2024

.NET and Visual Studio Information Disclosure Vulnerability

Windows Compressed Folder Tampering Vulnerability

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

Security Center Broker Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

Windows Bluetooth Driver Information Disclosure Vulnerability

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit,

symphonycms <=2.7.10 is vulnerable to Cross Site Scripting (XSS) in the Comment component for articles.

A Cross Site Scripting (XSS) vulnerability in Symphony CMS 2.7.10 allows remote attackers to inject arbitrary web script

Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrar

Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, pote

Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged

Improper input validation in Power Management Firmware (PMFW) may allow an attacker with privileges to send a malformed

Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, all

IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an att

An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to

An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DR

Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged

A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an a

An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7

A unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and v

An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSOAR 7.3.0 thro

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiDDoS versi

"Hot" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifi

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability

An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable

An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML c

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rashid87 WPSection allow

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in MagePeople Team Event Ma

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper BetterDocs a

Improper Control of Generation of Code ('Code Injection') vulnerability in WC Product Table WooCommerce Product Table Li

IBM Common Licensing 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to em

Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows Accessing Functionality No

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Maucher Send Users Email allows Access

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Weblizar Coming Soon allows Accessing Functi

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zoho Campai

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Olive Themes Olive One Click Demo Import all

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in MBE Worldwide S.P.A. MBE eShip allows Access

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM

A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enfor

A vulnerability has been identified in SINEC NMS (All versions < V3.0). The importCertificate function of the SINEC NMS

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected a

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected a

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected a

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected a

A vulnerability has been identified in Location Intelligence family (All versions < V4.4). Affected products do not prop

A vulnerability has been identified in Location Intelligence family (All versions < V4.4). Affected products do not prop