2024

A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the und

A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to co

A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files

A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files

A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to co

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Pri

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Uni

A vulnerability in the logging subsystem of Cisco Meeting Management could allow an authenticated, remote attacker to vi

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager,

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to cond

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to bypa

A vulnerability in the logging component of Cisco Unified Communications Manager IM & Presence Service (Unified CM I

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phon

A vulnerability in the access control list (ACL) programming of Cisco Nexus 3550-F Switches could allow an unauthenticat

A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not chec

A vulnerability has been found in didi Super-Jacoco 1.0 and classified as critical. Affected by this vulnerability is an

IBM Maximo Application Suite - Monitor Component 8.10.11, 8.11.8, and 9.0.0 is vulnerable to cross-site scripting. This

A vulnerability classified as problematic has been found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 202410

The Event post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's events_cal shortcode i

The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Script

The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to Store

The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map b

A flaw was found in Ansible. The ansible-core `user` module can allow an unprivileged user to silently create or replace

When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it

Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavatio

The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized

The Tumult Hype Animations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability

The Video Gallery for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missi

The Wp-ImageZoom WordPress plugin through 1.1.0 does not sanitise and escape some parameters before outputting them back

The WP ULike WordPress plugin before 4.7.5 does not sanitise and escape some of its settings, which could allow high pr

Out-of-bounds write in Battery Full Capacity node prior to Firmware update Sep-2024 Release on Galaxy S24 allows local a

Out-of-bounds write in usb driver prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to writ

Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multip

Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to mo

Improper authentication in Private Info in Samsung Pass in prior to version 4.4.04.7 allows physical attackers to access

Improper Access Control in Samsung Video Player prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.

Improper access control in Samsung Voice Recorder prior to version 21.5.40.37 allows physical attackers to access record

Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across mu

Improper input validation in Settings Suggestions prior to SMR Nov-2024 Release 1 allows local attackers to launch privi

Improper input validation in BluetoothAdapter prior to SMR Nov-2024 Release 1 allows local attackers to cause local perm

Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to

Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone

Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corrup

Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious a

Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attacker

Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across mult

Improper Input Validation in IpcProtocol in Modem prior to SMR Nov-2024 Release 1 allows local attackers to cause Denial

The WS Form LITE – Drag & Drop Contact Form Builder for WordPress plugin for WordPress is vulnerable to Reflected Cross-

An authenticated Path Traversal vulnerability exists in Instant AOS-8 and AOS-10. Successful exploitation of this vulner

The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Basic Information Disclosure in all ve