2024

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an out-of-bounds write vulnerability that

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could

The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to unauthorized access of data, modification

The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its email settings, which c

The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its settings, which could a

The Alt Text AI – Automatically generate image alt text for SEO and accessibility plugin for WordPress is vulnerable to

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/homePro_deal.php?mud

Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of

Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of

There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI (Aruba's access

There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management p

Improper Privilege Management vulnerability in Teplitsa of social technologies Leyka allows Privilege Escalation.This is

An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive informat

The T-Soft E-Commerce 4 web application is susceptible to SQL injection (SQLi) attacks when authenticated as an admin or

Dotmesh is a git-like command-line interface for capturing, organizing and sharing application states. In versions 0.8.1

Git is a revision control system. The Git project recommends to avoid working in untrusted repositories, and instead to

Improper DLL loading algorithms in B&R Automation Studio versions >=4.0 and <4.12 may allow an authenticated local attac

The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerabili

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attac

An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial Automation A

Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidenc

A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability a

When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This

A memory allocation check was missing which would lead to a use-after-free if the allocation failed. This could have tri

When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability af

Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite anot

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js c

Elevation of privilege vulnerability in GE HealthCare EchoPAC products

A client-side enforcement of server-side security vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandb

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Dynamics 365 Customer Insights Spoofing Vulnerability

Dynamics 365 Customer Insights Spoofing Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Windows MSHTML Platform Security Feature Bypass Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows Search Service Elevation of Privilege Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Win32k Elevation of Privilege Vulnerability

NTFS Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Cryptographic Services Remote Code Execution Vulnerability