2024

Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote att

Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a

Inappropriate implementation in HTML in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a u

Use after free in CSS in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage i

Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a

Use after free in User Education in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user

Use after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage

Race in Frames in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in speci

Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 127.0.6533.72 allowed a remote attacker

Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit

Use after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap cor

Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap c

Use after free in Downloads in Google Chrome on iOS prior to 127.0.6533.72 allowed a remote attacker to potentially expl

The Light Poll WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to m

The contextual menu for links could provide an opportunity for cross-site scripting attacks This vulnerability affects F

Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects F

Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vuln

D-Link DIR-300 REVA FIRMWARE v1.06B05_WW contains hardcoded credentials in the Telnet service.

A reflected cross-site scripting (XSS) vulnerability in Phpgurukul Tourism Management System v2.0 allows attackers to ex

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed tec

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/

An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue

In certain cases, Zscaler Internet Access (ZIA) can be disabled by PowerShell commands with admin rights. This affects Z

The Zscaler Updater process does not validate the digital signature of the installer before execution, allowing arbitrar

While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks,

Anti-tampering can be disabled under certain conditions without signature validation. This affects Zscaler Client Connec

An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-

A vulnerability was found in DataGear up to 5.0.0. It has been declared as critical. Affected by this vulnerability is t

K7RKScan.sys in K7 Ultimate Security before 17.0.2019 allows local users to cause a denial of service (BSOD) because of

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware fla

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The flaw does not

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware con

A CSV injection vulnerability in Automation Anywhere Automation 360 version 21094 allows attackers to execute arbitrary

A Reflected Cross-site scripting (XSS) vulnerability exists in '/search' in microweber 2.0.15 and earlier allowing unaut

A compromised HMS Networks Cosy+ device could be used to request a Certificate Signing Request from Talk2m for another d

PrivX before 34.0 allows data exfiltration and denial of service via the REST API. This is fixed in minor versions 33.1,

ID4Portais in version < V.2022.837.002a returns message parameter unsanitized in the response, resulting in a HTML Injec

A vulnerability was found in juzaweb CMS up to 3.4.2. It has been classified as problematic. Affected is an unknown func

Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on a

Incorrect garbage collection interaction could have led to a use-after-free. This vulnerability affects Firefox < 129.

The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into gr

Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Fir

Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox

ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak s

It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and

Firefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced Tracking Protection. On a si

A select option could partially obscure security prompts. This could be used by a malicious site to trick a user into gr

Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects