2024

Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vuln

Page table protection configuration vulnerability in the trusted firmware module Impact: Successful exploitation of this

Access control vulnerability in the camera framework module Impact: Successful exploitation of this vulnerability may af

Access permission verification vulnerability in the camera driver module Impact: Successful exploitation of this vulnera

Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this v

Access permission verification vulnerability in the WMS module Impact: Successful exploitation of this vulnerability may

Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect a

Observable timing discrepancy issue exists in IPCOM EX2 Series V01L02NF0001 to V01L06NF0401, V01L20NF0001 to V01L20NF040

Permission control vulnerability in the software update module. Impact: Successful exploitation of this vulnerability ma

Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of

Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will

Access control vulnerability in the SystemUI module Impact: Successful exploitation of this vulnerability may affect ser

Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a speci

Cleartext storage of sensitive information vulnerability exists in WindLDR and WindO/I-NV4. If this vulnerability is exp

Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit hea

Out of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap

A vulnerability was found in the pkcs15-init tool in OpenSC. An attacker could use a crafted USB Device or Smart Card, w

A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted

A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which woul

A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted

A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted

A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. The problem is missing initial

A remote code execution (RCE) vulnerability exists in the Pi Camera project, version 1.0, maintained by RECANTHA. The is

Authenticator is a browser extension that generates two-step verification codes. In versions 7.0.0 and below, encryption

PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component expression.ExplainExpressionList. This

Websites could utilize Javascript links to spoof URL addresses in the Focus navigation bar This vulnerability affects Fo

A vulnerability was found in Keycloak. This flaw allows attackers to bypass brute force protection by exploiting the tim

Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECD

Tina is an open-source content management system (CMS). Sites building with Tina CMS's command line interface (CLI) prio

@blakeembrey/template is a string template library. Prior to version 1.2.0, it is possible to inject and run code within

Pagefind, a fully static search library, initializes its dynamic JavaScript and WebAssembly files relative to the locati

SquaredUp DS for SCOM 6.2.1.11104 allows XSS.

PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component (*Column).GetDecimal. This allows atta

runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as w

SudoBot, a Discord moderation bot, is vulnerable to privilege escalation and exploit of the `-config` command in version

The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts in Metal3. The `BareMetalHost` (

Xibo is an open source digital signage platform with a web content management system (CMS). Prior to version 4.1.0, a cr

ClickHouse v24.3.3.102 was discovered to contain a buffer overflow via the component DB::evaluateConstantExpressionImpl.

YugabyteDB v2.21.1.0 was discovered to contain a buffer overflow via the "insert into" parameter.

A cross-site scripting (XSS) vulnerability in SysPass 3.2.x allows attackers to execute arbitrary web scripts or HTML vi

A Host header injection vulnerability in the password reset function of LimeSurvey v.6.6.1+240806 and before allows atta

An issue in the js_localize.php function of LimeSurvey v6.6.2 and before allows attackers to execute arbitrary code via

A CSV injection vulnerability in Lime Survey v6.5.12 allows attackers to execute arbitrary code via uploading a crafted

HIGH-LEIT V05.08.01.03 and HIGH-LEIT V04.25.00.00 to 4.25.01.01 for Windows from Vivavis contain an insecure file and fo

Xibo is an open source digital signage platform with a web content management system (CMS). Prior to version 4.1.0, a cr

Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a

Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may atte

MCMS v5.4.1 has front-end file upload vulnerability which can lead to remote command execution.

An ActiveMQ Discovery service was reachable by default from an OpenEdge Management installation when an OEE/OEM auto-dis

Host name validation for TLS certificates is bypassed when the installed OpenEdge default certificates are used to perfo