2024

In the Linux kernel, the following vulnerability has been resolved: mm/shmem: disable PMD-sized page cache if needed F

In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in #DB handler due to BHI mi

In the Linux kernel, the following vulnerability has been resolved: bpf: Fail bpf_timer_cancel when callback is being c

In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Return error if block header over

In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Validate payload length before pr

An IP Spoofing vulnerability has been discovered in Likeshop up to 2.5.7.20210811. This issue allows an attacker to repl

An Incorrect Access Control vulnerability was found in /smsa/admin_student_register_approval.php and /smsa/admin_student

An Incorrect Access Control vulnerability was found in /smsa/admin_teacher_register_approval.php and /smsa/admin_teacher

An Incorrect Access Control vulnerability was found in /smsa/view_subject.php in Kashipara Responsive School Management

An Incorrect Access Control vulnerability was found in /smsa/add_subject.php and /smsa/add_subject_submit.php in Kashipa

An Incorrect Access Control vulnerability was found in /smsa/add_class.php and /smsa/add_class_submit.php in Kashipara R

An Incorrect Access Control vulnerability was found in /smsa/admin_dashboard.php in Kashipara Responsive School Manageme

A vulnerability was found in Alien Technology ALR-F800 up to 19.10.24.00. It has been rated as critical. Affected by thi

A vulnerability was found in Alien Technology ALR-F800 up to 19.10.24.00. It has been declared as critical. Affected by

Jenkins 2.470 and earlier, LTS 2.452.3 and earlier does not perform a permission check in an HTTP endpoint, allowing att

The Organization chart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_input’ and 'node

The Accept Stripe Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's accept_str

Exposure of Sensitive Information vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy E

Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP al

In Apache CloudStack 4.19.1.0, a regression in the network listing API allows unauthorised list access of network detail

The WordPress File Upload WordPress plugin before 4.24.8 does not properly sanitize and escape certain parameters, which

The House Manager WordPress plugin through 1.0.8.4 does not sanitise and escape a parameter before outputting it back i

Ivanti Docs@Work for Android, before 2.26.0 is affected by the 'Dirty Stream' vulnerability. The application fails to pr

An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to ac

Use of implicit intent for sensitive communication in Samsung Email prior to version 6.1.94.2 allows local attackers to

Out-of-bounds read in parsing textbox object in Samsung Notes prior to version 4.4.21.62 allows local attacker to access

Out-of-bounds read in parsing connected object list in Samsung Notes prior to version 4.4.21.62 allows local attacker to

Out-of-bounds read in parsing object header in Samsung Notes prior to version 4.4.21.62 allows local attacker to access

Out-of-bounds read in uuid parsing in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthori

Out-of-bounds read in applying new binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentia

Out-of-bounds read in applying own binary with textbox in Samsung Notes prior to version 4.4.21.62 allows local attacker

Out-of-bounds read in applying binary with text common object in Samsung Notes prior to version 4.4.21.62 allows local a

Out-of-bounds read in applying binary with path in Samsung Notes prior to version 4.4.21.62 allows local attackers to po

Out-of-bounds read in parsing implemention in Samsung Notes prior to version 4.4.21.62 allows local attackers to potenti

Out-of-bounds read in applying own binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentia

Out-of-bounds read in applying connection point in Samsung Notes prior to version 4.4.21.62 allows local attackers to po

Out-of-bounds read in applying paragraphs in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentia

Out-of-bounds read in applying binary with data in Samsung Notes prior to version 4.4.21.62 allows local attackers to po

Improper access control in System property prior to SMR Aug-2024 Release 1 allows local attackers to access cell related

Improper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows local attackers to conf

Improper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1 allows local attackers

Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to cause memory corruption.

Improper access control in Galaxy Watch prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive infor

Improper access control in KnoxService prior to SMR Aug-2024 Release 1 allows local attackers to get sensitive informati

Improper access control in ExtControlDeviceService prior to SMR Aug-2024 Release 1 allows local attackers to access prot

Improper access control in VoiceNoteService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restriction

Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restri

Improper access control in SamsungNotesService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrict

Improper access control in SmartThingsService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restricti

Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restric