2024

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-78: 'OS Command Injection' may allow RCE

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-23: Relative Path Traversal

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-200: Exposure of Sensitive Information to an Unautho

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE

CWE-287: Improper Authentication may allow Authentication Bypass

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces() function in libvirt. This issue can occu

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(fre

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the filePath parameter of formExpandDlnaFile function.

A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctio

ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could resu

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: make sure to pull inner header in __ip6

In the Linux kernel, the following vulnerability has been resolved: tcp: add sanity checks to rx zerocopy TCP rx zeroc

In the Linux kernel, the following vulnerability has been resolved: nbd: always initialize struct msghdr completely sy

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: rely on mac80211 debugfs handling for

In the Linux kernel, the following vulnerability has been resolved: llc: make llc_ui_sendmsg() more robust against bond

In the Linux kernel, the following vulnerability has been resolved: llc: Drop support for ETH_P_TR_802_2. syzbot repor

In the Linux kernel, the following vulnerability has been resolved: net: fix removing a namespace with conflicting altn

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tn

In the Linux kernel, the following vulnerability has been resolved: block: Fix iterating over an empty bio with bio_for

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: fix data-race in ipv6_mc_down / mld_if

An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Fix crash when setting number of cpus t

In the Linux kernel, the following vulnerability has been resolved: block/rnbd-srv: Check for unlikely string overflow

In the Linux kernel, the following vulnerability has been resolved: PCI: switchtec: Fix stdev_release() crash after sur

In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - Fix unexpected pointer access in

In the Linux kernel, the following vulnerability has been resolved: hwrng: core - Fix page fault dead lock on mmap-ed h

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix buffer overflow in trans_stat_sho

In the Linux kernel, the following vulnerability has been resolved: drivers/thermal/loongson2_thermal: Fix incorrect PT

In the Linux kernel, the following vulnerability has been resolved: crypto: scomp - fix req->dst buffer overflow The r

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: sdio: Honor the host max_req_size in t

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix skb leak and crash on ooo fr

In the Linux kernel, the following vulnerability has been resolved: binder: fix race between mmput() and do_exit() Tas

Lack of input sanitization in BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users for manipulation of gener

BMC Control-M branches 9.0.20 and 9.0.21 upon user login load all Dynamic Link Libraries (DLL) from a directory that g

Improper authorization in the report management and creation module of BMC Control-M branches 9.0.20 and 9.0.21 allows l

Improper restriction of XML external entity references vulnerability exists in FitNesse all releases, which allows a rem

Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticat

FitNesse all releases allows a remote authenticated attacker to execute arbitrary OS commands. Note: A contributor of Fi

Cross-site request forgery vulnerability in FUJIFILM printers which implement CentreWare Internet Services or Internet S

Cross-site scripting vulnerability exists in FitNesse all releases, which may allow a remote unauthenticated attacker to

Cross-site request forgery vulnerability in multiple printers and scanners which implement Web Based Management provided

Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management p

In OpenStack Murano through 16.0.0, when YAQL before 3.0.0 is used, the Murano service's MuranoPL extension to the YAQL

danielmiessler fabric through 1.3.0 allows installer/client/gui/static/js/index.js XSS because of innerHTML mishandling,

Rocket.Chat.Audit through 5ad78e8 depends on filecachetools, which does not exist in PyPI.

The Kossy module before 0.60 for Perl allows JSON hijacking because of X-Requested-With mishandling.

The Net::IPAddress::Util module before 5.000 for Perl does not properly consider extraneous zero characters in an IP add

The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, wh

The Net::CIDR::Lite module before 0.22 for Perl does not properly consider extraneous zero characters at the beginning o