https://www.cisa.gov/news-events/ics-advisories/icsa-24-277-03 ...

https://www.cisa.gov/news-events/ics-advisories/icsa-24-277-03 ...

TEM Opera Plus FM Family Transmitter allows access to an unprotected endpoint that allows MPFS File System binary image upload without authentication. This file system serves as the basis for the ...

Backstage is an open framework for building developer portals. Configuration supplied through APP_CONFIG_* environment variables, for example APP_CONFIG_backend_listen_port=7007, where unexpectedly ...

https://nvidia.custhelp.com/app/answers/detail/a_id/5577 ...

Sulu is a PHP content management system. Sulu is vulnerable against XSS whereas a low privileged user with access to the ??Media? section can upload an SVG file with a malicious payload. Once uploaded ...

async-graphql is a GraphQL server library implemented in Rust. async-graphql before 7.0.10 does not limit the number of directives for a field. This can lead to Service Disruption, Resource Exhaustion ...

cute_png v1.05 was discovered to contain a stack overflow via the cp_dynamic() function at cute_png.h. https://github.com/Helson-S/FuzzyTesting/blob/master/cute ...

Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this ...