221 matches found
SQL Injection Vulnerability in NC of UFIDA Network Technology Co.
UFIDA is a leading provider of management software, ERP software, group management software, human resource management software, customer relationship management software, small business management software, financial and administrative institution management software, automotive industry...
CVE-2024-47138 mySCADA myPRO Missing Authentication for Critical Function
The administrative interface listens by default on all interfaces on a TCP port and does not require authentication when being accessed...
High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables
Cybersecurity researchers have disclosed a high-severity security flaw in the PostgreSQL open-source database system that could allow unprivileged users to alter environment variables, and potentially lead to code execution or information disclosure. The vulnerability, tracked as CVE-2024-10979 ,...
Multiple Siemens Products Input Validation Error Vulnerability (CNVD-2024-44937)
SCALANCE M-800, MUM-800 and S615 and RUGGEDCOM RM1224 are industrial routers. An input validation error vulnerability exists in multiple Siemens products and can be exploited by attackers to compromise system integrity...
BELL-CVE-2024-50023
Bulletin has no description...
CVE-2024-42458
server.c in Neat VNC aka neatvnc before 0.8.1 does not properly validate the security type, a related issue to CVE-2006-2369...
BELL-CVE-2024-41011
Bulletin has no description...
CVE-2024-21741
GigaDevice GD32E103C8T6 devices have Incorrect Access Control...
CVE-2024-36549
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/vpsCompanydeal.php?mudi=rev&nohrefStr=close...
CVE-2024-35629
CVE-2024-35629 affects the WordPress plugin Easy Digital Downloads – Recent Purchases (versions
Intel® Neural Compressor Software Advisory
Summary: Potential security vulnerabilities in some Intel® Neural Compressor software may allow escalation of privilege and information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-22476 Description: Improper...
CVE-2024-21022
...
manipulyator-77.ru Cross Site Scripting vulnerability OBB-3917014
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
gymger.de Cross Site Scripting vulnerability OBB-3913532
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
oakwoodescrow.com Cross Site Scripting vulnerability OBB-3908387
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
jewishvirtualreality.com Cross Site Scripting vulnerability OBB-3906594
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
franciscosautorepair.com Cross Site Scripting vulnerability OBB-3905998
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2024-15869 · WordPress · Appointment Booking Calendar
Name of the Vulnerable Software and Affected Versions: Appointment Booking Calendar WordPress plugin versions prior to 1.3.83 Description: The issue concerns a lack of CSRF checks in certain areas, potentially allowing attackers to trick logged-in users into performing unwanted actions, such as...
Arm DS for Intel® SoC FPGA Software Advisory
This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00930.html...
