2024

Improper access control in KnoxCustomManagerService prior to SMR Jul-2024 Release 1 allows local attackers to configure

Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifi

Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attac

Improper authentication in MTP application prior to SMR Jul-2024 Release 1 allows local attackers to enter MTP mode with

Use of implicit intent for sensitive communication in RCS function in IMS service prior to SMR Jul-2024 Release 1 allows

Use of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR Jul-2024 Release 1 all

Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allows

Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local

Improper handling of exceptional conditions in Secure Folder prior to SMR Jul-2024 Release 1 allows physical attackers t

Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigg

Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local attackers to execute p

Improper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to trigger abnormal behavior.

Improper authentication in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to pair with devices.

The Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elem

The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data d

The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the order parameter

The Rife Elementor Extensions & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag

The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

Improper neutralization of input in Checkmk before versions 2.3.0p8, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows attacker

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local h

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local h

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an incorrect privilege assignment vulnerability. A high p

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local h

The device is observed to accept deprecated TLS protocols, increasing the risk of cryptographic weaknesses.

The server supports at least one cipher suite which is on the NCSC-NL list of cipher suites to be phased out, increasing

The Easy Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file upload feat

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local h

Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.2 contain an execution with unnecessary privileges vulnerability. A

Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.0 contain use of a broken or risky cryptographic algorithm vulnerab

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privilege

The Rank Math SEO WordPress plugin before 1.0.219 does not sanitise and escape some of its settings, which could allow

The EazyDocs WordPress plugin before 2.5.0 does not sanitise and escape some of its settings, which could allow high pr

The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to

The Void Contact Form 7 Widget For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Script

The Boot Store theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter within the them

Incorrect Default Permissions, Improper Preservation of Permissions vulnerability in Hitachi Ops Center Common Services

toy-blog is a headless content management system implementation. Starting in version 0.4.3 and prior to version 0.5.0, t

toy-blog is a headless content management system implementation. Starting in version 0.5.4 and prior to version 0.6.1, a

The Basil recipe theme for WordPress is vulnerable to Persistent Cross-Site Scripting (XSS) via the `post_title` paramet

MachForm up to version 19 is affected by an authenticated stored cross-site scripting.

MachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which affects users with valid s

Cross Site Request Forgery (CSRF) vulnerability in savignano S/Notify before 4.0.2 for Jira allows attackers to allows a

Envoy is a cloud-native, open source edge and service proxy. Prior to versions 1.30.4, 1.29.7, 1.28.5, and 1.27.7. Envoy

FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a SEGV at libavcodec/hevcdec.c:2947:22 in hevc_frame_end.

Weblate is a web based localization tool. Prior to version 5.6.2, Weblate didn't correctly validate filenames when resto

Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, a

Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, a

Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, a

Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a cr

In JetBrains TeamCity before 2024.03.3 application token could be exposed in EC2 Cloud Profile settings