2024

A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext method

The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as

A Prototype Pollution issue in abw badger-database 1.2.1 allows an attacker to execute arbitrary code via dist/badger-da

SQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 allows a local attacker to execute arbitrary code vi

StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the component /shipp

A Prototype Pollution issue in byondreal accessor <= 1.0.0 allows an attacker to execute arbitrary code via @byondreal/a

DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation. If an at

Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This af

A vulnerability was found in itsourcecode Real Estate Management System 1.0. It has been rated as critical. Affected by

Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized user information retrieval via the queryUser API

irodsServerMonPerf in iRODS before 4.3.2 attempts to proceed with use of a path even if it is not a directory.

langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an o

Xenforo before 2.2.16 allows code injection.

Xenforo before 2.2.16 allows CSRF.

Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, beca

In International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in CIccTagXmlProfileSequenceId::ParseXml in Ic

IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability caused by an insufficient authority req

The FooEvents for WooCommerce plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improp

The tagDiv Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.8

The Popup Builder plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a miss

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to un

A vulnerability was found in Guangdong Baolun Electronics IP Network Broadcasting Service Platform 2.0. It has been clas

Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a craft

An arbitrary file upload vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary code via uploading a cra

Aegon Life v1.0 was discovered to contain a SQL injection vulnerability via the client_id parameter at clientStatus.php.

Directory Traversal vulnerability in Mgt-commerce CloudPanel v.2.0.0 thru v.2.4.0 allows a remote attacker to obtain sen

A privilege escalation vulnerability exists in the affected product. The vulnerability allows low-privilege users to edi

Nextcloud Server is a self hosted personal cloud system. A recipient of a share with read&share permissions could reshar

TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow vulnerability via the submit-url parameter

TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow vulnerability via the submit-url parameter

TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow via the submit-url parameter at /formNewSc

TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, w

A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE. The vulnerability allows a u

A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE v12. The vulnerability allows

Nextcloud server is a self hosted personal cloud system. Under some circumstance it was possible to bypass the second fa

LNbits is a Lightning wallet and accounts system. Paying invoices in Eclair that do not get settled within the internal

LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page. Attacker

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWiFiEasyG

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via eport in the function setIpPortFilt

The Folders Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the

Users with "User:edit" and "Self:api" permissions can promote or demote themselves or other users by performing changes

The notification emails sent by Soar Cloud HR Portal contain a link with a embedded session. The expiration of the sessi

Memory management vulnerability in the Gralloc module Impact: Successful exploitation of this vulnerability will affect

Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect a

Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnerability may affect se

ASUS Download Master has a buffer overflow vulnerability. An unauthenticated remote attacker with administrative privile

The specific function parameter of ASUS Download Master does not properly filter user input. An unauthenticated remote a

The WP STAGING Pro WordPress Backup Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versi

The ElementsKit PRO plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including,