2024

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Improper Input Validation vulnerabilit

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Integer Overflow or Wraparound vulnera

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that

A vulnerability, which was classified as critical, has been found in ECshop 4.1.8. Affected by this issue is some unknow

DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability i

DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability in

Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input val

Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection vulnerability when using remot

Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured. A

Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result

Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result

Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a craf

Substance3D - Painter versions 9.1.1 and earlier are affected by a Write-what-where Condition vulnerability that could r

Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result

Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to

Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to

Substance3D - Painter versions 9.1.1 and earlier are affected by a Buffer Overflow vulnerability that could result in ar

Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to

INPRAX "iZZi connect" application on Android contains hard-coded MQTT queue credentials. The same MQTT queue is used by

Use of a hard-coded password for a special database account created during Comarch ERP XL installation allows an attacke

The database access credentials configured during installation are stored in a special table, and are encrypted with a s

Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unenc

An issue in VitalPBX v.3.2.4-5 allows an attacker to execute arbitrary code via a crafted payload to the /var/lib/vitalp

SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an

Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete file

XSS vulnerability in DP Calendar component for Joomla.

The Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages plugin for WordPress is vulnerable to Sensitiv

An issue was discovered in Wind River VxWorks 7 22.09 and 23.03. If a VxWorks task or POSIX thread that uses OpenSSL exi

Improper input validation in Algosec FireFlow VisualFlow workflow editor via Name, Description and Configuration File f

ping reads raw IP packets from the network to process responses in the pr_pack() function. As part of processing a resp

The implementation of lib9p's handling of RWALK messages was missing a bounds check needed when unpacking the message co

A particular case of memory sharing is mishandled in the virtual memory system. This is very similar to SA-21:08.vm, bu

The aio_aqueue function, used by the lio_listio system call, fails to release a reference to a credential in an error ca

The jail(2) system call has not limited a visiblity of allocated TTYs (the kern.ttys sysctl). This gives rise to an inf

`bhyveload -h <host-path>` may be used to grant loader access to the <host-path> directory tree on the host. Affected v

URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8. If an attacker sends a specially crafted request

A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound grou

When dumping core and saving process information, proc_getargv() might return an sbuf which have a sbuf_len() of 0 or -1

The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-

The e1000 network adapters permit a variety of modifications to an Ethernet packet when it is being transmitted. These

Handlers for *_CFG_PAGE read / write ioctls in the mpr, mps, and mpt drivers allocated a buffer of a caller-specified si

A user-provided integer option was passed to nmreq_copyin() without checking if it would overflow. This insufficient bo

The total size of the user-provided nmreq to nmreq_copyin() was first computed and then trusted during the copyin. This

EBM Technologies RISWEB's specific query function parameter does not properly restrict user input, and this feature page