2024

An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtoo

An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js

NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handli

In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP s

eLabFTW is an open source electronic lab notebook for research labs. An incorrect permission check has been found that c

Decidim is a participatory democracy framework. The version control feature used in resources is subject to potential XS

In Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive information in memory of

eLabFTW is an open source electronic lab notebook for research labs. In the context of eLabFTW, an administrator is a us

cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_chunk() function at cute_png.h.

cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_stored() function at cute_png.h.

cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_block() function at cute_png.h.

cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_find() function at cute_png.h.

cute_png v1.05 was discovered to contain a stack overflow via the cp_dynamic() function at cute_png.h.

cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_make32() function at cute_png.h.

cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_unfilter() function at cute_png.h.

cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_load_png_mem() function at cute_png.h.

The WP Easy Gallery – WordPress Gallery Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the ‘k

The KB Support – WordPress Help Desk and Knowledge Base plugin for WordPress is vulnerable to unauthorized modification

The 123.chat - Video Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and i

The UltraPress theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.2 via

The Empowerment theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.2 vi

The Unseen Blog theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.0 vi

Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to m

Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set

A vulnerability was found in code-projects Restaurant Reservation System 1.0. It has been classified as critical. This a

The Broken Link Checker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query

A vulnerability was found in code-projects Restaurant Reservation System 1.0 and classified as critical. Affected by thi

RevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability. If this vulnerability is ex

A maliciously crafted DWF file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Use-After-Free. A mali

A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer O

A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Heap-based Buffer Ove

A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Autodesk Navisworks, may force an Out-of-Bou

A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, may force an Out-of-Bounds Writ

A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read.

An issue was discovered in Infinera hiT 7300 5.60.50. Undocumented privileged functions in the @CT management applicatio

An issue was discovered in Infinera hiT 7300 5.60.50. A hidden SSH service (on the local management network interface) w

LoadZilla LLC LoadLogic v1.4.3 was discovered to contain insecure permissions vulnerability which allows a remote attack

An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update package

A stored cross site scripting vulnerability exists in Nessus Network Monitor where an authenticated, privileged local at

An issue in the TP-Link MQTT Broker and API gateway of TP-Link Kasa KP125M v1.0.3 allows attackers to establish connecti

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: Allocate memory for driver

ESAFENET CDG v5 was discovered to contain a SQL injection vulnerability via the id parameter in the NavigationAjax inter

TP-Link WR941ND V6 has a stack overflow vulnerability in the ssid parameter in /userRpm/popupSiteSurveyRpm.htm.

PIX-LINK LV-WR22 RE3002-P1-01_V117.0 is vulnerable to Improper Access Control. The TELNET service is enabled with weak c

Certain switch models from PLANET Technology store SNMPv3 users' passwords in plaintext within the configuration files,

Certain switch models from PLANET Technology have a web application that is vulnerable to Cross-Site Request Forgery (CS

The swctrl service is used to detect and remotely manage PLANET Technology devices. For certain switch models, the authe

A Local File Inclusion vulnerability exists in parisneo/lollms-webui versions below v9.8. The vulnerability is due to un

Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption

Certain switch models from PLANET Technology have an SSH service that improperly handles insufficiently authenticated co