2024

In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy.

In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error in

The Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15 allows authentication byp

In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local informatio

In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local

In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free. This could

In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission ch

In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to loc

In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of syst

In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This coul

In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions

In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local

In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background due

In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing pe

In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This

In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could

MSS (Mission Support System) is an open source package designed for planning atmospheric research flights. In file: `ind

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulner

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability. If exploite

The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vu

The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vu

An Open Redirect vulnerability was found in osTicky2 below 2.2.8. osTicky (osTicket Bridge) by SmartCalc is a Joomla 3.x

Local privilege escalation vulnerability affects OpenText Operations Agent product versions 12.15 and 12.20-12.25 when i

A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending noti

Improper Neutralization vulnerability affects OpenText ALM Octane version 16.2.100 and above. The vulnerability could re

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited,

Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sen

Tenda AC10V4.0 V16.03.10.20 was discovered to contain a stack overflow via the page parameter in the sub_49B384 function

wolfSSL prior to 5.6.6 did not check that messages in one (D)TLS record do not span key boundaries. As a result, it was

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSTAHSİL Online P

Use of Hard-coded Credentials vulnerability in Utarit Information Technologies SoliPay Mobile App allows Read Sensitive

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information

Incorrect Use of Privileged APIs vulnerability in Utarit Information Technologies SoliPay Mobile App allows Collect Data

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Improper Neutralization of Special E

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a stored Cross-Site Scripting (XSS) vul

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a Cross-Site Request Forgery (CSRF) vul

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a stored Cross-Site Scripting (XSS) vul

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Uncontrolled Resource Consumption vu

An improper certificate validation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, F

An improper privilege management vulnerability [CWE-269] in Fortinet FortiClientEMS version 7.2.0 through 7.2.2 and befo

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version 7

An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 - 9.4

Substance3D - Designer versions 13.1.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a cr

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that

Audition versions 24.0.3, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could resul

Adobe FrameMaker Publishing Server versions 2022.1 and earlier are affected by an Improper Authentication vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that