2024

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

Windows TCP/IP Remote Code Execution Vulnerability

A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limited,an atta

auditor-bundle, formerly known as DoctrineAuditBundle, integrates auditor library into any Symfony 3.4+ application. Pri

body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding

An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference

Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.

Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.

Bareos is open source software for backup, archiving, and recovery of data for operating systems. When a command ACL is

An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortine

Very large headers can cause resource exhaustion when parsing message. The message-parser normally reads reasonably size

phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php.

Arbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd OfficeWeb365 v.7.18.23.0 and v8.6.1.0 al

Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.

Loftware Spectrum before 5.1 allows SSRF.

The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulner

A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (Al

A vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0) (All versions), SIMATIC S7-200

A vulnerability has been identified in SINUMERIK 828D V4 (All versions), SINUMERIK 828D V5 (All versions < V5.24), SINUM

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0015), Tecnomatix Plant S

Improper Control of Generation of Code ('Code Injection') in Electron Fuses in Logitech Options Plus version 1.60.496306

An low privileged remote attacker can execute OS commands with root privileges due to improper neutralization of special

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, pa

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, pa

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, pa

A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding

A low privileged remote attacker can perform configuration changes of the ospf service through OSPF_INTERFACE.SIMPLE_KEY

A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validatio

A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in

A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralizati

A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralizati

Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a Use of a Broken or Risky Cryptographic Algorithm vulnera

Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a File or Directories Accessible to External Parties vulne

Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command ('Command

The The Affiliate Super Assistent plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up

The Frontend Dashboard plugin for WordPress is vulnerable to unauthorized code execution due to insufficient filtering o

In Baxter Connex health portal released before 8/30/2024, an improper access control vulnerability has been found that c

AutoCMS v5.4 was discovered to contain a SQL injection vulnerability via the sidebar parameter at /admin/robot.php.

AutoCMS v5.4 was discovered to contain a PHP code injection vulnerability via the txtsite_url parameter at /admin/site_a

A session fixation issue was discovered in the SAML adapters provided by Keycloak. The session ID and JSESSIONID cookie

Twig is a template language for PHP. Under some circumstances, the sandbox security checks are not run which allows user

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular exp

D-Link DI-7003G v19.12.24A1, DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.

D-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.

D-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.

SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component admin_safe.php.

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. The external-secr

D-Link DI-8100 v16.07.26A1 has a stack overflow vulnerability in the dbsrv_asp function.

Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk

A vulnerability classified as critical was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. This vulnerability affects