2024

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a heap overflow in the

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses an inherently dangerous function which could allow

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could give attackers the ability to force Ruijie's prox

The affected product is vulnerable to a command injection. An unauthenticated attacker could send commands through a mal

The affected product is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a weak mechanism for its users to change their

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the

A SQL injection vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote a

An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerabil

A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln

A command injection vulnerability has been reported to affect License Center. If exploited, the vulnerability could allo

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploite

Ubiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attacker

WAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attacke

WAVLINK WN701AE M01AE_V240305 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows

ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 5.5.1 Revision 199 and below is vulnera

ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 2.0 to Version 5.5.1 Revision 199 are v

Unrestricted Upload of File with Dangerous Type vulnerability in roninwp Revy revy allows Upload a Web Shell to a Web Se

Missing Authorization vulnerability in N-Media Simple User Registration wp-registration allows Accessing Functionality N

A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF05). The affected application do not pr

Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member allows Cod

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Marka WordPress

The product is vulnerable to pass-the-hash attacks in combination with hardcoded credentials of hidden user levels. This

An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django

The SV100 Companion plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege e

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow vi

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow vi

In store_upgrade and store_cmd of drivers/input/touchscreen/stm/ftm4_pdc.c, there are out of bound writes due to missing

whapa v1.59 is vulnerable to Command Injection via a crafted filename to the HTML reports component.

DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause

Oxide control plane software before 5 allows SSRF.

STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface. Code running as

Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and un

Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a clien

Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher p

Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials since

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default cred

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default cred

Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in

Absolute File Traversal vulnerabilities allows access and modification of un-intended resources.  Affected products:

Dangerous File Upload vulnerabilities allow upload of malicious scripts.  Affected products: ABB ASPECT - Enterprise v

Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions. 

Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that cou

Unauthorized Access vulnerabilities allow Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.08.02;

Improper Input Validation vulnerability allows Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.0

Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportuni

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in roninwp FAT Servic

An issue in INOVANCE AM401_CPU1608TPTN allows a remote attacker to execute arbitrary code via the ExecuteUserProgramUpgr