2024

A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacke

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since

An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail messag

NTLM Hash Disclosure Spoofing Vulnerability

A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco F

Windows MSHTML Platform Spoofing Vulnerability

SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with ad

Windows Mark of the Web Security Feature Bypass Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in

In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoin

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator cred

VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) per

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows ne

A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been ava

there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure wi

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affe

Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-a