2024

In config_gov_time_windows of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could l

In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to l

OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device.

there is a possible Authentication Bypass due to improperly used crypto. This could lead to local escalation of privileg

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: always filter entire AP matrix The v

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix module loading free order Reverse order

In the Linux kernel, the following vulnerability has been resolved: arm64/sme: Always exit sme_alloc() early with exist

In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: move mmu notification mechanism i

In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: avoid use-after-free when chunk lengt

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix illegal rmb_desc access in SMC-D conne

In the Linux kernel, the following vulnerability has been resolved: tcp: make sure init the accept_queue's spinlocks on

In the Linux kernel, the following vulnerability has been resolved: netfs, fscache: Prevent Oops in fscache_put_cache()

In the Linux kernel, the following vulnerability has been resolved: xsk: fix usage of multi-buffer BPF helpers for ZC X

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix a memory corruption iwl_fw_ini_

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix global oob in ksmbd_nl_policy Similar t

The Photos and Files Contest Gallery WordPress plugin before 21.3.1 does not sanitize and escape some parameters, which

The User Registration WordPress plugin before 2.12 does not prevent users with at least the contributor role from render

The Paid Memberships Pro WordPress plugin before 2.12.9 does not prevent user with at least the contributor role from le

The Starbox WordPress plugin before 3.5.0 does not sanitise and escape some parameters, which could allow users with a r

The 404 Solution WordPress plugin before 2.35.8 does not properly sanitise and escape a parameter before using it in a S

The Ultimate Posts Widget WordPress plugin before 2.3.1 does not validate and escape some of its Widget options before o

The Enhanced Text Widget WordPress plugin before 1.6.6 does not validate and escape some of its Widget options before ou

The Login as User or Customer WordPress plugin through 3.8 does not prevent users to log in as any other user on the sit

The Seriously Simple Podcasting WordPress plugin before 3.0.0 discloses the Podcast owner's email address (which by defa

In the Linux kernel, the following vulnerability has been resolved: PM: sleep: Fix possible deadlocks in core system-wi

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmic_glink_altmode: fix port sanity chec

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Drop chan lock before queuing buffe

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fix NULL pointer in channel unregistrati

In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: Fix use after free bug due to erro

In the Linux kernel, the following vulnerability has been resolved: mm: migrate: fix getting incorrect page mapping dur

In the Linux kernel, the following vulnerability has been resolved: mm/sparsemem: fix race in accessing memory_section-

In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: convert from _raw_ to _noinc_ re

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix peer flow lists handling The cited

In the Linux kernel, the following vulnerability has been resolved: drm: Don't unref the same fb many times by mistake

In access_secure_service_from_temp_bond of btm_sec.cc, there is a possible way to achieve keystroke injection due to imp

In Santesoft Sante FFT Imaging versions 1.4.1 and prior once a user opens a malicious DCM file on affected FFT Imaging i

In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confus

In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a missing permission c

In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lea

In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation ch

In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local e

In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to inco

In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag due to a logic error in

In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a lo

In smp_proc_sec_req of smp_act.cc, there is a possible out of bounds read due to improper input validation. This could l

In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input valid

In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check. This

An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requir

An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploita