2024

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always stop health timer during driver re

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible race in __fib6_drop_pcpu_from()

In the Linux kernel, the following vulnerability has been resolved: USB: class: cdc-wdm: Fix CPU lockup caused by exces

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix use-after-free case in tcpm_r

In the Linux kernel, the following vulnerability has been resolved: jfs: xattr: fix buffer overflow for invalid xattr

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid test/set_bit() operating in no

In the Linux kernel, the following vulnerability has been resolved: cachefiles: remove requests from xarray during flus

In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefiles_o

In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefiles_o

In the Linux kernel, the following vulnerability has been resolved: HID: core: remove unnecessary WARN_ON() in implemen

In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: Use set_bit() and test_bit() at wor

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash problem in concurrent s

In the Linux kernel, the following vulnerability has been resolved: liquidio: Adjust a NULL pointer handling path in li

In the Linux kernel, the following vulnerability has been resolved: drm/komeda: check for error-valued pointer komeda_

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: validate mandatory meta and p

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix race between namespace cleanu

In the Linux kernel, the following vulnerability has been resolved: ionic: fix use after netif_napi_del() When queues

In the Linux kernel, the following vulnerability has been resolved: sock_map: avoid race between sock_map_close and sk_

In the Linux kernel, the following vulnerability has been resolved: vmci: prevent speculation leaks by sanitizing event

In the Linux kernel, the following vulnerability has been resolved: drm/mst: Fix NULL pointer dereference at drm_dp_add

In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE,

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix use-after-free due to race with d

In the Linux kernel, the following vulnerability has been resolved: greybus: Fix use-after-free bug in gb_interface_rel

In the Linux kernel, the following vulnerability has been resolved: ima: Fix use-after-free on a dentry's dname.name -

The authentication system of Securepoint UTM mishandles OTP keys. This allows the bypassing of second-factor verificatio

The default configuration of XSLTResourceStream.java is vulnerable to remote code execution via XSLT injection when proc

The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to authentication bypa

The Wallet for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'search[value]' parameter in all

The WP Total Branding – Complete branding solution for WordPress plugin for WordPress is vulnerable to Stored Cross-Site

The PowerPress Podcasting plugin by Blubrry plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the

The WP Popups – WordPress Popup builder plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to

The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when deleting groups or emails, which c

The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when adding emails, which could allow a

The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when updating its settings, which could

The Simple Video Directory WordPress plugin before 1.4.4 does not sanitise and escape some of its settings, which could

The Inline Related Posts WordPress plugin before 3.7.0 does not sanitise and escape a parameter before outputting it bac

The WP Secure Maintenance WordPress plugin before 1.7 does not sanitise and escape some of its settings, which could all

The Quotes and Tips by BestWebSoft WordPress plugin before 1.45 does not properly validate image files uploaded, allowin

The socialdriver-framework WordPress plugin before 2024.04.30 does not sanitise and escape some of its settings, which c

The Watu Quiz WordPress plugin before 3.4.1.2 does not sanitise and escape some of its settings, which could allow users

The Website Content in Page or Post WordPress plugin before 2024.04.09 does not validate and escape some of its shortcod

The Social Media Widget WordPress plugin before 4.0.9 does not sanitise and escape some of its settings, which could all

Privilege escalation in uberAgent

The Event post plugin for WordPress is vulnerable to unauthorized bulk metadata update due to a missing nonce check on t

A vulnerability in the `_backup_run` function in aimhubio/aim version 3.19.3 allows remote attackers to overwrite any fi

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized plugin settings modificat

Vault and Vault Enterprise did not properly handle requests originating from unauthorized IP addresses when the TCP list

An issue was discovered on Supermicro BMC firmware in select X11, X12, H12, B12, X13, H13, and B13 motherboards (and CMM

NATS.io NATS Server before 2.8.2 and Streaming Server before 0.24.6 could allow a remote attacker to bypass security res

A vulnerability, which was classified as critical, has been found in witmy my-springsecurity-plus up to 2024-07-04. Affe