2024

Delta Electronics DRASimuCAD ICS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerabilit

Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability all

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute

IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to exe

Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Boa web server – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Smadar SPS – CWE-327: Use of a Broken or Risky Cryptographic Algorithm

Tiki Wiki CMS – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can expl

A vulnerability was found in CodeAstro Simple Loan Management System 1.0. It has been declared as critical. Affected by

A vulnerability was found in D-Link DIR-823G 1.0.2B05_20181207. It has been rated as critical. This issue affects the fu

In the Linux kernel, the following vulnerability has been resolved: dlm: fix dlm_recover_members refcount on error If

In the Linux kernel, the following vulnerability has been resolved: nfs/localio: must clear res.replen in nfs_local_rea

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum_1386_microcode a

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Several fixes to bpf_msg_pop_data Se

In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix incorrect IFH SRC_PORT field

In the Linux kernel, the following vulnerability has been resolved: ionic: Fix netdev notifier unregister on failure I

In the Linux kernel, the following vulnerability has been resolved: io_uring: check if iowq is killed before queuing t

A vulnerability, which was classified as critical, has been found in 1000 Projects Human Resource Management System 1.0.

GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesys

A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. This affects an unk

The Crypt::Random::Source package before 0.13 for Perl has a fallback to the built-in rand() function, which is not a se

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected b

In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Avoid segmentation fault on module unlo

In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Fix and protect memory allocation of

In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix soft lockups in fib6_select_path under hi

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix potential double remove of hotplug sl

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Use dynamic allocation for CU occupancy

In the Linux kernel, the following vulnerability has been resolved: bpf: fix recursive lock when verdict program return

In the Linux kernel, the following vulnerability has been resolved: brd: defer automatic disk creation until module ini

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node blkaddr in tru

In the Linux kernel, the following vulnerability has been resolved: sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset tran

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-cmdq: fix wrong use of sizeof in cmdq_

In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - add error check in the ahash_hmac_ini

In the Linux kernel, the following vulnerability has been resolved: powerpc/mm/fault: Fix kfence page fault reporting

In the Linux kernel, the following vulnerability has been resolved: powerpc/fadump: Move fadump_cma_init to setup_arch(

Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may ca

Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerabilit

Some Huawei wearables have a permission management vulnerability.

Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful explo

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kern

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kern

Software installed and run as a non-privileged user can trigger the GPU kernel driver to write to arbitrary read-only sy

A Server-Side Request Forgery (SSRF) in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive

An issue in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via command inje

HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hb_c

An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0