2024

Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could res

Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could res

Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by a Heap-based Buffer Overflow vulnerability that cou

Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Type Confus

Illustrator versions 28.6, 27.9.5 and earlier are affected by a Use After Free vulnerability that could result in arbitr

Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Use After F

After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability that could result i

Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability th

Premiere Pro versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result in

After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability that could result i

After Effects versions 23.6.6, 24.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could re

Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Prevent unmapping active read buffers

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix prime with external buffers Make s

In the Linux kernel, the following vulnerability has been resolved: drm/xe: reset mmio mappings with devm Set our vari

Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result i

The Appointment Booking Calendar WordPress plugin before 1.6.7.43 does not escape template syntax provided via user inpu

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Disable preemption while updating GPU stat

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a use-after-free when hitting errors ins

In the Linux kernel, the following vulnerability has been resolved: drm/xe: prevent UAF around preempt fence The fence

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix random crash seen while r

In the Linux kernel, the following vulnerability has been resolved: bonding: change ipsec_lock from spin lock to mutex

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: st: fix probed platform device ref count

In the Linux kernel, the following vulnerability has been resolved: scsi: aacraid: Fix double-free on probe failure aa

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to pa

A vulnerability allows a remote unauthenticated attacker to modify the prod uct’s IP address over the Sopas ET interface

A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due t

A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are

An invalid read size in Nanomq v0.21.9 allows attackers to cause a Denial of Service (DoS).

A memory allocation issue in vernemq v2.0.1 allows attackers to cause a Denial of Service (DoS) via excessive memory con

A vulnerability in Cisco Meraki Systems Manager (SM) Agent for Windows could allow an authenticated, local attacker to e

An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. An improper bounds ch

ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password functi

An issue has been discovered in GitLab EE affecting all versions starting from 16.11 prior to 17.1.7, from 17.2 prior to

A server-side request forgery issue has been discovered in GitLab EE affecting all versions starting from 16.8 prior to

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.1.7, starting from 17.2 pr

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.This is

Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileg

CVE-2024-45825 IMPACT A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a

CVE-2024-45823 IMPACT An authentication bypass vulnerability exists in the affected product. The vulnerability exists

Deserialization of untrusted data can occur in versions 2.4.0 or newer of the Cleanlab project, enabling a maliciously c

Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciou

Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciou

Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciou

Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a malicious

An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the

An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the

An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the

An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the

An arbitrary code execution vulnerability exists in versions 23.11.4.2 up to 24.7.4.1 of the MindsDB platform, when one