2024

Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allow

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

SFTPGo is a full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azur

Cross Site Scripting vulnerability in Moodle CMS v3.10 allows a remote attacker to execute arbitrary code via the Field

There is a cross-site scripting vulnerability in the management UI of Absolute Secure Access prior to version 13.06 that

There is a cross-site scripting vulnerability in the management UI of Absolute Secure Access prior to version 13.06. Att

There is a cross-site scripting vulnerability in the policy management UI of Absolute Secure Access prior to version 13.

There is a cross-site scripting vulnerability in the management UI of Absolute Secure Access prior to version 13.06. Att

There is a cross-site scripting vulnerability in the management UI of Absolute Secure Access prior to version 13.06. Att

There is a cross-site scripting vulnerability in the pool configuration component of the management UI of Absolute Secur

There is an insufficient input validation vulnerability in the Warehouse component of Absolute Secure Access prior to 13

There is a cross-site scripting vulnerability in the Secure Access administrative UI of Absolute Secure Access prior to

There is a cross-site scripting vulnerability in the Policy management UI of Absolute Secure Access prior to version 13.

There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prio

SQL Injection vulnerability in H3C technology company SeaSQL DWS V2.0 allows a remote attacker to execute arbitrary code

An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a

Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged us

A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by t

A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. Affected i

A vulnerability was found in Parsec Automation TrackSYS 11.x.x and classified as problematic. This issue affects some un

The Flatsome theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versi

A vulnerability has been found in Ruijie RG-UAC 1.0 and classified as critical. This vulnerability affects unknown code

A vulnerability, which was classified as critical, was found in Ruijie RG-UAC 1.0. This affects an unknown part of the f

Kiuwan provides an API endpoint /saas/rest/v1/info/application to get information about any application, providing on

For Kiuwan installations with SSO (single sign-on) enabled, an unauthenticated reflected cross-site scripting attack ca

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC 1.0. Affected by this issue is the fu

A vulnerability classified as critical was found in Ruijie RG-UAC 1.0. Affected by this vulnerability is an unknown func

A vulnerability classified as problematic has been found in EZ-Suite EZ-Partner 5. Affected is an unknown function of th

In the Linux kernel, the following vulnerability has been resolved: bpf: Guard against accessing NULL pt_regs in bpf_ge

In the Linux kernel, the following vulnerability has been resolved: efi: runtime: avoid EFIv2 runtime services on Apple

In the Linux kernel, the following vulnerability has been resolved: tracing/histogram: Fix a potential memory leak for

In the Linux kernel, the following vulnerability has been resolved: ceph: properly put ceph_string reference after asyn

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wrap dcn301_calculate_wm_and_dlg f

In the Linux kernel, the following vulnerability has been resolved: KVM: LAPIC: Also cancel preemption timer during SET

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_R

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Forcibly leave nested virt when SMM state

In the Linux kernel, the following vulnerability has been resolved: usb: xhci-plat: fix crash when suspend if remote wa

In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Flush destroy_work queue before calli

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: invalid parameter check in msm_dsi_phy

In the Linux kernel, the following vulnerability has been resolved: powerpc64/bpf: Limit 'ldbrx' to processors complian

In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in disk_register_independent

In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: Fix power_pmu_disable to call clear_p

In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775) Fix crash in clear_caseopen Paweł

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: invalid parameter check in dpu_setup_d

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix handling of wrong devices during bon

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Use del_timer_sync in fw reset flow of ha

In the Linux kernel, the following vulnerability has been resolved: ovl: fix NULL pointer dereference in copy up warnin

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between quota disable and qgrou

In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid scanning potential huge holes W