2024

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not su

Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially expl

Type Confusion in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit heap corru

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user can mute alert rul

Contao is an Open Source CMS. In affected versions a back end user with access to the file manager can upload malicious

A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function m

A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mp_vfs_umo

An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence of navigation

Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacke

A vulnerability, which was classified as critical, was found in code-projects Hospital Management System 1.0. This affec

There is a command injection vulnerability that may allow an attacker to inject malicious input on the device's operatin

Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI). Successful exploitatio

Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of t

An authenticated Path Traversal vulnerabilities exists in the ArubaOS. Successful exploitation of this vulnerability all

The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Serve

A flaw was found in the vLLM library. A completions API request with an empty prompt will crash the vLLM API server, res

Improper Digital Signature Invalidation  vulnerability in Zip Repair Mode of The Document Foundation LibreOffice allows

Prior to the patched version, logged in users of Mautic are vulnerable to Relative Path Traversal/Arbitrary File Deletio

The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URL

An issue was discovered in the powermail extension through 12.4.0 for TYPO3. It fails to validate the mail parameter of

Incorrect Privilege Assignment vulnerability in favethemes Houzez allows Privilege Escalation.This issue affects Houzez:

Privilege Escalation vulnerability in favethemes Houzez Login Register houzez-login-register.This issue affects Houzez L

Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application whic

FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_mana

FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_mana

A vulnerability in the FAISS.deserialize_from_bytes function of langchain-ai/langchain allows for pickle deserialization

The Share This Image plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.03. Thi

The PropertyHive plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,

Denial of Service (DoS) vulnerability has been found in Dual-redundant Platform for Computer. If a computer on which the

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. A logic issue existed where a pro

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18,

This issue was addressed with improved checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Sequoia 15, macOS

This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 16. A malicious application may gain

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be a

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15. An app may be able

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An app may be able to gain root p

An integrity issue was addressed with Beacon Protection. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15,

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15, macO

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A non-privilege

The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. A remote attack

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extens

The HTTPD binary in multiple ZTE routers has a local file inclusion vulnerability in session_init function. The session

The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in rsa_decrypt function. This f

An Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music/index.php?page=edit_us

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It has been discovered that m

FluxCP is a web-based Control Panel for rAthena servers written in PHP. A javascript injection is possible via venders/b

A Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative quantities to the shoppin

Race condition in Seamless Firmware Updates for some Intel(R) reference platforms may allow a privileged user to potenti