2024

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: fix potential memory leak in vfio_intx_en

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Check 'folio' pointer for NULL It can be

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Use 64 bit variable to avoid 32 bit overf

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add callback function pointer check be

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Avoid a nullptr dereference when spee

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcp_update_alpha(

In the Linux kernel, the following vulnerability has been resolved: tls: fix missing memory barrier in tls_init In tls

In the Linux kernel, the following vulnerability has been resolved: net: relax socket state check at accept time. Chri

In the Linux kernel, the following vulnerability has been resolved: null_blk: fix null-ptr-dereference while configurin

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Use mlx5_ipsec_rx_status_destroy to corre

In the Linux kernel, the following vulnerability has been resolved: netfilter: tproxy: bail out if IP has been disabled

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: extend minimum interval restrict

In the Linux kernel, the following vulnerability has been resolved: ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_o

In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak

In the Linux kernel, the following vulnerability has been resolved: Input: cyapa - add missing input core locking to su

The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Reflected Cross-Si

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Script

The WP SVG Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘type’ parameter in all vers

The User Profile Picture plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, a

The Branda – White Label WordPress, Custom Login Page Customizer plugin for WordPress is vulnerable to Stored Cross-Site

An issue was discovered in the events2 (aka Events 2) extension before 8.3.8 and 9.x before 9.0.6 for TYPO3. Missing acc

An issue was discovered in the friendlycaptcha_official (aka Integration of Friendly Captcha) extension before 0.1.4 for

The PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode WordPress plugin through 1.7 does not validate and esca

The PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode WordPress plugin through 1.7 does not sanitise and esca

The Widget Bundle WordPress plugin through 2.0.0 does not sanitise and escape some of its settings, which could allow hi

The Widget Bundle WordPress plugin through 2.0.0 does not have CSRF checks when logging Widgets, which could allow attac

The Google CSE WordPress plugin through 1.0.7 does not sanitise and escape some of its settings, which could allow high

The Widget Bundle WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in t

The WP Logs Book WordPress plugin through 1.0.1 does not sanitise and escape some of its log data before outputting them

The WP Logs Book WordPress plugin through 1.0.1 does not have CSRF check when clearing logs, which could allow attackers

The WP Logs Book WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, which coul

The CSSable Countdown WordPress plugin through 1.5 does not sanitise and escape some of its settings, which could allow

The CB (legacy) WordPress plugin through 0.9.4.18 does not have CSRF checks in some bulk actions, which could allow atta

The CB (legacy) WordPress plugin through 0.9.4.18 does not sanitise and escape some of its settings, which could allow h

The DOP Shortcodes WordPress plugin through 1.2 does not validate and escape some of its shortcode attributes before out

The ConvertKit – Email Newsletter, Email Marketing, Subscribers and Landing Pages plugin for WordPress is vulnerable to

A vulnerability classified as critical was found in SourceCodester Food Ordering Management System 1.0. Affected by this

A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System 1.0. Affected is

A vulnerability was found in SourceCodester Food Ordering Management System up to 1.0. It has been rated as critical. Th

The The Plus Addons for Elementor Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via

The WP Child Theme Generator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing ca

The Hide Dashboard Notifications plugin for WordPress is vulnerable to unauthorized modification of data due to a missin

The License Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing c

The Smush plugin for WordPress is vulnerable to unauthorized deletion of the resmush list due to a missing capability ch

A vulnerability was found in SourceCodester Food Ordering Management System 1.0. It has been declared as critical. This

The Lightning Network Daemon (lnd) - is a complete implementation of a Lightning Network node. A parsing vulnerability i

Plain text credentials and session ID can be captured with a network sniffer.

Samsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the directory and DLL files u

A Cross Site Scripting (XSS) vulnerability exists in Computer Laboratory Management System version 1.0. This vulnerabili

Cross-site scripting (XSS) vulnerability in SilverSky E-mail service version 5.0.3126 allows remote attackers to inject