LOW Severity CVEs

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Information Exposure vuln

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive in

Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a `wasmtime::Engine`'s int

Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high

i2p before 2.3.0 (Java) allows de-anonymizing the public IPv4 and IPv6 addresses of i2p hidden services (aka eepsites) v

Improper check for unusual or exceptional conditions in Intel(R) TDX Module firmware before version 1.5.06 may allow a p

TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree wit

In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings

In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiManager 7.4.2 and below, 7

CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft 2 application when a s

A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualizat

Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows l

In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using PHP-FPM SAPI and it is configu

In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous parsing of multipart form data

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through out-of-bounds write.

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through improper input.

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS by memory leak.

Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (vi

A vulnerability classified as problematic was found in Sovell Smart Canteen System up to 3.0.7303.30513. Affected by thi

A Path Traversal (Local File Inclusion) vulnerability in "BinaryFileRedirector.ashx" in CADClick v1.11.0 and before allo

A vulnerability was found in Netadmin Software NetAdmin IAM up to 3.5 and classified as problematic. Affected by this is

NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can ca

NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can ca

NVIDIA CUDA toolkit for Windows and Linux contains a vulnerability in the nvdisasm command line tool where an attacker m

A remote code execution vulnerability in the project management of Wanxing Technology's Yitu project which allows an att

DataDump is a MediaWiki extension that provides dumps of wikis. Several interface messages are unescaped (more specifica

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Self Cross-Site Scripting (Self-XSS) vulne

A vulnerability classified as problematic has been found in OFCMS 1.1.2. This affects the function add of the file /admi

HCL Nomad server on Domino did not configure certain HTTP Security headers by default which could allow an attacker to o

An issue was discovered in Infinera hiT 7300 5.60.50. Hidden functionality in the web interface allows a remote authenti

An issue was discovered in Infinera hiT 7300 5.60.50. A web application allows a remote privileged attacker to execute a

Smart-tab Android app installed April 2023 or earlier contains an issue with plaintext storage of a password. If this vu

A vulnerability was found in SourceCodester Inventory Management System 1.0. It has been declared as problematic. Affect

A vulnerability has been found in SourceCodester Online Timesheet App 1.0 and classified as problematic. This vulnerabil

A vulnerability classified as problematic has been found in SourceCodester Online Railway Reservation System 1.0. This a

A vulnerability classified as problematic has been found in kalvinGit kvf-admin up to f12a94dc1ebb7d1c51ee978a85e4c7ed75

TopQuadrant TopBraid EDG stores external credentials insecurely. An authenticated attacker with file system access can r

A vulnerability classified as problematic has been found in RelaxedJS ReLaXed up to 0.2.2. Affected is an unknown functi

A vulnerability, which was classified as problematic, was found in funnyzpc Mee-Admin up to 1.6. This affects an unknown

A vulnerability classified as problematic was found in Langflow up to 1.0.18. Affected by this vulnerability is an unkno

A vulnerability classified as problematic has been found in TMsoft MyAuth Gateway 3. Affected is an unknown function of

Information disclosure in Gitlab EE/CE affecting all versions from 15.6 prior to 17.2.8, 17.3 prior to 17.3.4, and 17.4

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to

A vulnerability, which was classified as problematic, has been found in Enpass Password Manager up to 6.9.5 on Windows.

Mattermost versions 9.5.x <= 9.5.8 fail to properly authorize access to archived channels when viewing archived channels

Mattermost versions 9.11.x <= 9.11.0 and 9.5.x <= 9.5.8 fail to validate that the message of the permalink post is a str

Mattermost versions 9.5.x <= 9.5.8 fail to include the metadata endpoints of Oracle Cloud and Alibaba in the SSRF denyli

BTS is affected by information disclosure vulnerability where mobile network operator personnel connected over BTS Web E