2024

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix refcount leak in amd_pmc_prob

In the Linux kernel, the following vulnerability has been resolved: platform/surface: aggregator: Add missing call to s

In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases wh

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: Fix driver shutdown on closed s

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix initialization of rx->link and

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: sdata can be NULL during AMPDU star

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free and race in fastr

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Don't remove map on creater_process

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free race condition fo

In the Linux kernel, the following vulnerability has been resolved: tty: serial: qcom-geni-serial: fix slab-out-of-boun

In the Linux kernel, the following vulnerability has been resolved: tty: fix possible null-ptr-defer in spk_ttyio_relea

In the Linux kernel, the following vulnerability has been resolved: USB: gadgetfs: Fix race between mounting and unmoun

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Let probe fail when workqueue cann

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Prevent use after free on completi

In affected versions of Octopus Server OIDC cookies were using the wrong expiration time which could result in them usin

The Woo Inquiry plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 0.1 due to ins

The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to limited SQL Injec

The OTA Sync Booking Engine Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up t

The Responsive video plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's video settings f

The WP Testimonial Widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capab

The LiquidPoll – Polls, Surveys, NPS and Feedback Reviews plugin for WordPress is vulnerable to Stored Cross-Site Script

The LH Add Media From Url plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘lh_add_media_fro

The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capab

The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized modification of data due to a missi

Stack-based buffer overflow in Control FPWIN Pro version 7.7.2.0 and all previous versions may allow attackers to execut

The Event Espresso 4 Decaf – Event Registration Event Ticketing plugin for WordPress is vulnerable to limited unauthoriz

The WordSurvey plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘sounding_title’ parameter in a

The Flamix: Bitrix24 and Contact Form 7 integrations plugin for WordPress is vulnerable to Full Path Disclosure in all v

An insufficient entropy vulnerability was found in the Openshift Console. In the authorization code type and implicit gr

The Hide My Site plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi

A cross-site scripting (XSS) vulnerability in the component /index/index.html of YZNCMS v1.4.2 allows attackers to execu

Dell SupportAssist for Home PCs Installer exe version 4.0.3 contains a privilege escalation vulnerability in the install

In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: change DMA direction while mapping re

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_erp: Fix object nesting warning

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: handle 2x996 RU allocation in cfg80

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix input error path memory access When ther

In the Linux kernel, the following vulnerability has been resolved: media: pci: ivtv: Add check for DMA map result In

In the Linux kernel, the following vulnerability has been resolved: PCI: rcar: Demote WARN() to dev_warn_ratelimited()

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Clean up error handling in vpci_scan

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix null pointer dereference in __sev

In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: always initialize seqpacket_allow The

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix soft lockup under heavy CEQE load CE

In the Linux kernel, the following vulnerability has been resolved: devres: Fix memory leakage caused by driver API dev

In the Linux kernel, the following vulnerability has been resolved: perf: Fix event leak upon exit When a task is sche

In the Linux kernel, the following vulnerability has been resolved: perf: Fix event leak upon exec and file release Th

A vulnerability classified as critical has been found in chillzhuang SpringBlade 4.1.0. Affected is an unknown function

A vulnerability was found in Genexis Tilgin Home Gateway 322_AS0500-03_05_13_05. It has been rated as problematic. This

In the Linux kernel, the following vulnerability has been resolved: riscv/purgatory: align riscv_kernel_entry When ali

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: prime: fix refcount underflow Calling