2023

Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsung.so prior to SMR De

Integer overflow vulnerability in detectionFindFaceSupportMultiInstance of libFacePreProcessingjni.camera.samsung.so pri

Improper exception management vulnerability in Knox Guard prior to SMR Dec-2023 Release 1 allows Knox Guard lock bypass

Out of bounds write vulnerability in HDCP in HAL prior to SMR Dec-2023 Release 1 allows attacker to perform code executi

Out-of-bound write vulnerability in libIfaaCa prior to SMR Dec-2023 Release 1 allows local system attackers to execute a

Memory corruption while sending SMS from AP firmware.

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.

Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.

Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.

Memory Corruption in Audio while invoking IOCTLs calls from the user-space.

Memory Corruption in camera while installing a fd for a particular DMA buffer.

Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.

Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS Thre

Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS Thre

Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS Thre

Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS Thre

ecies is an Elliptic Curve Integrated Encryption Scheme for secp256k1 in Golang. If funcations Encapsulate(), Decapsulat

lestrrat-go/jwx is a Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. A p

Ajax.NET Professional (AjaxPro) is an AJAX framework for Microsoft ASP.NET which will create proxy JavaScript classes th

Weak encryption mechanisms in RFID Tags in Yale Keyless Lock v1.0 allows attackers to create a cloned tag via physical p

Weak encryption mechanisms in RFID Tags in Yale IA-210 Alarm v1.0 allows attackers to create a cloned tag via physical p

Weak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a cloned tag via physical p

Vite is a website frontend framework. When Vite's HTML transformation is invoked manually via `server.transformIndexHtml

In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to

In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user

In verifyShortcutInfoPackage of ShortcutService.java, there is a possible way to see another user's image due to a confu

In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel info

In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to

In loadMediaDataInBgForResumption of MediaDataManager.kt, there is a possible way to view another user's images due to

In createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials from other users due t

In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a mi

In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional

In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy. This could lead to

In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy.

Cross Site Scripting (XSS) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code

An Insecure Credential Management issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain esca

An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary commands via use of a

The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor WordPress plugin before 3.4.2 does not

The eCommerce Product Catalog Plugin for WordPress plugin before 3.3.26 does not have CSRF checks in some of its admin p

The Welcart e-Commerce WordPress plugin before 2.9.5 does not sanitise and escape a parameter before outputting it back

The Word Balloon WordPress plugin before 4.20.3 does not protect some of its actions against CSRF attacks, allowing an u

The Popup box WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high pr

The Popup box WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high pr

The AMP+ Plus WordPress plugin through 3.0 does not sanitise and escape a parameter before outputting it back in the pag

The BSK Contact Form 7 Blacklist WordPress plugin through 1.0.1 does not sanitise and escape the inserted_count paramete

The Simply Excerpts WordPress plugin through 1.4 does not sanitize and escape some fields in the plugin settings, which

The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to bypass

The Uploading SVG, WEBP and ICO files WordPress plugin through 1.2.1 does not sanitise uploaded SVG files, which could a

Traefik is an open source HTTP reverse proxy and load balancer. When Traefik is configured to use the `HTTPChallenge` to

Traefik is an open source HTTP reverse proxy and load balancer. When a request is sent to Traefik with a URL fragment, T