2024

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.21 a

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Object Store). The support

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8 are susceptible to a difficult to exploit Reflected

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8 are susceptible to a Denial of Service (DoS) vulnera

Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici already cleared Authorization headers on cross-or

Undici is an HTTP/1.1 client, written from scratch for Node.js. In affected versions calling `fetch(url)` and not consum

Alf.io is a free and open source event attendance management system. In versions prior to 2.0-M4-2402 users can access t

Alf.io is a free and open source event attendance management system. An administrator on the alf.io application is able

An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1. When an low-privileged user initiat

SnapCenter versions 4.8 prior to 5.0 are susceptible to a vulnerability which could allow an authenticated SnapCenter S

In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds ch

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way for an app in the work profile to en

In onActivityResult of NotificationSoundPreference.java, there is a possible way to hear audio files belonging to a diff

In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when rest

In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overf

In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This c

In multiple locations, there is a possible out of bounds read due to a missing bounds check. This could lead to paired d

A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP). If exploited,

Prior to version 24.1, a local authenticated attacker can view Sysvol when Privilege Management for Windows is configure

In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to

In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. Th

In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This c

ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which

Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFF_ID parameter at /af

Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in re

Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated

Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability. An unauthe

In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. T

Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local att

An issue in idocv v.14.1.3_20231228 allows a remote attacker to execute arbitrary code and obtain sensitive information

DOM-based HTML injection vulnerability in the main page of Darktrace Threat Visualizer version 6.1.27 (bundle version 61

An issue in alanclarke URLite v.3.1.0 allows an attacker to cause a denial of service (DoS) via a crafted payload to the

Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticat

Publicly known cryptographic machine key in AlayaCare's Procura Portal before 9.0.1.2 allows attackers to forge their ow

A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20 allows attackers to ex

An arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to execute arbitrary code vi

A XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved Import And Export v3.8.6 all

In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic error

In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead

In injectInputEventToInputFilter of AccessibilityManagerService.java, there is a possible arbitrary input event injectio

In applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a different user due to a

In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to bypass the restrictions on s

In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due to

In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BA

In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead

In multiple locations, there is a possible way to request access to directories that should be hidden due to improper in

In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input

In btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check. T

In multiple files, there is a possible way to capture the device screen when disallowed by device policy due to a logic

In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update due to a logic error