2024

In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This cou

In decrypt of ClearKeyCasPlugin.cpp there is a possible out-of-bounds write due to a missing bounds check. This could le

A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of Ganglia-web v3.73 to v3.75 allows

A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows atta

In analyzeAxes of FontUtils.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead t

In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing b

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 is vulnerable to SQL injection. A remote attacker could send speci

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to perform unauthorized actions

Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated user to conduct a denial o

Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a de

Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to obtain sensitive information

Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corru

In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds chec

In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check. Thi

In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary pe

In download.c there is a special mode allowing user to download data into memory and causing possible memory corruptions

In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local

In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinu

In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to improper

In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write d

In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to

In SMF_ParseMetaEvent of eas_smf.c, there is a possible integer overflow. This could lead to remote denial of service du

D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp funct

Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime.

A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an at

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Beaver Builder Bea

File Upload vulnerability in Xi'an Daxi Information technology OfficeWeb365 v.8.6.1.0 and v7.18.23.0 allows a remote att

This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and

In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uniniti

In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uniniti

In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking. This could lead

In impeg2d_mc_fullx_fully of impeg2d_mc.c there is a possible out of bound write due to missing bounds check. This could

In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to b

In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type co

In the Linux kernel, the following vulnerability has been resolved: i40e: fix race condition by adding filter's interme

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix possible exec queue leak in exec IOCTL

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_g

In the Linux kernel, the following vulnerability has been resolved: tpm: Lock TPM chip in tpm_pm_suspend() first Setti

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Break an object reference loop Wh

In the Linux kernel, the following vulnerability has been resolved: usb: typec: qcom-pmic: init value of hdr_len/txbuf_

In the Linux kernel, the following vulnerability has been resolved: virtio_net: Add hash_key_length check Add hash_key

In the Linux kernel, the following vulnerability has been resolved: media: ar0521: don't overflow when checking PLL val

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Lock XArray when getting entries for t

In the Linux kernel, the following vulnerability has been resolved: mm/thp: fix deferred split unqueue naming and locki

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix NULL vs IS_ERR() check in probe() T

In the Linux kernel, the following vulnerability has been resolved: rpcrdma: Always release the rpcrdma_device's xa_arr

In the Linux kernel, the following vulnerability has been resolved: iio: gts-helper: Fix memory leaks for the error pat

In the Linux kernel, the following vulnerability has been resolved: riscv: Prevent a bad reference count on CPU nodes

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't leak a link on AP removal