2024

Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Order Export & Order Import for WooCommerce.T

An issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking: a user can trigger th

An issue in Coign CRM Portal v.06.06 allows a remote attacker to escalate privileges via the userPermissionsList paramet

NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injec

Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to insta

Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to poten

Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit hea

Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit hea

Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to

Label Studio is an a popular open source data labeling tool. Versions prior to 1.9.2 have a cross-site scripting (XSS) v

A link following vulnerability in the Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload S

An improper access control vulnerability in Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Work

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central could allow an attacke

A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execu

An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary

An updater link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to abuse the upda

An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate p

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privilege

An anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate pri

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privilege

A local file inclusion vulnerability on the Trend Micro Apex One management server could allow a local attacker to escal

A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacke

A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacke

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An agent link vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileg

The radio frequency communication protocol being used by Meross MSH30Q 4.5.23 is vulnerable to replay attacks, allowing

A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebVi

There is an OS command injection vulnerability in Crestron AM-300 firmware version 1.4499.00018 which may enable a user

HPE OneView may allow clusterService Authentication Bypass resulting in denial of service.

HPE OneView may allow command injection with local privilege escalation.

Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs showed evidence

A malicious devtools extension could have been used to escalate privileges. This vulnerability affects Firefox < 122, Fi

A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting

The WebAudio `OscillatorNode` object was susceptible to a stack buffer overflow. This could have led to a potentially ex

In some circumstances, JIT compiled code could have dereferenced a wild pointer value. This could have led to an exploit

An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability af

An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2_get_data_area_len in fs/smb/server/smb2misc.c c

In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a no

In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-a

Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series ver

Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versi

Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series ver

Improper Input Validation in Hitron Systems DVR LGUVR-16H 1.02~4.02 allows an attacker to cause network attack in case o

Improper Input Validation in Hitron Systems DVR LGUVR-8H 1.02~4.02 allows an attacker to cause network attack in case of