2024

Improper access control vulnerability in Samsung Data Store prior to version 5.3.00.4 allows local attackers to launch a

Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to acce

Improper Input Validation vulnerability in text parsing implementation of libsdffextractor prior to SMR Apr-2024 Release

Improper Access Control vulnerability in StorageManagerService prior to SMR Apr-2024 Release 1 allows local attackers to

Out-of-bounds write vulnerability while decoding hcr of libsavsac.so prior to SMR Apr-2024 Release 1 allows local attack

Out-of-bound write vulnerability in command parsing implementation of libIfaaCa prior to SMR Apr-2024 Release 1 allows l

Improper Input Validation vulnerability in handling apdu of libsec-ril prior to SMR Apr-2024 Release 1 allows local priv

A vulnerability, which was classified as critical, has been found in DedeCMS 5.7.112. This issue affects some unknown pr

A vulnerability classified as problematic was found in DedeCMS 5.7. This vulnerability affects unknown code of the file

A vulnerability classified as problematic has been found in DedeCMS 5.7. This affects an unknown part of the file /src/d

A vulnerability was found in DedeCMS 5.7. It has been rated as problematic. Affected by this issue is some unknown funct

A vulnerability was found in DedeCMS 5.7. It has been declared as problematic. Affected by this vulnerability is an unkn

A vulnerability was found in DedeCMS 5.7. It has been classified as problematic. Affected is an unknown function of the

A vulnerability was found in Clavister E10 and E80 up to 14.00.10 and classified as problematic. This issue affects some

Kofax Power PDF JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remo

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management Syste

Kofax Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remo

System->Maintenance-> Log Files in dotCMS dashboard is providing the username/password for database connections in the l

In dotCMS dashboard, the Tools and Log Files tabs under System → Maintenance Portlet, which is and always has been an Ad

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows r

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows r

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows r

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows r

PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows r

An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter.

Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input

A Cross-Site Request Forgery (CSRF) vulnerability exists in the mudler/localai application, allowing attackers to craft

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical.

Go package IceWhaleTech/CasaOS-UserService provides user management functionalities to CasaOS. The Casa OS Login page ha

A vulnerability was found in SourceCodester Image Accordion Gallery App 1.0. It has been classified as critical. This af

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php.

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsec_guide_1.php.

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php.

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupTimePolicy.php.

In the Linux kernel, the following vulnerability has been resolved: Fix memory leak in posix_clock_open() If the clk o

Memory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled.

Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to A

Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue af

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php.

Hard-coded Credentials in CoolKit eWeLlink app are before 5.4.x on Android and IOS allows local attacker to unauthorized

WebMail in Axigen 10.x before 10.3.3.62 allows XSS via the image attachment viewer.

A vulnerability, which was classified as critical, was found in NUUO NVRmini 2 up to 3.0.8. Affected is an unknown funct

Themify WordPress plugin before 1.4.4 does not sanitise and escape some of its Filters settings, which could allow high

Themify WordPress plugin before 1.4.4 does not sanitise and escape a parameter before outputting it back in the page, l

Themify WordPress plugin before 1.4.4 does not have CSRF check in its bulk action, which could allow attackers to make

The Hubbub Lite WordPress plugin before 1.33.1 does not ensure that user have access to password protected post before

In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local informatio

In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation

In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information

In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information