2024

Permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may

Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this v

Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this v

Permission control vulnerability in the clock module. Impact: Successful exploitation of this vulnerability will affect

Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module. Impact: Successful explo

An issue was discovered in CandyCMS version 1.0.0, allows remote attackers to execute arbitrary code via the install.php

Incorrect Access Control vulnerability in ZLMediaKit versions 1.0 through 8.0, allows remote attackers to escalate privi

The WPB Show Core WordPress plugin before 2.7 does not sanitise and escape a parameter before outputting it back in the

The wpb-show-core WordPress plugin before 2.7 does not sanitise and escape the parameters before outputting it back in t

The Font Farsi WordPress plugin through 1.6.6 does not sanitise and escape some of its settings, which could allow high

The SendPress Newsletters WordPress plugin through 1.23.11.6 does not sanitise and escape some of its settings, which co

The SendPress Newsletters WordPress plugin through 1.23.11.6 does not sanitise and escape some of its settings, which co

The WPB Show Core WordPress plugin before 2.7 does not sanitise and escape some parameters before outputting them back i

In camera driver, there is a possible use after free due to a logic error. This could lead to local denial of service wi

In faceid service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial

In vsp driver, there is a possible missing verification incorrect input. This could lead to local denial of service with

In ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote denial of ser

In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote

In Network Adapter Service, there is a possible missing permission check. This could lead to local denial of service wit

In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o

In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o

In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o

In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o

In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o

In modem driver, there is a possible system crash due to improper input validation. This could lead to local information

In modem driver, there is a possible system crash due to improper input validation. This could lead to local information

In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote

In SecurityCommand message after as security has been actived., there is a possible improper input validation. This coul

In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote

In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check.

The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firmw

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rated as critical. This issue affe

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. This vulnera

A vulnerability classified as critical was found in CP Plus Wi-Fi Camera up to 20240401. Affected by this vulnerability

The Mojolicious module before 9.11 for Perl has a bug in format detection that can potentially be exploited for denial o

The Mojolicious module before 8.65 for Perl is vulnerable to secure_compare timing attacks that allow an attacker to gue

A vulnerability classified as problematic has been found in PuneethReddyHC Event Management 1.0. Affected is an unknown

A vulnerability was found in PuneethReddyHC Event Management 1.0. It has been rated as critical. This issue affects some

A vulnerability was found in EyouCMS 1.6.5. It has been declared as critical. This vulnerability affects unknown code of

A vulnerability was found in QKSMS up to 3.9.4 on Android. It has been classified as problematic. This affects an unknow

In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash i

In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets

In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability bec

In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the

A vulnerability has been found in SourceCodester Online Courseware 1.0 and classified as problematic. This vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MailMunch MailMunc

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Testim

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Blocksmarket Gradi

Unrestricted Upload of File with Dangerous Type vulnerability in Sukhchain Singh Auto Poster.This issue affects Auto Pos

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Phpbits Creative S