2024

An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce arbitrary

A vulnerability was found in Juanpao JPShop up to 1.5.02. It has been rated as critical. Affected by this issue is some

Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges can

Aria Operations for Networks contains a local file read vulnerability. A malicious actor with admin privileges may explo

Aria Operations for Networks contains a local privilege escalation vulnerability. A console user with access to Aria Ope

Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges may

A vulnerability has been found in sepidz SepidzDigitalMenu up to 7.1.0728.1 and classified as problematic. This vulnerab

A vulnerability, which was classified as critical, was found in Byzoro Smart S20 Management Platform up to 20231120. Thi

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.19, 7.1 through 7.1.2.15, 7.2 through 7.2.3.8, 7.3 through 7.3.2.3, and IBM

A vulnerability, which was classified as critical, has been found in Byzoro Smart S40 Management Platform up to 20240126

A vulnerability classified as critical was found in Tongda OA 2017 up to 11.9. Affected by this vulnerability is an unkn

An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a c

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Some users might get ac

A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.10. Affected is an unknown function of

IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1020.00 through FW1020.40, and FW1030.00 through FW1030.30 could all

A flaw was found in indent, a program for formatting C code. This issue may allow an attacker to trick a user into proce

An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in

In JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG image

In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives

In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an i

In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation

In JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possible

In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was missed

A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred byt

An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP serv

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0

Dell Display Manager application, version 2.1.1.17 and prior, contain an insecure operation on windows junction/mount p

DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A l

Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin

The XML parser in Magic xpi Integration Platform 4.13.4 allows XXE attacks, e.g., via onItemImport.

Dell Command | Monitor, versions prior to 10.9, contain an arbitrary folder deletion vulnerability. A locally authentic

Memory corruption in HLOS while converting from authorization token to HIDL vector.

Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.

Memory corruption in Audio while processing the calibration data returned from ACDB loader.

Memory corruption in Audio while processing IIR config data from AFE calibration block.

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points

Information disclosure in Audio while accessing AVCS services from ADSP payload.

Transient DOS in Audio when invoking callback function of ASM driver.

pyLoad is an open-source Download Manager written in pure Python. There is an open redirect vulnerability due to incorre

Improper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allows physical attackers to access

Implicit intent hijacking vulnerability in UPHelper library prior to version 4.0.0 allows local attackers to access sens

Implicit intent hijacking vulnerability in IAP of Galaxy Store prior to version 4.5.63.6 allows local attackers to acces

Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4.5.63.6 allows local attackers

Implicit intent hijacking vulnerability in SamsungAccount of Galaxy Store prior to version 4.5.63.6 allows local attacke

Implicit intent hijacking vulnerability in AccountActivity of Galaxy Store prior to version 4.5.63.6 allows local attack

Improper input validation in bootloader prior to SMR Feb-2024 Release 1 allows local privileged attackers to cause an Ou

Out-of-bounds Write vulnerabilities in svc1td_vld_plh_ap of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local at

Out-of-bounds Write vulnerabilities in svc1td_vld_elh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attac

Out-of-bounds Write vulnerabilities in svc1td_vld_slh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attac