LOW Severity CVEs

A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /d

Element is a Matrix web client built using the Matrix React SDK. Versions of Element Web and Desktop earlier than 1.11.8

A vulnerability was found in ZZCMS up to 2023. It has been rated as problematic. Affected by this issue is some unknown

A vulnerability was found in Digistar AG-30 Plus 2.6b. It has been classified as problematic. Affected is an unknown fun

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM

Exposure of sensitive system information to an unauthorized control sphere issue exists in Mesh Wi-Fi router RP562B firm

Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a Files or Directories Acc

A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected b

The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to arbitrary file deletion due to insufficie

A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. Thi

Cash Operations does not perform necessary authorization check for an authenticated user, resulting in escalation of pri

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. Affected by this vuln

In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapp

A vulnerability, which was classified as problematic, has been found in Sanluan PublicCMS 5.202406.d. This issue affects

Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are

A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are

Certain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not present, allow memory re

A vulnerability was found in AMTT Hotel Broadband Operation System up to 3.0.3.151204 and classified as problematic. Thi

A vulnerability classified as problematic has been found in ZKTeco ZKBio Time 9.0.1. Affected is an unknown function of

Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1, 9.5.x <= 9.5.9 and 10.0.x <= 10.0.0 fail to properly authorize t

Mattermost versions 9.11.x <= 9.11.2, and 9.5.x <= 9.5.10 fail to protect the mfa code against replay attacks, which all

A vulnerability was found in Intelligent Apps Freenow App 12.10.0 on Android. It has been rated as problematic. Affected

Northern.tech Hosted Mender before 2024.07.11 allows SSRF.

Dell PowerProtect DD, versions prior to 7.7.5.50, contains an Exposure of Sensitive Information to an Unauthorized Actor

Combodo iTop is a web based IT Service Management tool. An attacker accessing a backup file or the database can read som

HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be sto

A vulnerability was found in MonoCMS up to 20240528. It has been declared as problematic. Affected by this vulnerability

A vulnerability was found in MonoCMS up to 20240528. It has been classified as problematic. Affected is an unknown funct

symfony/http-foundation is a module for the Symphony PHP framework which defines an object-oriented layer for the HTTP s

symfony/validator is a module for the Symphony PHP framework which provides tools to validate values. It is possible to

symfony/http-client is a module for the Symphony PHP framework which provides powerful methods to fetch HTTP resources s

symfony/security-bundle is a module for the Symphony PHP framework which provides a tight integration of the Security co

A vulnerability was found in IBPhoenix ibWebAdmin up to 1.0.2 and classified as problematic. This issue affects some unk

Twig is a template language for PHP. In a sandbox, an attacker can access attributes of Array-like objects as they were

Twig is a template language for PHP. In a sandbox, an attacker can call `__toString()` on an object even if the `__toStr

A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to upload files to arbitrary locat

A vulnerability was found in mariazevedo88 travels-java-api up to 5.0.1 and classified as problematic. Affected by this

Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi passw

Improper access control in Dex Mode prior to SMR Nov-2024 Release 1 allows physical attackers to temporarily access to u

In the Linux kernel, the following vulnerability has been resolved: net: netconsole: fix wrong warning A warning is tr

A vulnerability, which was classified as problematic, has been found in romadebrian WEB-Sekolah 1.0. Affected by this is

A vulnerability classified as problematic has been found in romadebrian WEB-Sekolah 1.0. Affected is an unknown function

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through out-of-bounds read.

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been rated as problematic. This issue aff

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as problematic. This vulner

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in `ParseWithClaims` c

A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects

A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Shopping Portal 2.0. Affected

A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. Affected by this vulnerabi

A vulnerability classified as problematic has been found in PHPGurukul Online Shopping Portal 2.0. Affected is an unknow