2024

A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to upload files to arbitrary locat

A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files

A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to co

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Pri

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Uni

A vulnerability in the logging subsystem of Cisco Meeting Management could allow an authenticated, remote attacker to vi

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager,

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to cond

A vulnerability in the External Agent Assignment Service (EAAS) feature of Cisco Enterprise Chat and Email (ECE) could a

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to bypa

A vulnerability in the logging component of Cisco Unified Communications Manager IM & Presence Service (Unified CM I

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phon

A vulnerability in the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco Ultra-Reli

A vulnerability in the access control list (ACL) programming of Cisco Nexus 3550-F Switches could allow an unauthenticat

Use after free in Serial in Google Chrome prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap

Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to po

A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not chec

A vulnerability was found in mariazevedo88 travels-java-api up to 5.0.1 and classified as problematic. Affected by this

A vulnerability has been found in didi Super-Jacoco 1.0 and classified as critical. Affected by this vulnerability is an

A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is ena

IBM Maximo Application Suite - Monitor Component 8.10.11, 8.11.8, and 9.0.0 is vulnerable to cross-site scripting. This

A vulnerability classified as problematic has been found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 202410

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critic

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as cri

Improper Input Validation vulnerability in OpenText iManager allows Cross-Site Scripting (XSS). This issue affects iMana

The Event post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's events_cal shortcode i

The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Script

The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to Store

The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map b

A flaw was found in Ansible. The ansible-core `user` module can allow an unprivileged user to silently create or replace

The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validat

The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validat

When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it

Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavatio

The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerable to authe

The mFolio Lite plugin for WordPress is vulnerable to file uploads due to a missing capability check in all versions up

The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized

The Tumult Hype Animations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability

The Video Gallery for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missi

The Heateor Social Login WordPress plugin for WordPress is vulnerable to authentication bypass in all versions up to, an

The Wp-ImageZoom WordPress plugin through 1.1.0 does not sanitise and escape some parameters before outputting them back

The WP ULike WordPress plugin before 4.7.5 does not sanitise and escape some of its settings, which could allow high pr

Out-of-bounds write in Battery Full Capacity node prior to Firmware update Sep-2024 Release on Galaxy S24 allows local a

Out-of-bounds write in usb driver prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to writ

Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multip

Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to mo

Improper authentication in Private Info in Samsung Pass in prior to version 4.4.04.7 allows physical attackers to access

Improper Access Control in Samsung Video Player prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.