2024

A cross-site request forgery (CSRF) vulnerability in all versions up to 1.14.1 of the api server component of Allegro AI

Lack of authentication in all versions of the fileserver component of Allegro AI’s ClearML platform allows a remote atta

A path traversal vulnerability in versions 1.4.0 to 1.14.1 of the client SDK of Allegro AI’s ClearML platform enables a

Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platf

A flaw was found in indent, a program for formatting C code. This issue may allow an attacker to trick a user into proce

An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in

In JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG image

In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives

In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an i

In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives

In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible

In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation

In JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possible

In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was missed

In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible

Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affe

A default installation of RustDesk 1.2.3 on Windows places a WDKTestCert certificate under Trusted Root Certification Au

A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred byt

An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP serv

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0

Dell Display Manager application, version 2.1.1.17 and prior, contain an insecure operation on windows junction/mount p

DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A l

Dell Display Manager application, version 2.1.1.17, contains a vulnerability that low privilege user can execute malici

Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin

Dell Data Protection Search 19.2.0 and above contain an exposed password opportunity in plain text when using LdapSetti

The XML parser in Magic xpi Integration Platform 4.13.4 allows XXE attacks, e.g., via onItemImport.

Dell Command | Monitor, versions prior to 10.9, contain an arbitrary folder deletion vulnerability. A locally authentic

Dell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in DPM service. A low privi

Transient DOS while parse fils IE with length equal to 1.

Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger.

Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access po

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.

Memory corruption while reading ACPI config through the user mode app.

Transient DOS while processing 11AZ RTT management action frame received through OTA.

Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mappi

Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.

Memory corruption in video while parsing invalid mp2 clip.

Memory corruption in Automotive Multimedia due to improper access control in HAB.

Memory corruption when malformed message payload is received from firmware.

Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed w

Memory corruption in HLOS while converting from authorization token to HIDL vector.

Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.

Memory corruption in Core while processing control functions.

Memory corruption in Audio while processing the calibration data returned from ACDB loader.

Memory corruption in Audio while processing IIR config data from AFE calibration block.

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points

Information disclosure in Audio while accessing AVCS services from ADSP payload.

Transient DOS in Audio when invoking callback function of ASM driver.