2024

In the Linux kernel, the following vulnerability has been resolved: hugetlb, userfaultfd: fix reservation restore on us

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Update error handler for UCTX and UMEM I

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix null pointer dereference on po

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: Remove WARN_ON in tps6598x_block_

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Prevent dead task groups from regaining

In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: fix null pointer dereference on pointer

In the Linux kernel, the following vulnerability has been resolved: usb: host: ohci-tmio: check return value after call

In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: Unregister clocks/resets when unbind

In the Linux kernel, the following vulnerability has been resolved: net: dpaa2-eth: fix use-after-free in dpaa2_eth_rem

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix list_add() corruption in lpfc_drain

In the Linux kernel, the following vulnerability has been resolved: thermal: Fix NULL pointer dereferences in of_therma

In the Linux kernel, the following vulnerability has been resolved: iavf: free q_vectors before queues in iavf_disable_

In the Linux kernel, the following vulnerability has been resolved: drm/prime: Fix use after free in mmap with drm_gem_

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT, Fix multiple allocations and memleak

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi()

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Set send and receive CQ before forwardin

In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free of the add_lock mutex Comm

In the Linux kernel, the following vulnerability has been resolved: cfg80211: call cfg80211_stop_ap when switch from P2

In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Fix memory leak during rmmod Driver

In the Linux kernel, the following vulnerability has been resolved: scsi: core: sysfs: Fix hang when device state is se

In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Fix out-of-bound read in resp_rea

In the Linux kernel, the following vulnerability has been resolved: perf bpf: Avoid memory leak from perf_env__insert_b

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory ordering between normal and order

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Improve SCSI abort handling The f

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: msm8998: Fix CPU/L2 idle state la

In the Linux kernel, the following vulnerability has been resolved: tipc: check for null after calling kmemdup kmemdup

In the Linux kernel, the following vulnerability has been resolved: tty: tty_buffer: Fix the softlockup issue in flush_

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix NULL ptr dereference on VSI filter sync

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix link down processing to address NUL

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix scsi_mode_sense() buffer length han

In the Linux kernel, the following vulnerability has been resolved: usb: musb: tusb6010: check return value after calli

Cross-Site Request Forgery (CSRF) vulnerability in Octolize WooCommerce UPS Shipping – Live Rates and Access Points.This

Cross-Site Request Forgery (CSRF) vulnerability in Octolize USPS Shipping for WooCommerce – Live Rates.This issue affect

Plane, an open-source project management tool, has a Server-Side Request Forgery (SSRF) vulnerability in versions prior

Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17.

Missing Authorization vulnerability in ShortPixel ShortPixel Adaptive Images shortpixel-adaptive-images.This issue affec

Traccar is an open source GPS tracking system. Traccar versions 5.1 through 5.12 allow arbitrary files to be uploaded th

A stored Cross-Site Scripting (XSS) vulnerability exists in the chat functionality of the mintplex-labs/anything-llm rep

A Denial of Service (DoS) vulnerability exists in the mintplex-labs/anything-llm repository when the application is runn

The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data

A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to

A weak (low bit strength) device certificate in Palo Alto Networks Panorama software enables an attacker to perform a me

An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclus

A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based f

A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receivin

A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE) agent

A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burst of crafted packets t

A vulnerability in mintplex-labs/anything-llm allows users with manager roles to escalate their privileges to admin role

In mintplex-labs/anything-llm, an improper input validation vulnerability allows attackers to escalate privileges by dea