2024

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.2.2403.100, an a

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, a lo

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, an a

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, a low-privileged user that does not hold the admin or powe

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 on Windows, an authenticated user could execute a specially

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper N

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator cred

Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, a

Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, A

Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, th

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6

MongoDB Compass may be susceptible to code injection due to insufficient sandbox protection settings with the usage of e

A command for refining a collection shard key is missing an authorization check. This may cause the command to run direc

GeoServer is an open source server that allows users to share and edit geospatial data. Starting in version 2.10.0 and p

Memory corruption while handling user packets during VBO bind operation.

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.

Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.

Memory corruption when allocating and accessing an entry in an SMEM partition.

Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of th

Memory corruption when an invoke call and a TEE call are bound for the same trusted application.

Information disclosure while parsing sub-IE length during new IE generation.

Memory corruption while processing key blob passed by the user.

Transient DOS while loading the TA ELF file.

Memory corruption while performing finish HMAC operation when context is freed by keymaster.

Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space.

Information disclosure while handling SA query action frame.

INformation disclosure while handling Multi-link IE in beacon frame.

Information Disclosure while parsing beacon frame in STA.

Memory corruption while processing IOCTL handler in FastRPC.

Improper Neutralization of Input During Web Page Generation vulnerability in SOKRATES-software SOWA OPAC allows a Reflec

phpok 6.4.003 contains a Cross Site Scripting (XSS) vulnerability in the ok_f() method under the framework/api/upload_co

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.23.5 and 2.2

Incorrect Provision of Specified Functionality vulnerability in MESbook 20221021.03 version. An unauthenticated remote a

External server-side request vulnerability in MESbook 20221021.03 version, which could allow a remote, unauthenticated a

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lea

Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login t

adolph_dudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerabilit

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This v

agreejs shared v0.0.1 was discovered to contain a prototype pollution via the function mergeInternalComponents. This vul

che3vinci c3/utils-1 1.0.131 was discovered to contain a prototype pollution via the function assign. This vulnerability

cafebazaar hod v0.4.14 was discovered to contain a prototype pollution via the function request. This vulnerability allo

ahilfoley cahil/utils v2.3.2 was discovered to contain a prototype pollution via the function set. This vulnerability al

2o3t-utility v0.1.2 was discovered to contain a prototype pollution via the function extend. This vulnerability allows a

robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vuln

amoyjs amoy common v1.0.10 was discovered to contain a prototype pollution via the function setValue. This vulnerability

rjrodger jsonic-next v2.12.1 was discovered to contain a prototype pollution via the function util.clone. This vulnerabi

ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component _ModuleSupport.jsonApply. T