2024

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: fix wild-memory-access in proto_un

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix command bitmask initialization Comma

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't call cleanup on profile rollback f

In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Add SKB allocation failures handling in

In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix unbalanced rpm put() with fence_fini()

In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in udf_get_fileshortad C

In the Linux kernel, the following vulnerability has been resolved: xfrm: validate new SA's prefixlen using SA family w

In the Linux kernel, the following vulnerability has been resolved: ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM ha

In the Linux kernel, the following vulnerability has been resolved: sched/core: Disable page allocation in task_tick_mm

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix shift-out-of-bounds bug Fix a shif

Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrar

A flaw was found in Undertow package. Using the FormAuthenticationMechanism, a malicious user could trigger a Denial of

A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.

HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be sto

HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information. Detailed erro

HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be manipulated by an attac

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat:

The WP Booking Calendar WordPress plugin before 10.6.3 does not sanitise and escape some of its Widgets settings, which

A vulnerability classified as critical was found in Guangzhou Tuchuang Computer Software Development Interlib Library Cl

A vulnerability classified as critical has been found in Guangzhou Tuchuang Computer Software Development Interlib Libra

jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cau

Buffer Overflow vulnerability in Tenda O3 v.1.0.0.5 allows a remote attacker to cause a denial of service via a network

Portabilis i-Educar 2.8.0 is vulnerable to SQL Injection in the "getDocuments" function of the "InstituicaoDocumentacaoC

A vulnerability was found in MonoCMS up to 20240528. It has been declared as problematic. Affected by this vulnerability

A vulnerability was found in MonoCMS up to 20240528. It has been classified as problematic. Affected is an unknown funct

Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. On Windows, when a

symfony/http-foundation is a module for the Symphony PHP framework which defines an object-oriented layer for the HTTP s

symfony/validator is a module for the Symphony PHP framework which provides tools to validate values. It is possible to

symfony/http-client is a module for the Symphony PHP framework which provides powerful methods to fetch HTTP resources s

symfony/security-bundle is a module for the Symphony PHP framework which provides a tight integration of the Security co

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state.

A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. Th

A vulnerability was found in IBPhoenix ibWebAdmin up to 1.0.2 and classified as problematic. This issue affects some unk

RabbitMQ is a feature rich, multi-protocol messaging and streaming broker. In affected versions queue deletion via the H

happy-dom is a JavaScript implementation of a web browser without its graphical user interface. Versions of happy-dom pr

Twig is a template language for PHP. In a sandbox, an attacker can access attributes of Array-like objects as they were

Twig is a template language for PHP. In a sandbox, an attacker can call `__toString()` on an object even if the `__toStr

Gradio is an open-source Python package designed to enable quick builds of a demo or web application. If File or UploadB

UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function. This allows attackers to

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) c

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to cond

A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to co

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to bypa

A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller (ND

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Vid

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Vid

A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files

A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the und

A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to co

A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files