2024

Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds write vulnerability that could result in a

CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentialit

In Eclipse Dataspace Components, from version 0.5.0 and before version 0.9.0, the ConsumerPullTransferTokenValidationApi

Use after free in Autofill in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially

Type Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit object co

Use after free in Media Router in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentia

Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit h

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Vidco Software VOC TESTE

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing rate limiting on OTP requests in certain API e

An improper authorization vulnerability [CWE-285] in FortiSOAR version 7.4.0 through 7.4.3, 7.3.0 through 7.3.2, 7.2.0 t

The WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) plugin for WordPress is vulnerable to ar

Inclusion of Functionality from Untrusted Control Sphere(CWE-829) in the Command Centre Server and Workstations may allo

Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user

The Post Grid and Gutenberg Blocks plugin for WordPress is vulnerable to privilege escalation in all versions 2.2.87 to

In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This co

In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow.

In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users du

In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use p

In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalati

In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app while the device is pro

In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state. This could

In PVRSRVBridgeRGXKickTA3D2 of server_rgxta3d_bridge.c, there is a possible arbitrary code execution due to improper inp

In DevmemIntPFNotify of devicemem_server.c, there is a possible use-after-free due to a race condition. This could lead

SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unau

An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remo

An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 (10.19

DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local aut

Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0

Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 202

An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Iva

DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local aut

An attacker with authenticated access to VICIdial as an "agent" can execute arbitrary shell commands as the "root" user.

SpiderControl SCADA Web Server has a vulnerability that could allow an attacker to upload specially crafted malicious f

Directus is a real-time API and App dashboard for managing SQL database content. An unauthenticated user can access cred

An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute a

Shenzhen Haichangxing Technology Co., Ltd HCX H822 4G LTE Router M7628NNxISPxUIv2_v1.0.1557.15.35_P0 is vulnerable to In

Windows libarchive Remote Code Execution Vulnerability

Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

Microsoft Power Automate Desktop Remote Code Execution Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Windows Admin Center Information Disclosure Vulnerability

Microsoft SQL Server Information Disclosure Vulnerability

Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

Azure CycleCloud Remote Code Execution Vulnerability

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Microsoft Excel Elevation of Privilege Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Office Visio Remote Code Execution Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

Windows Networking Information Disclosure Vulnerability