2024

In the Linux kernel, the following vulnerability has been resolved: ravb: Fix use-after-free issue in ravb_tx_timeout_w

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: assert requested protocol is valid The p

In the Linux kernel, the following vulnerability has been resolved: x86/alternatives: Disable KASAN in apply_alternativ

In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix use-after-free vulnerability in am

In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfc_llcp_sock_get() and nfc_

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not attempt to read past "commit"

Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain a

An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the AS

An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. An attacker can constr

Certain HP DesignJet print products are potentially vulnerable to information disclosure related to accessing memory out

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files

In the Linux kernel, the following vulnerability has been resolved: habanalabs/gaudi: Fix a potential use after free in

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Clear all QP fields if creation failed r

In the Linux kernel, the following vulnerability has been resolved: ipc/mqueue, msg, sem: avoid relying on a stack refe

SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application per

A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM caus

Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vu

Previous versions of HP ThinPro (prior to HP ThinPro 8.0 SP 8) could potentially contain security vulnerabilities. HP ha

In Sante DICOM Viewer Pro versions 14.0.3 and prior, a user must open a malicious DICOM file, which could allow a local

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via /update-article.php.

In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain len

In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wr

Directus is a real-time API and App dashboard for managing SQL database content. The password reset mechanism of the Dir

** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache Arch

** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva. Apache Archiva has a setting t

Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file.

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the updateCurAPlist fu

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the makeCurRemoteApLis

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the generate_conf_rout

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability i

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability.

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability.

Dell Secure Connect Gateway (SCG) Policy Manager, version 5.10+, contain a weak password recovery mechanism for forgotte

In the Linux kernel, the following vulnerability has been resolved: erofs: fix lz4 inplace decompression Currently ERO

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability i

Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path. A

Initialization of a resource with an insecure default vulnerability in OET-213H-BTS1 sold in Japan by Atsumi Electric Co

The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows

A local attacker can gain administrative privileges by inserting an executable file in the path of the affected product.

The Slider Responsive Slideshow – Image slider, Gallery slideshow plugin for WordPress is vulnerable to PHP Object Injec

Directory Traversal vulnerability in DICOM® Connectivity Framework by laurelbridge before v.2.7.6b allows a remote attac

MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior contain a lack of proper validation of user-supplied d

MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior are affected by a heap-based buffer overflow vulnera

Delta Electronics CNCSoft-B versions 1.0.0.4 and prior are vulnerable to a stack-based buffer overflow, which may allow

dp-golang is a Puppet module for Go installations. Prior to 1.2.7, dp-golang could install files — including the compil

In the Linux kernel, the following vulnerability has been resolved: net/nfc: fix use-after-free llcp_sock_bind/connect

In the Linux kernel, the following vulnerability has been resolved: async_xor: increase src_offs when dropping destinat

In the Linux kernel, the following vulnerability has been resolved: rtw88: Fix array overrun in rtw_get_tx_power_params

In the Linux kernel, the following vulnerability has been resolved: drm: bridge/panel: Cleanup connector on bridge deta

In the Linux kernel, the following vulnerability has been resolved: KVM: Destroy I/O bus devices on unregister failure