2024

gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running `schema.Decoder.Decode()` on a s

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312, an admin

In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on t

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, a lo

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, a low-privileged user that does not hold the admin or powe

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 on Windows, an authenticated user could execute a specially

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper N

Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, A

Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, th

MongoDB Compass may be susceptible to code injection due to insufficient sandbox protection settings with the usage of e

Memory corruption while handling user packets during VBO bind operation.

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.

Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.

Memory corruption when allocating and accessing an entry in an SMEM partition.

Memory corruption when an invoke call and a TEE call are bound for the same trusted application.

Memory corruption while processing key blob passed by the user.

Transient DOS while loading the TA ELF file.

Memory corruption while performing finish HMAC operation when context is freed by keymaster.

Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space.

Memory corruption while processing IOCTL handler in FastRPC.

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.23.5 and 2.2

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lea

Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login t

che3vinci c3/utils-1 1.0.131 was discovered to contain a prototype pollution via the function assign. This vulnerability

amoyjs amoy common v1.0.10 was discovered to contain a prototype pollution via the function setValue. This vulnerability

amoyjs amoy common v1.0.10 was discovered to contain a prototype pollution via the function extend. This vulnerability a

airvertco frappejs v0.0.11 was discovered to contain a prototype pollution via the function registerView. This vulnerabi

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability al

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Valhall GPU Firmware, A

CHANGING Mobile One Time Password's uploading function in a hidden page does not filter file type properly. Remote attac

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service

A vulnerability classified as critical has been found in SourceCodester Medicine Tracker System 1.0. This affects an unk

Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier o

IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to

Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the

The WordPress Plugin for Google Maps – WP MAPS plugin for WordPress is vulnerable to SQL Injection via the 'id' paramete

iDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th Generations, contains a sessi

The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, an

The NXP Data Co-Processor (DCP) is a built-in hardware module for specific NXP SoCs¹ that implements a dedicated AES cry

dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malforme

In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS

A Cross-Site Request Forgery (CSRF) vulnerability was identified in the stitionai/devika application, affecting the late

nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. There is a missing li

NextChat is a cross-platform ChatGPT/Gemini UI. There is a Server-Side Request Forgery (SSRF) vulnerability due to a lac

An issue in dc2niix before v.1.0.20240202 allows a local attacker to execute arbitrary code via the generated file name

Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method

A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC pro