2024

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrat

Active debug code exists in Yamaha wireless LAN access point devices. If a logged-in user who knows how to use the debug

NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injec

Electronic Delivery Check System (Ministry of Agriculture, Forestry and Fisheries The Agriculture and Rural Development

Electronic Deliverables Creation Support Tool (Construction Edition) prior to Ver1.0.4 and Electronic Deliverables Creat

Electronic Delivery Check System (Doboku) Ver.18.1.0 and earlier, Electronic Delivery Check System (Dentsu) Ver.12.1.0 a

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set.

Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable

Label Studio, an open source data labeling tool had a remote import feature allowed users to import data from a remote w

Android Spoon application version 7.11.1 to 8.6.0 uses hard-coded credentials, which may allow a local attacker to retri

Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof

Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to insta

Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to poten

Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced

Insufficient policy enforcement in DevTools in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a

Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Aut

Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap

Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit hea

Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit hea

Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform d

Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to

Label Studio is an a popular open source data labeling tool. Versions prior to 1.9.2 have a cross-site scripting (XSS) v

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. Authentication for web interface is completed via an un

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext copy

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. The device provides a WiFi access point for initial con

Lantronix XPort sends weakly encoded credentials within web request headers.

An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain se

Redis raft master-1b8bd86 to master-7b46079 was discovered to contain an ODR violation via the component hiredisAllocFns

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers mishandle the early use of a

A link following vulnerability in the Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload S

An improper access control vulnerability in Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Work

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central could allow an attacke

A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks

A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execu

An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary

An updater link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to abuse the upda

An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate p

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privilege

An anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate pri

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privilege

A local file inclusion vulnerability on the Trend Micro Apex One management server could allow a local attacker to escal

A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacke

A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacke

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p