2024

Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenti

Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an aut

Improper input validation in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authen

Improper access control in some Intel(R) Optane(TM) PMem 100 Series Management Software before version 01.00.00.3547 may

Improper access control in the Intel(R) Thunderbolt(TM) DCH drivers for Windows may allow an authenticated user to poten

This is a duplicate for CVE-2023-46104. With correct CVE version ranges for affected Apache Superset. Uncontrolled res

Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent una

Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.

Path traversal vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earli

Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and

Cross-site request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9

Improper access control vulnerability exists in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0

Improper authentication vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1

Blind SQL Injection vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a re

Cross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allo

Cross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allo

In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00),

In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00),

In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4

Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that allows loca

Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has

Dell Mobility - E-Lab Navigator, version(s) 3.1.9, 3.2.0, contain(s) an Authorization Bypass Through User-Controlled Key

Digdag is an open source tool that to build, run, schedule, and monitor complex pipelines of tasks across various platfo

Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network

Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via loca

Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of pr

Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Wind

Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Wind

Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Wind

Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via networ

A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated re

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions of TYPO

TYPO3 is an open source PHP based web content management system released under the GNU GPL. The TYPO3-specific `t3://` U

TYPO3 is an open source PHP based web content management system released under the GNU GPL. The plaintext value of `$GLO

TYPO3 is an open source PHP based web content management system released under the GNU GPL. Password hashes were being r

Insecure Permissions issue in Raiden Professional Server RaidenFTPD v.2.4 build 4005 allows a local attacker to gain pri

A user changing their email after signing up and verifying it can change it without verification in profile settings. T

Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter.

Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an

Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.

Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leadin

Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to

Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the A

sidekiq-unique-jobs is an open source project which prevents simultaneous Sidekiq jobs with the same unique arguments to

mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server that imp

sf_event_mgt is an event management and registration extension for the TYPO3 CMS based on ExtBase and Fluid. In affected

A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor rol

A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor rol

A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor rol

A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor rol