2024

Shopware is an open commerce platform. The store-API works with regular entities and not expose all fields for the publi

A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions starting with 15.9 before

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9 before 17.0.6, all versions start

Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 prior 17.0.6, starti

An issue has been discovered in GitLab CE/EE affecting all versions before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.10 prior to 17.0.6, 17.1 prior to 17.1.4

A permission check vulnerability in GitLab CE/EE affecting all versions starting from 8.12 prior to 17.0.6, 17.1 prior t

ReDoS flaw in RefMatcher when matching branch names using wildcards in GitLab EE/CE affecting all versions from 11.3 pri

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.0.6, starting from 17.1 pr

An issue was discovered in GitLab EE starting from version 16.7 before 17.0.6, version 17.1 before 17.1.4 and 17.2 befor

A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions starting with 12.6 before

LaunchAnywhere vulnerability in the account module. Impact: Successful exploitation of this vulnerability may affect ser

Access control vulnerability in the security verification module mpact: Successful exploitation of this vulnerability wi

In the Linux kernel, the following vulnerability has been resolved: tpm: Use auth only after NULL check in tpm_buf_chec

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix error pbuf checking Syz reports a pr

In the Linux kernel, the following vulnerability has been resolved: closures: Change BUG_ON() to WARN_ON() If a BUG_ON

In the Linux kernel, the following vulnerability has been resolved: mm: page_ref: remove folio_try_get_rcu() The below

Access permission verification vulnerability in the Contacts module Impact: Successful exploitation of this vulnerabilit

Access permission verification vulnerability in the content sharing pop-up module Impact: Successful exploitation of thi

Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability ma

The Gutenberg Blocks with AI by Kadence WP WordPress plugin before 3.2.39 does not validate and escape some of its bloc

The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification and loss of data due to

The Search & Filter Pro WordPress plugin before 2.5.18 does not sanitise and escape some of its settings, which could al

The Fuse Social Floating Sidebar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the file upload f

The Orchid Store theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability chec

The Falang multilanguage for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a

The Lightbox & Modal Popup WordPress Plugin – FooBox plugin for WordPress is vulnerable to DOM-based Stored Cross-Site S

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Full Path Disclosure in

The Brizy – Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inc

Summary: As of July 8, 2025 Microsoft has completed mitigations to address this vulnerability. See KB5042562: Guidance f

Attackers can craft a malicious link that once clicked will execute arbitrary JavaScript in the context of the Journyx w

Attackers can craft a malicious prompt that coerces the language model into executing arbitrary JavaScript in the contex

A Stored Cross Site Scripting (XSS) vulnerability was found in "/smsa/add_class_submit.php" in Responsive School Managem

A Reflected Cross Site Scripting (XSS) vulnerability was found in /smsa/student_login.php in Kashipara Responsive School

A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/admin_login.php" in Kashipara Responsive Schoo

A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/teacher_login.php" in Kashipara Responsive Sch

Okta Verify for Windows is vulnerable to privilege escalation through DLL hijacking. The vulnerability is fixed in Okta

An Incorrect Access Control vulnerability was found in /smsa/view_students.php in Kashipara Responsive School Management

An Incorrect Access Control vulnerability was found in /smsa/view_teachers.php in Kashipara Responsive School Management

An Incorrect Access Control vulnerability was found in /smsa/view_class.php in Kashipara Responsive School Management Sy

An Incorrect Access Control vulnerability was found in /smsa/view_marks.php in Kashipara Responsive School Management Sy

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to cond

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to cond

In the Linux kernel, the following vulnerability has been resolved: tty: serial: ma35d1: Add a NULL check for of_node

In the Linux kernel, the following vulnerability has been resolved: net, sunrpc: Remap EPERM in case of connection fail

In the Linux kernel, the following vulnerability has been resolved: Revert "sched/fair: Make sure to try to detach at l

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mos7840: fix crash on resume Since co

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE b