2024

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: bme680: Fix overflows in compensate(

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: remove lock of otg mode during gad

In the Linux kernel, the following vulnerability has been resolved: ftruncate: pass a signed offset The old ftruncate(

Buffer Overflow vulnerability in Tenda AC10 v4 US_AC10V4.0si_V16.03.10.20_cn allows a remote attacker to execute arbitra

In the Linux kernel, the following vulnerability has been resolved: ionic: fix kernel panic due to multi-buffer handlin

In the Linux kernel, the following vulnerability has been resolved: xdp: Remove WARN() from __xdp_reg_mem_model() syzk

In the Linux kernel, the following vulnerability has been resolved: drm/xe/xe_devcoredump: Check NULL before assignment

In the Linux kernel, the following vulnerability has been resolved: RDMA/restrack: Fix potential invalid address access

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix NULL pointer dereference in gfs2_log_flus

In the Linux kernel, the following vulnerability has been resolved: nfsd: initialise nfsd_info.mutex early. nfsd_info.

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix DIO failure due to insufficient transact

In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: Initialize unused data in j1939_se

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix remap of arena. The bpf arena logic didn'

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: add a null check for chip_pdev stru

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_buffers: Fix memory corruptions on

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix may_goto with negative offset. Zac's syzb

In the Linux kernel, the following vulnerability has been resolved: ionic: use dev_consume_skb_any outside of napi If

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fully validate NFT_DATA_VALUE

In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix possible double free in error handli

In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from set_memory_ro() into account

In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from set_memory_rox() into account

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix potential integer overflow in page size

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Add a NULL check in xe_ttm_stolen_mgr_init

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip pipe if the pipe idx not set

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf prog stack with kmsan_unposion_memory

Note Mark is a web-based Markdown notes app. A stored cross-site scripting (XSS) vulnerability in Note Mark allows attac

fast-xml-parser is an open source, pure javascript xml parser. a ReDOS exists on currency.js. This vulnerability is fixe

ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The `AppImage` v

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The `twisted.web.util.redirectTo`

Cross Site Scripting (XSS) vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafte

Buffer Overflow vulnerability in host-host NEUQ_board v.1.0 allows a remote attacker to cause a denial of service via th

Incorrect access control in Himalaya Xiaoya nano smart speaker rom_version 1.6.96 allows a remote attacker to have an un

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix null pointer dereference on e

In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: fix endpoint checking in cxacru_b

In the Linux kernel, the following vulnerability has been resolved: PCI/MSI: Fix UAF in msi_capability_init KFENCE rep

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference

In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-dma: Only set smem_start is enable per mo

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid using null object of framebuffer

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix potential UAF by revoke of fence r

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference

In the Linux kernel, the following vulnerability has been resolved: can: mcp251xfd: fix infinite loop when xmit fails

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix double free on error If e.g.

In the Linux kernel, the following vulnerability has been resolved: bcachefs: Fix sb_field_downgrade validation - bch2

In the Linux kernel, the following vulnerability has been resolved: cxl/mem: Fix no cxl_nvd during pmem region auto-ass

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Avoid null pointer dereference in regio

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_page_mkwrite() to check folio->map

In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: enhanced error handling for tightl

tgstation-server is a production scale tool for BYOND server management. Prior to 6.8.0, low permission users using the

Magento-lts is a long-term support alternative to Magento Community Edition (CE). This XSS vulnerability affects the des

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provi