2024

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, which may

The MachineSense application programmable interface (API) is improperly protected and can be accessed without authe

Multiple MachineSense devices have credentials unable to be changed by the user or administrator.

Gessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if exploited could allow an

Objectplanet Opinio version 7.22 and prior uses a cryptographically weak pseudo-random number generator (PRNG) coupled t

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy S

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In versions 0.3.10 and earlier, the bounds

Mastodon is a free, open-source social network server based on ActivityPub Mastodon allows configuration of LDAP for aut

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. I

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A

SQL injection vulnerability in Enterprise Architect 16.0.1605 32-bit allows attackers to run arbitrary SQL commands via

A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious user to obtain the s

In Notion Web Clipper 1.0.3(7), a .nib file is susceptible to the Dirty NIB attack. NIB files can be manipulated to exec

An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the desc paramet

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the url paramete

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable param

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the port or enab

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable param

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable param

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pppoePass pa

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the arpEnable pa

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable param

TOTOLINK A8000RU v7.1cu.643_B20200521 was discovered to contain a hardcoded password for root stored in /etc/shadow.

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric

CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component. After configuring password a

Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation.

Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter.

DoraCMS 2.1.8 is vulnerable to Use of Hard-coded Cryptographic Key.

DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm.

Nginx-UI is a web interface to manage Nginx configurations. The Import Certificate feature allows arbitrary write into t

Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacke

An issue in Kap for macOS version 3.6.0 and before, allows remote attackers to execute arbitrary code via the RunAsNode

An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNod

An issue in Hyper on macOS version 3.4.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode

An issue in Discord for macOS version 0.0.291 and before, allows remote attackers to execute arbitrary code via the RunA

An issue in Postman version 10.22 and before on macOS allows a remote attacker to execute arbitrary code via the RunAsNo

Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL

Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxl_a

UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::U

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenti

An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the status path script entry in the configuration

An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the FAS key entry in the configuration file, allo

An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the gateway FQDN entry in the configuration file,

An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the network interface name entry in the configura

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and

An arbitrary firmware upload vulnerability exists in the Motorola MR2600. An attacker can exploit this vulnerability to

An authentication bypass vulnerability exists in the web component of the Motorola MR2600. An attacker can exploit this

A command injection vulnerability exists in the 'SaveStaticRouteIPv6Params' parameter of the Motorola MR2600. A remote