2024

An HTTP Request Smuggling vulnerability in Looker allowed an unauthorized attacker to capture HTTP responses destined fo

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tainacan Tainacan

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx Backup and

Type confusion in WebAssembly in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to execute arbitrary co

Extract is aA Go library to extract archives in zip, tar.gz or tar.bz2 formats. A maliciously crafted archive may allow

Incorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change usernames via sending a

A vulnerability was discovered in FBM_292W-21.03.10V, which has been classified as critical. This issue affects the sub_

A vulnerability was discovered in DI_8200-16.07.26A1, which has been classified as critical. This issue affects the upgr

An issue was discovered in Atos Eviden SMC xScale before 1.6.6. During initialization of nodes, some configuration param

A DLL hijack vulnerability was reported in Lenovo stARstudio that could allow a local attacker to execute code with elev

In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after

A DLL hijack vulnerability was reported in Lenovo Lock Screen that could allow a local attacker to execute code with ele

A DLL hijack vulnerability was reported in Lenovo Emulator that could allow a local attacker to execute code with elevat

A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with eleva

A DLL hijack vulnerability was reported in Lenovo Super File that could allow a local attacker to execute code with elev

An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and escalate privileges via the

SQL injection vulnerability in employee-management-system-php-and-mysql-free-download.html taskmatic 1.0 allows a remote

An Improper Validation of Specified Type of Input vulnerability in the packet forwarding engine (pfe) Juniper Networks J

An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved

An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Ne

An Uncontrolled Resource Consumption vulnerability in the http daemon (httpd) of Juniper Networks Junos OS on SRX Series

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Packet Forwarding Engine (PF

Incorrect access control in the component app/src/server.js of Mirotalk before commit 9de226 allows unauthenticated atta

A Command Injection vulnerability in Juniper Networks Junos Space allows an unauthenticated, network-based attacker send

An Improper Handling of Exceptional Conditions vulnerability in the rpd-server of Juniper Networks Junos OS and Junos OS

A DLL hijack vulnerability was reported in Lenovo Service Framework that could allow a local attacker to execute code wi

A DLL hijack vulnerability was reported in Lenovo PC Manager AI intelligent scenario that could allow a local attacker t

A DLL hijack vulnerability was reported in Lenovo Personal Cloud that could allow a local attacker to execute code with

A DLL hijack vulnerability was reported in Lenovo Baiying that could allow a local attacker to execute code with elevate

A DLL hijack vulnerability was reported in Lenovo Leyun that could allow a local attacker to execute code with elevated

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.This

Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. When parsi

Quicly is an IETF QUIC protocol implementation. Quicly up to commtit d720707 is susceptible to a denial-of-service attac

CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentialit

CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Exp

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.6 prior to 17.2.9, starting from 17.3 pr

A Server-Side Request Forgery (SSRF) vulnerability in SMA1000 appliance firmware versions 12.4.3-02676 and earlier allow

The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12

A vulnerability classified as critical has been found in SourceCodester Online Veterinary Appointment System 1.0. Affect

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **race condition**

Gradio is an open-source Python package designed for quick prototyping. This is a **data validation vulnerability** affe

Gradio is an open-source Python package designed for quick prototyping. This vulnerability is a **lack of integrity chec

A vulnerability, which was classified as critical, was found in Codezips Pharmacy Management System 1.0. Affected is an

Gradio is an open-source Python package designed for quick prototyping. This vulnerability is related to **CORS origin v

A vulnerability, which was classified as critical, has been found in Codezips Pharmacy Management System 1.0. This issue

A vulnerability classified as critical was found in code-projects Crud Operation System 1.0. This vulnerability affects

A vulnerability classified as critical has been found in code-projects Restaurant Reservation System 1.0. This affects a

A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or

Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate use

Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of a