2024

In the Linux kernel, the following vulnerability has been resolved: riscv: prevent pt_regs corruption for secondary idl

In the Linux kernel, the following vulnerability has been resolved: drm: zynqmp_dpsub: Always register bridge We must

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix list corruption from resetting io s

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix list corruption from reorder of WRI

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover {reserve,release}_comp

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: don't allow unaligned truncation on

In the Linux kernel, the following vulnerability has been resolved: media: ti: j721e-csi2rx: Fix races while restarting

Improper Restriction of Excessive Authentication Attempts vulnerability in Mia Technology Inc. Mia-Med Health Aplication

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salon Booking System Sal

Missing Authorization vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from

Improper Privilege Management vulnerability in Membership Software WishList Member X allows Privilege Escalation.This is

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consultin

The configuration file is encrypted with a static key derived from a static five-character password which allows an att

The application Faronics WINSelect (Standard + Enterprise) saves its configuration in an encrypted file on the file syst

Bludit uses predictable methods in combination with the MD5 hashing algorithm to generate sensitive tokens such as the A

Bludit uses the SHA-1 hashing algorithm to compute password hashes. Thus, attackers could determine cleartext passwords

A session fixation vulnerability in Bludit allows an attacker to bypass the server's authentication if they can trick an

A security vulnerability has been identified in Bludit, allowing authenticated attackers to execute arbitrary code throu

A security vulnerability has been identified in Bludit, allowing attackers with knowledge of the API token to upload arb

A vulnerability, which was classified as critical, has been found in lahirudanushka School Management System 1.0.0/1.0.1

IBM Security SOAR 51.0.2.0 could allow an authenticated user to execute malicious code loaded from a specially crafted s

A vulnerability was found in itsourcecode Online Food Ordering System 1.0 and classified as critical. Affected by this i

The UberMenu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.

This affects versions of the package opencart/opencart from 4.0.0.0. A Zip Slip issue was identified via the marketplace

This affects versions of the package opencart/opencart from 0.0.0. An SQL Injection issue was identified in the Divido p

The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site

Joplin is a free, open source note taking and to-do application. A remote code execution (RCE) vulnerability in affected

Joplin is a free, open source note taking and to-do application. A Cross site scripting (XSS) vulnerability in affected

Joplin is a free, open source note taking and to-do application. A Cross-site Scripting (XSS) vulnerability allows pasti

Joplin is a free, open source note taking and to-do application. A Cross-site Scripting (XSS) vulnerability allows an un

TVS Motor Company Limited TVS Connect Android v4.6.0 and IOS v5.0.0 was discovered to insecurely handle the RSA key pair

Improper privilege management vulnerability in Parallels Desktop Software, which affects versions earlier than 19.3.0. A

A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. B

Cross-Site Request Forgery (CSRF) vulnerability in Ali2Woo Ali2Woo Lite.This issue affects Ali2Woo Lite: from n/a throug

Missing Authorization vulnerability in Bill Minozzi WP Tools.This issue affects WP Tools: from n/a through 3.41.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ollybach WP

In the Linux kernel, the following vulnerability has been resolved: dma-mapping: benchmark: handle NUMA_NO_NODE correct

In the Linux kernel, the following vulnerability has been resolved: tpm_tis_spi: Account for SPI header when allocating

In the Linux kernel, the following vulnerability has been resolved: dma-mapping: benchmark: fix node id validation Whi

In the Linux kernel, the following vulnerability has been resolved: enic: Validate length of nl attributes in enic_set_

In the Linux kernel, the following vulnerability has been resolved: soundwire: cadence: fix invalid PDI offset For som

In the Linux kernel, the following vulnerability has been resolved: iio: adc: PAC1934: fix accessing out of bounds arra

In the Linux kernel, the following vulnerability has been resolved: watchdog: cpu5wdt.c: Fix use-after-free bug caused

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Avoid unnecessary destruction of f

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_audio: Fix race condition use of con

In the Linux kernel, the following vulnerability has been resolved: stm class: Fix a double free in stm_register_device

In the Linux kernel, the following vulnerability has been resolved: fuse: clear FR_SENT when re-adding requests into pe

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Use variable length array instead of fixe

In the Linux kernel, the following vulnerability has been resolved: media: stk1160: fix bounds checking in stk1160_copy

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs_dsp_ctl: Use private_free for control