2024

In the Linux kernel, the following vulnerability has been resolved: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xa

In the Linux kernel, the following vulnerability has been resolved: s390/ap: Fix crash in AP internal function modify_b

In the Linux kernel, the following vulnerability has been resolved: genirq/irqdesc: Prevent use-after-free in irq_find_

In the Linux kernel, the following vulnerability has been resolved: btrfs: protect folio::private when attaching extent

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix crash on racing fsync and size-extending

The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server m

VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a v

VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) per

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential kernel bug due to lack of wri

HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certai

In the Linux kernel, the following vulnerability has been resolved: media: lgdt3306a: Add a check against null-pointer-

In the Linux kernel, the following vulnerability has been resolved: x86/xen: Drop USERGS_SYSRET64 paravirt call commit

The The7 — Website and eCommerce Builder for WordPress theme for WordPress is vulnerable to Stored Cross-Site Scripting

PX4-Autopilot v1.14.3 was discovered to contain a buffer overflow via the topic_name parameter at /logger/logged_topics.

A buffer overflow in PX4-Autopilot v1.12.3 allows attackers to cause a Denial of Service (DoS) via a crafted MavLink mes

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic WordPress all

A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Rou

Missing authorization in Client-Server API in Conduit <=0.7.0, allowing for any alias to be removed and added to another

Lack of privilege checking when processing a redaction in Conduit versions v0.6.0 and lower, allowing a local user to re

Lack of validation of origin in federation API in Conduit, allowing any remote server to impersonate any user from any s

Incomplete cleanup when performing redactions in Conduit, allowing an attacker to check whether certain strings were pre

Lack of consideration of key expiry when validating signatures in Conduit, allowing an attacker which has compromised an

Improper Certificate Validation vulnerability in LibreOffice "LibreOfficeKit" mode disables TLS certification verificati

Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Automattic

Stored XSS in the Crash Report page in Checkmk before versions 2.3.0p7, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows users

Stored XSS in some confirmation pop-ups in Checkmk before versions 2.3.0p7 and 2.2.0p28 allows Checkmk users to execute

WordPress Core is vulnerable to Stored Cross-Site Scripting via the HTML API in various versions prior to 6.5.5 due to i

A vulnerability in mintplex-labs/anything-llm allows for a Denial of Service (DoS) condition due to uncontrolled resourc

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds che

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutrali

The Quiz Maker plugin for WordPress is vulnerable to time-based SQL Injection via the 'ays_questions' parameter in all v

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutrali

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

The Zita Elementor Site Library plugin for WordPress is vulnerable to unauthorized modification of data due to a missing

The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is v

The Mime Types Extended WordPress plugin through 0.11 does not sanitise uploaded SVG files, which could allow users with

The Logo Manager For Enamad WordPress plugin through 0.7.0 does not have CSRF check in some places, and is missing sanit

Several plugins for WordPress hosted on WordPress.org have been compromised and injected with malicious PHP scripts. A m

An unrestricted file upload vulnerability in Avaya IP Office was discovered that could allow remote command or code exec

An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code ex

A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through Autodesk applications, can cause a use-after

A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory cor

A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of-Bound Rea

A maliciously crafted SLDPRT file, when parsed in ASMKERN229A.dll through Autodesk applications, can cause a use-after-f

A maliciously crafted DWG and SLDPRT file, when parsed in opennurbs.dll and ODXSW_DLL.dll through Autodesk applications,

A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds W

Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high pri