CRITICAL Severity CVEs

Microsoft Outlook Elevation of Privilege Vulnerability

HTTP Protocol Stack Remote Code Execution Vulnerability

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user wh

BP Monitoring Management System v1.0 was discovered to contain a SQL injection vulnerability via the emailid parameter i

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAM

An attacker with non-administrative authorizations can exploit a directory traversal flaw in program SAPRSBRO to over-wr

SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754,

SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, wh

In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object executio

Due to missing authentication check, SAP NetWeaver AS for Java - version 7.50, allows an unauthenticated attacker to att

maddy is a composable, all-in-one mail server. Starting with version 0.2.0 and prior to version 0.6.3, maddy allows a fu

E-Commerce System v1.0 ws discovered to contain a SQL injection vulnerability via the id parameter at /admin/delete_user

PanIndex is a network disk directory index. In Panindex prior to version 3.1.3, a hard-coded JWT key `PanIndex` is used

The Akuvox E11 web server can be accessed without any user authentication, and this could allow an attacker to access se

The Akuvox E11 password recovery webpage can be accessed without authentication, and an attacker could download the devi

The Akuvox E11 secure shell (SSH) server is enabled by default and can be accessed by the root user. This password canno

PrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php.

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a cr

A Buffer Overflow vulnerabilityexists in Pev 0.81 via the pe_exports function from exports.c.. The array offsets_to_Name

The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some paramete

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the DNSDomainNam

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the wifiFilterLi

OS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands vi

Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment fea

An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is mishandled.

Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sa

Jenkins 2.270 through 2.393 (both inclusive), LTS 2.277.1 through 2.375.3 (both inclusive) does not escape the Jenkins v

An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker t

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saysis Starcities

Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.

Memory corruption due to improper validation of array index in Multi-mode call processor.

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could a

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in various CGI mechanisms th

An issue found in Stoqey gnuplot v.0.0.3 and earlier allows attackers to execute arbitrary code via the src/index.ts, pl

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\au

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alpata Licensed Wa

Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13.

Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate

Online Student Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata paramet

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxt

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/

onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \admin\controller\

An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Akinsoft Wolvox. T

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list.