2024

An issue in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive informa

Improper privilege management in Just-in-time (JIT) elevation module in Devolutions Server 2023.3.14.0 and earlier allow

In Foxit PDF Reader before 2024.1 and PDF Editor before 2024.1, code execution via JavaScript could occur because of an

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, i

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, i

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malic

VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may

ImageSharp is a managed, cross-platform, 2D graphics library. A heap-use-after-free flaw was found in ImageSharp's Initi

A Server-Side Request Forgery (SSRF) in the installUpdateThemePluginAction function of WonderCMS v3.1.3 allows attackers

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed.

A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2

A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by the web app

A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary allows a re

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is co

A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows a remote u

TYPO3 before 13.0.1 allows an authenticated admin user (with system maintainer privileges) to execute arbitrary shell co

The Auto Refresh Single Page plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and inclu

The Vimeography: Vimeo Video Gallery WordPress Plugin plugin for WordPress is vulnerable to PHP Object Injection in all

libheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an attacker to cause a de

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain s

The Elink Smart eSmartCam (com.cn.dq.ipc) application 2.1.5 for Android contains hardcoded AES encryption keys that can

iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_sup

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /custom

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customer_

The encrypted subject of an email message could be incorrectly and permanently assigned to an arbitrary other email mess

Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when con

Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista

IBM Connect:Express for UNIX 1.5.0 is vulnerable to a buffer overflow that could allow a remote attacker to cause a deni

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nft_set

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix incorrect structure acc

In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in asix_mdio_read() asix_re

In the Linux kernel, the following vulnerability has been resolved: veth: ensure skb entering GRO are not cloned. Afte

In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Prevent integer overflow/underflow in

In the Linux kernel, the following vulnerability has been resolved: Input: elantech - fix stack out of bound access in

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Don't advance iterator after restart

In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: protect targets destructions with k

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix incorrect page free bug Pointer to

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: fix global-out-of-bounds issue

In the Linux kernel, the following vulnerability has been resolved: tun: avoid double free in tun_free_netdev Avoid do

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the /system/share/ztree_cate

Dell PowerScale OneFS 8.2.x through 9.6.0.x contains a use of a broken or risky cryptographic algorithm vulnerability. A

Dell Display and Peripheral Manager for macOS prior to 1.3 contains an improper access control vulnerability. A low priv

Dell Digital Delivery, versions prior to 5.2.0.0, contain a Buffer Overflow Vulnerability. A local low privileged attack

Dell Digital Delivery, versions prior to 5.2.0.0, contain a Use After Free Vulnerability. A local low privileged attacke