threeten.bp.format.DateTime

std::bad_alloc is mishandled in Precomp 0.4.8. NOTE: this is disputed because it should be categorized as a usability pr

GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_err

Some Microsoft technologies as used in Windows 8 through 11 allow a temporary client-side performance degradation during