2024

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Do core softreset when switch mode

In the Linux kernel, the following vulnerability has been resolved: tools/power turbostat: Fix offset overflow issue in

In the Linux kernel, the following vulnerability has been resolved: tracing: Restructure trace_clock_global() to never

In the Linux kernel, the following vulnerability has been resolved: dm rq: fix double free of blk_mq_tag_set in dev rem

In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: Fix memory leak in dvb_media_device_

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/cpufreq_cooling: Fix slab OOB issue

In the module "Product Catalog (CSV, Excel) Import" (simpleimportproduct) <= 6.7.0 from MyPrestaModules for PrestaShop,

In the module "Import/Update Bulk Product from any Csv/Excel File Pro" (ba_importer) up to version 1.1.28 from Buy Addon

In the module "So Flexibilite" (soflexibilite) from Common-Services for PrestaShop < 4.1.26, a guest (authenticated cust

In the module "Account Manager | Sales Representative & Dealers | CRM" (prestasalesmanager) up to 9.0 from Presta World

SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via

Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. Thi

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as c

A vulnerability was found in Ctcms 2.1.2. It has been declared as critical. This vulnerability affects unknown code of t

A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affect

XML External Entity injection in apache ambari versions <= 2.7.7, Users are recommended to upgrade to version 2.7.8, whi

Stored cross-site scripting (XSS) vulnerability in unit name. The following products are affected: Acronis Cyber Protect

Self cross-site scripting (XSS) vulnerability in storage nodes search field. The following products are affected: Acroni

Sensitive information disclosure due to excessive collection of system information. The following products are affected:

Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber

Atheme 7.2.12 contains a memory leak vulnerability in /atheme/src/crypto-benchmark/main.c.

Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session information lea

Rails is a web-application framework. There is a possible XSS vulnerability when using the translation helpers in Action

Rails is a web-application framework. Starting in version 7.1.0, there is a possible ReDoS vulnerability in the Accept h

Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third partie

Subrion CMS 4.2.1 is vulnerable to Cross Site Scripting (XSS) via adminer.php.

In Srelay (the SOCKS proxy and Relay) v.0.4.8p3, a specially crafted network payload can trigger a denial of service con

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as critical. Affected by

A vulnerability has been found in SourceCodester Online Job Portal 1.0 and classified as problematic. Affected by this v

In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the O

** UNSUPPORTED WHEN ASSIGNED ** Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Auror

libLAS 1.8.1 contains a memory leak vulnerability in /libLAS/apps/ts2las.cpp.

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because t

A vulnerability, which was classified as critical, was found in osuuu LightPicture up to 1.2.2. Affected is an unknown f

A vulnerability, which was classified as critical, has been found in osuuu LightPicture up to 1.2.2. This issue affects

A vulnerability classified as problematic was found in SourceCodester Online Job Portal 1.0. This vulnerability affects

Improper initialization of default settings in TeamViewer Remote Client prior version 15.51.5 for Windows, Linux and ma

Enable exports of the database and associated exported information of the system via the default user role. The attacked

Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling. A lenient behaviour in line delimiter h

A vulnerability has been found in Byzoro Smart S42 Management Platform up to 20240219 and classified as critical. Affect

A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate the

The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.

The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.

The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.

The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.

The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.

The Categorify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

The Categorify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

The Categorify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check