2024

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Work Definition I

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accounts). Supported ver

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a

Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security). Supported

Use after free in WebRTC in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to potentially exploit heap c

Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a maliciou

Use after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap c

Use after free in Media Stream in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user t

Use after free in Screen Capture in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user

Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exp

Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to perform out of

A Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause unbounded

This High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 and

This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data Center and Server. This

Exposure of Sensitive Information in edge browser session proxy feature in Devolutions Remote Desktop Manager 2024.2.14.

An issue in H3C Technologies Co., Limited H3C Magic RC3000 RC3000V100R009 allows a remote attacker to execute arbitrary

Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parame

An input validation vulnerability exists in the Rockwell Automation 5015 - AENFTXT when a manipulated PTP packet is sent

Outline is an open source, collaborative document editor. A type confusion issue was found in ProseMirror’s rendering pr

A formula injection vulnerability exists in Tenable Identity Exposure where an authenticated remote attacker with admini

An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attac

An issue was found in upload.php on the Ruijie EG-2000 series gateway. A parameter passed to the class UploadFile is mis

An issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext stored passwords in /data

An issue was discovered in JFinalCMS v.5.0.0. There is a SQL injection vulnerablity via /admin/div_data/data

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK ap

Under certain circumstances the impacted Software House C•CURE 9000 installer will utilize unnecessarily wide permission

A privilege escalation vulnerability exists in the affected products which could allow a malicious user with basic privi

In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix OOB read in thrustmaster

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix a race on command flush flow Fix a r

In the Linux kernel, the following vulnerability has been resolved: sctp: fix kernel-infoleak for SCTP sockets syzbot

In the Linux kernel, the following vulnerability has been resolved: net: arc_emac: Fix use after free in arc_mdio_probe

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Do not unregister events twice Ni

In the Linux kernel, the following vulnerability has been resolved: watch_queue: Fix filter limit check In watch_queue

In the Linux kernel, the following vulnerability has been resolved: net/packet: fix slab-out-of-bounds access in packet

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: prevent integer overflow in rnd

In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Fix bug in pipe direction for control

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix potential CAN frame reception race

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSET_MAX Dan

In the Linux kernel, the following vulnerability has been resolved: usb: f_fs: Fix use-after-free for epfile Consider

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: avoid double fput() on failed userco

In the Linux kernel, the following vulnerability has been resolved: phy: stm32: fix a refcount leak in stm32_usbphyc_pl

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: lock against ->sock changing during sysfs r

In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179_178a: Fix out-of-bounds accesses

In the Linux kernel, the following vulnerability has been resolved: phy: ti: Fix missing sentinel for clk_div_table _g

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix file related error handling in IIO

In the Linux kernel, the following vulnerability has been resolved: mm: don't try to NUMA-migrate COW pages that have o

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix potential use-after-free during probe K

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted SSP/ST