2024

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a remote authenticated attacker to execute arbitr

WithSecure Elements Agent for Mac before 24.3, MDR before 24.3, and Elements Client Security for Mac before 16.10 allow

In prestashop 8.1.4, a NULL pointer dereference was identified in the math_round function within Tools.php.

Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the replace_emoji_with_text function in ui_util.ts.

FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow w

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists d

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L, <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Cod

Buffer Overflow vulnerability in SunBK201 umicat through v.0.3.2 and fixed in v.0.3.3 allows an attacker to execute arbi

nodemcu before v3.0.0-release_20240225 was discovered to contain an integer overflow via the getnum function at /modules

Absolute path traversal vulnerability in Quick.CMS, version 6.7, the exploitation of which could allow remote users to b

A Cross-Site Scripting (XSS) vulnerability in SurgeMail v78c2 could allow an attacker to execute arbitrary JavaScript co

FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in t

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p22, <2.2.0p37, <2.1.0p50 (EOL

A XML External Entity (XXE) vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across mu

Certain models of routers from Billion Electric has an OS Command Injection vulnerability, allowing remote attackers wit

Certain models of routers from Billion Electric has a Plaintext Storage of a Password vulnerability. Remote attackers wi

A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code exe

A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper han

Cross-site request forgery (CSRF) vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 u

Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27,

Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated atta

Multiple FCNT Android devices provide the original security features such as "privacy mode" where arbitrary applications

pyspider through 0.3.10 allows /update XSS. NOTE: This vulnerability only affects products that are no longer supported

Certain modes of routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated rem

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) WordPress

The Photo Gallery by 10Web WordPress plugin before 1.8.31 does not sanitise and escape some of its settings, which coul

In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of th

MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking.

LinkStack 2.7.9 through 4.7.7 allows resources\views\components\favicon.blade.php link SSRF.

In Click Studios Passwordstate before build 9920, there is a potential permission escalation on the edit folder screen.

Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text

DreamMaker from Interinfo has a Path Traversal vulnerability and does not restrict the types of uploaded files. This all

DreamMaker from Interinfo has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi E

Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsub

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi E

A vulnerability classified as problematic was found in Guizhou Xiaoma Technology jpress 5.1.2. Affected by this vulnerab

A vulnerability classified as critical has been found in code-projects Concert Ticket Ordering System 1.0. Affected is a

A vulnerability was found in code-projects Farmacia up to 1.0. It has been declared as critical. Affected by this vulner

A vulnerability was found in PHPGurukul Complaint Management system 1.0. It has been classified as critical. Affected is

A vulnerability was found in PHPGurukul Complaint Management system 1.0 and classified as critical. This issue affects s

Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions 4.0.0 through 16.1.0

A vulnerability has been found in PHPGurukul Complaint Management system 1.0 and classified as critical. This vulnerabil

A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management system 1.0. This affects

The NetCloud Exchange client for Windows, version 1.110.50, contains an insecure file and folder permissions vulnerabili