2024

Improper access control in Samsung Voice Recorder prior to version 21.5.40.37 allows physical attackers to access record

Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across mu

Improper input validation in Settings Suggestions prior to SMR Nov-2024 Release 1 allows local attackers to launch privi

Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi passw

Improper input validation in BluetoothAdapter prior to SMR Nov-2024 Release 1 allows local attackers to cause local perm

Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to

Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone

Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corrup

Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious a

Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attacker

Improper access control in Dex Mode prior to SMR Nov-2024 Release 1 allows physical attackers to temporarily access to u

Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across mult

Improper Input Validation in IpcProtocol in Modem prior to SMR Nov-2024 Release 1 allows local attackers to cause Denial

The WS Form LITE – Drag & Drop Contact Form Builder for WordPress plugin for WordPress is vulnerable to Reflected Cross-

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to S

An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the

DCME-320 v7.4.12.90 was discovered to contain a command injection vulnerability.

An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the N

Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control. There is no limit on the number of login attempts, and the

An authenticated Path Traversal vulnerability exists in Instant AOS-8 and AOS-10. Successful exploitation of this vulner

An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful explo

An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful explo

An authenticated command injection vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. A succes

Command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by sen

Command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by sen

The cap-std project is organized around the eponymous `cap-std` crate, and develops libraries to make it easy to write c

Wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's filesystem sandbox implementation on Windows blocks ac

Tenda AC6 v2.0 V15.03.06.50 was discovered to contain a buffer overflow in the function 'formSetPPTPServer'.

The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Basic Information Disclosure in all ve

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to a

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthK

The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & Aut

Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity. gitsign may select the

Combodo iTop is a simple, web based IT Service Management tool. This vulnerability can be used to create HTTP requests o

Osmedeus is a Workflow Engine for Offensive Security. Cross-site Scripting (XSS) occurs on the Osmedues web server when

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.

Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 allows an attacker to reset the administrator's password

Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 that allows attackers to perform actions reserved for ad

Stored Cross-Site Scripting (XSS) vulnerability discovered in the Properties Component of JATOS v3.9.3. This flaw allows

Stored Cross-Site Scripting (XSS) vulnerability discovered in JATOS v3.9.3. The vulnerability exists in the description

An issue in the luci-mod-rpc package in OpenWRT Luci LTS allows for privilege escalation from an admin account to root v

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. The "Publish K

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. User input is

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Insufficient i

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. SuiteCRM relie

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Poor input val

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In SuiteCRM ve

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted contai

Combodo iTop is a simple, web based IT Service Management tool. Unauthenticated user can perform users enumeration, whic