2024

In OpenBSD 7.4 before errata 014, vmm(4) did not restore GDTR limits properly on Intel (VMX) CPUs.

Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust

Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was prese

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular exp

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a use-after-free in th

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow vi

Buffer Overflow vulnerability in Open Robotic Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-hum

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow vi

Buffer Overflow vulnerability in Open Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allo

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navig

Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation

Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navig

In update_gps_sv and output_vzw_debug of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/gpshal_wo

In procfile_write of gl_proc.c, there is a possible out of bounds read of a function pointer due to an incorrect bo

In store_upgrade and store_cmd of drivers/input/touchscreen/stm/ftm4_pdc.c, there are out of bound writes due to missing

In reboot_block_command of htc reboot_block driver, there is a possible stack buffer overflow due to a missing bound

sigstore-java is a sigstore java client for interacting with sigstore infrastructure. sigstore-java has insufficient ver

A stored cross-site scripting (XSS) vulnerability in the Device Settings section of LibreNMS v24.9.0 to v24.10.0 allows

In tscpu_write_GPIO_out and mtkts_Abts_write of mtk_ts_Abts.c, there is a possible buffer overflow in an sscanf due to i

JSFinder commit d70ab9bc5221e016c08cffaf0d9ac79646c90645 is vulnerable to Directory Traversal in the find_by_file functi

GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD (Binary File Descriptor) library's handling of tekhex forma

whapa v1.59 is vulnerable to Command Injection via a crafted filename to the HTML reports component.

DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause

In OpenBSD 7.4 before errata 006 and OpenBSD 7.3 before errata 020, httpd(8) is vulnerable to a NULL dereference when ha

In OpenBSD 7.5 before errata 009 and OpenBSD 7.4 before errata 022, exclude any '/' in readdir name validation to avoid

Oxide control plane software before 5 allows SSRF.

STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface. Code running as

A vulnerability was found in Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 1.0.0. It has been declared a

An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threa

An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a

An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a th

A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat acto

Directus is a real-time API and App dashboard for managing SQL database content. The Comment feature has implemented a f

OTP is a set of Erlang libraries, which consists of the Erlang runtime system, a number of ready-to-use components mainl

Favorites-web 1.3.0 favorites-web has a directory traversal vulnerability in SecurityFilter.java.

A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been classified as critical. Aff

A vulnerability was found in code-projects Online Notice Board up to 1.0 and classified as critical. This issue affects

The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A se

The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A vu

Kanboard is project management software that focuses on the Kanban methodology. HTML can be injected and stored into the

rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows attackers to trigger resource exhaustion vul

rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by provi

WeGIA v3.2.0 was discovered to contain a Cross-Site Request Forgery (CSRF).

Multiple stored cross-site scripting (XSS) vulnerabilities in the component /configuracao/meio_pagamento.php of WeGIA v3

Multiple stored cross-site scripting (XSS) vulnerabilities in the component /configuracao/gateway_pagamento.php of WeGIA

Mattermost versions 9.7.x <= 9.7.5, 9.8.x <= 9.8.2 and 9.9.x <= 9.9.2 fail to properly propagate permission scheme updat

A vulnerability has been found in code-projects Simple CRUD Functionality 1.0 and classified as problematic. This vulner

A vulnerability, which was classified as critical, was found in CodeZips Project Management System 1.0. This affects an