2024

A vulnerability, which was classified as critical, was found in SourceCodester Student Attendance System 1.0. Affected i

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv.

Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead

Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead

Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead

Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead

Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead

Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead

A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This f

Tenda AX1803 v1.0.0.1 was discovered to contain a command injection vulnerability via the function fromAdvSetLanIp.

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function getIptvInfo.

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, ob

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, ob

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, ob

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, ob

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, ob

The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a craft

The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a craft

The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a craft

The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP reque

The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code

The vulnerability allows a remote attacker to inject arbitrary HTTP response headers or manipulate HTTP response bodies

The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary clie

The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s ses

The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication datab

The vulnerability allows an authenticated remote attacker to perform actions exceeding their authorized access via craft

The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden hard

A content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update 15 allows a remote atta

The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple

The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under the

The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary

The vulnerability allows an unauthenticated remote attacker to read arbitrary files under the context of the application

The vulnerability allows a remote attacker to download arbitrary files in all paths of the system under the context of t

The vulnerability allows an unauthenticated remote attacker to upload arbitrary files under the context of the applicati

The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s ses

The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the

The vulnerability allows an authenticated remote attacker to download arbitrary files in all paths of the system under t

PublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS). Because files can be uploaded and online preview function is

MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1_uvlc

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Answ

Blind Server-Side Request Forgery (SSRF) vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validat

Buffer Overflow vulnerability in Tenda AX12 V22.03.01.46, allows remote attackers to cause a denial of service (DoS) via

Zentao versions 4.1.3 and before has a URL redirect vulnerability, which prevents the system from functioning properly.

A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker t

A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows

A Cross-Site Scripting (XSS) vulnerability was discovered in Hospital Management System V4.0 which allows an attacker to

A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker t

SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /web_inc.php.

D-Link R15 before v1.08.02 was discovered to contain no firewall restrictions for IPv6 traffic. This allows attackers to