2024

Vditor 3.10.3 allows XSS via an attribute of an A element. NOTE: the vendor indicates that a user is supposed to mitigat

An issue was discovered in the Bouncy Castle Crypto Package For Java before BC TLS Java 1.0.19 (ships with BC Java 1.78,

There is a ClusterRole in piraeus-operator v2.5.0 and earlier which has been granted list secrets permission, which allo

IBM Aspera Orchestrator 4.0.1 could allow a remote authenticated attacker to execute arbitrary commands on the system by

In the Linux kernel, the following vulnerability has been resolved: thermal/int340x_thermal: handle data_vault when the

In the Linux kernel, the following vulnerability has been resolved: ALSA: emu10k1: Fix out of bounds access in snd_emu1

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix an out-of-bounds bug in __snd_

In the Linux kernel, the following vulnerability has been resolved: sched/debug: fix dentry leak in update_sched_domain

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix memory leak when using debugfs

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a use-after-free Fix the following use-

In the Linux kernel, the following vulnerability has been resolved: regmap: spi: Reserve space for register address/pad

An Implicit intent vulnerability was reported in the Motorola framework that could allow an attacker to read telephony-r

An improper export vulnerability was reported in the Motorola Enterprise MotoDpms Provider (com.motorola.server.enterpr

Mullvad VPN through 2024.1 on Android does not set a DNS server in the blocking state (after a hard failure to create a

The 'control' in Parrot ANAFI USA firmware 1.10.4 does not check the MAV_MISSION_TYPE(0, 1, 2, 255), which allows attack

Insecure Permissions vulnerability in e-trust Horacius 1.0, 1.1, and 1.2 allows a local attacker to escalate privileges

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix drain SQ hang with no completion S

In the Linux kernel, the following vulnerability has been resolved: soc: brcmstb: pm-arm: Fix refcount leak and __iomem

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Set scmnd->result only when scmnd is not

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: clean up hook list when offlo

In the Linux kernel, the following vulnerability has been resolved: tcp: TX zerocopy should not sense pfmemalloc status

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix kernel crash during module removal The d

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix out-of-bounds read when setting HMAC

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when detecting digest errors We

In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix a nested dead lock as part of ODP flow

In the Linux kernel, the following vulnerability has been resolved: erofs: fix pcluster use-after-free on UP platforms

In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible access to freed memory in lin

In the Linux kernel, the following vulnerability has been resolved: of: fdt: fix off-by-one error in unflatten_dt_nodes

In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpus_read_lock() to cgroup_atta

In the Linux kernel, the following vulnerability has been resolved: peci: cpu: Fix use-after-free in adev_release() Wh

A hard-coded AES key vulnerability was reported in the Motorola GuideMe application, along with a lack of URI sanitatio

An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local a

Use After Free vulnerability in Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Ge

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver al

An improper absolute path traversal vulnerability was reported for the Ready For application allowing a local applicati

An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized a

A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to

A path traversal vulnerability was reported in the Motorola Ready For application that could allow a local attacker to

An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker

An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local att

An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malici

A an improper export vulnerability was reported in the Motorola Setup application that could allow a local attacker to

An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker t

A PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local a

An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application th

An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker

An improper export vulnerability was reported in the Motorola Services Main application that could allow a local attack

Hengan Weighing Management Information Query Platform 2019-2021 53.25 was discovered to contain a SQL injection vulnerab

An arbitrary file upload vulnerability in Zhongcheng Kexin Ticketing Management Platform 20.04 allows attackers to execu