Recent vulnerabilities and exploits

In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled....

WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE elements....

WordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because URL validation does not consider the interpretation of a name as a series of hex characters....

WordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripting) via the Customizer....

Samsung Galaxy S10 and Note10 devices allow unlock operations via unregistered fingerprints in certain situations involving a third-party screen protector....

Comtech H8 Heights Remote Gateway 2.5.1 devices allow XSS and HTML injection via the Site Name (aka SiteName) field....

CVE-2019-0210: Apache Thrift: out-of-bounds read vulnerability...

CVE-2019-0205: Apache Thrift: potential DoS when processing untrusted Thrift payload...

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN...

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN...