2024

Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allows

Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local

Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for

Improper handling of exceptional conditions in Secure Folder prior to SMR Jul-2024 Release 1 allows physical attackers t

Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigg

Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local attackers to execute p

Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to

Improper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to trigger abnormal behavior.

Improper authentication in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to pair with devices.

Improper access control in OneUIHome prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activit

The Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elem

Web services managed by Edito CMS (Content Management System) in versions from 3.5 through 3.25 leak sensitive data as t

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.

The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data d

The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the order parameter

The Rife Elementor Extensions & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag

The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

Improper neutralization of input in Checkmk before versions 2.3.0p8, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows attacker

Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widge

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local h

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local h

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an incorrect privilege assignment vulnerability. A high p

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local h

The device is observed to accept deprecated TLS protocols, increasing the risk of cryptographic weaknesses.

The server supports at least one cipher suite which is on the NCSC-NL list of cipher suites to be phased out, increasing

The webserver utilizes basic authentication for its user login to the configuration interface. As encryption is disabled

The user management section of the web application permits the creation of user accounts with excessively weak passwords

A 'Cross-site Scripting' (XSS) vulnerability, characterized by improper input neutralization during web page generation,

A vulnerability allows attackers to download source code or an executable from a remote location and execute the code wi

The vulnerability allows attackers access to the root account without having to authenticate. Specifically, if the devic

Hardcoded credentials are discovered within the application's source code, creating a potential security risk for unauth

A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs. Attackers may exploit this

Inadequate input validation exposes the system to potential remote code execution (RCE) risks. Attackers can exploit thi

The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin f

The Easy Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file upload feat

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local h

Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.2 contain an execution with unnecessary privileges vulnerability. A

Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.0 contain use of a broken or risky cryptographic algorithm vulnerab

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privilege

The sitetweet WordPress plugin through 0.2 does not have CSRF check in some places, and is missing sanitisation as well

The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 is vulnerable does not validate and escape the question_

The Rank Math SEO WordPress plugin before 1.0.219 does not sanitise and escape some of its settings, which could allow

The EazyDocs WordPress plugin before 2.5.0 does not sanitise and escape some of its settings, which could allow high pr

The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to