2024

A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary comman

Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input

A Cross-Site Request Forgery (CSRF) vulnerability exists in the mudler/localai application, allowing attackers to craft

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical.

Go package IceWhaleTech/CasaOS-UserService provides user management functionalities to CasaOS. The Casa OS Login page ha

A vulnerability was found in SourceCodester Image Accordion Gallery App 1.0. It has been classified as critical. This af

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_virtual_site_info.php.

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php.

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php.

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsec_guide_1.php.

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/export_excel_user.php.

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupSSLCert.php.

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_fire_wall.php.

SQL injection vulnerability exists in GetDIAE_usListParameters.

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in Replify-Messenge

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php.

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_user_login.php.

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupTimePolicy.php.

In the Linux kernel, the following vulnerability has been resolved: Fix memory leak in posix_clock_open() If the clk o

Memory corruption while redirecting log file to any file location with any file name.

Memory corruption in Kernel while handling GPU operations.

Memory corruption while allocating memory for graphics.

Memory corruption when there is failed unmap operation in GPU.

Memory corruption while processing Codec2 during v13k decoder pitch synthesis.

Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics.

Transient DOS while decoding message of size that exceeds the available system memory.

Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions.

Memory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled.

Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.

Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to A

Transient DOS while processing DL NAS TRANSPORT message with payload length 0.

Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.

Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.

Memory corruption while processing finish_sign command to pass a rsp buffer.

Memory corruption in SPS Application while requesting for public key in sorter TA.

A vulnerability classified as problematic was found in Zebra ZTC GK420d 1.0. This vulnerability affects unknown code of

Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue af

A vulnerability classified as problematic has been found in fridgecow smartalarm 1.8.1 on Android. This affects an unkno

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php.

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php.

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/address_interpret.php.

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/add_getlogin.php.

A vulnerability was found in sequentech admin-console up to 6.1.7 and classified as problematic. Affected by this issue

A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bit

Hard-coded Credentials in CoolKit eWeLlink app are before 5.4.x on Android and IOS allows local attacker to unauthorized

In the Linux kernel, the following vulnerability has been resolved: ALSA: sh: aica: reorder cleanup operations to avoid

In the Linux kernel, the following vulnerability has been resolved: usb: misc: ljca: Fix double free in error handling

WebMail in Axigen 10.x before 10.3.3.62 allows XSS via the image attachment viewer.

A vulnerability, which was classified as critical, was found in NUUO NVRmini 2 up to 3.0.8. Affected is an unknown funct

Themify WordPress plugin before 1.4.4 does not sanitise and escape some of its Filters settings, which could allow high