2024

In the Linux kernel, the following vulnerability has been resolved: memblock: make memblock_set_node() also warn about

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: hdmi: report safe 640x480 mode as a fal

In the Linux kernel, the following vulnerability has been resolved: riscv: rewrite __kernel_map_pages() to fix sleeping

In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: don't unpoison huge_zero_folio Whe

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_de

In the Linux kernel, the following vulnerability has been resolved: bpf: Set run context for rawtp test_run callback s

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible race in __fib6_drop_pcpu_from()

In the Linux kernel, the following vulnerability has been resolved: USB: class: cdc-wdm: Fix CPU lockup caused by exces

In the Linux kernel, the following vulnerability has been resolved: HID: core: remove unnecessary WARN_ON() in implemen

In the Linux kernel, the following vulnerability has been resolved: liquidio: Adjust a NULL pointer handling path in li

In the Linux kernel, the following vulnerability has been resolved: drm/komeda: check for error-valued pointer komeda_

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: validate mandatory meta and p

In the Linux kernel, the following vulnerability has been resolved: drm/mst: Fix NULL pointer dereference at drm_dp_add

In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE,

The WP Total Branding – Complete branding solution for WordPress plugin for WordPress is vulnerable to Stored Cross-Site

The PowerPress Podcasting plugin by Blubrry plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the

The WP Popups – WordPress Popup builder plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to

The Simple Video Directory WordPress plugin before 1.4.4 does not sanitise and escape some of its settings, which could

The Inline Related Posts WordPress plugin before 3.7.0 does not sanitise and escape a parameter before outputting it bac

The WP Secure Maintenance WordPress plugin before 1.7 does not sanitise and escape some of its settings, which could all

The Quotes and Tips by BestWebSoft WordPress plugin before 1.45 does not properly validate image files uploaded, allowin

The socialdriver-framework WordPress plugin before 2024.04.30 does not sanitise and escape some of its settings, which c

The Watu Quiz WordPress plugin before 3.4.1.2 does not sanitise and escape some of its settings, which could allow users

The Website Content in Page or Post WordPress plugin before 2024.04.09 does not validate and escape some of its shortcod

The Social Media Widget WordPress plugin before 4.0.9 does not sanitise and escape some of its settings, which could all

The Event post plugin for WordPress is vulnerable to unauthorized bulk metadata update due to a missing nonce check on t

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized plugin settings modificat

NATS.io NATS Server before 2.8.2 and Streaming Server before 0.24.6 could allow a remote attacker to bypass security res

A vulnerability, which was classified as critical, has been found in witmy my-springsecurity-plus up to 2024-07-04. Affe

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vuln

An Exposure of Resource to Wrong Sphere vulnerability in the sampling service of Juniper Networks Junos OS Evolved allow

A Missing Release of Memory after Effective Lifetime vulnerability in the rtlogd process of Juniper Networks Junos OS on

A Buffer Copy without Checking Size of Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Juno

An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Ju

A Missing Release of Memory after Effective Lifetime vulnerability in Juniper Networks Junos OS on MX Series allows an u

A Buffer Copy without Checking Size of Input vulnerability in the PFE management daemon (evo-pfemand) of Juniper Network

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolve

A Missing Release of Memory after Effective Lifetime vulnerability in the Periodic Packet Management Daemon (ppmd) of Ju

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper N

An Unimplemented or Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX460

An Insertion of Sensitive Information into Log File vulnerability in Juniper Networks Junos OS and Junos OS Evolved allo

A vulnerability classified as critical was found in witmy my-springsecurity-plus up to 2024-07-04. Affected by this vuln

Red is a fully modular Discord bot. Due to a bug in Red's Core API, 3rd-party cogs using the `@commands.can_manage_chann

A Use After Free vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved al

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper N

Wagtail is an open source content management system built on Django. A bug in Wagtail's `parse_query_string` would resul

A vulnerability classified as critical has been found in witmy my-springsecurity-plus up to 2024-07-04. Affected is an u

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. M

A Stored Cross-Site Scripting (XSS) vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410. This vulnerabil

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that c