2024

Improper access control in LedCoverService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions

1Password 8 before 8.10.38 for macOS allows local attackers to exfiltrate vault items by bypassing macOS-specific securi

Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI proto

Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI proto

Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI proto

Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon accessed

Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon accessed

Qwik is a performance focused javascript framework. A potential mutation XSS vulnerability exists in Qwik for versions u

PDFio is a simple C library for reading and writing PDF files. There is a denial of service (DOS) vulnerability in the T

An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT

Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remo

Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote att

Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote att

Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a

Inappropriate implementation in HTML in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a u

Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a

Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 127.0.6533.72 allowed a remote attacker

The contextual menu for links could provide an opportunity for cross-site scripting attacks This vulnerability affects F

Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects F

Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vuln

A reflected cross-site scripting (XSS) vulnerability in Phpgurukul Tourism Management System v2.0 allows attackers to ex

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed tec

The Zscaler Updater process does not validate the digital signature of the installer before execution, allowing arbitrar

An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-

A vulnerability was found in DataGear up to 5.0.0. It has been declared as critical. Affected by this vulnerability is t

K7RKScan.sys in K7 Ultimate Security before 17.0.2019 allows local users to cause a denial of service (BSOD) because of

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The flaw does not

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware con

A Reflected Cross-site scripting (XSS) vulnerability exists in '/search' in microweber 2.0.15 and earlier allowing unaut

ID4Portais in version < V.2022.837.002a returns message parameter unsanitized in the response, resulting in a HTML Injec

Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on a

The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into gr

ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak s

Firefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced Tracking Protection. On a si

Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spo

Privilege escalation vulnerability identified in OpenText ArcSight Intelligence.

Incorrect Authorization vulnerability identified in OpenText ArcSight Intelligence.

Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence.

The Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager plugin for WordPress is vul

It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the ba

The Ajax Search Lite WordPress plugin before 4.12.1 does not sanitise and escape some parameters, which could allow user

The Easy Table of Contents WordPress plugin before 2.0.68 does not sanitise and escape some parameters, which could allo

A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decod

The shortcodes-ultimate-pro WordPress plugin before 7.2.1 does not validate and escape some of its shortcode attributes

The WordPress File Upload WordPress plugin before 4.24.8 does not sanitise and escape a parameter before outputting it b

HaloITSM versions up to 2.146.1 are affected by a Template Injection vulnerability within the engine used to generate em

The WPBakery Visual Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter

A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by t

Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user

A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been rated as critical. Affected by thi