2024

Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker

An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution du

The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TL

The com.eypcnnapps.quickreboot (aka Eyuep Can Yilmaz {ROOT] Quick Reboot) application 1.0.8 for Android has exposed broa

1Panel is an open source Linux server operation and maintenance management panel. The HTTPS cookie that comes with the p

`python-multipart` is a streaming multipart parser for Python. When using form data, `python-multipart` uses a Regular E

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker t

Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerab

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet

A vulnerability classified as critical was found in QiboSoft QiboCMS X1 up to 1.0.6. Affected by this vulnerability is t

Out-of-bounds Write vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-

The 3DPrint Lite WordPress plugin before 1.9.1.5 does not have any authorisation and does not check the uploaded file in

A race condition was found in the Linux kernel's media/dvb-core in dvbdmx_write() function. This can result in a null po

A race condition was found in the Linux kernel's media/xc4000 device driver in xc4000 xc4000_get_frequency() function. T

A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can

A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function. This can resu

A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function. This can

A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function.

A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can r

A race condition was found in the Linux kernel's sound/hda device driver in snd_hdac_regmap_sync() function. This can r

Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the err

A race condition was found in the Linux kernel's drm/exynos device driver in exynos_drm_crtc_atomic_disable() function.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noah Kagan Scroll

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MJS Software PT Si

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jgadbois Calculato

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MightyThemes Might

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan's Art Add Cust

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gordon Böhme, Anto

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Five Star Plugins

Sharp NEC Displays (P403, P463, P553, P703, P801, X554UN, X464UN, X554UNS, X464UNV, X474HB, X464UNS, X554UNV, X555UNS, X

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Dempfle Ad

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Biteship Biteship:

In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service w

In telephony, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalati

In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio

In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of

In alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote

In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of

In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote e

In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of

In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of

In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

Vintage, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API create_overlay.cgi did not have a suffic

Brandon Rothel from QED Secure Solutions and Sam Hanson of Dragos have found that the VAPIX API tcptest.cgi did not have

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Dulaney Dan's