2024

A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. T

A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a

Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting (XSS). This

A maliciously crafted DWG file, when parsed in Revit, can force a stack-based buffer overflow. A malicious actor can lev

Mysql security vulnerability in Apache SeaTunnel. Attackers can read files on the MySQL server by modifying the informa

Dell Repository Manager version 3.4.2 and earlier, contain a Local Privilege Escalation Vulnerability in Installation mo

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential context UAFs gem_context_r

In the Linux kernel, the following vulnerability has been resolved: iommu/iova: Fix alloc iova overflows issue In __al

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix handling of cached open files in nfsd4_op

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Wait for out_urb's completion in pn533_

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mpls: Fix warning during failed attr

In the Linux kernel, the following vulnerability has been resolved: io_uring: lock overflowing for IOPOLL syzbot repor

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix GEM handle creation UAF Userspace

In the Linux kernel, the following vulnerability has been resolved: sched/core: Fix use-after-free bug in dup_user_cpus

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Remove rcu locks from user resources U

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: IPoIB, Block PKEY interfaces with less r

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix refcount leak in amd_pmc_prob

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: Fix driver shutdown on closed s

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free and race in fastr

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Don't remove map on creater_process

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free race condition fo

In the Linux kernel, the following vulnerability has been resolved: tty: serial: qcom-geni-serial: fix slab-out-of-boun

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Prevent use after free on completi

The LiquidPoll – Polls, Surveys, NPS and Feedback Reviews plugin for WordPress is vulnerable to Stored Cross-Site Script

Stack-based buffer overflow in Control FPWIN Pro version 7.7.2.0 and all previous versions may allow attackers to execut

An insufficient entropy vulnerability was found in the Openshift Console. In the authorization code type and implicit gr

Dell SupportAssist for Home PCs Installer exe version 4.0.3 contains a privilege escalation vulnerability in the install

In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: change DMA direction while mapping re

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_erp: Fix object nesting warning

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix input error path memory access When ther

In the Linux kernel, the following vulnerability has been resolved: media: pci: ivtv: Add check for DMA map result In

In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: always initialize seqpacket_allow The

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix soft lockup under heavy CEQE load CE

** UNSUPPORTED WHEN ASSIGNED ** The Apache Helix Front (UI) component contained a hard-coded secret, allowing an attacke

Kanister is a data protection workflow management tool. The kanister has a deployment called default-kanister-operator,

Prior to 3385, the user-controlled role parameter enters the application in the Kubernetes::RoleVerificationsController.

Hertzbeat is an open source, real-time monitoring system. Hertzbeat has an authenticated (user role) RCE via unsafe dese

Hertzbeat is an open source, real-time monitoring system. Hertzbeat 1.6.0 and earlier declares a /api/monitor/{monitorId

Casdoor is a UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform. In Casdoor 1.577.0 and earli

memos is a privacy-first, lightweight note-taking service. A CORS misconfiguration exists in memos 0.20.1 and earlier wh

An issue was discovered in Italtel Embrace 1.6.4. The web application inserts the access token of an authenticated user

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_managemen

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_managemen

Improper Access Controls allows backend users to overwrite their username when disallowed.

LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge dev

An issue in apollocongif apollo v.2.2.0 allows a remote attacker to obtain sensitive information via a crafted request.

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_editor.php

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /module.php?module=karm