2024

In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: fix list_head check warning This is cau

In the Linux kernel, the following vulnerability has been resolved: parisc: Clear stale IIR value on instruction access

In the Linux kernel, the following vulnerability has been resolved: nitro_enclaves: Use get_user_pages_unlocked() call

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw-acpi: harden detection of cont

In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix memory leak in device probe and

In the Linux kernel, the following vulnerability has been resolved: fs/mount_setattr: always cleanup mount_kattr Make

The Shariff Wrapper WordPress plugin before 4.6.10 does not sanitise and escape some of its settings, which could allow

The Spiffy Calendar WordPress plugin before 4.9.9 doesn't check the event_author parameter, and allows any user to alter

The Smart Forms WordPress plugin before 2.6.87 does not have authorisation in various AJAX actions, which could allow us

The Fatal Error Notify WordPress plugin before 1.5.3 does not have authorisation and CSRF checks in its test_error AJAX

The WP Dashboard Notes WordPress plugin before 1.0.11 is vulnerable to Insecure Direct Object References (IDOR) in post_

The Persian Fonts WordPress plugin through 1.6 does not sanitise and escape some of its settings, which could allow high

The Page Builder: Pagelayer WordPress plugin before 1.8.1 does not sanitise and escape some of its settings, which could

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix clobbering of SWERR overflow b

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq size store permission state

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: clear MSIX permission entry on shu

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq cleanup of WQCFG registers

In the Linux kernel, the following vulnerability has been resolved: ixgbe: Fix NULL pointer dereference in ethtool loop

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit: avoid possible divide error i

In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix unbalanced device enable/disable in susp

In the Linux kernel, the following vulnerability has been resolved: ARM: footbridge: fix PCI interrupt mapping Since c

The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to unauthorized e

The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to missing author

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Post Type

Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update.

Cross Site Scripting vulnerability in 71CMS v.1.0.0 allows a remote attacker to execute arbitrary code via the uploadfil

An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices. It provides information

An issue was discovered in Linksys Router E1700 1.0.04 (build 3), allows authenticated attackers to escalate privileges

An issue was discovered on Innovaphone PBX before 14r1 devices. The password form, used to authenticate, allows a Brute

Minder is a Software Supply Chain Security Platform. In version 0.0.31 and earlier, it is possible for an attacker to re

An issue in the anchors subparser of Showdownjs versions <= 2.1.0 could allow a remote attacker to cause denial of servi

libming 0.4.8 contains a memory leak vulnerability in /libming/src/actioncompiler/listaction.c.

In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: fix info leak in hid_submit_ctrl In h

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential deadlock Using f2fs_t

Kirby is a content management system. The new link field introduced in Kirby 4 allows several different link types that

nanomq 0.21.2 contains a Use-After-Free vulnerability in /nanomq/nng/src/core/socket.c.

Amazon Fire OS 7 before 7.6.6.9 and 8 before 8.1.0.3 allows Fire TV applications to establish local ADB (Android Debug B

In the Linux kernel, the following vulnerability has been resolved: binder: signal epoll threads of self-work In (e)po

In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix deadlock when enabling ASPM A last m

In the Linux kernel, the following vulnerability has been resolved: Revert "kobject: Remove redundant checks for whethe

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Stop relying on userspace for info to faul

In the Linux kernel, the following vulnerability has been resolved: sched/membarrier: reduce the ability to hammer on s

In the Linux kernel, the following vulnerability has been resolved: phy: ti: phy-omap-usb2: Fix NULL pointer dereferenc

A DOM based cross-site scripting (XSS) vulnerability in the component index.html of jstrieb/urlpages before commit 035b6

A DOM based cross-site scripting (XSS) vulnerability in the component generator.html of tabatkins/railroad-diagrams befo

A DOM based cross-site scripting (XSS) vulnerability in the component /dom/ranges/Range-test-iframe.html of web-platform

A DOM based cross-site scripting (XSS) vulnerability in the component /beep/Beep.Instrument.js of stewdio beep.js before

openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c.

flusity-CMS 2.33 is vulnerable to Unrestricted Upload of File with Dangerous Type in update_setting.php.