2024

Eaton Intelligent Power Manager (IPM) prior to 1.70 is vulnerable to stored Cross site scripting. The vulnerability exis

A vulnerability was found in the Keycloak Server. The Keycloak Server is vulnerable to a denial of service (DoS) attack

A vulnerability was found in welliamcao OpsManage 3.0.1/3.0.2/3.0.3/3.0.4/3.0.5. It has been rated as critical. This iss

A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been declared as problematic.

A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file th

A flaw was found in Keycloak. This issue occurs because sensitive runtime values, such as passwords, may be captured dur

A vulnerability was found in the Keycloak-services package. If untrusted data is passed to the SearchQueryUtils method,

A flaw was found in OpenShift Console. A Server Side Request Forgery (SSRF) attack can happen if an attacker supplies al

A vulnerability was found in code-projects Farmacia 1.0. It has been classified as problematic. This affects an unknown

A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Aff

The WPForms WordPress plugin before 1.9.1.6 does not sanitise and escape some of its settings, which could allow high p

The Photo Gallery, Sliders, Proofing and WordPress plugin before 3.59.5 does not sanitise and escape some of its Image

A vulnerability has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical

A vulnerability, which was classified as critical, was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241

The YaDisk Files WordPress plugin through 1.2.5 does not sanitise and escape some of its settings, which could allow hig

The YaDisk Files WordPress plugin through 1.2.5 does not validate and escape some of its shortcode attributes before out

A vulnerability, which was classified as critical, has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to

A vulnerability classified as critical was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. This vu

A vulnerability classified as critical has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. Th

A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has been rated as critical.

A vulnerability was found in the Ansible Automation Platform (AAP). This flaw allows attackers to escalate privileges by

WikiDocs before 1.0.65 allows stored XSS by authenticated users via data that comes after $$\\, which is mishandled by a

A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has been declared as critic

A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has been classified as crit

A vulnerability was found in Tenda i9 1.0.0.8(3828) and classified as critical. This issue affects the function websRead

A vulnerability has been found in 1000 Projects Beauty Parlour Management System 1.0 and classified as critical. This vu

A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This

A vulnerability, which was classified as critical, has been found in 1000 Projects Beauty Parlour Management System 1.0.

In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It

A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this

Affected devices beacon to eCharge cloud infrastructure asking if there are any command they should run. This communicat

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in hardy-barth cph2_ec

An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24405. It allows remote attackers

An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24344. It allows remote attackers

An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24343. It allows remote attackers

An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24341. It allows remote attackers

An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24339. It allows remote attackers

An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24336. It allows remote attackers

An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24334. It allows remote attackers

The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unsp

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic templ

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in convert.quoted-printab

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_e

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy

IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7

A vulnerability was found in code-projects Simple Car Rental System 1.0. It has been classified as critical. Affected is

A vulnerability was found in DataGear up to 4.60. It has been declared as critical. This vulnerability affects unknown c

A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. This issue affects

The 우커머스 네이버페이 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mnp_purchase shortcode

The 코드엠샵 소셜톡 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's add_plus_friends and add