2024

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ideinteractive Content Audit

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Server-Side Request Forgery (SSRF) vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allow

A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected b

A vulnerability classified as problematic has been found in code-projects Wazifa System 1.0. Affected is an unknown func

A vulnerability was found in code-projects Blood Bank System 1.0. It has been rated as problematic. This issue affects s

A vulnerability was found in code-projects Farmacia 1.0. It has been declared as critical. This vulnerability affects un

A vulnerability was found in code-projects Farmacia 1.0. It has been classified as problematic. This affects an unknown

A vulnerability was found in code-projects Farmacia 1.0 and classified as problematic. Affected by this issue is some un

The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via

Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads

Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access t

Incorrect access control in the component l_0_0.xml of TP-Link ARCHER-C7 v5 allows attackers to access sensitive informa

stalld through 1.19.7 allows local users to cause a denial of service (file overwrite) via a /tmp/rtthrottle symlink att

A vulnerability has been found in code-projects Farmacia 1.0 and classified as problematic. Affected by this vulnerabili

A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems.

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in /batchGetBlockAttrs.

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent.

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory.

Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers.

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient

FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c.

FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer

FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavfo

The Backstage Scaffolder plugin Houses types and utilities for building scaffolder-related modules. A vulnerability is i

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT)

ibm.ibm_zhmc is an Ansible collection for the IBM Z HMC. The Ansible collection "ibm.ibm_zhmc" writes password-like prop

zhmcclient is a pure Python client library for the IBM Z HMC Web Services API. In affected versions the Python package "

Ibexa Admin UI Bundle is all the necessary parts to run the Ibexa DXP Back Office interface. The Content name pattern is

pyjwt is a JSON Web Token implementation in Python. An incorrect string comparison is run for `iss` checking, resulting

check-jsonschema is a CLI and set of pre-commit hooks for jsonschema validation. The default cache strategy uses the bas

@intlify/shared is a shared library for the intlify project. The latest version of @intlify/shared (10.0.4) is vulnerabl

vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to `

sftpgo is a full-featured and highly configurable event-driven file transfer solution. Server protocols: SFTP, HTTP/S, F

veraPDF is an open source PDF/A validation library. Executing policy checks using custom schematron files via the CLI in

Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows

An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of

FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding para

In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to ad

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. An authenticat

Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the construct_copy_div function in copy_and_paste.js.

moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger mult

In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. The vuln

moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.

FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, po

FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder.

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryp

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryp

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a locally authenticated non-administrative user