2024

A vulnerability in the multicast traceroute version 2 (Mtrace2) feature of Cisco IOS XR Software could allow an unauthen

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server (REST Management Inte

The Samsung Universal Print Driver for Windows is potentially vulnerable to escalation of privilege allowing the creatio

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Handle SSID based pmksa d

In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAX_SKB_FRAGS Sabrina reports

In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: Do not mark ACPI devices as irq safe O

In the Linux kernel, the following vulnerability has been resolved: mmc: mmc_test: Fix NULL dereference on allocation f

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Check for xhci->interrupters being alloc

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to data corru

In the Linux kernel, the following vulnerability has been resolved: fix bitmap corruption on close_range() with CLOSE_R

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb vs. core-mm PT locking We

In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix data corruption for degraded array wi

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix page mapping if vm_area_alloc_pages

In the Linux kernel, the following vulnerability has been resolved: memcg_write_event_control(): fix a user-triggerable

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a kernel verifier crash in stacksafe() Da

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Take state lock during tx timeout report

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: initialise extack before use

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix IPsec RoCE MPV trace call Prevent th

In the Linux kernel, the following vulnerability has been resolved: netem: fix return value if duplicate enqueue fails

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: move dpu_encoder's connector assignmen

In the Linux kernel, the following vulnerability has been resolved: s390/boot: Avoid possible physmem_info segment corr

In the Linux kernel, the following vulnerability has been resolved: nvme: move stopping keep-alive into nvme_uninit_ctr

In the Linux kernel, the following vulnerability has been resolved: nouveau/firmware: use dma non-coherent allocator C

In the Linux kernel, the following vulnerability has been resolved: char: xillybus: Check USB endpoints when probing de

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only mark 'subflow' endp as available A

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only decrement add_addr_accepted for MPJ

A stored cross-site scripting (XSS) vulnerability in the Discussion section of Perfex CRM v1.1.0 allows attackers to exe

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4. Attackers can send POST request mes

Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disc

Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds write vulnerability that could result in a

CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentialit

An access control vulnerability was discovered in the Reports section due to a specific access restriction not being pro

Halo is an open source website building tool. A security vulnerability has been identified in versions prior to 2.19.0 o

In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed. This vulnerab

In Eclipse Dataspace Components, from version 0.5.0 and before version 0.9.0, the ConsumerPullTransferTokenValidationApi

Use after free in Autofill in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially

Type Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit object co

Use after free in Media Router in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentia

Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit h

A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool. With this

A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool. If the pub

An unauthenticated Insecure Direct Object Reference (IDOR) to the database has been found in the SO Planning tool that o

A unauthenticated SQL Injection has been found in the SO Planning tool that occurs when the public view setting is enabl

A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist s

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing restrictions for excessive failed authenticati

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Vidco Software VOC TESTE

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Sc

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper validation of the ‘mode’ parameter in the API

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing rate limiting on OTP requests in certain API e

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to transmission of sensitive information in plain text in