2024

A vulnerability, which was classified as problematic, was found in DedeCMS 5.7. This affects an unknown part of the file

A vulnerability, which was classified as problematic, has been found in Faraday GM8181 and GM828x up to 20240429. Affect

A vulnerability classified as problematic was found in Faraday GM8181 and GM828x up to 20240429. Affected by this vulner

The ClickCease Click Fraud Protection plugin for WordPress is vulnerable to unauthorized access of data due to an improp

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through use after free.

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through heap buffer over

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through u

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through u

Improper handling of insufficient privileges vulnerability in TalkbackSE prior to version Android 14 allows local attack

Improper authorization vulnerability in Samsung Keyboard prior to version One UI 5.1.1 allows physical attackers to part

Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.71.8 allows loc

Improper privilege management vulnerability in Samsung Internet prior to version 25.0.0.41 allows local attackers to byp

Improper input validation in Samsung Notes prior to version 4.4.15 allows local attackers to delete files with Samsung N

Improper privilege management vulnerability in Samsung Email prior to version 6.1.91.14 allows local attackers to access

Authentication bypass vulnerability in Setupwizard prior to SMR May-2024 Release 1 allows physical attackers to skip act

Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images.

Improper access control vulnerability in DarManagerService prior to SMR May-2024 Release 1 allows local attackers to mon

Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to ex

Out-of-bounds write in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary

Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause me

Improper export of android application components vulnerability in TelephonyUI prior to SMR May-2024 Release 1 allows lo

Improper access control vulnerability in FactoryCamera prior to SMR May-2024 Release 1 allows local attackers to take pi

Improper access control vulnerability in setCocktailHostCallbacks of CocktailBarService prior to SMR May-2024 Release 1

Improper access control vulnerability in startListening of CocktailBarService prior to SMR May-2024 Release 1 allows loc

Improper Authentication vulnerability in Secure Folder prior to SMR May-2024 Release 1 allows physical attackers to acce

A vulnerability possible to reconfigure OTP allows local attackers to transit RMA(Return Merchandise Authorization) mode

A race condition vulnerability exists in the mintplex-labs/anything-llm repository, specifically within the user invite

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SliceWP allows Sto

A potential security vulnerability has been identified in the HP Application Enabling Software Driver for certain HP PC

Cross Site Scripting (XSS) vulnerability in ASUS RT-AC51U with firmware versions up to and including 3.0.0.4.380.8591 al

Missing Authorization vulnerability in Themesgrove WidgetKit.This issue affects WidgetKit: from n/a through 2.5.0.

Missing Authorization vulnerability in Michael Nelson Print My Blog print-my-blog.This issue affects Print My Blog: from

nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-f

Missing Authorization vulnerability in Ollybach WPPizza.This issue affects WPPizza: from n/a through 3.18.10.

Missing Authorization vulnerability in Roxnor Metform metform.This issue affects Metform: from n/a through <= 3.8.3.

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search() function.

crmeb_java v1.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the mergeList method in class com.z

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AddonMaster Post G

Missing Authorization vulnerability in AF themes WP Post Author.This issue affects WP Post Author: from n/a through 3.6.

Missing Authorization vulnerability in AF themes WP Post Author.This issue affects WP Post Author: from n/a through 3.6.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PropertyHive allow

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud Conve

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Restaurant and Cafe.This issue affects Restaurant and Cafe

Missing Authorization vulnerability in A WP Life Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery.This issue

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme Freesia Edge

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPPOOL Sheets To W

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuomodoSoft Elemen

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH The Plus

Missing Authorization vulnerability in AddonMaster Post Grid Master.This issue affects Post Grid Master: from n/a throug

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects L