2024

PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resulted in the ability to execute a

An issue was discovered on GL.iNet devices through 4.5.0. Attackers can invoke the add_user interface in the system modu

In Plotly plotly.js before 2.25.2, plot API calls have a risk of __proto__ being polluted in expandObjectPaths or nested

In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a     possible way to access adb before SUW completi

Google Nest WiFi Pro root code-execution & user-data compromise

OTCLient is an alternative tibia client for otserv. Prior to commit db560de0b56476c87a2f967466407939196dd254, the /mehah

An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions c

An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege 

An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ekol Informatics W

Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.

Memory corruption in HLOS while running playready use-case.

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.

In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote cod

The affiliate-toolkit WordPress plugin before 3.4.3 lacks authorization and authentication for requests to it's affiliat