2024

The Categorify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYST

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker

In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_ta

In the Linux kernel, the following vulnerability has been resolved: net: fix use-after-free in tw_timer_handler A real

In the Linux kernel, the following vulnerability has been resolved: binder: fix async_free_space accounting for empty p

In the Linux kernel, the following vulnerability has been resolved: i2c: validate user data in compat ioctl Wrong user

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_cl

In the Linux kernel, the following vulnerability has been resolved: Input: appletouch - initialize work before device r

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Wrap the tx reporter dump callback to ex

In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: fix list_head check warning This is cau

In the Linux kernel, the following vulnerability has been resolved: sctp: use call_rcu to free endpoint This patch is

In the Linux kernel, the following vulnerability has been resolved: parisc: Clear stale IIR value on instruction access

In the Linux kernel, the following vulnerability has been resolved: nitro_enclaves: Use get_user_pages_unlocked() call

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw-acpi: harden detection of cont

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix kernel panic caused by race of smc_soc

In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix memory leak in device probe and

In the Linux kernel, the following vulnerability has been resolved: fs/mount_setattr: always cleanup mount_kattr Make

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix TPM reservation for seal/unseal

In the Linux kernel, the following vulnerability has been resolved: locking/qrwlock: Fix ordering in queued_write_lock_

The Shariff Wrapper WordPress plugin before 4.6.10 does not sanitise and escape some of its settings, which could allow

The Spiffy Calendar WordPress plugin before 4.9.9 doesn't check the event_author parameter, and allows any user to alter

The Smart Forms WordPress plugin before 2.6.87 does not have authorisation in various AJAX actions, which could allow us

The Fatal Error Notify WordPress plugin before 1.5.3 does not have authorisation and CSRF checks in its test_error AJAX

The WP Dashboard Notes WordPress plugin before 1.0.11 is vulnerable to Insecure Direct Object References (IDOR) in post_

The Persian Fonts WordPress plugin through 1.6 does not sanitise and escape some of its settings, which could allow high

The JetBackup WordPress plugin before 2.0.9.9 doesn't use index files to prevent public directory listing of sensitive d

The Page Builder: Pagelayer WordPress plugin before 1.8.1 does not sanitise and escape some of its settings, which could

The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated

The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only kno

Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication deserial

Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fi

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix clobbering of SWERR overflow b

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq size store permission state

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: clear MSIX permission entry on shu

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq cleanup of WQCFG registers

In the Linux kernel, the following vulnerability has been resolved: ixgbe: Fix NULL pointer dereference in ethtool loop

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit: avoid possible divide error i

In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix unbalanced device enable/disable in susp

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: clone set element expression t

In the Linux kernel, the following vulnerability has been resolved: net: Make tcp_allowed_congestion_control readonly i

In the Linux kernel, the following vulnerability has been resolved: ch_ktls: Fix kernel panic Taking page refcount is

In the Linux kernel, the following vulnerability has been resolved: ARM: 9063/1: mm: reduce maximum number of CPUs if D

In the Linux kernel, the following vulnerability has been resolved: ARM: footbridge: fix PCI interrupt mapping Since c

In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct permission flag for mixed signed b

The NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor plugin for

The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to unauthorized e

The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to missing author

Should an instance of AnythingLLM be hosted on an internal network and the attacked be explicitly granted a permission l

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Post Type