2024

Malwarebytes Binisoft Windows Firewall Control before 6.9.9.2 allows remote attackers to execute arbitrary code via gRPC

An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.

An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.

libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.

libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in th

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with a

Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwri

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in blockmason credit-protocol. It has been declared as problem

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD

A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue ma

A vulnerability was found in mpedraza2020 Intranet del Monterroso up to 4.50.0. It has been classified as critical. This

A vulnerability was found in planet-freo up to 20150116 and classified as problematic. Affected by this issue is some un

IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability al

IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1020.00 through FW1020.40, and FW1030.00 through FW1030.30 could rev

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been rated as problematic. Affected by

curl inadvertently kept the SSL session ID for connections in its cache even when the verify status (*OCSP stapling*) te

A host header injection vulnerability in the HTTP handler component of Crafty Controller allows a remote, unauthenticate

The Jinja templating in Logpoint SIEM 6.10.0 through 7.x before 7.3.0 does not correctly sanitize log data being display

Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitr

Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows read-only users to

HCL DevOps Deploy / HCL Launch (UCD) could disclose sensitive user information when installing the Windows agent.

The Anonymous Restricted Content plugin for WordPress is vulnerable to information disclosure in all versions up to, and

The PDF Flipbook, 3D Flipbook – DearFlip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via outline s

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an att

A vulnerability was found in Jspxcms 10.2.0 and classified as problematic. Affected by this issue is some unknown functi

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V

A vulnerability has been found in CodeAstro Employee Task Management System 1.0 and classified as problematic. Affected

A vulnerability, which was classified as critical, was found in openBI up to 6.0.3. Affected is the function addxinzhi o

A vulnerability, which was classified as critical, has been found in SourceCodester Testimonial Page Manager 1.0. This i

A vulnerability classified as problematic was found in SourceCodester Testimonial Page Manager 1.0. This vulnerability a

A vulnerability classified as critical was found in iTop VPN up to 4.0.0.1. Affected by this vulnerability is an unknown

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a s

A vulnerability classified as problematic has been found in Armcode AlienIP 2.41. Affected is an unknown function of the

A vulnerability was found in Navicat 12.0.29. It has been rated as problematic. This issue affects some unknown processi

A vulnerability was found in Global Scape CuteFTP 9.3.0.3 and classified as problematic. Affected by this issue is some

A vulnerability has been found in AMPPS 2.7 and classified as problematic. Affected by this vulnerability is an unknown

A reflected cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly al

A vulnerability, which was classified as problematic, was found in Rizone Soft Notepad3 1.0.2.350. Affected is an unknow

A vulnerability, which was classified as problematic, has been found in Munsoft Easy Outlook Express Recovery 2.0. This

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. When calls to external contracts are made,

AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to 1.7.5,

A vulnerability classified as problematic was found in Munsoft Easy Archive Recovery 2.0. This vulnerability affects unk

mailcow is a dockerized email package, with multiple containers linked in one bridged network. A security vulnerability

open-irs is an issue response robot that reponds to issues in the installed repository. The `.env` file was accidentally