2024

A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval elemen

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip sync GC for new ele

A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5

A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5

The nodejs framework in OpenVPN Connect 3.0 through 3.4.3 (Windows)/3.4.7 (macOS) was not properly configured, which all

The default password hashing algorithm (PBKDF2-HMAC-SHA1) in Liferay Portal 7.2.0 through 7.4.3.15, and older unsupporte

Arbitrary File Read Vulnerability in Apache Dolphinscheduler. This issue affects Apache DolphinScheduler: before 3.2.1.

Because the HttpUtils class did not verify certificates, an attacker that could perform a Man-in-the-Middle (MITM) attac

XXE vulnerability in Liferay Portal 7.2.0 through 7.4.3.7, and older unsupported versions, and Liferay DXP 7.4 before up

In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to bro

A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions f

A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encodin

On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged user while the pro

Node.js depends on multiple built-in utility functions to normalize paths provided to node:fs functions, which can be ov

Expression Language Injection vulnerability in Hitachi Global Link Manager on Windows allows Code Injection.This issue a

A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions fr

electron-pdf version 20.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible beca

Pyhtml2pdf version 0.0.6 allows an external attacker to remotely obtain arbitrary local files. This is possible because

Loomio version 2.22.0 allows executing arbitrary commands on the server. This is possible because the application is vu

Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an

cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format

The documentation specifies that the BT_GATT_PERM_READ_LESC and BT_GATT_PERM_WRITE_LESC defines for a Bluetooth characte

A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protoco

Insufficiently Protected Credentials, : Improper Access Control vulnerability in Brivo ACS100, ACS300 allows Password Re

Misskey is an open source, decentralized social media platform with ActivityPub support. Prior to version 2024.2.0, when

alf.io is an open source ticket reservation system. Prior to version 2.0-Mr-2402, organization owners can view the gener

alf.io is an open source ticket reservation system. Prior to version 2.0-Mr-2402, an attacker can access data from other

Yocto Project is an open source collaboration project that helps developers create custom Linux-based systems regardless

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality.

Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. A potential security vulnerability has been discovered

Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.2.7, 4.1.15, 4.0.15, and

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apach

close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.

Signed to unsigned conversion esp32_ipm_send

Unchecked length coming from user input in settings shell

Permission control vulnerability in the calendarProvider module.Successful exploitation of this vulnerability may affect

Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vulne

Vulnerability of input data not being verified in the cellular data module.Successful exploitation of this vulnerability

Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect serv

Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may a

Permission control vulnerability in the package management module.Successful exploitation of this vulnerability may affe

Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerabil

Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affe

Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may a

Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability

Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may affect service confide

Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect a

The VerifiedBoot module has a vulnerability that may cause authentication errors.Successful exploitation of this vulnera

Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.