2024

In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: don't use devres for mdiobus As e

In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiq_gswip: don't use devres for mdiobu

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: don't release napi in __ibmvnic_open() If

In the Linux kernel, the following vulnerability has been resolved: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_fre

In the Linux kernel, the following vulnerability has been resolved: net: fix a memleak when uncloning an skb dst and it

In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix panic when DSA master device unbinds

In the Linux kernel, the following vulnerability has been resolved: ice: Fix KASAN error in LAG NETDEV_UNREGISTER handl

In the Linux kernel, the following vulnerability has been resolved: eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_

In the Linux kernel, the following vulnerability has been resolved: vt_ioctl: fix array_index_nospec in vt_setactivate

In the Linux kernel, the following vulnerability has been resolved: fs/proc: task_mmu.c: don't read mapcount for migrat

In the Linux kernel, the following vulnerability has been resolved: mm: vmscan: remove deadlock due to throttling faili

In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perf_cgroup_switch()

In the Linux kernel, the following vulnerability has been resolved: s390/cio: verify the driver availability for path_e

In the Linux kernel, the following vulnerability has been resolved: parisc: Fix data TLB miss in sba_unmap_sg Rolf Eik

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: at86rf230: Stop leaking skb's Upo

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: nSVM: fix potential NULL derefernce on ne

In the Linux kernel, the following vulnerability has been resolved: cfg80211: fix race in netlink owner interface destr

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - get rid of alg_memory_allocated a

In the Linux kernel, the following vulnerability has been resolved: net/smc: Avoid overwriting the copies of clcsock ca

In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix kernel panic on skipped par

In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix missing free for pparts in

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_ch

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ptdma: Fix the error handling path in pt

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: fix pointer derefs in error cases of rpcr

In the Linux kernel, the following vulnerability has been resolved: powerpc/fixmap: Fix VM debug warning on unmap Unma

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: Fix a deadlock in the error handler The

The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauth

The Web and WooCommerce Addons for WPBakery Builder plugin for WordPress is vulnerable to unauthorized plugin settings m

An SQL Injection vulnerability in Apache Superset exists due to improper neutralization of special elements used in SQL

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix race by not overwriting udev->descri

The Glossary plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.2.26. Th

The AForms — Form Builder for Price Calculator & Cost Estimation plugin for WordPress is vulnerable to Full Path Disclos

The WordPress File Upload plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including

Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker t

The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin plugin for WordPress is vulnerable to Full Path

The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘eih

The SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Pos

An authenticated stored cross-site scripting (XSS) exists in the TP-Link TL-SG1016DE affecting version TL-SG1016DE(UN) V

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

Fastapi OPA is an opensource fastapi middleware which includes auth flow. HTTP `OPTIONS` requests are always allowed by

@jmondi/url-to-png is an open source URL to PNG utility featuring parallel rendering using Playwright for screenshots an

web-auth/webauthn-lib is an open source set of PHP libraries and a Symfony bundle to allow developers to integrate that

Discourse is an open source platform for community discussion. In affected versions by creating replacement words with a

An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.25, 4.4.0 through 4.7.5, and 4.8.0. Cert

An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.41, 3.10.0 through 3.11.29, 4.0 through

Improper input validation in the installer for Zoom Workplace Desktop App for Windows before version 6.0.10 may allow an

Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct

Race condition in the installer for Zoom Workplace App for Windows and Zoom Rooms App for Windows may allow an authentic