2024

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wake DMCUB before executing GPINT

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a suspicious RCU usage warning I recei

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid online resizing failures due to oversiz

In the Linux kernel, the following vulnerability has been resolved: bpf: Check rcu_read_lock_trace_held() before callin

Insertion of Sensitive Information into Log File vulnerability in GSheetConnector CF7 Google Sheets Connector.This issue

A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. This affects the function formSe

A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical. Affected by this issue is the function fo

Improper Preservation of Permissions vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.8.2 throug

A memory corruption vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious

Improper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated u

Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access t

A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical. Affected by this vulnerability is th

In Eclipse ThreadX NetX Duo before 6.4.0, if an attacker can control parameters of __portable_aligned_alloc() could cau

In Eclipse ThreadX before version 6.4.0, the _Mtxinit() function in the Xtensa port was missing an array size check cau

In Eclipse ThreadX before 6.4.0, xQueueCreate() and xQueueCreateSet() functions from the FreeRTOS compatibility API (

The image upload component allows SVG files and the regular expression used to remove script tags can be bypassed by usi

The current_url parameter of the AJAX call to the GalleryBox action of admin-ajax.php is vulnerable to reflected Cross S

The thumb_url parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected Cross

The image_url parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected Cross

The image_id parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected Cross S

In the Linux kernel, the following vulnerability has been resolved: tracing: Ensure visibility when inserting an elemen

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't abort filesystem when attempting to sn

Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A

Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in

Dell Grab for Windows, versions 5.0.4 and below, contains an improper file permissions vulnerability. A locally authenti

A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyon

An uninitialized pointer in Rockwell Automation Arena Simulation software could potentially allow a malicious user to i

A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user

A heap-based memory buffer overflow vulnerability in Rockwell Automation Arena Simulation software could potentially al

An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert una

xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted a

Pimcore is an Open Source Data & Experience Management Platform. Any call with the query argument `?pimcore_preview=true

In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content

The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fi

IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration Bus for z/OS 10.1 t

In Janitza GridVis through 9.0.66, exposed dangerous methods in the de.janitza.pasw.project.server.ServerDatabaseProject

In Janitza GridVis through 9.0.66, use of hard-coded credentials in the de.janitza.pasw.feature.impl.activators.Password

ZSATray passes the previousInstallerName as a config parameter to TrayManager, and TrayManager constructs the path and a

In some rare cases, there is a password type validation missing in Revert Password check and for some features it could

An arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp issue reporting file from th

A vulnerability, which was classified as critical, was found in Tenda AC7 15.03.06.44. Affected is the function formQuic

CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. Suppression of wiki requests does not work

TinyMCE is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in TinyMCE’s cont

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /src/dede/makehtml_homepage

TinyMCE is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in TinyMCE’s conte

A vulnerability in the langchain-ai/langchain repository allows for a Billion Laughs Attack, a type of XML External Enti

IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 could allow a remote user to cause a denial of service

Under certain conditions, RSA operations performed by IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 m

Missing Authorization vulnerability in Themeisle Multiple Page Generator Plugin – MPG.This issue affects Multiple Page G

Missing Authorization vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: from n/a through 1.3.1.