2024

A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesse

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenti

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when findi

Windows Common Log File System Driver Elevation of Privilege Vulnerability

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS

A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through

An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privil

The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18

Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Pro

A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to

In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prev

Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attac

Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated u

Windows Task Scheduler Elevation of Privilege Vulnerability

An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitra

Microsoft Management Console Remote Code Execution Vulnerability

An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authen

Memory corruption while maintaining memory maps of HLOS memory.

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not su

The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Serve

An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remo

Windows MSHTML Platform Spoofing Vulnerability

Microsoft Publisher Security Feature Bypass Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Us

The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only avai

Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially expl

Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Microsoft Project Remote Code Execution Vulnerability

Scripting Engine Memory Corruption Vulnerability

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit,

ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 2

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Windows MSHTML Platform Spoofing Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege wi

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negati

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive fil

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated att

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the inte

Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed and is signed with an unexpected