2024

In the Linux kernel, the following vulnerability has been resolved: ethtool: fail closed if we can't get max channel us

In the Linux kernel, the following vulnerability has been resolved: net: hns3: void array out of bound when loop tnl_nu

In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: Fix use-after-free error in k

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire kvm->srcu when handling KVM_SET_V

In the Linux kernel, the following vulnerability has been resolved: sched: sch_cake: fix bulk flow accounting logic for

In the Linux kernel, the following vulnerability has been resolved: kunit/overflow: Fix UB in overflow_allocation_test

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix negative array index read Avoid us

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: remove irq disabling in vcn 5 suspe

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check gpio_id before used as array

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Stop amdgpu_dm initialize when str

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Stop amdgpu_dm initialize when lin

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check num_valid_sets before access

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check msg_id before processing tra

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check link_index before accessing

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip inactive planes within ModeSu

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index may exceed array range w

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add array index check for hdcp ddc

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check debug trap enable before write db

An arbitrary file upload vulnerability in YPay 1.2.0 allows attackers to execute arbitrary code via a ZIP archive to the

Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipul

Insertion of Sensitive Information into Log File vulnerability in Oceanic Software ValeApp allows Query System for Infor

The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via RSVP name field in all ver

Improper Certificate Validation in Checkmk Exchange plugin MikroTik allows attackers in MitM position to intercept traff

In UMTS RLC driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote deni

In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote den

A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the read

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to time-based SQL Injection via

The Product Enquiry for WooCommerce, WooCommerce product catalog plugin for WordPress is vulnerable to PHP Object Inject

The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 lacks sufficient access controls

The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 discloses the Open AI API Key, al

CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libpp

CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the for

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via t

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via t

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via t

Vault’s SSH secrets engine did not require the valid_principals list to contain a value by default. If the valid_princip

Shields.io is a service for concise, consistent, and legible badges in SVG and raster format. Shields.io and users self-

RSSHub is an RSS network. Prior to commit 64e00e7, RSSHub's `docker-test-cont.yml` workflow is vulnerable to Artifact Po

Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions p

The goTenna Pro App allows unauthenticated attackers to remotely update the local public keys used for P2P and group me

The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages.

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Neutralization of

A host header injection vulnerability in scheduleR v0.0.18 allows attackers to obtain the password reset token via user

A host header injection vulnerability in BookReviewLibrary 1.0 allows attackers to obtain the password reset token via u

A host header injection vulnerability in MEANStore 1.0 allows attackers to obtain the password reset token via user inte

A host header injection vulnerability in Lines Police CAD 1.0 allows attackers to obtain the password reset token via us

An information disclosure vulnerability in the /Letter/PrintQr/ endpoint of Solvait v24.4.2 allows attackers to access s

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x,10.5.3.x, contains an Uncontrolled Resource Consum

IBM ManageIQ could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specia

In Foxit PDF Reader before 2024.3, and PDF Editor before 2024.3 and 13.x before 13.1.4, an attacker can replace an updat