2024

GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows r

Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass d

Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform

Precor touchscreen console P62, P80, and P82 contains a default SSH public key in the authorized_keys file. A remote att

Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the r

Precor touchscreen console P82 contains a private SSH key that corresponds to a default public key. A remote attacker co

Precor touchscreen console P62, P80, and P82 could allow a remote attacker (within the local network) to bypass security

An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of ebookmeta before v1.2.8 allows atta

A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been classified as critical. Affecte

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos

An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400. It lacks a check for the vali

Invision Community through 4.7.16 allows remote code execution via the applications/core/modules/admin/editor/toolbar.ph

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos

An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain acce

Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 was discovered to store credentials in plaintext.

An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create passwords that do not conform to de

An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass authentication and access the admin

The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to Sensitive Information Expos

The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vu

A vulnerability was found in itsourcecode Online Discussion Forum 1.0. It has been rated as critical. This issue affects

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-

The Market Exporter plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on

A vulnerability was found in Clash up to 0.20.1 on Windows. It has been declared as critical. This vulnerability affects

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection via

The Qi Addons For Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and includ

Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system c

The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. An attacker with the ab

The encrypt() function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible

An arbitrary file upload vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary code via uploading a

smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/dns.c.

smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/util.c.

robdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c.

robdns commit d76d2e6 was discovered to contain a NULL pointer dereference via the item->tokens component at /src/conf-p

An issue in obgm and Libcoap v.a3ed466 allows a remote attacker to cause a denial of service via thecoap_context_t funct

dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.

kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to inefficient regular expr

Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote

Kofax Power PDF PDF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability all

Kofax Power PDF TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remo

An SQL Injection vulnerability exists in the berriai/litellm repository, specifically within the `/global/spend/logs` en

A vulnerability in the `download_model_with_test_data` function of the onnx/onnx framework, version 1.16.0, allows for a

A Server-Side Request Forgery (SSRF) vulnerability exists in the file upload section of imartinez/privategpt version 0.5

In lunary-ai/lunary version 1.2.4, an account takeover vulnerability exists due to the exposure of password recovery tok

An Incorrect Authorization vulnerability exists in lunary-ai/lunary versions up to and including 1.2.2, which allows una

A Privilege Escalation Vulnerability exists in lunary-ai/lunary version 1.2.2, where any user can delete any datasets du

An Insecure Direct Object Reference (IDOR) vulnerability was identified in lunary-ai/lunary, affecting versions up to an

A timing attack vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, specifically within the password comp

BerriAI's litellm, in its latest version, is vulnerable to arbitrary file deletion due to improper input validation on t

A path traversal vulnerability exists in the parisneo/lollms application, affecting version 9.4.0 and potentially earlie

A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which al