2024

An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the

Authorization Bypass Through User-Controlled Key vulnerability in Utarit Information SoliClub allows Exploiting Incorrec

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Information SoliClub all

An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of

An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of

Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact al

Possible NLDAP Denial of Service attack Vulnerability in eDirectory has been discovered in OpenText™ eDirectory before

SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a specially craf

The Adicon Server WordPress plugin through 1.2 does not sanitize and escape a parameter before using it in a SQL stateme

Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a

An External XML Entity (XXE) vulnerability in the provisioning web service of Ivanti EPM before 2022 SU6, or the 2024 Se

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated a

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated a

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated a

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated a

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated a

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated a

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated a

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated a

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated a

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.1.0.0 and 9.3.0.8, including 8.3.x, discloses da

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /ap

A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated Glob

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user

A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the time_date function.

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys_conf function.

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys_mgmt function.

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain incorrect access control in the mService function at phpinf.php.

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a code injection vulnerability via the getParams function in phpi

A vulnerability in the storage method of the PON Controller configuration file could allow an authenticated, local attac

Multiple vulnerabilities in Cisco Routed PON Controller Software, which runs as a docker container on hardware that is s

A vulnerability in the segment routing feature for the Intermediate System-to-Intermediate System (IS-IS) protocol of Ci

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to obtain read/write fi

A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD that is use

A vulnerability in the handling of specific Ethernet frames by Cisco IOS XR Software for various Cisco Network Convergen

A vulnerability in the multicast traceroute version 2 (Mtrace2) feature of Cisco IOS XR Software could allow an unauthen

The Samsung Universal Print Driver for Windows is potentially vulnerable to escalation of privilege allowing the creatio

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to data corru

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb vs. core-mm PT locking We

In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix data corruption for degraded array wi

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix page mapping if vm_area_alloc_pages

In the Linux kernel, the following vulnerability has been resolved: memcg_write_event_control(): fix a user-triggerable

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a kernel verifier crash in stacksafe() Da

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Take state lock during tx timeout report

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix IPsec RoCE MPV trace call Prevent th

In the Linux kernel, the following vulnerability has been resolved: netem: fix return value if duplicate enqueue fails

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only decrement add_addr_accepted for MPJ