2024

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An agent link vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileg

The radio frequency communication protocol being used by Meross MSH30Q 4.5.23 is vulnerable to replay attacks, allowing

Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow an exploit

Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow an exploit

Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow an exploit

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build

A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebVi

There is an OS command injection vulnerability in Crestron AM-300 firmware version 1.4499.00018 which may enable a user

Meross MSH30Q 4.5.23 is vulnerable to Cleartext Transmission of Sensitive Information. During the device setup phase, th

Cleartext Transmission during initial setup in Shelly TRV 20220811-15234 v.2.1.8 allows a local attacker to obtain the W

Missing Integrity Check in Shelly TRV 20220811-152343/v2.1.8@5afc928c allows malicious users to create a backdoor by red

Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run a

SQL injection vulnerability in Webkul Bundle Product 6.0.1 allows a remote attacker to execute arbitrary code via the id

SOFARPC is a Java RPC framework. SOFARPC defaults to using the SOFA Hessian protocol to deserialize received data, while

TuiTse-TsuSin is a package for organizing the comparative corpus of Taiwanese Chinese characters and Roman characters, a

Tuta is an encrypted email service. In versions prior to 119.10, an attacker can attach an image in a html mail which is

Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `element` method in `app/routes.py`

Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `window` endpoint does not sanitize

Whoogle Search is a self-hosted metasearch engine. Versions 0.8.3 and prior have a limited file write vulnerability when

Whoogle Search is a self-hosted metasearch engine. In versions prior to 0.8.4, the `element` method in `app/routes.py` d

HPE OneView may have a missing passphrase during restore.

A Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10.8 allows remote attacke

Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login

Cross Site Scripting (XSS) vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword

HPE OneView may allow clusterService Authentication Bypass resulting in denial of service.

HPE OneView may allow command injection with local privilege escalation.

TOTOLINK_A3700R_V9.1.2u.6165_20211012has a command Injection vulnerability via setOpModeCfg

TOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow vulnerability via setParentalRules

TOTOLINK_A3700R_V9.1.2u.6165_20211012has a stack overflow vulnerability via setLanguageCfg

A stored cross-site scripting (XSS) vulnerability exists in Apache Superset before 3.0.3. An authenticated attacker with

Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs showed evidence

Some WASM source files could have caused a crash when loaded in devtools. This vulnerability affects Firefox < 122.

In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This vulnerability affects Firefox

A use-after-free crash could have occurred on macOS if a Firefox update were being applied on a very busy system. This c

A malicious devtools extension could have been used to escalate privileges. This vulnerability affects Firefox < 122, Fi

A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting

A phishing site could have repurposed an `about:` dialog to show phishing content with an incorrect origin in the addres

A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitra

When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overr

A Linux user opening the print preview dialog could have caused the browser to crash. This vulnerability affects Firefox

The WebAudio `OscillatorNode` object was susceptible to a stack buffer overflow. This could have led to a potentially ex

In some circumstances, JIT compiled code could have dereferenced a wild pointer value. This could have led to an exploit

An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability af