2024

GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitr

Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port o

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN port

An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network proto

This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to gain elevat

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14. Processing a file may lead

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14, iOS 17 and

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Ventura 13

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16

A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14, Safari 17, iOS 17 and iP

A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.5. An app may be able

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing a file may lead to arbi

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 1

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.5, macOS Ventura 13

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17.

An authentication issue was addressed with improved state management. This issue is fixed in iOS 17 and iPadOS 17, macOS

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14, iOS 17

The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3. An app may be able to ca

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.6.6, macOS Big S

This issue was addressed by forcing hardened runtime on the affected binaries at the system level. This issue is fixed i

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, macOS B

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.7.5,

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to ex

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to ex

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to ex

FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access

An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authent

Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted ch

A improper access control in Fortinet FortiPortal version 7.0.0 through 7.0.6, Fortinet FortiPortal version 7.2.0 throug

An improper privilege management vulnerability [CWE-269] in a Fortinet FortiOS HA cluster version 7.4.0 through 7.4.1 an

A login attempt restriction bypass vulnerability exists in the checkLoginAttempts functionality of WWBN AVideo dev maste

An information disclosure vulnerability exists in the image404Raw.php functionality of WWBN AVideo dev master commit 15f

An insufficient entropy vulnerability exists in the userRecoverPass.php recoverPass generation functionality of WWBN AVi

A cross-site scripting (xss) vulnerability exists in the navbarMenuAndLogo.php user name functionality of WWBN AVideo de

fontTools is a library for manipulating fonts, written in Python. The subsetting module has a XML External Entity Inject

Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can res

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, ob

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, ob

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, ob

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, ob

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, ob

The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code

The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication datab

The vulnerability allows an authenticated remote attacker to perform actions exceeding their authorized access via craft

The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden hard

The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple

The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the