2024

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted TMF sa

In the Linux kernel, the following vulnerability has been resolved: iwlwifi: fix use-after-free If no firmware was pre

In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when conne

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu-safe version of ipv6_get_lladd

In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiq_gswip: fix use after free in gswip

In the Linux kernel, the following vulnerability has been resolved: mctp: fix use after free Clang static analysis rep

In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix use-after-free in ocelot_vla

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: gpmi: don't leak PM reference in erro

In the Linux kernel, the following vulnerability has been resolved: net/sunrpc: fix reference count leaks in rpc_sysfs_

The Brizy – Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: change vm->task_info handling This pat

In streampark-console the list pages(e.g: application pages), users can sort page by field. This sort field is sent from

Plate media is an open source, rich-text editor for React. Editors that use `MediaEmbedElement` and pass custom `urlPars

eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check

An SMM callout vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmw

An arbitrary memory write vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with

An arbitrary memory write vulnerability was discovered in Supermicro X11DPG-HGX2, X11PDG-QT, X11PDG-OT, and X11PDG-SN mo

Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a p

Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated

Tmall_demo before v2024.07.03 was discovered to contain a SQL injection vulnerability.

An access control issue in Tmall_demo v2024.07.03 allows attackers to obtain sensitive information.

Local Privilege Escalation in MSI-Installer in baramundi Management Agent v23.1.172.0 on Windows allows a local unprivil

Unquoted Search Path or Element vulnerability in ABB Mint Workbench. A local attacker who successfully exploited this

A vulnerability classified as critical has been found in code-projects Simple Ticket Booking 1.0. Affected is an unknown

In the Linux kernel, the following vulnerability has been resolved: tcp: avoid too many retransmit packets If a TCP so

In Apache Linkis <=1.5.0, due to the lack of effective filtering of parameters, an attacker configuring malicious db2

In Apache Linkis <= 1.5.0, data source management module, when adding Mysql data source, exists remote code execution v

The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not have CSRF checks in some places, which could all

The Insert or Embed Articulate Content into WordPress plugin before 4.3000000024 does not prevent authors from uploading

Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution

The access control in the Electronic Official Document Management System from 2100 TECHNOLOGY is not properly implement

A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution vi

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix UAF in svc_tcp_listen_data_ready() Aft

The wp-eMember WordPress plugin before 10.6.7 does not sanitise and escape a parameter before outputting it back in the

The WP QuickLaTeX WordPress plugin before 3.8.7 does not sanitise and escape some of its settings, which could allow hig

The wp-affiliate-platform WordPress plugin before 6.5.1 does not have CSRF check in place when updating its settings, wh

The CM Email Registration Blacklist and Whitelist WordPress plugin before 1.4.9 does not have CSRF check when adding or

The SULly WordPress plugin before 4.3.1 does not sanitise and escape some of its settings, which could allow high privil

The wp-eMember WordPress plugin before 10.6.6 does not validate files to be uploaded, which could allow admins to upload

The wp-eMember WordPress plugin before 10.6.6 does not have CSRF checks in some places, which could allow attackers to m

The SULly WordPress plugin before 4.3.1 does not have CSRF checks in some places, which could allow attackers to make lo

StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows remote authenticated users to achieve Command Injecti

The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnera

PublicCMS v4.0.202302.e was discovered to contain a remote commande execution (RCE) vulnerability via the cmdarray param

An arbitrary file upload vulnerability in the component /admin/cmsTemplate/doUpload of PublicCMS v4.0.202302.e allows at

An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlaceMetaData of Public CMS v.4.0.202302.

An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS v4.0.202302.e allows a

An arbitrary file upload vulnerability in the component /admin/cmsTemplate/save of PublicCMS v4.0.202302.e allows attack

An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attacke

An arbitrary file upload vulnerability in the component /admin/cmsWebFile/doUpload of PublicCMS v4.0.202302.e allows att