2024

Use of Hard-coded Credentials vulnerability in Utarit Information Technologies SoliPay Mobile App allows Read Sensitive

Incorrect Use of Privileged APIs vulnerability in Utarit Information Technologies SoliPay Mobile App allows Collect Data

An improper privilege management vulnerability [CWE-269] in Fortinet FortiClientEMS version 7.2.0 through 7.2.2 and befo

Substance3D - Designer versions 13.1.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a cr

Audition versions 24.0.3, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could resul

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Integer Overflow or Wraparound vulnera

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that

DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability in

Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result

Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result

Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a craf

Substance3D - Painter versions 9.1.1 and earlier are affected by a Write-what-where Condition vulnerability that could r

Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result

Substance3D - Painter versions 9.1.1 and earlier are affected by a Buffer Overflow vulnerability that could result in ar

Use of a hard-coded password for a special database account created during Comarch ERP XL installation allows an attacke

Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unenc

An issue in VitalPBX v.3.2.4-5 allows an attacker to execute arbitrary code via a crafted payload to the /var/lib/vitalp

Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete file

An issue was discovered in Wind River VxWorks 7 22.09 and 23.03. If a VxWorks task or POSIX thread that uses OpenSSL exi

The implementation of lib9p's handling of RWALK messages was missing a bounds check needed when unpacking the message co

The aio_aqueue function, used by the lio_listio system call, fails to release a reference to a credential in an error ca

A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound grou

The e1000 network adapters permit a variety of modifications to an Ethernet packet when it is being transmitted. These

Handlers for *_CFG_PAGE read / write ioctls in the mpr, mps, and mpt drivers allocated a buffer of a caller-specified si

A user-provided integer option was passed to nmreq_copyin() without checking if it would overflow. This insufficient bo

The total size of the user-provided nmreq to nmreq_copyin() was first computed and then trusted during the copyin. This

EBM Technologies Uniweb/SoliPACS WebServer's query functionality lacks proper restrictions of user input, allowing remot

EC-WEB FS-EZViewer(Web)'s query functionality lacks proper restrictions of user input, allowing remote attackers authent

Command Injection vulnerability discovered in 4ipnet EAP-767 device v3.42.00 within the web interface of the device allo

A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might al

A command injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the S

A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex.

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to create n

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An attacker can trigger o

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can

Redaxo v5.15.1 was discovered to contain a remote code execution (RCE) vulnerability via the component /pages/templates.

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds write ex

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker p

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker p

When a virtual server is enabled with VLAN group and SNAT listener is configured, undisclosed traffic can cause the Traf

When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the Tr

When SSL Client Certificate LDAP or Certificate Revocation List Distribution Point (CRLDP) authentication profile is co

Undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. For the Application Visibility an

When HTTP/2 is configured on BIG-IP or BIG-IP Next SPK systems, undisclosed responses can cause the Traffic Management M

When a BIG-IP Advanced WAF or BIG-IP ASM policy with a Request Body Handling option is attached to a virtual server, un

A vulnerability exists in BIG-IP Next CNF and SPK systems that may allow access to undisclosed sensitive files.  Note: S