2024

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always make an attempt to map eVMCS afte

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Disable preemption when probing user retu

In the Linux kernel, the following vulnerability has been resolved: media: aspeed: fix clock handling logic Video engi

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: Fix use after free in atomisp_alloc

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a

Any user can delete an arbitrary folder (recursively) on a remote server due to bad input sanitization leading to path t

SQL Injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function Dist

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix masking negation logic upon negative dst r

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Avoid potential use after free in MHI se

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: core: Fix invalid error returning in mhi_

In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vm_flags for virtqueue doorbell map

In the Linux kernel, the following vulnerability has been resolved: ACPI: custom_method: fix potential use-after-free i

In the Linux kernel, the following vulnerability has been resolved: mtd: physmap: physmap-bt1-rom: Fix unintentional st

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()

In the Linux kernel, the following vulnerability has been resolved: cifs: Return correct error code from smb2_get_enc_k

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between transaction aborts and fsyn

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting I

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_frag: fix stack OOB read while fragm

In the Linux kernel, the following vulnerability has been resolved: NFS: fs_context: validate UDP retrans to prevent sh

In the Linux kernel, the following vulnerability has been resolved: md/raid1: properly indicate failure when ending a f

In the Linux kernel, the following vulnerability has been resolved: sfc: farch: fix TX queue lookup in TX event handlin

In the Linux kernel, the following vulnerability has been resolved: media: staging/intel-ipu3: Fix set_fmt error handli

In the Linux kernel, the following vulnerability has been resolved: dm rq: fix double free of blk_mq_tag_set in dev rem

In the module "Account Manager | Sales Representative & Dealers | CRM" (prestasalesmanager) up to 9.0 from Presta World

SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via

Atheme 7.2.12 contains a memory leak vulnerability in /atheme/src/crypto-benchmark/main.c.

Rails is a web-application framework. Starting in version 7.1.0, there is a possible ReDoS vulnerability in the Accept h

In Srelay (the SOCKS proxy and Relay) v.0.4.8p3, a specially crafted network payload can trigger a denial of service con

libLAS 1.8.1 contains a memory leak vulnerability in /libLAS/apps/ts2las.cpp.

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because t

Improper initialization of default settings in TeamViewer Remote Client prior version 15.51.5 for Windows, Linux and ma

Enable exports of the database and associated exported information of the system via the default user role. The attacked

Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling. A lenient behaviour in line delimiter h

A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate the

A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYST

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker

In the Linux kernel, the following vulnerability has been resolved: net: fix use-after-free in tw_timer_handler A real

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_cl

In the Linux kernel, the following vulnerability has been resolved: sctp: use call_rcu to free endpoint This patch is

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix kernel panic caused by race of smc_soc

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix TPM reservation for seal/unseal

In the Linux kernel, the following vulnerability has been resolved: locking/qrwlock: Fix ordering in queued_write_lock_

The JetBackup WordPress plugin before 2.0.9.9 doesn't use index files to prevent public directory listing of sensitive d

The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated

The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only kno

Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fi