2024

Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU

diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as .

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID.

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update.

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN.

Code-projects Simple Stock System 1.0 is vulnerable to SQL Injection.

SQL injection vulnerability in Dynamic Lab Management System Project in PHP v.1.0 allows a remote attacker to execute ar

An arbitrary file upload vulnerability in the Update/Edit Student's Profile Picture function of Student Enrollment In PH

An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially

Cross Site Scripting vulnerability in 71CMS v.1.0.0 allows a remote attacker to execute arbitrary code via the uploadfil

An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices. It provides information

An issue was discovered in Linksys Router E1700 version 1.0.04 (build 3), allows authenticated attackers to execute arbi

An issue was discovered in Linksys Router E1700 1.0.04 (build 3), allows authenticated attackers to escalate privileges

An issue was discovered on Innovaphone PBX before 14r1 devices. The password form, used to authenticate, allows a Brute

SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL c

Minder is a Software Supply Chain Security Platform. In version 0.0.31 and earlier, it is possible for an attacker to re

A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote

SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary S

Cross Site Request Forgery vulnerability in Bagisto before v.1.5.1 allows an attacker to execute arbitrary code via a cr

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. If an excessively large value is specified

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using the built-in `extract32(b, star

An issue in the anchors subparser of Showdownjs versions <= 2.1.0 could allow a remote attacker to cause denial of servi

fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia/calyptia.c.

libming 0.4.8 contains a memory leak vulnerability in /libming/src/actioncompiler/listaction.c.

OpenDMARC 1.4.2 contains a null pointer dereference vulnerability in /OpenDMARC/libopendmarc/opendmarc_policy.c.

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iove

In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: fix info leak in hid_submit_ctrl In h

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential deadlock Using f2fs_t

In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap

In the Linux kernel, the following vulnerability has been resolved: netlabel: fix out-of-bounds memory accesses There

es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into

Kirby is a content management system. The new link field introduced in Kirby 4 allows several different link types that

ESPHome is a system to control your ESP8266/ESP32. A security misconfiguration in the edit configuration file API in the

nanomq 0.21.2 contains a Use-After-Free vulnerability in /nanomq/nng/src/core/socket.c.

An issue in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted script to the /usr/local/n

SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payl

rack-cors (aka Rack CORS Middleware) 2.0.1 has 0666 permissions for the .rb files.

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token wh

orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents.

pretix before 2024.1.1 mishandles file validation.

langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-

Certain WithSecure products allow a Denial of Service because the engine scanner can go into an infinite loop when proce

Amazon Fire OS 7 before 7.6.6.9 and 8 before 8.1.0.3 allows Fire TV applications to establish local ADB (Android Debug B

In the Linux kernel, the following vulnerability has been resolved: binder: signal epoll threads of self-work In (e)po

In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix deadlock when enabling ASPM A last m

In the Linux kernel, the following vulnerability has been resolved: Revert "kobject: Remove redundant checks for whethe

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Stop relying on userspace for info to faul

In the Linux kernel, the following vulnerability has been resolved: sched/membarrier: reduce the ability to hammer on s

In the Linux kernel, the following vulnerability has been resolved: ext4: regenerate buddy after block freeing failed i

In the Linux kernel, the following vulnerability has been resolved: phy: ti: phy-omap-usb2: Fix NULL pointer dereferenc