2024

D-Link DIR-823G v1.0.2B05_20181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration

The ForumWP – Forum & Discussion Board Plugin plugin for WordPress is vulnerable to Privilege Escalation via Insecure Di

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DataFlowX Technology Dat

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to versio

Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manage_user&id=.

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Ariva Computer Accord ORS allow

In the Linux kernel, the following vulnerability has been resolved: media: aspeed: Fix memory overwrite if timing is 16

The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to blind SQL Injectio

Dell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x, contain(s) an Use of Hard-coded Pass

Dell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x , contain(s) an Improper Neutralizati

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data due

The Newsletters plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.9.9.2

stripe-cli is a command-line tool for the payment processor Stripe. A vulnerability exists in stripe-cli starting in ver

SuiteCRM is an open-source customer relationship management (CRM) system. Prior to version 7.14.5 and 8.6.2, insufficien

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Sensitive information is stored in cleartext. It

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is pos

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is pos

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper privilege management concerning

itsourcecode Alton Management System 1.0 is vulnerable to SQL Injection in /noncombo_save.php via the "menu" parameter.

When a canister method is called via ic_cdk::call* , a new Future CallFuture is created and can be awaited by the calle

The ctl_write_buffer and ctl_read_buffer functions allocated memory to be returned to userspace, without initializing it

The function ctl_write_buffer incorrectly set a flag which resulted in a kernel Use-After-Free when a command finished p

The ctl_request_sense function could expose up to three bytes of the kernel heap to userspace. Malicious software runni

The ctl_report_supported_opcodes function did not sufficiently validate a field provided by userspace, allowing an arbit

An insufficient boundary validation in the USB code could lead to an out-of-bounds write on the heap, with data controll

A missing null-termination character in the last element of an nvlist array string can lead to writing outside the alloc

A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a s

Malicious software running in a guest VM can exploit the buffer overflow to achieve code execution on the host in the bh

The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'check

Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Email S

In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix RX buf alloc_size alignment and atom

In the Linux kernel, the following vulnerability has been resolved: fs/netfs/fscache_cookie: add missing "n_accesses" c

In the Linux kernel, the following vulnerability has been resolved: gtp: pull network headers in gtp_dev_xmit() syzbot

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_wed: fix use-after-free panic in

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix a deadlock problem when config TC du

In the Linux kernel, the following vulnerability has been resolved: iommu: Restore lost return in iommu_report_device_f

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix out-of-bounds read in `v3d_csd_job_run

In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid possible NULL dereference in cifs

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Fix out-of-bound access If an

In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent UAF in ip6_send_skb() syzbot reporte

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in ip6_finish_output2() If

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate vlan header Ensure

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Free job before xe_exec_queue_put Free job

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Validate TA binary size Add TA binary

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: avoid possible UaF when selecting endp

In the Linux kernel, the following vulnerability has been resolved: mm, slub: do not call do_slab_free for kfence objec

In the Linux kernel, the following vulnerability has been resolved: drm/mgag200: Bind I2C lifetime to DRM device Manag

In the Linux kernel, the following vulnerability has been resolved: binfmt_flat: Fix corruption when not offsetting dat

In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leaks and crashes while performing