Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Impro…
Fortios
HIGH 8.8
An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belonging to the prof-admin profile t…
Improper authorization vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to access the p…
iOS
CRITICAL 9.1
A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could allow an aut…
The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary …
The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write of arbit…
Dell NetWorker, Version 19.7 has an improper authorization vulnerability in the NetWorker client. An unauthenticated attacker within the same network…
Apicast
HIGH 7.5
A flaw was found in APICast, when 3Scale's OIDC module does not properly evaluate the response to a mismatched token from a separate realm. This coul…
Incorrect authorisation in ekorCCP and ekorRCI, which could allow a remote attacker to obtain resources with sensitive information for the organisati…
Network Observability
HIGH 7.5
A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentic…
Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).
Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.
Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.
Zulip is an open-source team collaboration tool with topic-based threading that combines email and chat. Users who used to be subscribed to a private…
Subscription Manager
HIGH 7.8
A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.red…
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and wri…
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and wri…
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and wri…
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and wri…
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and wri…
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and wri…
Improper authorization in the Intel(R) NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to potentially enable es…
Full Customer
HIGH 8.8
The FULL - Customer plugin for WordPress is vulnerable to Arbitrary File Upload via the /install-plugin REST route in versions up to, and including, …
Sentry is an error tracking and performance monitoring platform. Starting in version 8.21.0 and prior to version 23.5.2, an authenticated user can do…
Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields. This iss…
Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Competencies. This issue …
Improper privilege validation in Command Centre Server allows authenticated operators to modify Division lineage. This issue affects Command Centre:…
A vulnerability, which was classified as critical, has been found in Xiamen Four Letter Video Surveillance Management System up to 20230712. This iss…
Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1.
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest OS may be able to control resources for which i…