2024

A vulnerability classified as critical has been found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. This affects the func

A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. It has been rated as critical. Affected by this i

A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. It has been declared

A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. It has been classifie

A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220 and classified as critical. This issue affects the

A vulnerability, which was classified as critical, was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/

A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. Affected by t

A vulnerability, which was classified as critical, has been found in itsourcecode Payroll Management System 1.0. This is

A vulnerability was found in SourceCodesters Clinics Patient Management System 2.0. It has been rated as critical. This

A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remo

An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remot

A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service service account. This atta

A server side request forgery vulnerability allows a low-privileged user to perform local privilege escalation through e

An improper certificate validation vulnerability in TLS certificate validation allows an attacker on the same network to

A vulnerability that allows a user who has been assigned a low-privileged role within Veeam Backup & Replication to alte

A path traversal vulnerability allows an attacker with a low-privileged account and local access to the system to perfor

A series of related high-severity vulnerabilities, the most notable enabling remote code execution (RCE) as the service

A missing authorization vulnerability allows a local low-privileged user on the machine to escalate their privileges to

An improper input validation vulnerability that allows a low-privileged user to remotely remove files on the system with

A code injection vulnerability that allows a low-privileged user with REST API access granted to remotely upload arbitra

A code injection vulnerability can allow a low-privileged user to overwrite files on that VSPC server, which can lead to

Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions

Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked version of OpenSSL whi

A vulnerability in Node.js version 20 allows for bypassing restrictions set by the --experimental-permission flag using

A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This f

fs.openAsBlob() can bypass the experimental permission model when using the file system read restriction with the `--all

IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically define

The Pinpoint Booking System – #1 WordPress Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the ‘s

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an uploaded file (e

Example DAG: example_inlet_event_extra.py shipped with Apache Airflow version 2.10.0 has a vulnerability that allows an

Apache Airflow versions before 2.10.1 have a vulnerability that allows DAG authors to add local settings to the DAG fold

DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the value para

DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the name param

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. T

An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially

An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability co

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability cou

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploi

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul

A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow aut

An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could a

An OS command injection vulnerability has been reported to affect legacy QTS. If exploited, the vulnerability could allo

A missing authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited,

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

A vulnerability was found in Forklift Controller.  There is no verification against the authorization header except to e

The HL7 FHIR Core Artifacts repository provides the java core object handling code, with utilities (including validator)