2024

Out-of-bounds write in parsing h.264 format in a specific mode in librtppayload.so prior to SMR Oct-2024 Release 1 allow

Out-of-bounds write in parsing h.264 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers

All versions of the package ggit are vulnerable to Command Injection via the fetchTags(branch) API, which allows user in

In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, HTTP_REDIRECT_STATUS variable is used to

In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using a certain non-standard configu

SAP BusinessObjects Business Intelligence Platform allows an authenticated user to send a specially crafted request to t

WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis. Special:WikiDiscover is a

InvenTree is an Open Source Inventory Management System. In affected versions of InvenTree it is possible for a register

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to constru

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. One of the sample scripts in PhpSpreadsh

Discourse is an open source platform for community discussion. A maliciously crafted email address could allow an attack

Discourse is an open source platform for community discussion. A user can create a post with many replies, and then atte

Cacti is an open source performance and fault management framework. An admin user can create a device with a malicious h

Cacti is an open source performance and fault management framework. The `fileurl` parameter is not properly sanitized wh

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The security scanner responsible for pre

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua

Improper access control validation in firmware of some Solidigm DC Products may allow an attacker with physical access t

Authenticated RCE via Path Traversal

Authenticated RCE via Path Traversal

Pre-Auth RCE via Path Traversal

Pre-Auth RCE via Path Traversal

An issue was discovered in the m2m scaler driver in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 9

Missing Authentication - User & System Configuration

A potential security vulnerability has been identified in the HP Hotkey Support software, which might allow local escala

A vulnerability was found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this issue is the function

Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay.

Vulnerability in Distro Linux Workbooth v2.5 that allows to escalate privileges to the root user by manipulating the net

A vulnerability has been found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this vulnerability is

A vulnerability, which was classified as critical, was found in D-Link DIR-619L B1 2.06. Affected is the function formAd

A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buf

A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buf

A vulnerability, which was classified as critical, has been found in D-Link DIR-619L B1 2.06. This issue affects the fun

A vulnerability classified as critical was found in D-Link DIR-619L B1 2.06. This vulnerability affects the function for

Memory corruption while maintaining memory maps of HLOS memory.

Memory corruption while processing user packets to generate page faults.

Transient DOS while parsing probe response and assoc response frame.

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.

Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0.

Transient DOS while parsing ESP IE from beacon/probe response frame.

Transient DOS when transmission of management frame sent by host is not successful and error status is received in the h

Memory corruption while taking snapshot when an offset variable is set by camera driver.

Information disclosure while parsing the multiple MBSSID IEs from the beacon.

Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.

Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service wi

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

A vulnerability has been found in D-Link DIR-605L 2.13B01 BETA and classified as critical. Affected by this vulnerabilit