2024

Inappropriate implementation in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially expl

Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit

Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed a remote attacker to potentially exploi

Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially ex

1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-process communic

An issue in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via a crafted script to the for

matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. A malicious homeserver c

A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attack

Use after free in CSS in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage i

Use after free in User Education in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user

Use after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage

Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit

Use after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap cor

Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap c

Use after free in Downloads in Google Chrome on iOS prior to 127.0.6533.72 allowed a remote attacker to potentially expl

The Light Poll WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to m

An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue

In certain cases, Zscaler Internet Access (ZIA) can be disabled by PowerShell commands with admin rights. This affects Z

While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks,

Anti-tampering can be disabled under certain conditions without signature validation. This affects Zscaler Client Connec

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware fla

A CSV injection vulnerability in Automation Anywhere Automation 360 version 21094 allows attackers to execute arbitrary

Incorrect garbage collection interaction could have led to a use-after-free. This vulnerability affects Firefox < 129.

Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Fir

Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox

It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and

A select option could partially obscure security prompts. This could be used by a malicious site to trick a user into gr

Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects

Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, F

A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution. This vulner

In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions

Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could crea

Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could crea

Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could expl

Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could expl

Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could expl

Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could expl

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affec

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affec

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affec

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affec

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affec

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affec

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affec

Cross-Site Scripting (XSS) vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacke

Cross-Site Scripting (XSS) vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacke

Cross-Site Scripting (XSS) vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacke

Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially

Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially

Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulne