2024

Envoy is a cloud-native, open source edge and service proxy. The HTTP/2 protocol stack in Envoy versions prior to 1.29.3

projeqtor up to 11.2.0 was discovered to contain a SQL injection vulnerability via the component /view/criticalResourceE

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response

An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Se

MesonLSP is an unofficial, unendorsed language server for meson written in C++. A vulnerability in versions prior to 4.1

gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. Th

Vault and Vault Enterprise TLS certificates auth method did not correctly validate OCSP responses when one or more OCSP

IBM WebSphere Application Server Liberty 18.0.0.2 through 24.0.0.4 is vulnerable to a denial of service, caused by sendi

There is a stored Cross‑Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS versions 11.2 and below that may al

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Web App Builder versions 10.9.

There is an HTML injection vulnerability in Esri Portal for ArcGIS 11.0 and below that may allow a remote, unauthenticat

There is a cross‑site scripting (XSS) vulnerability in Esri Portal for ArcGIS Experience Builder versions 11.1 and below

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Web App Builder versions 11.1

There is a reflected cross site scripting vulnerability in the home application in Esri Portal for ArcGIS 11.1 and below

There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions 11.1 and below that may allow a remote, a

There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions 11.0 and below that may allow a remote, a

There is a cross-site-request forgery vulnerability in Esri Portal for ArcGIS Versions 11.1 and below that may in some c

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.1 and below that may allow a remote, unau

Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mo

oidcc is the OpenID Connect client library for Erlang. Denial of Service (DoS) by Atom exhaustion is possible by calling

Vite (French word for "quick", pronounced /vit/, like "veet") is a frontend build tooling to improve the frontend develo

Inclusion of undocumented features vulnerability accessible when logged on with a privileged access level on the follow

It was discovered that Canonical's Pebble service manager read-file API and the associated pebble pull command, before v

gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. Th

Collabora Online is a collaborative online office suite based on LibreOffice. A stored cross-site scripting vulnerabilit

nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.6

A timing-based side-channel flaw exists in the rust-openssl package, which could be sufficient to recover a plaintext ac

Information exposure vulnerability in RT software affecting version 4.4.1. This vulnerability allows an attacker with lo

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-qspi: remove system-wide suspend helpe

In the Linux kernel, the following vulnerability has been resolved: netlink: Fix kernel-infoleak-after-free in __skb_da

In the Linux kernel, the following vulnerability has been resolved: net: veth: clear GRO when clearing XDP even when do

In the Linux kernel, the following vulnerability has been resolved: fbcon: always restore the old font data in fbcon_do

In the Linux kernel, the following vulnerability has been resolved: drivers: perf: ctr_get_width function for legacy is

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-qdma: fix SoC may hang on 16 byte un

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-qdma: init irq after reg initializat

In the Linux kernel, the following vulnerability has been resolved: mmc: mmci: stm32: fix DMA API overlapping mappings

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix protection fault in iommufd_test_syz_c

In the Linux kernel, the following vulnerability has been resolved: pmdomain: arm: Fix NULL dereference on scmi_perf_do

In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix a bug calling wakeup_kswapd() with a

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix possible deadlock in subflow diag Syzbo

In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix task hung while purging oob_skb in GC.

In the Linux kernel, the following vulnerability has been resolved: af_unix: Drop oob_skb ref before purging queue in G

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Ensure safe user copy of completio

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: IOMMU table is not initializ

Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerabilit

A problem has been identified in the CloudStack additional VM configuration (extraconfig) feature which can be misused b

Cross Site Scripting (XSS) vulnerability in Advanced REST Client v.17.0.9 allows a remote attacker to execute arbitrary

An HTML injection vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 that enables a remote

A reflected cross-site scripting (XSS) vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 t

File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform versio