2024

VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the iptablesWebsFilterRun

VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the SystemCommand object.

VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain hardcoded credentials for several different privileged accounts,

Files or Directories Accessible to External Parties vulnerability in National Keep Cyber Security Services CyberMath all

The Advanced File Manager plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, a

The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads via the 'class_fma_connector.php'

Vulnerability in Clibo Manager v1.1.9.1 that could allow an attacker to execute an stored Cross-Site Scripting (stored X

The WordPress Visitors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a spoofed HTTP Header value

Exposure of Sensitive Information to an Unauthorized Actor, Insecure Storage of Sensitive Information vulnerability in M

The Jupiter X Core plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.7

Privilege chaining issue exists in the installer of e-Tax software(common program). If this vulnerability is exploited,

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synolog

Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client

An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print

Power Platform Terraform Provider allows managing environments and other resources within Power Platform. Versions prior

A remote command execution (RCE) vulnerability in promptr v6.0.7 allows attackers to execute arbitrary commands via a cr

An issue in TheGreenBow Windows Standard VPN Client 6.87.108 (and older), Windows Enterprise VPN Client 6.87.109 (and ol

Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from L

Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to

Gigastone TR1 Travel Router R101 v1.0.2 is vulnerable to Command Injection. This allows an authenticated attacker to exe

An issue was discovered in AdaCore ada_web_services 20.0 allows an attacker to escalate privileges and steal sessions vi

A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge

A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an

A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XE Software could allow an unauthentica

A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Ci

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote at

A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could

A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software coul

A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, r

Meshtastic is an open source, off-grid, decentralized, mesh network. Meshtastic uses MQTT to communicate over an interne

Directory Traversal vulnerability in Centro de Tecnologia da Informaco Renato Archer InVesalius3 v3.1.99995 allows attac

VLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer overflow which could be trigge

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Testim

HCL Nomad server on Domino is affected by an open proxy vulnerability in which an unauthenticated attacker can mask thei

OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This

OpenSlides 4.0.15 was discovered to be using a weak hashing algorithm to store passwords.

In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a code execution attack is possible through an in

In Progress Telerik UI for WinForms versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible throu

In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a code execution attack is possible through an in

In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through im

Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the

Improper verification of cryptographic signature during installation of a Printer driver via the TeamViewer_service.exe

Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe comp

In x86's APIC (Advanced Programmable Interrupt Controller) architecture, error conditions are reported in a status regis

When multiple devices share resources and one of them is to be passed through to a guest, security of the entire system

Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reportin

An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS.

The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is

The REST API TO MiniProgram plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the /wp-jso

The The Special Text Boxes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, an