2024

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: clone set element expression t

In the Linux kernel, the following vulnerability has been resolved: net: Make tcp_allowed_congestion_control readonly i

In the Linux kernel, the following vulnerability has been resolved: ARM: 9063/1: mm: reduce maximum number of CPUs if D

In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct permission flag for mixed signed b

Should an instance of AnythingLLM be hosted on an internal network and the attacked be explicitly granted a permission l

diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as .

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID.

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN.

SQL injection vulnerability in Dynamic Lab Management System Project in PHP v.1.0 allows a remote attacker to execute ar

An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially

An issue was discovered in Linksys Router E1700 version 1.0.04 (build 3), allows authenticated attackers to execute arbi

Cross Site Request Forgery vulnerability in Bagisto before v.1.5.1 allows an attacker to execute arbitrary code via a cr

fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia/calyptia.c.

OpenDMARC 1.4.2 contains a null pointer dereference vulnerability in /OpenDMARC/libopendmarc/opendmarc_policy.c.

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iove

In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap

ESPHome is a system to control your ESP8266/ESP32. A security misconfiguration in the edit configuration file API in the

orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents.

Certain WithSecure products allow a Denial of Service because the engine scanner can go into an infinite loop when proce

In the Linux kernel, the following vulnerability has been resolved: ext4: regenerate buddy after block freeing failed i

Unrestricted Upload of File with Dangerous Type vulnerability in bPlugins LLC Icons Font Loader.This issue affects Icons

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. P

LibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP hea

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. P

A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2

A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 1

Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery (SSRF) via the event subs

Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will

A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit

A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functiona

A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2

Cross-Site Request Forgery vulnerability in SMA Cluster Controller, affecting version 01.05.01.R. This vulnerability cou

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected

The Addon Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on

Due to a mistake in error checking, Routinator will terminate when an incoming RTR connection is reset by the peer too q

The inclusion of the web scraper for AnythingLLM means that any user with the proper authorization level (manager, admin

As a manager, you should not be able to modify a series of settings. In the UI this is indeed hidden as a convenience fo

With the following crawler configuration: ```python from bs4 import BeautifulSoup as Soup url = "https://example.com"

In the Linux kernel, the following vulnerability has been resolved: drivers/amd/pm: fix a use-after-free in kv_parse_po

In the Linux kernel, the following vulnerability has been resolved: class: fix use-after-free in class_register() The

In Indo-Sol PROFINET-INspektor NT through 2.4.0, a path traversal vulnerability in the httpuploadd service of the firmwa

In the Linux kernel, the following vulnerability has been resolved: moxart: fix potential use-after-free on remove path

Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the cur

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

SQL Injection vulnerability in CRMEB crmeb_java v.1.3.4 and before allows a remote attacker to obtain sensitive informat

Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. This issue leads

Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe. This issue leads to a client-side RC

In the module "Generate barcode on invoice / delivery slip" (ecgeneratebarcode) from Ether Creation <= 1.2.0 for PrestaS

In the module "Survey TMA" (ecomiz_survey_tma) up to version 2.0.0 from Ecomiz for PrestaShop, a guest can download pers