2024

Dell Wyse Management Suite, version WMS 4.4 and before, contain an Authentication Bypass by Capture-replay vulnerability

A vulnerability was found in CodeAstro Hospital Management System 1.0. It has been declared as problematic. This vulnera

A vulnerability was found in CodeAstro Hospital Management System 1.0. It has been classified as problematic. This affec

The Booking & Appointment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data

IBM Data Virtualization Manager for z/OS 1.1 and 1.2 could allow an authenticated user to inject malicious JDBC URL para

A vulnerability was found in CodeAstro Hospital Management System 1.0 and classified as problematic. Affected by this is

A vulnerability has been found in CodeAstro Hospital Management System 1.0 and classified as problematic. Affected by th

@dapperduckling/keycloak-connector-server is an opinionated series of libraries for Node.js applications and frontend cl

A vulnerability, which was classified as critical, was found in CodeAstro Hospital Management System 1.0. Affected is an

A vulnerability, which was classified as problematic, has been found in 1000 Projects Bookstore Management System 1.0. T

masterstack_imgcap v0.0.1 was discovered to contain a SQL injection vulnerability via the endpoint /submit.

A Client-Side Template Injection (CSTI) vulnerability in the component /project/new/scrum of Taiga v 8.6.1 allows remote

In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and

In the Linux kernel, the following vulnerability has been resolved: nvme: tcp: avoid race between queue_lock lock and d

In the Linux kernel, the following vulnerability has been resolved: bpf: Check validity of link->type in bpf_link_show_

In the Linux kernel, the following vulnerability has been resolved: drm/xe/ufence: Prefetch ufence addr to catch bogus

In the Linux kernel, the following vulnerability has been resolved: mm: krealloc: Fix MTE false alarm in __do_krealloc

In the Linux kernel, the following vulnerability has been resolved: mm: resolve faulty mmap_region() error path behavio

An Open Redirect vulnerability in Taiga v6.8.1 allows attackers to redirect users to arbitrary websites via appending a

A NoSQL injection vulnerability in Adapt Learning Adapt Authoring Tool <= 0.11.3 allows unauthenticated attackers to res

Incorrect access control in Adapt Learning Adapt Authoring Tool <= 0.11.3 allows attackers with Authenticated User roles

Joplin is an open source, privacy-focused note taking app with sync capabilities for Windows, macOS, Linux, Android and

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. The static error.html

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. "Unsanitized input fro

Autolab is a course management service that enables auto-graded programming assignments. From Autolab versions v.3.0.0 o

A cross-site scripting (XSS) vulnerability in the /scroll.php endpoint of LafeLabs Chaos v0.0.1 allows attackers to exec

BoidCMS is a free and open-source flat file CMS for building simple websites and blogs, developed using PHP and uses JSO

The ngtcp2 project is an effort to implement IETF QUIC protocol in C. In affected versions acks are not validated before

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For users with the following

A Stored Cross-Site Scripting (XSS) vulnerability in the Management Console of BlackBerry AtHoc version 7.15 could allow

Deno is a runtime for JavaScript and TypeScript written in rust. Several cross-site scripting vulnerabilities existed in

The com.uaudio.bsd.helper service, responsible for handling privileged operations, fails to implement critical client va

The application Sensei Mac Cleaner contains a local privilege escalation vulnerability, allowing an attacker to perform

An issue in the upload_documents method of libre-chat v0.0.6 allows attackers to execute a path traversal via supplying

An issue was discovered in Centreon centreon-open-tickets 24.10.x before 24.10.0, 24.04.x before 24.04.2, 23.10.x before

An issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 2

IBM Jazz Foundation 7.0.2 and below are vulnerable to cross-site scripting. This vulnerability allows users to embed arb

IBM Jazz Foundation 7.0.2 and 7.0.3 could allow a user to change their dashboard using a specially crafted HTTP request

Incorrect authorization in the add permission component in Devolutions Remote Desktop Manager 2024.2.21 and earlier on W

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on

Incorrect authorization in the permission validation component of Devolutions Remote Desktop Manager 2024.2.21 and earli

Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large a

There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. Th

Improper handling of WiFi information by framework services can allow certain malicious applications to obtain sensitive

Improper control of framework service permissions with possibility of some sensitive device information leakage.

A vulnerability, which was classified as critical, has been found in eNMS up to 4.2. Affected by this issue is the funct

A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an u

IPP software prior to v1.71 is vulnerable to default credential vulnerability. This could lead attackers to identify and

IPP software versions prior to v1.71 do not sufficiently verify the authenticity of data, in a way that causes it to acc