2024

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable t

An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI pr

Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Success

Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Success

Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the PAP

Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI prot

Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of

Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of

There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI (Aruba's access

There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management p

There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated

There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated

There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthent

There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that coul

There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenti

There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenti

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code e

sshpiper is a reverse proxy for sshd. Starting in version 1.0.50 and prior to version 1.3.0, the way the proxy protocol

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code e

Improper Privilege Management vulnerability in Teplitsa of social technologies Leyka allows Privilege Escalation.This is

In WhatsUp Gold versions released before 2023.1.2 , an SSRF vulnerability exists in Whatsup Gold's Issue exists in

In WhatsUp Gold versions released before 2023.1.2 , a blind SSRF vulnerability exists in Whatsup Gold's FaviconContro

Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a d

An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive informat

The T-Soft E-Commerce 4 web application is susceptible to SQL injection (SQLi) attacks when authenticated as an admin or

Dotmesh is a git-like command-line interface for capturing, organizing and sharing application states. In versions 0.8.1

Git is a revision control system. The Git project recommends to avoid working in untrusted repositories, and instead to

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when clo

Improper DLL loading algorithms in B&R Automation Studio versions >=4.0 and <4.12 may allow an authenticated local attac

The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerabili

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, local cl

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attac

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, reposito

An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial Automation A

The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerabil

Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that w

Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidenc

A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability a

An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid

The `ShmemCharMapHashEntry()` code was susceptible to potentially undefined behavior by bypassing the move semantics for

When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This

An HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vuln

A memory allocation check was missing which would lead to a use-after-free if the allocation failed. This could have tri

When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability af

When importing resources using Web Workers, error messages would distinguish the difference between `application/javascr

A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting per

If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the win

Different techniques existed to obscure the fullscreen notification in Firefox for Android. These could have led to pot

Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite anot