2024

The CGC Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and

The Gutenberg Blocks by Kadence Blocks – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site S

The WordPress Tag and Category Manager – AI Autotagger plugin for WordPress is vulnerable to Stored Cross-Site Scripting

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 20240403

The Announce from the Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in

The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) pl

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown wid

ELECOM wireless LAN routers allow a network-adjacent unauthenticated attacker to obtain the configuration file containin

Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has pe

Cross Site Scripting vulnerability in Webasyst v.2.9.9 allows a remote attacker to run arbitrary code via the Instant me

Cross Site Scripting vulnerability in Huly Platform v.0.6.202 allows attackers to execute arbitrary code via upload of c

Tempesta FW rate limits are not enabled by default. They are either set too large to capture empty CONTINUATION frames a

Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remo

Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remo

Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remo

In the Linux kernel, the following vulnerability has been resolved: fbdev: savage: Error out if pixclock equals zero T

In the Linux kernel, the following vulnerability has been resolved: fbdev: sis: Error out if pixclock equals zero The

In the Linux kernel, the following vulnerability has been resolved: spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupt

In the Linux kernel, the following vulnerability has been resolved: aoe: avoid potential deadlock at set_capacity Move

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid dividing by 0 in mb_update_avg_fragment

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: edma: Add some null pointer checks t

In the Linux kernel, the following vulnerability has been resolved: HID: nvidia-shield: Add missing null pointer checks

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fixed integer types and null check

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Disable IRQ before init_fn() for nonboot

In the Linux kernel, the following vulnerability has been resolved: cxl/pci: Fix disabling memory if DVSEC CXL Range do

In the Linux kernel, the following vulnerability has been resolved: md: Don't ignore suspended array in md_check_recove

In the Linux kernel, the following vulnerability has been resolved: md: Don't ignore read-only array in md_check_recove

In the Linux kernel, the following vulnerability has been resolved: md: Don't register sync_thread for reshape directly

In the Linux kernel, the following vulnerability has been resolved: md: Don't suspend the array for interrupted reshape

In the Linux kernel, the following vulnerability has been resolved: l2tp: pass correct message length to ip6_append_dat

In the Linux kernel, the following vulnerability has been resolved: ARM: ep93xx: Add terminator to gpiod_lookup_table

In the Linux kernel, the following vulnerability has been resolved: usb: roles: fix NULL pointer issue when put module'

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Support specifying the srpt_service_guid

In the Linux kernel, the following vulnerability has been resolved: RDMA/qedr: Fix qedr_create_user_qp error flow Avoi

In the Linux kernel, the following vulnerability has been resolved: dccp/tcp: Unhash sk from ehash for tb2 alloc failur

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: use the backlog for mirred i

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: DLPAR add doesn't completely

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-

In the Linux kernel, the following vulnerability has been resolved: arp: Prevent overflow in arp_req_get(). syzkaller

In the Linux kernel, the following vulnerability has been resolved: net: implement lockless setsockopt(SO_PEEK_OFF) sy

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix NULL pointer dereference in sk_ps

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential null pointer derefer

The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application f

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthentic

A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to

A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV

A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traver

A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, w

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow a low-pri

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat