2024

The MultiPurpose theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.0 v

Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabli

Summary: As of July 8, 2025 Microsoft has completed mitigations to address this vulnerability. See KB5042562: Guidance f

The "soap_cgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This all

Attackers can craft a malicious link that once clicked will execute arbitrary JavaScript in the context of the Journyx w

Attackers with a valid username and password can exploit a python code injection vulnerability during the natural login

Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journ

Attacker controlled files can be uploaded to arbitrary locations on the web server's filesystem by abusing a path traver

Attackers can craft a malicious prompt that coerces the language model into executing arbitrary JavaScript in the contex

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw

A Stored Cross Site Scripting (XSS) vulnerability was found in "/smsa/add_class_submit.php" in Responsive School Managem

A SQL injection vulnerability in /smsa/teacher_login.php in Kashipara Responsive School Management System v1.0 allows an

A Reflected Cross Site Scripting (XSS) vulnerability was found in /smsa/student_login.php in Kashipara Responsive School

A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/admin_login.php" in Kashipara Responsive Schoo

A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/teacher_login.php" in Kashipara Responsive Sch

A vulnerability has been found in Tenda i22 1.0.0.3(4687) and classified as critical. Affected by this vulnerability is

A vulnerability, which was classified as critical, was found in Tenda i22 1.0.0.3(4687). Affected is the function formAp

A flaw was found in the Pulp package. When a role-based access control (RBAC) object in Pulp is set to assign permission

Okta Verify for Windows is vulnerable to privilege escalation through DLL hijacking. The vulnerability is fixed in Okta

An Incorrect Access Control vulnerability was found in /smsa/view_students.php in Kashipara Responsive School Management

An Incorrect Access Control vulnerability was found in /smsa/view_teachers.php in Kashipara Responsive School Management

An Incorrect Access Control vulnerability was found in /smsa/view_class.php in Kashipara Responsive School Management Sy

An Incorrect Access Control vulnerability was found in /smsa/view_marks.php in Kashipara Responsive School Management Sy

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to cond

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to cond

A vulnerability, which was classified as critical, has been found in Tenda i22 1.0.0.3(4687). This issue affects the fun

A vulnerability classified as critical was found in Tenda i22 1.0.0.3(4687). This vulnerability affects the function for

In the Linux kernel, the following vulnerability has been resolved: cachefiles: add missing lock protection when pollin

In the Linux kernel, the following vulnerability has been resolved: spi: don't unoptimize message in spi_async() Calli

In the Linux kernel, the following vulnerability has been resolved: tty: serial: ma35d1: Add a NULL check for of_node

In the Linux kernel, the following vulnerability has been resolved: wireguard: allowedips: avoid unaligned 64-bit memor

In the Linux kernel, the following vulnerability has been resolved: net, sunrpc: Remap EPERM in case of connection fail

In the Linux kernel, the following vulnerability has been resolved: Revert "sched/fair: Make sure to try to detach at l

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mos7840: fix crash on resume Since co

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE b

In the Linux kernel, the following vulnerability has been resolved: mm/shmem: disable PMD-sized page cache if needed F

In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in #DB handler due to BHI mi

In the Linux kernel, the following vulnerability has been resolved: bpf: Fail bpf_timer_cancel when callback is being c

In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Return error if block header over

In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Validate payload length before pr

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Prevent OOB read/write in us

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Add NULL pointer check to crst_table_free(

In the Linux kernel, the following vulnerability has been resolved: mm: fix crashes from deferred split racing folio mi

In the Linux kernel, the following vulnerability has been resolved: filemap: replace pte_offset_map() with pte_offset_m

In the Linux kernel, the following vulnerability has been resolved: libceph: fix race between delayed_work() and ceph_m

An IP Spoofing vulnerability has been discovered in Likeshop up to 2.5.7.20210811. This issue allows an attacker to repl