2024

In the Linux kernel, the following vulnerability has been resolved: drm/xe: reset mmio mappings with devm Set our vari

In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix spruious data race in __flush_work()

In the Linux kernel, the following vulnerability has been resolved: Revert "serial: 8250_omap: Set the console genpd al

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Mark XDomain as unplugged when router

In the Linux kernel, the following vulnerability has been resolved: libfs: fix infinite directory reads for offset dir

Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to d

Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to d

Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to d

Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to d

Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result i

The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not have CSRF and path validation in the output_sub_admi

The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not validate files to be uploaded and does not have CSRF

The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin

The Appointment Booking Calendar WordPress plugin before 1.6.7.43 does not escape template syntax provided via user inpu

The Carousel Slider WordPress plugin before 2.2.4 does not sanitise and escape some of its settings, which could allow h

The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL s

The NinjaTeam Header Footer Custom Code WordPress plugin before 1.2 does not sanitise and escape some of its settings, w

The NinjaTeam Header Footer Custom Code WordPress plugin before 1.2 does not sanitise and escape some of its settings, w

The Avada | Website Builder For WordPress & eCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Disable preemption while updating GPU stat

In the Linux kernel, the following vulnerability has been resolved: video/aperture: optionally match the device in sysf

In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure that nfsd4_fattr_args.context is zeroe

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix potential UAF in nfsd4_cb_getattr_release

In the Linux kernel, the following vulnerability has been resolved: selinux,smack: don't bypass permissions check in in

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebu

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmic_glink: Fix race during initializati

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Mark get_wq_ctx() as atomic ca

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Move unregister out of atomic sec

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd4_deleg_getattr_conflict in presence

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Map shared memory as WC, not WB

In the Linux kernel, the following vulnerability has been resolved: erofs: fix out-of-bound access when z_erofs_gbuf_gr

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a use-after-free when hitting errors ins

In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid dereferencing rdata=NULL in smb2_

In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference in

In the Linux kernel, the following vulnerability has been resolved: binfmt_elf_fdpic: fix AUXV size calculation when EL

In the Linux kernel, the following vulnerability has been resolved: drm/xe: prevent UAF around preempt fence The fence

In the Linux kernel, the following vulnerability has been resolved: nfsd: prevent panic for nfsv4.0 closed files in nfs

In the Linux kernel, the following vulnerability has been resolved: pktgen: use cpus_read_lock() in pg_net_init() I ha

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix random crash seen while r

In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link

In the Linux kernel, the following vulnerability has been resolved: bonding: change ipsec_lock from spin lock to mutex

In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Add poll mod list filling check In cas

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core invalid event buf

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: st: fix probed platform device ref count

In the Linux kernel, the following vulnerability has been resolved: scsi: aacraid: Fix double-free on probe failure aa

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to pa

The WPFactory Helper plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_ar

IBM Concert 1.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to g

A vulnerability was found in code-projects Crud Operation System 1.0. It has been classified as critical. This affects a