2024

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix NULL pointer dereference in zone

In the Linux kernel, the following vulnerability has been resolved: crypto: rsa - add a check for allocation failure S

In the Linux kernel, the following vulnerability has been resolved: ice: Fix some null pointer dereference issues in ic

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: check the alloc_workqueue return value

In the Linux kernel, the following vulnerability has been resolved: drivers/amd/pm: fix a use-after-free in kv_parse_po

In the Linux kernel, the following vulnerability has been resolved: class: fix use-after-free in class_register() The

In the Linux kernel, the following vulnerability has been resolved: mfd: syscon: Fix null pointer dereference in of_sys

In the Linux kernel, the following vulnerability has been resolved: power: supply: Fix null pointer dereference in smb2

In Indo-Sol PROFINET-INspektor NT through 2.4.0, a path traversal vulnerability in the httpuploadd service of the firmwa

In Indo-Sol PROFINET-INspektor NT through 2.4.0, a command injection vulnerability in the gedtupdater service of the fir

A DLL hijacking vulnerability was identified in the Qognify VMS Client Viewer version 7.1 or higher, which allows local

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users t

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users t

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify th

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources in

In the Linux kernel, the following vulnerability has been resolved: moxart: fix potential use-after-free on remove path

IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or a

In the Linux kernel, the following vulnerability has been resolved: net: hso: fix NULL-deref on disconnect regression

In the Linux kernel, the following vulnerability has been resolved: net: hso: fix null-ptr-deref during tty device unre

Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the cur

Versions of the package sanitize-html before 2.12.1 are vulnerable to Information Exposure when used on the backend and

The Archivist – Custom Archive Templates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘s

Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

SQL Injection vulnerability in CRMEB crmeb_java v.1.3.4 and before allows a remote attacker to obtain sensitive informat

An issue was discovered in Yealink Configuration Encrypt Tool (AES version) and Yealink Configuration Encrypt Tool (RSA

ZKteco ZKBio WDMS before 9.0.2 Build 20250526 allows an attacker to download a database backup via the /files/backup/ co

Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. This issue leads

Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe. This issue leads to a client-side RC

Hitron CODA-4582 and CODA-4589 devices have default PSKs that are generated from 5-digit hex values concatenated with a

In the module "Generate barcode on invoice / delivery slip" (ecgeneratebarcode) from Ether Creation <= 1.2.0 for PrestaS

In the module "Survey TMA" (ecomiz_survey_tma) up to version 2.0.0 from Ecomiz for PrestaShop, a guest can download pers

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware

Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmwar

Improper neutralization in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware

Insufficient control flow management in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageabil

Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmwar

Uncaught exception in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may a

Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmwar

Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmwar

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as problematic.

A vulnerability was found in SourceCodester Employee Management System 1.0 and classified as critical. Affected by this

A vulnerability has been found in SourceCodester Complete File Management System 1.0 and classified as critical. Affecte

High traffic environments may result in NULL Pointer Dereference vulnerability in Silicon Labs's Ember ZNet SDK before v

Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon L

A vulnerability, which was classified as critical, was found in SourceCodester Complete File Management System 1.0. Affe

A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is

IBM Aspera Console 3.4.0 through 3.4.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQ