Music Class Enrollment System SQL Injection Vulnerability

Music Class Enrollment System is a music class enrollment system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Music Class Enrollment System version 1.0, which stems from a manipulation of the parameter id that can lead to SQL injection...

Toshiba e-STUDIO Security Vulnerability

Toshiba e-STUDIO is a series of high-end office multifunction printers from Toshiba Japan. A security vulnerability exists in Toshiba e-STUDIO, which originates from improper privilege settings in some programs, which can be used to execute arbitrary code on the multifunction device by hijacking...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a competing condition in the secmediaprotect module of media.c, where a privilege bypass is possible...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from a logic error in the code and a possible bypass method...

AnythingLLM Security Vulnerability

AnythingLLM is a document chatbot that meets business requirements. AnythingLLM has a security vulnerability that stems from the presence of a path traversal vulnerability that could lead to a denial of service DoS attack and unauthorized administrator account takeover...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a contention issue with skreceivequeue in afunix...

SuiteCRM Security Breach

SuiteCRM is a customer relationship management system from the SuiteCRM team. A security vulnerability exists in SuiteCRM. An attacker exploiting this vulnerability could perform a server-side request forgery attack...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a memory leak contained in tpm2keyencode in KEYS trusted...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a security issue in drm/amd/display that could cause the driver to crash...

smartdns security vulnerability

SmartDNS is a DNS server running locally by Nick Peng Personal Developer. A security vulnerability exists in smartdns, which stems from the inclusion of an unaligned address in smartdns/src/dns.c. The vulnerability is caused by the inclusion of an unaligned address in smartdns/src/dns.c...

Argo CD Security Vulnerability

Argo CD is a software application. A declarative GitOps continuous delivery tool for Kubernetes. It continuously monitors running applications and compares the current live state with the desired target state e.g., configuration in a Git repository, automatically synchronizing and deploying...

LoLLMs Security Vulnerabilities

LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A security vulnerability exists in LoLLMs that stems from a path traversal vulnerability in the application...

Oneflow Security Vulnerability

Oneflow is a deep learning framework open-sourced by Oneflow. A security vulnerability exists in Oneflow version v0.9.1 that stems from improper validation of input...

Quivr Code Issue Vulnerability

Quivr is an artificial intelligence application open-sourced by Quivr. A code issue vulnerability exists in Quivr that stems from a server-side request forgery vulnerability in the crawlendpoint function...

Oneflow Security Vulnerability

Oneflow is a deep learning framework open-sourced by Oneflow. A security vulnerability exists in Oneflow version v0.9.1. An attacker exploited the vulnerability to cause a denial of service on the system...

LoLLMs Path Traversal Vulnerability

LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A path traversal vulnerability exists in LoLLMs that stems from a path traversal vulnerability in the application...

AnythingLLM Authorization Issues Vulnerability

AnythingLLM is a document chatbot that meets business requirements. AnythingLLM has an authorization issue vulnerability that stems from the presence of an improper authorization vulnerability...

OpenTelemetry Collector Buffer Error Vulnerability

OpenTelemetry Collector is a software from the OpenTelemetry project for receiving, processing, and exporting telemetry data. A security vulnerability exists in OpenTelemetry Collector that stems from the presence of an insecure unpacking vulnerability that allows an unauthenticated attacker to...

TOTOLINK LR350 安全漏洞

TOTOLINK LR350 is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK LR350 suffers from a command injection vulnerability that stems from being able to perform command injection via the hosttime parameter in the NTPSyncWithHost function. No details of the vulnerability are...

Moodle Security Breach

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle that stems from a stored cross-site scripting XSS vulnerability when editing another user's...