2024

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in Ap4Sample.h in AP4_Sample::Ge

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4_SubStream::~AP4_SubStream

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4_UnknownAtom::~AP4_Unknown

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap overflow in AP4_Dec3Atom::AP4_Dec3Atom at Ap4De

Foxit PDF Reader AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows

A vulnerability, which was classified as problematic, was found in Bdtask Multi-Store Inventory Management System up to

For an attacker with pre-existing access to send a signal to a workflow, the attacker can make the signal name a script

A DOM-based open redirection in the returnUrl parameter of INSTINCT UI Web Client 6.5.0 allows attackers to redirect use

VMware SD-WAN Orchestrator contains an open redirect vulnerability. A malicious actor may be able to redirect a victim

VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability. A malicious actor with phy

VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially leading to remote code execut

Piccolo Admin is an admin interface/content management system for Python, built on top of Piccolo. Piccolo's admin panel

Cross Site Scripting vulnerability in CA17 TeamsACS v.1.0.1 allows a remote attacker to execute arbitrary code via a cra

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/member_scores.php

Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan.

Tenda AX1803 v1.0.0.1 contains a stack overflow via the serviceName parameter in the function fromAdvSetMacMtuWan.

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/co_do.php.

In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified

File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via upload

IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for outbound TLS connections ca

There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administr

There is an out-of-bounds read vulnerability in some Hikvision NVRs. An authenticated attacker could exploit this vulner

There is a NULL dereference pointer vulnerability in some Hikvision NVRs. Due to an insufficient validation of a paramet

A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remot

An Improper Input Validation vulnerability affecting the FTP service running on the DJI Mavic Mini 3 Pro could allow an

A Missing Authentication for Critical Function issue affecting the HTTP service running on the DJI Mavic Mini 3 Pro on t

A Buffer Copy without Checking Size of Input issue affecting the v2_sdk_service running on a set of DJI drone devices on

A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 c

A Improper Validation of Array Index issue affecting the v2_sdk_service running on a set of DJI drone devices on the por

A Out-of-bounds Write issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could a

A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 c

A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 c

Rapid7's InsightVM maintenance mode login page suffers from a sensitive information exposure vulnerability whereby, sens

The Genesis Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the block content in all versio

The Product Sort and Display for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due

The Sharkdropship for AliExpress Dropshipping and Affiliate plugin for WordPress is vulnerable to unauthorized loss of d

The WPFront User Role Editor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,

An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp,AP4_Mdhd

An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4StsdAtom.cpp,AP4_Stsd

Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4

Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4

Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

A vulnerability in the Eclipse Vert.x toolkit causes a memory leak in TCP servers configured with TLS and SNI support. W

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibri_pos

An issue was discovered in seeyonOA version 8, allows remote attackers to execute arbitrary code via the importProcess m

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause DOS through stack overflow.

in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through improper in

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through u

in OpenHarmony v4.0.0 and prior versions allow a remote attacker cause DOS through improper input.