2024

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enabl

Improper input validation in UEFI firmware error handler for some Intel(R) Processors may allow a privileged user to pot

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to enable informatio

Improper access control in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable

Untrusted pointer dereference in UEFI firmware for some Intel(R) reference processors may allow a privileged user to pot

A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalat

The Windows version of WebIQ 2.15.9 is affected by a directory traversal vulnerability that allows remote attackers to r

An improper access control (IDOR) vulnerability in the /api-selfportal/get-info-token-properties endpoint in MFASOFT Sec

TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the UploadCustomModule function, which

Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service,

OMFLOW from The SYSCOM Group does not properly restrict access to the system settings modification functionality, allowi

OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read ar

An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3. A rogue contr

An issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) 8.0

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Mohammad Ar

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Produc

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spi

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jennifer Ha

A vulnerability was found in code-projects Crud Operation System 1.0. It has been rated as critical. This issue affects

A vulnerability, which was classified as critical, has been found in h2oai h2o-3 3.46.0.4. This issue affects the functi

The Login with phone number plugin for WordPress is vulnerable to privilege escalation in all versions up to, and includ

The The Simple Spoiler plugin for WordPress is vulnerable to arbitrary shortcode execution in versions 1.2 to 1.3. This

The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) p

The The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode e

BT: HCI: adv_ext_report Improper discarding in adv_ext_report

In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible corrupt memory due to a logic error in the code. This co

In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible memory corruption due to improper input validation. This

In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. This

There is a possible LCS signing enforcement missing due to test/debugging code left in a production build. This could l

there is a possible escalation of privilege due to an unusual root cause. This could lead to local escalation of privile

BT: Classic: SDP OOB access in get_att_search_list

BT:Classic: Multiple missing buf length checks

BT: Encryption procedure host vulnerability

An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privil

An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privil

A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevate

A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevate

An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been identified in the authen

A Cross-Site Request Forgery (CSRF) vulnerability exists in lunary-ai/lunary version 1.2.34 due to overly permissive COR

The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response pro

The session hijacking attack targets the application layer's control mechanism, which manages authenticated sessions bet

A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows

A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (V

The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to unauthorized user r

The Stream plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.0.1.

In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix AUX buffer serialization Ole reporte

The WP Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'current_theme_root' para

Tenda FH451 v1.0.0.9 has a stack overflow vulnerability in the fromDhcpListClient function.

ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Authentication vulnerability that could resu

Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could res