2024

A vulnerability was found in the quarkus-core component. Quarkus captures local environment variables from the Quarkus n

INOTEC Sicherheitstechnik WebServer CPS220/64 3.3.19 allows a remote attacker to read arbitrary files via absolute path

Information exposure vulnerability in RT software affecting version 4.4.1. This vulnerability allows an attacker with lo

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: release elements in clon

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_chain_filter: handle NETDEV_UNREGIST

In the Linux kernel, the following vulnerability has been resolved: Both cadence-quadspi ->runtime_suspend() and ->runt

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-qspi: remove system-wide suspend helpe

In the Linux kernel, the following vulnerability has been resolved: netlink: Fix kernel-infoleak-after-free in __skb_da

In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: prevent perpetual headroom growth

In the Linux kernel, the following vulnerability has been resolved: net: veth: clear GRO when clearing XDP even when do

In the Linux kernel, the following vulnerability has been resolved: stmmac: Clear variable when destroying workqueue C

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Avoid potential use-after-free in hci_er

In the Linux kernel, the following vulnerability has been resolved: tls: fix use-after-free on failed backlog decryptio

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix uninitialized pointer dmactl In th

In the Linux kernel, the following vulnerability has been resolved: fbcon: always restore the old font data in fbcon_do

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Prevent potential buffer overflow

In the Linux kernel, the following vulnerability has been resolved: drivers: perf: ctr_get_width function for legacy is

In the Linux kernel, the following vulnerability has been resolved: riscv: Sparse-Memory/vmemmap out-of-bounds fix Off

In the Linux kernel, the following vulnerability has been resolved: gtp: fix use-after-free and null-ptr-deref in gtp_n

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free of anonymous device after sn

In the Linux kernel, the following vulnerability has been resolved: btrfs: dev-replace: properly validate device names

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-qdma: fix SoC may hang on 16 byte un

In the Linux kernel, the following vulnerability has been resolved: crypto: arm64/neonbs - fix out-of-bounds access on

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-qdma: init irq after reg initializat

In the Linux kernel, the following vulnerability has been resolved: mmc: mmci: stm32: fix DMA API overlapping mappings

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix iopt_access_list_id overwrite bug Syz

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix protection fault in iommufd_test_syz_c

In the Linux kernel, the following vulnerability has been resolved: pmdomain: arm: Fix NULL dereference on scmi_perf_do

In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix a bug calling wakeup_kswapd() with a

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix double-free on socket dismantle when MP

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix possible deadlock in subflow diag Syzbo

In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix task hung while purging oob_skb in GC.

In the Linux kernel, the following vulnerability has been resolved: af_unix: Drop oob_skb ref before purging queue in G

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Ensure safe user copy of completio

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: IOMMU table is not initializ

Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerabilit

SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow compone

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations from the

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the online shop v

An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php.

A problem has been identified in the CloudStack additional VM configuration (extraconfig) feature which can be misused b

The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or random

By default the CloudStack management server honours the x-forwarded-for HTTP header and logs it as the source IP of an A

Cross Site Scripting (XSS) vulnerability in Advanced REST Client v.17.0.9 allows a remote attacker to execute arbitrary

Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary

CSV Injection vulnerability in Addactis IBNRS v.3.10.3.107 allows a remote attacker to execute arbitrary code via a craf

An HTML injection vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 that enables a remote

A reflected cross-site scripting (XSS) vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 t

File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform versio

The CGC Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and