2024

A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows r

An incorrect access control issue in HomeServe Home Repair' android app - 3.3.4 allows a physically proximate attacker t

An incorrect access control issue in Life: Personal Diary, Journal android app 17.5.0 allows a physically proximate atta

Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control.

Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF.

Airflow versions before 2.10.3 have a vulnerability that allows authenticated users with audit log access to see sensiti

The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG

The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, Woo

A vulnerability classified as problematic was found in CodeAstro Real Estate Management System 1.0. Affected by this vul

A vulnerability classified as problematic has been found in CodeAstro Real Estate Management System 1.0. Affected is an

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. This vulne

The Easy SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in

In the Linux kernel, the following vulnerability has been resolved: posix-clock: posix-clock: Fix unbalanced locking in

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in apply

In the Linux kernel, the following vulnerability has been resolved: fs: don't try and remove empty rbtree node When co

In the Linux kernel, the following vulnerability has been resolved: nilfs2: propagate directory read errors from nilfs_

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix encoder->possible_clones Include t

In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: skip HugeTLB pages for unuse_vma I go

In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6030: fix IIO device retrieval from

In the Linux kernel, the following vulnerability has been resolved: pinctrl: intel: platform: fix error path in device_

In the Linux kernel, the following vulnerability has been resolved: pinctrl: ocelot: fix system hang on level based int

In the Linux kernel, the following vulnerability has been resolved: arm64: probes: Fix uprobes for big-endian kernels

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE

In the Linux kernel, the following vulnerability has been resolved: ext4: don't set SB_RDONLY after filesystem errors

In the Linux kernel, the following vulnerability has been resolved: ice: fix memleak in ice_init_tx_topology() Fix lea

In the Linux kernel, the following vulnerability has been resolved: virtio_pmem: Check device status before requesting

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Ensure DA_ID handling completion before

In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when

In the Linux kernel, the following vulnerability has been resolved: cpufreq: loongson3: Use raw_smp_processor_id() in d

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a UBSAN warning in DML2.1 Whe

In the Linux kernel, the following vulnerability has been resolved: remoteproc: k3-r5: Fix error handling when power-up

A vulnerability has been found in Codezips Online Institute Management System 1.0 and classified as critical. Affected b

A vulnerability, which was classified as critical, was found in Codezips Online Institute Management System 1.0. Affecte

The Simple Shortcode for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's

A vulnerability classified as critical was found in SourceCodester Online Veterinary Appointment System 1.0. This vulner

A vulnerability classified as critical has been found in code-projects E-Health Care System 1.0. This affects an unknown

A vulnerability was found in code-projects E-Health Care System 1.0. It has been declared as critical. Affected by this

Dell PowerProtect DD, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an access control vulnerab

Dell PowerProtect Data Domain, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an escalation of

Duende.AccessTokenManagement.OpenIdConnect is a set of .NET libraries that manage OAuth and OpenId Connect access tokens

A GitHub App installed in organizations could upgrade some permissions from read to write access without approval from a

Inconsistent <plaintext> tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier.

Adobe Experience Manager versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

The NLL com.nll.cb (aka ACR Phone) application through 0.330-playStore-NoAccessibility-arm8 for Android allows any insta

The com.callassistant.android (aka AI Call Assistant & Screener) application 1.174 for Android enables any installed app

An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed unauthorized internal user

A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Zimbra Collaboration Suite (ZCS) 8.8.15, aff

An issue was discovered on One2Track 2019-12-08 devices. Any SIM card used with the device cannot have a PIN configured.

An issue was discovered on One2Track 2019-12-08 devices. Confidential information is needlessly stored on the smartwatch