2024

The Image Watermark plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability

A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to reboot the printer

A denial of service vulnerability was reported in the HTTPS service of some Lenovo Printers that could result in a syste

A buffer overflow vulnerability was reported in the HTTPS service of some Lenovo Printers that could result in denial of

An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allo

A potential memory leakage vulnerability was reported in some Lenovo Notebook products that may allow a local attacker

A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoin

A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and ThinkStation products that could a

A potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart Edge, Smart Office, and Th

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI syst

In tmu_get_tr_thresholds, there is a possible out of bounds read due to a missing bounds check. This could lead to local

In tmu_get_tr_num_thresholds of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could

In tmu_get_pi of tmu.c, there is a possible out of bounds read due to improper input validation. This could lead to loca

In TMU_IPC_GET_TABLE, there is a possible out of bounds read due to a missing bounds check. This could lead to local inf

In asn1_ec_pkey_parse_p384 of asn1_common.c, there is a possible OOB Read due to a missing null check. This could lead t

In km_exp_did_inner of kmv.c, there is a possible out of bounds read due to a missing bounds check. This could lead to l

In _dvfs_get_lv of dvfs.c, there is a possible out of bounds read due to a missing null check. This could lead to local

there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure wi

In tmu_get_gov_time_windows, there is a possible out of bounds read due to a missing bounds check. This could lead to lo

In apply_minlock_constraint of dvfs.c, there is a possible out of bounds read due to a missing bounds check. This could

In tmu_get_temp_lut of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to l

In gov_init, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

In asn1_ec_pkey_parse of asn1_common.c, there is a possible OOB read due to a missing null check. This could lead to loc

In tmu_get_tr_stats of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to l

In Unify CP IP Phone firmware 1.10.4.3, files are not encrypted and contain sensitive information such as the root passw

A vulnerability was found in Byzoro Smart S80 up to 20240328. It has been declared as critical. This vulnerability affec

LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack, and

SpaceX Starlink Wi-Fi router Gen 2 before 2023.48.0 allows XSS via the ssid and password parameters on the Setup Page.

The Squelch Tabs and Accordions Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu

Stored XSS in graph rendering in Checkmk <2.3.0b4.

WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the redirect

Mattermost versions 8.1.x before 8.1.11, 9.3.x before 9.3.3, 9.4.x before 9.4.4, and 9.5.x before 9.5.2 fail to authenti

Improper Access Control in Mattermost Server versions 9.5.x before 9.5.2, 9.4.x before 9.4.4, 9.3.x before 9.3.3, 8.1.x

Mattermost Server versions 9.5.x before 9.5.2, 9.4.x before 9.4.4, 9.3.x before 9.3.3, 8.1.x before 8.1.11 don't limit t

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Disable auto-enable of exclusive INTx IRQ

In the Linux kernel, the following vulnerability has been resolved: vfio/fsl-mc: Block calling interrupt handler withou

In the Linux kernel, the following vulnerability has been resolved: vfio/platform: Create persistent IRQ handlers The

Chilkat before v9.5.0.98, allows attackers to obtain sensitive information via predictable PRNG in ChilkatRand::randomBy

The Gutenberg Blocks by Kadence Blocks WordPress plugin before 3.2.26 does not validate and escape some of its block opt

Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user

InstantCMS is a free and open source content management system. A SQL injection vulnerability affects instantcms v2.16.2

WordPress is an open publishing platform for the Web. Unserialization of instances of the `WP_HTML_Token` class allows f

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical.

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been classified as critica

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0 and classified as critical. This i

A vulnerability was found in Dreamer CMS up to 4.1.3.0. It has been declared as critical. Affected by this vulnerability

mailcow: dockerized is an open source groupware/email suite based on docker. A security vulnerability has been identifie

mailcow: dockerized is an open source groupware/email suite based on docker. A security vulnerability has been identifie