2024

In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible corrupt memory due to a logic error in the code. This co

In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible memory corruption due to improper input validation. This

In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. This

There is a possible LCS signing enforcement missing due to test/debugging code left in a production build. This could l

there is a possible escalation of privilege due to an unusual root cause. This could lead to local escalation of privile

BT: Classic: SDP OOB access in get_att_search_list

BT:Classic: Multiple missing buf length checks

BT: Unchecked user input in bap_broadcast_assistant

SQL Injection vulnerability in Best Free Law Office Management Software-v1.0 allows an attacker to execute arbitrary cod

A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnera

A vulnerability classified as problematic has been found in OpenTibiaBR MyAAC up to 0.8.16. Affected is an unknown funct

BT: Missing length checks of net_buf in rfcomm_handle_data

BT: Encryption procedure host vulnerability

A vulnerability was found in JFinalCMS up to 1.0. It has been rated as critical. This issue affects the function delete

An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privil

An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privil

A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevate

A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevate

IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.

A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to e

A potential buffer overflow vulnerability was reported in some Lenovo ThinkSystem and ThinkStation products that could a

An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSys

A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXC

A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface withou

A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that could allow an attacker to

A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacke

An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A stored cross-site scripting (XSS) or, due to th

An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. It lacks an offboarding process for members who l

An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been identified in the authen

An information disclosure vulnerability exists in the lunary-ai/lunary, specifically in the `runs/{run_id}/related` endp

A Cross-Site Request Forgery (CSRF) vulnerability exists in lunary-ai/lunary version 1.2.34 due to overly permissive COR

A broken access control vulnerability exists in the latest version of lunary-ai/lunary. The `saml.ts` file allows a user

An improper access control vulnerability exists in lunary-ai/lunary at the latest commit (a761d83) on the main branch. T

The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response pro

The session hijacking attack targets the application layer's control mechanism, which manages authenticated sessions bet

The Eaton Foreseer software provides multiple customizable input fields for the users to configure parameters in the too

The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes su

The Eaton Foreseer software provides users the capability to customize the dashboard in WebView pages. However, the inpu

A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows

phpgurukul Bus Pass Management System 1.0 is vulnerable to Cross-site scripting (XSS) in /admin/pass-bwdates-reports-det

Titan SFTP and Titan MFT Server 2.0.25.2426 and earlier have a vulnerability a vulnerability where sensitive information

A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (V

The Email Obfuscate Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'email-

The PDF Thumbnail Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_q

The Lucas String Replace plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_quer

The Roles & Capabilities plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_quer

The Cron Jobs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg witho

The Exit Notifier plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg w

The WordPress Affiliates Plugin — SliceWP Affiliates plugin for WordPress is vulnerable to Reflected Cross-Site Scriptin

The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to unauthorized user r