2024

In onActivityResult of NotificationSoundPreference.java, there is a possible way to hear audio files belonging to a diff

In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when rest

In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This c

In multiple locations, there is a possible out of bounds read due to a missing bounds check. This could lead to paired d

In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. Th

Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability. An unauthe

In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. T

DOM-based HTML injection vulnerability in the main page of Darktrace Threat Visualizer version 6.1.27 (bundle version 61

Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticat

In multiple locations, there is a possible way to request access to directories that should be hidden due to improper in

In btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check. T

In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error in

In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local informatio

In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission ch

In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to loc

In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing pe

An Open Redirect vulnerability was found in osTicky2 below 2.2.8. osTicky (osTicket Bridge) by SmartCalc is a Joomla 3.x

A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending noti

Tenda AC10V4.0 V16.03.10.20 was discovered to contain a stack overflow via the page parameter in the sub_49B384 function

wolfSSL prior to 5.6.6 did not check that messages in one (D)TLS record do not span key boundaries. As a result, it was

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a Cross-Site Request Forgery (CSRF) vul

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a stored Cross-Site Scripting (XSS) vul

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Uncontrolled Resource Consumption vu

An improper certificate validation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, F

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version 7

An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 - 9.4

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Improper Input Validation vulnerabilit

A vulnerability, which was classified as critical, has been found in ECshop 4.1.8. Affected by this issue is some unknow

Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to

Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to

Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to

The database access credentials configured during installation are stored in a special table, and are encrypted with a s

SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an

XSS vulnerability in DP Calendar component for Joomla.

The Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages plugin for WordPress is vulnerable to Sensitiv

Improper input validation in Algosec FireFlow VisualFlow workflow editor via Name, Description and Configuration File f

ping reads raw IP packets from the network to process responses in the pr_pack() function. As part of processing a resp

A particular case of memory sharing is mishandled in the virtual memory system. This is very similar to SA-21:08.vm, bu

`bhyveload -h <host-path>` may be used to grant loader access to the <host-path> directory tree on the host. Affected v

URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8. If an attacker sends a specially crafted request

When dumping core and saving process information, proc_getargv() might return an sbuf which have a sbuf_len() of 0 or -1

EBM Technologies RISWEB's specific URL path is not properly controlled by permission, allowing attackers to browse speci

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm cli

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which