2024

The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt. This could hav

Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to use

Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of these bugs showed evidence

A flaw in handling fullscreen transitions may have inadvertently caused the application to become stuck in fullscreen mo

When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?"

The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature ver

A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resultin

Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS thr

The executable file warning was not presented when downloading .library-ms files. *Note: This issue only affected Wind

An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possib

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corrupti

An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using d

Crafted Binder Request Causes Heap UAF in MediaServer

Information disclosure possible while audio playback.

Information disclosure due to uninitialized variable.

QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory.

Out-of-bounds Read vulnerability in Apache NimBLE. Missing proper validation of HCI Number Of Completed Packets could l

Out-of-bounds Read vulnerability in Apache NimBLE. Missing proper validation of HCI advertising report could lead to ou

Improper Validation of Array Index vulnerability in Apache NimBLE. Lack of input validation for HCI events from control

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE. Specially crafte

VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to cl

VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to em

VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to vi

VMware Aria Operations contains a local privilege escalation vulnerability.  A malicious actor with local administrative

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative

In Nunjucks versions prior to version 3.2.4, it was possible to bypass the restrictions which are provided by the autoe

On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Mozilla Convi

The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in

A CWE-798 "Use of Hard-coded Credentials" was discovered affecting the following devices manufactured by Advantech: EKI-

A CWE-79 "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" was discovered affecting

A CWE-306 "Missing Authentication for Critical Function" was discovered affecting the following devices manufactured by

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff

A CWE-15 "External Control of System or Configuration Setting" was discovered affecting the following devices manufactur

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in