2024

A CWE-184 “Incomplete List of Disallowed Inputs” vulnerability in the embedded Chromium browser (concerning the handling

A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the binary bein

A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary allows a re

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - fix infinite loop on requests no

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is co

A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows a remote u

swftools v0.9.2 was discovered to contain a strcpy parameter overlap via /home/swftools/src/swfc+0x48318a.

swftools v0.9.2 was discovered to contain a segmentation violation via the function s_font at swftools/src/swfc.c.

swftools v0.9.2 was discovered to contain a segmentation violation via the function state_free at swftools/src/swfc-hist

swftools v0.9.2 was discovered to contain a segmentation violation via the function compileSWFActionCode at swftools/lib

swftools v0.9.2 was discovered to contain a segmentation violation via the function free_lines at swftools/lib/modules/s

Use after free vulnerability in pub_crypto_recv_msg prior to SMR Mar-2024 Release 1 due to race condition allows local a

Maintenance Server, in Cybellum's QCOW air-gapped distribution (China Edition), versions 2.15.5 through 2.27, was compil

Improper Handling of Insufficient Privileges in Samsung Account prior to version 14.8.00.3 allows local attackers to acc

Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02

Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02

Improper validation vulnerability in Samsung Internet prior to version 24.0.3.2 allows local attackers to execute arbitr

Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41 allow

Out of bounds Read vulnerability in ssmis_get_frm in libsubextractor.so prior to SMR Mar-2024 Release 1 allows local att

Improper access control vulnerability in CustomFrequencyManagerService prior to SMR Mar-2024 Release 1 allows local atta

The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to a

Heap overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execut

Stack overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execu

Incorrect default permission in AppLock prior to SMR MAr-2024 Release 1 allows local attackers to configure AppLock sett

Missing proper interaction for opening deeplink in Samsung Internet prior to version v24.0.0.0 allows remote attackers t

Improper input validation in IpcTxSndSetLoopbackCtrl in libsec-ril prior to SMR Sep-2023 Release 1 allows local attacker

Missing release of resource after effective lifetime (CWE-772) in the Controller 7000 resulted in HBUS connected T-Seri

Improper neutralization of special elements in output (CWE-74) used by the email generation feature of the Command Cent

Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command Centre Server are access

TYPO3 before 13.0.1 allows an authenticated admin user (with system maintainer privileges) to execute arbitrary shell co

The Blue Triad EZAnalytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'bt_webid' param

The JM Twitter Cards plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 14

The Auto Refresh Single Page plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and inclu

The Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inc

The Page Builder Sandwich – Front End WordPress Page Builder Plugin plugin for WordPress is vulnerable to Sensitive Info

The Page Builder Sandwich – Front End WordPress Page Builder Plugin plugin for WordPress is vulnerable to unauthorized m

The SportsPress – Sports Club & League Manager plugin for WordPress is vulnerable to unauthorized modification of data d

The Build & Control Block Patterns – Boost up Gutenberg Editor plugin for WordPress is vulnerable to unauthorized access

The Change Memory Limit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabil

The Password Protected Store for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all

The Vimeography: Vimeo Video Gallery WordPress Plugin plugin for WordPress is vulnerable to PHP Object Injection in all

The Easy!Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'easyappointmen

libheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an attacker to cause a de

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain s

The Elink Smart eSmartCam (com.cn.dq.ipc) application 2.1.5 for Android contains hardcoded AES encryption keys that can

iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /custome

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_sup

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_sup

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /custom