2024

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /custom

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customer_

The encrypted subject of an email message could be incorrectly and permanently assigned to an arbitrary other email mess

An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious,

An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, loca

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as crit

The Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from lea

The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does

Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when con

Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista

On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may

IBM Connect:Express for UNIX 1.5.0 is vulnerable to a buffer overflow that could allow a remote attacker to cause a deni

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: hdmi: Perform NULL pointer check for

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix READDIR buffer overflow If a client send

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nft_set

In the Linux kernel, the following vulnerability has been resolved: ice: xsk: return xsk buffers back to pool when clea

In the Linux kernel, the following vulnerability has been resolved: IB/qib: Fix memory leak in qib_user_sdma_queue_pkts

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

IBM CICS TX Advanced 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java

In the Linux kernel, the following vulnerability has been resolved: inet: fully convert sk->sk_rx_dst to RCU rules syz

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix incorrect structure acc

In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in asix_mdio_read() asix_re

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix UAF when uninstall ipmi_si and ipmi_msgha

In the Linux kernel, the following vulnerability has been resolved: veth: ensure skb entering GRO are not cloned. Afte

In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Prevent integer overflow/underflow in

In the Linux kernel, the following vulnerability has been resolved: Input: elantech - fix stack out of bound access in

In the Linux kernel, the following vulnerability has been resolved: ALSA: rawmidi - fix the uninitalized user_pversion

In the Linux kernel, the following vulnerability has been resolved: ipmi: ssif: initialize ssif_info->client early Dur

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Don't advance iterator after restart

In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel_pmc_core: fix memleak on regist

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Always clear vmx->fail on emulation_requi

In the Linux kernel, the following vulnerability has been resolved: mac80211: fix locking in ieee80211_start_ap error p

In the Linux kernel, the following vulnerability has been resolved: mm/hwpoison: clear MF_COUNT_INCREASED before retryi

In the Linux kernel, the following vulnerability has been resolved: kfence: fix memory leak when cat kfence objects Hu

In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: protect targets destructions with k

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix incorrect page free bug Pointer to

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: refuse to enable an unbound pipe This

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: fix global-out-of-bounds issue

In the Linux kernel, the following vulnerability has been resolved: tun: avoid double free in tun_free_netdev Avoid do

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the /system/share/ztree_cate

Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature to offer standalone Ma

IBM CICS TX Advanced 10.1 could disclose sensitive information to a remote attacker due to observable discrepancy in HTT

IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information through an HTTP request that could a

Flusity-CMS v2.33 is vulnerable to Cross Site Scripting (XSS) in the "Contact form."

Flusity-CMS v2.33 is affected by: Cross Site Scripting (XSS) in 'Custom Blocks.'

A Cross-site scripting (XSS) vulnerability in dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cgi and seama.cgi in D-Link GORTA

Dell PowerScale OneFS 8.2.x through 9.6.0.x contain an insufficient logging vulnerability. A local malicious user with h

Dell PowerScale OneFS 8.2.x through 9.6.0.x contains a use of a broken or risky cryptographic algorithm vulnerability. A

Dell Display and Peripheral Manager for macOS prior to 1.3 contains an improper access control vulnerability. A low priv