2024

Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulne

Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulner

IBM Storage Scale Container Native Storage Access 5.1.2.1 -through 5.1.7.0 could allow an attacker to initiate connectio

IBM Storage Scale Container Native Storage Access 5.1.2.1 through 5.1.7.0 could allow a local attacker to initiate conne

An issue in TOTOLINK X5000R V.9.1.0u.6369_B20230113 allows a remote attacker to cause a denial of service via the host_t

An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive inform

Teltonika TRB1-series devices with firmware before TRB1_R_00.07.05.2 allow attackers to exploit a firmware vulnerability

Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services av

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: In

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that i

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Log Manage

Vulnerability in Oracle Audit Vault and Database Firewall (component: Firewall). Supported versions that are affected a

Alf.io is a free and open source event attendance management system. In versions prior to 2.0-M4-2402 users can access t

In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds ch

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way for an app in the work profile to en

In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overf

In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to

In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This c

Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in re

Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated

Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local att

An issue in alanclarke URLite v.3.1.0 allows an attacker to cause a denial of service (DoS) via a crafted payload to the

Publicly known cryptographic machine key in AlayaCare's Procura Portal before 9.0.1.2 allows attackers to forge their ow

A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20 allows attackers to ex

A XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved Import And Export v3.8.6 all

In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic error

In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead

In injectInputEventToInputFilter of AccessibilityManagerService.java, there is a possible arbitrary input event injectio

In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to bypass the restrictions on s

In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due to

In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BA

In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead

In multiple files, there is a possible way to capture the device screen when disallowed by device policy due to a logic

In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update due to a logic error

In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local

In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free. This could

In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of syst

In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This coul

In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions

In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local

In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background due

In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This

In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could

MSS (Mission Support System) is an open source package designed for planning atmospheric research flights. In file: `ind

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability. If exploite

The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vu

Local privilege escalation vulnerability affects OpenText Operations Agent product versions 12.15 and 12.20-12.25 when i

Improper Neutralization vulnerability affects OpenText ALM Octane version 16.2.100 and above. The vulnerability could re