2024

An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers

An authenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build

An unauthenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Bui

An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allo

Incorrect access control in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers

QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based reflected XSS vulnerab

QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cross Site S

An unauthenticated log file read in the component log-smblog-save of QStar Archive Solutions RELEASE_3-0 Build 7 Patch 0

SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information

An issue in rymcu forest v.0.02 allows a remote attacker to obtain sensitive information via manipulation of the HTTP bo

An issue was discovered in NPM's package @evershop/evershop before version 1.0.0-rc.8. The HMAC secret used for generati

Lack of authentication in NPM's package @evershop/evershop before version 1.0.0-rc.8, allows remote attackers to obtain

An issue was discovered in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote attackers with low-level authen

A Stored Cross-Site Scripting (XSS) vulnerability exists in OpenKM version 7.1.40 (dbb6e88) With Professional Extension

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Profile

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MailMunch Constant

A vulnerability, which was classified as critical, has been found in code-projects Dormitory Management System 1.0. Affe

Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local att

A vulnerability classified as critical was found in code-projects Dormitory Management System 1.0. Affected by this vuln

A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0

A directory traversal vulnerability in the SOAP Server integrated in Atos Unify OpenScape Voice V10 before V10R3.26.1 al

CEF (Chromium Embedded Framework ) is a simple framework for embedding Chromium-based browsers in other applications. `C

A vulnerability classified as critical has been found in code-projects Dormitory Management System 1.0. Affected is an u

A vulnerability was found in code-projects Dormitory Management System 1.0. It has been rated as problematic. This issue

Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows befor

A vulnerability was found in Apollo 2.0.0/2.0.1 and classified as problematic. Affected by this issue is some unknown fu

Discourse is a platform for community discussion. For fields that are client editable, limits on sizes are not imposed.

Rubygems.org is the Ruby community's gem hosting service. Rubygems.org users with MFA enabled would normally be protecte

A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been declared as critical. This

A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been classified as critical. Thi

A vulnerability was found in code-projects Human Resource Integrated System 1.0 and classified as critical. Affected by

A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affecte

Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vu

Lif Auth Server is a server for validating logins, managing information, and account recovery for Lif Accounts. The issu

Discourse is a platform for community discussion. Under very specific circumstances, secure upload URLs associated with

Discourse-reactions is a plugin that allows user to add their reactions to the post. Data about a user's reaction notifi

Discourse is a platform for community discussion. The message serializer uses the full list of expanded chat mentions (@

Wazuh is a free and open source platform used for threat prevention, detection, and response. This bug introduced a stac

Clerk helps developers build user management. Unauthorized access or privilege escalation due to a logic flaw in auth()

A vulnerability, which was classified as problematic, was found in code-projects Employee Profile Management System 1.0.

A vulnerability, which was classified as problematic, was found in Acritum Femitter Server 1.04. Affected is an unknown

A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.

A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulner

A vulnerability classified as critical has been found in code-projects Online Faculty Clearance 1.0. This affects an unk

A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The qemu_clipboard_request() f

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be us

NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed b

NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication issue for a critical functi

NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access. A s

NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer o