2024

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Handle SSID based pmksa d

In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: Do not mark ACPI devices as irq safe O

In the Linux kernel, the following vulnerability has been resolved: mmc: mmc_test: Fix NULL dereference on allocation f

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Check for xhci->interrupters being alloc

In the Linux kernel, the following vulnerability has been resolved: fix bitmap corruption on close_range() with CLOSE_R

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: initialise extack before use

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: move dpu_encoder's connector assignmen

In the Linux kernel, the following vulnerability has been resolved: s390/boot: Avoid possible physmem_info segment corr

In the Linux kernel, the following vulnerability has been resolved: nouveau/firmware: use dma non-coherent allocator C

In the Linux kernel, the following vulnerability has been resolved: char: xillybus: Check USB endpoints when probing de

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only mark 'subflow' endp as available A

A stored cross-site scripting (XSS) vulnerability in the Discussion section of Perfex CRM v1.1.0 allows attackers to exe

Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disc

An access control vulnerability was discovered in the Reports section due to a specific access restriction not being pro

Halo is an open source website building tool. A security vulnerability has been identified in versions prior to 2.19.0 o

In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed. This vulnerab

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Sc

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper validation of the ‘mode’ parameter in the API

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to transmission of sensitive information in plain text in

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper access controls on its certain API endpoints.

When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify tha

The video carousel slider with lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in al

The Advanced WordPress Backgrounds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘imageTag’

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress

The Logo Slider WordPress plugin before 3.6.9 does not sanitise and escape some of its settings, which could allow high

The Gallery Plugin for WordPress WordPress plugin before 1.8.15 does not sanitise and escape some of its image settings

The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to unauthorized access of

The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to unauthorized modificati

Incorrect Calculation of Buffer Size (CWE-131) in the Controller 6000 and Controller 7000 OSDP message handling, allows

Buffer Copy without Checking Size of Input (CWE-120) in the Controller 6000 and Controller 7000 diagnostic web interface

Improper Neutralization of Input During Web Page Generation (CWE-79) in the Controller 6000 and Controller 7000 diagnost

In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore

In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across user

Pluto is a superset of Lua 5.4 with a focus on general-purpose programming. Scripts passing user-controlled values to ht

An uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September update allows a local auth

Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote auth

Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote

Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote

A vulnerability was found in Mercury MNVR816 up to 2.0.1.0.5. It has been classified as problematic. This affects an unk

cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the im

A reflected cross-site scripting (XSS) vulnerability in moziloCMS v3.0 allows attackers to execute arbitrary code in the

Windows Mark of the Web Security Feature Bypass Vulnerability

Microsoft Outlook for iOS Information Disclosure Vulnerability

Microsoft SharePoint Server Denial of Service Vulnerability

Windows Remote Desktop Licensing Service Information Disclosure Vulnerability

Windows Kernel-Mode Driver Information Disclosure Vulnerability

Windows Authentication Information Disclosure Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows Networking Denial of Service Vulnerability

Windows Remote Desktop Licensing Service Denial of Service Vulnerability