2024

Memory corruption while playing audio file having large-sized input buffer.

Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.

Memory corruption when the channel ID passed by user is not validated and further used.

Memory corruption when the payload received from firmware is not as per the expected protocol size.

Memory corruption when size of buffer from previous call is used without validation or re-initialization.

Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.

Memory corruption while verifying the serialized header when the key pairs are generated.

Memory corruption in HLOS while checking for the storage type.

Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is

Information disclosure while parsing dts header atom in Video.

Memory corruption while querying module parameters from Listen Sound model client in kernel from user space.

Memory corruption while copying the sound model data from user to kernel buffer during sound model register.

Memory corruption when the bandpass filter order received from AHAL is not within the expected range.

Memory corruption when multiple listeners are being registered with the same file descriptor.

Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.

A denial of service vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior. When processing an 'ICS

An SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe processes a 'Recalcula

A SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe processes a 'Recalculat

An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be e

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/readDeal.php?mudi=cl

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/readDeal.php?mudi=up

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/in

DedeCMS V5.7.114 is vulnerable to deletion of any file via mail_file_manage.php.

The NPort 5100A Series firmware version v1.6 and prior versions are affected by web server XSS vulnerability. The vulner

Section Camera V2.5.5.3116-S50-SMA-B20160811 and earlier versions allow the accounts and passwords of administrators and

An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after

An unauthenticated local attacker may trick a user to open corrupted project files to execute arbitrary code or crash th

The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom postmeta output

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as problematic. Affected

E-Mails exported as PDF were stored in a cache that did not consider specific session information for the related user a

Maliciously crafted E-Mail attachment names could be used to temporarily execute script code in the context of the users

Content-ID based embedding of resources in E-Mails could be abused to trigger client-side script code when using the "sh

E-Mail containing malicious display-name information could trigger client-side script execution when using specific mobi

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as proble

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. Th

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problemati

A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System

The MF Gig Calendar WordPress plugin through 1.2.1 does not have CSRF checks in some places, which could allow attackers

The MF Gig Calendar WordPress plugin through 1.2.1 does not sanitise and escape some of its settings, which could allow

The Crelly Slider WordPress plugin through 1.4.5 does not sanitise and escape some of its settings, which could allow hi

The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could

A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management S

A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affect

A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0. A

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as problematic

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problema

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as proble

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. Af

Mateso PasswordSafe through 8.13.9.26689 has Weak Cryptography.