CVE-2024-36404 : GEOTOOLS UP TO 29.5/30.3/31.1 NEUTRALIZATION OF DIRECTIVES
Description GeoTools is an open source Java library that provides tools for geospatial data. Prior to versions 31.2, 30.4, and
CVE-2024-4708 : MYSCADA MYPRO 7/8.20.0/8.26/8.27.0/8.29.0 HARD-CODED PASSWORD
Description mySCADA myPRO uses a hard-coded password which could allow an attacker to remotely execute code on the affected device.
CVE-2022-25480 : REALTEK RTSPER DRIVER FOR PCIE CARD READER KERNEL MEMORY RTSPER.SYS BUFFER OVERFLOW
Description Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card
CVE-2024-6382 : MONGODB RUST DRIVER UP TO 2.8.1 SYNTACTICALLY INVALID STRUCTURE
Description Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause
CVE-2024-39891 : TWILIO AUTHY ON ANDROID/IOS API IMPROPER AUTHENTICATION
Description In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint
CVE-2022-30636 : X-CRYPTO PRIOR 0.0.0-20220525230936-793AD666BF5E ON GO PATH TRAVERSAL
Description httpTokenCacheKey uses path.Base to extract the expected HTTP-01 token value to lookup in the DirCache implementation. On Windows, path.Base
CVE-2023-24531 : CMD-GO UP TO 1.20.X ON GO SPECIAL ELEMENT
Description Command go env is documented as outputting a shell script containing the Go environment. However, go env doesn’t sanitize
CVE-2024-39325 : AIMEOS AI-CONTROLLER-FRONTEND PAYMENT STATUS BEHAVIORAL WORKFLOW
Description aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn’t reset the
CVE-2024-39315 : POMERIUM UP TO 0.26.0 OAUTH2 ACCESS TOKEN /.POMERIUM INSERTION OF SENSITIVE INFORMATION INTO SENT DATA
Description Pomerium is an identity and context-aware access proxy. Prior to version 0.26.1, the Pomerium user info page (at `/.pomerium`)
CVE-2024-39326 : NATIONAL SECURITY AGENCY SKILLS-SERVICE UP TO 2.12.5 VIDEO CROSS-SITE REQUEST FORGERY
Description SkillTree is a micro-learning gamification platform. Prior to version 2.12.6, the endpoint `/admin/projects/{projectname}/skills/{skillname}/video` (and probably others) is open to
CVE-2024-32673 : SAMSUNG WALRUS ARRAY INDEX
Description Improper Validation of Array Index vulnerability in Samsung Open Source Walrus Webassembly runtime engine allows a segmentation fault issue.