2024

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, macOS Monterey 12

A privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below.

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it

An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0. When parsing .rdoc_option

IBM QRadar SIEM 7.5 could allow a privileged user to configure user management that would disclose unintended sensitive

iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channe

Oxygen XML Web Author v26.0.0 and older and Oxygen Content Fusion v6.1 and older are vulnerable to Cross-Site Scripting

Gnuboard g6 / https://github.com/gnuboard/g6 commit c2cc1f5069e00491ea48618d957332d90f6d40e4 is vulnerable to Cross Site

A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5. An app may be able to

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.5,

Cross Site Scripting (XSS) vulnerability in CrushFTP v.10.6.0 and v.10.5.5 allows an attacker to execute arbitrary code

IBM TXSeries for Multiplatforms 8.2 transmits or stores authentication credentials, but it uses an insecure method that

IBM TXSeries for Multiplatforms 8.2 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code,

IBM TXSeries for Multiplatforms 8.2 allows web pages to be stored locally which can be read by another user on the syste

The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missi

The Starter Templates — Elementor, WordPress & Beaver Builder Templates plugin for WordPress is vulnerable to Server-Sid

The SimpleShop plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.

The SimpleShop plugin for WordPress is vulnerable to unauthorized disconnection from SimpleShop due to a missing capabil

The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug

The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ele

NVIDIA Triton Inference Server for Linux contains a vulnerability in the tracing API, where a user can corrupt system fi

NVIDIA ChatRTX for Windows contains a vulnerability in the ChatRTX UI and backend, where a user can cause a clear-text t

NVIDIA Triton Inference Server for Linux contains a vulnerability in shared memory APIs, where a user can cause an impro

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.11 prior to 16.11.2. A problem with

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.9.7, starting from 16

The ShopLentor (formerly WooLentor) plugin for WordPress is vulnerable to unauthorized access of data due to a missing c

The Save as PDF Plugin by Pdfcrowd WordPress plugin before 3.2.0 does not sanitise and escape some of its settings, whic

Missing lock check in SynHsaService may create a use-after-free condition which causes abnormal termination of the servi

vulnerability in Uniform Server Zero, version 10.2.5, consisting of an XSS through the /us_extra/phpinfo.php page. This

The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerabilit

Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affec

In the Linux kernel, the following vulnerability has been resolved: usb: aqc111: check packet for fixup for true limit

Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availabil

Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availabil

NocoDB is software for building databases as spreadsheets. Prior to version 0.202.10, an authenticated attacker with cre

NocoDB is software for building databases as spreadsheets. Starting in verson 0.202.6 and prior to version 0.202.10, an

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due

Claris International has successfully resolved an issue of potentially exposing password information to front-end websit

The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21

HCL DRYiCE Lucy (now AEX) is affected by a Cross Origin Resource Sharing (CORS) vulnerability. The mobile app is vulnera

phpok 6.4.003 is vulnerable to SQL injection in the function index_f() in phpok64/framework/api/call_control.php.

An issue was discovered on certain Nuki Home Solutions devices. An attacker with physical access to the circuit board co

An issue was discovered on certain Nuki Home Solutions devices. There is a buffer overflow over the encrypted token pars

An issue in Open5GS v.2.7.0 allows an attacker to cause a denial of service via the 64 unsuccessful UE/gnb registration

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffai

Dell PowerProtect DM5500 version 5.15.0.0 and prior contain an Arbitrary File Delete via Path Traversal vulnerability. A

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of

A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1. It has been classified as critical. This