CVE Database

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) …

The CMSMasters Content Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's multiple shortcodes in all versions up to, and including, …

An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via …

Directus is a real-time API and App dashboard for managing SQL database content. Access tokens from query strings are not redacted and are potentially exposed …

PublicCMS V4.0.202406.d was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted script to the Category Managment feature

Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.

Power BI Report Server Spoofing Vulnerability

Microsoft Office Spoofing Vulnerability

Outlook for Android Elevation of Privilege Vulnerability

Visual Studio Collector Service Denial of Service Vulnerability

Code Integrity Guard Security Feature Bypass Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

Sudo for Windows Spoofing Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Mobile Broadband Driver Denial of Service Vulnerability

Windows Mobile Broadband Driver Denial of Service Vulnerability

Windows Mobile Broadband Driver Denial of Service Vulnerability

Windows Mobile Broadband Driver Denial of Service Vulnerability

Windows Mobile Broadband Driver Denial of Service Vulnerability

Windows Kernel-Mode Driver Information Disclosure Vulnerability

Windows Kerberos Information Disclosure Vulnerability

Windows Cryptographic Information Disclosure Vulnerability

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

Windows Mobile Broadband Driver Denial of Service Vulnerability

Windows Mobile Broadband Driver Denial of Service Vulnerability

Windows Mobile Broadband Driver Denial of Service Vulnerability

Windows Mobile Broadband Driver Denial of Service Vulnerability

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

Windows Kernel Denial of Service Vulnerability

BitLocker Security Feature Bypass Vulnerability

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows Resilient File System (ReFS) Information Disclosure Vulnerability

Power BI Report Server Spoofing Vulnerability

Azure Service Fabric for Linux Remote Code Execution Vulnerability

Windows Remote Desktop Services Tampering Vulnerability

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow an …

A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an …

A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user configuring them to …

A flaw was found in Event-Driven Automation (EDA) in Ansible Automation Platform (AAP), which lacks encryption of sensitive information. An attacker with network access could …

SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL …