2024

Remote Code Execution can occur in versions of the MLflow platform running version 1.11.0 or newer, enabling a malicious

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.27.0 or newer, enabling

Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling

Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.5.0 or newer, enabling

Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabli

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.23.0 or newer, enabling

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling

Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling

Improper Privilege Management vulnerability in Repute Infosystems ARMember allows Privilege Escalation.This issue affect

Improper Authentication vulnerability in wpase Admin and Site Enhancements (ASE) allows Accessing Functionality Not Prop

An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS produ

A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the

Heap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024 Release 1 allows loc

Heap out-of-bound write vulnerability in parsing grid image header in libsavscmn.so prior to SMR Jun-2024 Release 1 allo

Improper access control vulnerability in SmartManagerCN prior to SMR Jun-2024 Release 1 allows local attackers to launch

The FS Product Inquiry WordPress plugin through 1.1.1 does not sanitise and escape a parameter before outputting it back

The wp-eMember WordPress plugin before 10.3.9 does not sanitize and escape the "fieldId" parameter before outputting it

The Social Link Pages: link-in-bio landing pages for your social media profiles plugin for WordPress is vulnerable to un

The WP-DB-Table-Editor plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss

The Frontend Registration – Contact Form 7 plugin for WordPress is vulnerable to privilege escalation in versions up to,

Apport can be tricked into connecting to arbitrary sockets as the root user

Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions

There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an at

A flaw was found in Keycloak in OAuth 2.0 Pushed Authorization Requests (PAR). Client-provided parameters were found to

Misskey is an open source, decentralized microblogging platform. Misskey doesn't perform proper normalization on the JSO

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 10.11.2, providing a non-numer

apko is an apk-based OCI image builder. apko exposures HTTP basic auth credentials from repository and keyring URLs in l

TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows

Sourcecodester Gas Agency Management System v1.0 is vulnerable to arbitrary code execution via editClientImage.php.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Foliovision

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LJ Apps WP TripAdv

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tainacan Tainacan

An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0,

An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0,

An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0,

Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.

Memory corruption while creating a LPAC client as LPAC engine was allowed to access GPU registers.

Information disclosure in Video while parsing mp2 clip with invalid section length.

Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.

In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2

In the Linux kernel, the following vulnerability has been resolved: tracefs: Reset permissions on remount if permission

In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Queue RX packets in IRQ handler instea

In the Linux kernel, the following vulnerability has been resolved: thermal/debugfs: Fix two locking issues with therma

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled eve

In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of

MileSight DeviceHub - CWE-20 Improper Input Validation may allow Denial of Service

A path traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'copy_to_custom_personas' en

A Regular Expression Denial of Service (ReDoS) vulnerability exists in the lunary-ai/lunary application, version 1.2.10.