2024

The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & Aut

Combodo iTop is a simple, web based IT Service Management tool. This vulnerability can be used to create HTTP requests o

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. The "Publish K

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. User input is

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Poor input val

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted contai

In the Linux kernel, the following vulnerability has been resolved: bpf: Use raw_spinlock_t in ringbuf The function __

In the Linux kernel, the following vulnerability has been resolved: reset: starfive: jh71x0: Fix accessing the empty me

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Unregister notifier on eswitch init failu

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix race condition between reset and nvme

In the Linux kernel, the following vulnerability has been resolved: drm/vboxvideo: Replace fake VLA at end of vbva_mous

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Don't crash in stack_top() for tasks wit

In the Linux kernel, the following vulnerability has been resolved: PCI: Hold rescan lock while adding devices during h

In the Linux kernel, the following vulnerability has been resolved: smb: client: Handle kstrdup failures for passwords

In the Linux kernel, the following vulnerability has been resolved: btrfs: reject ro->rw reconfiguration if there are h

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug due to missing clearing of b

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Enable IRQ if do_ale() triggered in irq-

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix one more kernel-infoleak in algo dumping

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null ptr dereference in raid10_size(

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Disable PSR-SU on Parade 08-01 TCO

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmc: Fix pmc_core_iounmap to cal

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: sc7280: Fix missing Soundwire runtime s

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: sdm845: add missing soundwire runtime s

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass

In the Linux kernel, the following vulnerability has been resolved: x86: fix user address masking non-canonical specula

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: dummy-hcd: Fix "task hung" problem Th

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut

The LSC Smart Connect Indoor IP Camera V7.6.32 is vulnerable to an information disclosure issue where live camera footag

In the Linux kernel, the following vulnerability has been resolved: net: fec: don't save PTP state if PTP is unsupporte

In the Linux kernel, the following vulnerability has been resolved: thermal: intel: int340x: processor: Fix warning dur

WebLaudos v20.8 (118) was discovered to contain a cross-site scripting (XSS) vulnerability via the login page.

The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force pro

Under certain conditions, access to service libraries is granted to account they should not have access to.

Under certain conditions, through a request directed to the Waybox Enel X web management application, information like W

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at ru_wan_flow.

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at genie_pptp.c

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at wiz_pptp.cgi

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pp

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pp

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pp

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pp

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at bridge_wireless_main.

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack o

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid parameter in bridge_wireless_main.cgi. T

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the apn parameter at usbISP_detail_edit.cgi. Th