2024

In gpu_pm_power_off_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a race co

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege wi

In BCMFASTPATH of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead t

In bc_get_converted_received_bearer of bc_utilities.c, there is a possible out of bounds read due to a missing bounds ch

In handle_init of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to lo

In sec_media_unprotect of media.c, there is a possible memory corruption due to a race condition. This could lead to loc

In lwis_process_transactions_in_queue of lwis_transaction.c, there is a possible use after free due to a use after free.

In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This coul

In ss_AnalyzeOssReturnResUssdArgIe of ss_OssAsnManagement.c, there is a possible out of bounds read due to improper inpu

Deep Sea Electronics DSE855 Multipart Value Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability. Th

Deep Sea Electronics DSE855 Multipart Boundary Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vul

Dropbox Desktop Folder Sharing Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypas

A privilege escalation vulnerability was reported in Lenovo Service Bridge prior to version 5.0.2.17 that could allow op

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiGuestCf

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the File parameter in function Uplo

Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to

An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuard

D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attac

Fuji Electric Tellus Lite V-Simulator is vulnerable to a stack-based buffer overflow, which could allow an attacker to

Fuji Electric Tellus Lite V-Simulator is vulnerable to an out-of-bounds write, which could allow an attacker to manipul

A stack overflow vulnerability was found in version 1.18.0 of rhai. The flaw position is: (/ SRC/rhai/SRC/eval/STMT. Rs

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos

An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400. It lacks proper buffer length

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.13.0 an

Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. Starting i

Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. CVAT allow

SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability. A rem

Verint - CWE-434: Unrestricted Upload of File with Dangerous Type

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A hi

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A hi

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A hi

Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Improper Limitation of a Pathname to a

Creative Cloud Desktop versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability

Substance3D - Stager versions 2.1.4 and earlier are affected by an out-of-bounds write vulnerability that could result i

ColdFusion versions 2023u7, 2021u13 and earlier are affected by an Improper Access Control vulnerability that could resu

Telemetry Dashboard v1.0.0.8 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthen

Photoshop Desktop versions 24.7.3, 25.7 and earlier are affected by an out-of-bounds read vulnerability when parsing a c

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Unrestricted Upload of File w

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Input Validation vul

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Authorization vulner

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Authentication vulne

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Access Control vulnerability that could

The Search & Replace WordPress plugin before 3.2.2 does not sanitize and escape a parameter before using it in a SQL sta

The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to an improper authorization

There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System

An access control issue in Wvp GB28181 Pro 2.0 allows authenticated attackers to escalate privileges to Administrator vi

CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation

CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in a

A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for c

A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local