2024

In the Linux kernel, the following vulnerability has been resolved: tracefs: Use generic inode RCU for synchronizing fr

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Fix racy access to midibuf There can

In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix TX fifo corruption Sometime

In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix invalid FIFO access with spe

In the Linux kernel, the following vulnerability has been resolved: parisc: fix a possible DMA corruption ARCH_DMA_MIN

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to improper validation of user-

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper or missing access control, low p

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive inf

In Eclipse Vert.x version 4.3.0 to 4.5.9, the gRPC server does not limit the maximum length of message payload (Maven GA

IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to es

Ringer server is the server code for the Ringer messaging app. Prior to version 1.3.1, there is an issue with the messag

Tenda FH1201 v1.2.0.14 has a stack buffer overflow vulnerability in `formWrlExtraGet`.

SQL Injection vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the

Nuclei is a vulnerability scanner powered by YAML based templates. Starting in version 3.0.0 and prior to version 3.3.2,

Rust is a programming language. The fix for CVE-2024-24576, where `std::process::Command` incorrectly escaped arguments

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP

HAProxy 2.9.x before 2.9.10, 3.0.x before 3.0.4, and 3.1.x through 3.1-dev6 allows a remote denial of service for HTTP/2

A local privilege escalation is caused by Overwolf loading and executing certain dynamic link library files from a user-

Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Us

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Directory Traversal in all versio

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data

Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary c

Exposure of sensitive information in GroupSharing prior to version 13.6.13.3 allows remote attackers can force the victi

Stack-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows remote attackers to execute arbitrary

Path traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code.

Observable timing discrepancy issue exists in IPCOM EX2 Series V01L02NF0001 to V01L06NF0401, V01L20NF0001 to V01L20NF040

Cleartext storage of sensitive information vulnerability exists in WindLDR and WindO/I-NV4. If this vulnerability is exp

Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit hea

Out of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap

Authenticator is a browser extension that generates two-step verification codes. In versions 7.0.0 and below, encryption

Tina is an open-source content management system (CMS). Sites building with Tina CMS's command line interface (CLI) prio

@blakeembrey/template is a string template library. Prior to version 1.2.0, it is possible to inject and run code within

SudoBot, a Discord moderation bot, is vulnerable to privilege escalation and exploit of the `-config` command in version

ClickHouse v24.3.3.102 was discovered to contain a buffer overflow via the component DB::evaluateConstantExpressionImpl.

YugabyteDB v2.21.1.0 was discovered to contain a buffer overflow via the "insert into" parameter.

An issue in the js_localize.php function of LimeSurvey v6.6.2 and before allows attackers to execute arbitrary code via

HIGH-LEIT V05.08.01.03 and HIGH-LEIT V04.25.00.00 to 4.25.01.01 for Windows from Vivavis contain an insecure file and fo

Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a

Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may atte

MCMS v5.4.1 has front-end file upload vulnerability which can lead to remote command execution.

An ActiveMQ Discovery service was reachable by default from an OpenEdge Management installation when an OEE/OEM auto-dis

Host name validation for TLS certificates is bypassed when the installed OpenEdge default certificates are used to perfo

Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injectio

Firefox normally asks for confirmation before asking the operating system to find an application to handle a scheme that

Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for th

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking

Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used.

This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on A

UltiMaker Cura slicer versions 5.7.0-beta.1 through 5.7.2 are vulnerable to code injection via the 3MF format reader (/p

This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on A