2024

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add missing NULL pointer check wit

In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu: Check tbo resource pointer Validat

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix the warning division or modulo by z

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix the waring dereferencing hive Chec

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: added NULL check at start of dc_va

A vulnerability has been found in kalvinGit kvf-admin up to f12a94dc1ebb7d1c51ee978a85e4c7ed75c620ff and classified as c

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Oceanic Sof

A vulnerability, which was classified as critical, has been found in HuankeMao SCRM up to 0.0.3. Affected by this issue

A vulnerability was found in jeanmarc77 123solar up to 1.8.4.5. It has been rated as critical. This issue affects some u

Access permission verification vulnerability in the App Multiplier module Impact: Successful exploitation of this vulner

Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of thi

Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affec

Path traversal vulnerability in the Bluetooth module Impact: Successful exploitation of this vulnerability may affect se

Permission vulnerability in the ActivityManagerService (AMS) module Impact: Successful exploitation of this vulnerabilit

Input validation vulnerability in the USB service module Impact: Successful exploitation of this vulnerability may affec

In Eclipse Dataspace Components versions 0.1.3 to 0.9.0, the Connector component filters which datasets (= data offers)

Cross-site scripting vulnerability exists in MF Teacher Performance Management System version 6. If this vulnerability i

In Logmanager service, there is a possible missing verification incorrect input. This could lead to local escalation of

In drm service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of

In drm service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl

The OSM – OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's osm_map and o

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Medi

The Absolute Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Name' field of a custom

Sharp NEC Projectors (NP-CB4500UL, NP-CB4500WL, NP-CB4700UL, NP-P525UL, NP-P525UL+, NP-P525ULG, NP-P525ULJL, NP-P525WL,

CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality inclu

A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Win

A stored Cross-Site Scripting (XSS) vulnerability was identified in Projectworld Online Voting System 1.0 that occurs wh

Nix is a package manager for Linux and other Unix systems. Starting in version 1.11 and prior to versions 2.18.8 and 2.2

Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions p

Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions p

The goTenna Pro App does not inject extra characters into broadcasted frames to obfuscate the length of messages. This

The goTenna Pro App encryption key name is always sent unencrypted when the key is shared over RF through a broadcast m

In the goTenna Pro App there is a vulnerability that makes it possible to inject any custom message with any GID and Ca

The goTenna Pro App does not use SecureRandom when generating passwords for sharing cryptographic keys. The random func

The goTenna Pro App does not encrypt callsigns in messages. It is recommended to not use sensitive information in calls

The goTenna Pro App uses AES CTR type encryption for short, encrypted messages without any additional integrity checkin

In the goTenna Pro App, the encryption keys are stored along with a static IV on the End User Device (EUD). This allows

The goTenna Pro App uses a weak password for sharing encryption keys via the key broadcast method. If the broadcasted e

LayUI is a native minimalist modular Web UI component library. Versions prior to 2.9.17 have a DOM Clobbering vulnerabil

Monica AI Assistant desktop application v2.3.0 is vulnerable to Exposure of Sensitive Information to an Unauthorized Act

Projectworld Online Voting System Version 1.0 is vulnerable to Cross Site Request Forgery (CSRF) via voter.php. This vul

A Cross Site Scripting (XSS) vulnerability in update_contact.php of Blood Bank and Donation Management System v1.0 allow

A Cross Site Scripting (XSS) vulnerability in add_donor.php of Blood Bank And Donation Management System 1.0 allows an a

The goTenna Pro ATAK Plugin does not encrypt callsigns in messages. It is advised to not use sensitive information in c

The goTenna Pro ATAK Plugin does not use SecureRandom when generating passwords for sharing cryptographic keys. The ran

The goTenna Pro ATAK plugin uses a weak password for sharing encryption keys via the key broadcast method. If the broad

Ory Kratos is an identity, user management and authentication system for cloud services. Prior to version 1.3.0, given a

The goTenna Pro ATAK Plugin's default settings are to share Automatic Position, Location, and Information (PLI) updates

In the goTenna Pro ATAK Plugin application, the encryption keys are stored along with a static IV on the device. This a