HIGH Severity CVEs

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. By default, the device comes (and functions

An issue was discovered in Logpoint before 7.5.0. Endpoints for creating, editing, or deleting third-party authenticatio

An issue was discovered in Logpoint before 7.5.0. Server-Side Request Forgery (SSRF) on SOAR can be used to leak Logpoin

An issue was discovered in Logpoint before 7.5.0. An endpoint used by Distributed Logpoint Setup was exposed, allowing u

A vulnerability in Veeam Backup & Replication Enterprise Manager has been identified, which allows attackers to perform

A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This

There exists an auth bypass in Google Quickshare where an attacker can upload an unknown file type to a victim. The root

A flaw was found in moodle. A local file may include risks when restoring block backups.

A flaw was found in Feedback. Bulk messaging in the activity's non-respondents report did not verify message recipients

A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators.

The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check,

A vulnerability was found in Moodle. Insufficient capability checks made it possible to delete badges that a user does n

To address a cache poisoning risk in Moodle, additional validation for local storage was required.

A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk o

A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated que

Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix t

In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix potential memory leak in bcmasp_xm

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve param->string when parsing mount opti

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overloading of MEM_UNINIT's meaning Lonia

In the Linux kernel, the following vulnerability has been resolved: bpf: Check the remaining info_cnt before repeating

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix the double free in scmi_deb

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix out of bound check Driver export

In the Linux kernel, the following vulnerability has been resolved: netdevsim: use cond_resched() in nsim_dev_trap_repo

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOBs when building SMB2_IOCTL requ

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmode should keep reference to parent

In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Add SKB allocation failures handling in

In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in udf_get_fileshortad C

In the Linux kernel, the following vulnerability has been resolved: ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM ha

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix shift-out-of-bounds bug Fix a shif

Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrar

A flaw was found in Undertow package. Using the FormAuthenticationMechanism, a malicious user could trigger a Denial of

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat:

Portabilis i-Educar 2.8.0 is vulnerable to SQL Injection in the "getDocuments" function of the "InstituicaoDocumentacaoC

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state.

A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller (ND

A vulnerability in the External Agent Assignment Service (EAAS) feature of Cisco Enterprise Chat and Email (ECE) could a

Use after free in Serial in Google Chrome prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap

Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to po

A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is ena

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critic

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as cri

Improper Input Validation vulnerability in OpenText iManager allows Cross-Site Scripting (XSS). This issue affects iMana

The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerable to authe

The Heateor Social Login WordPress plugin for WordPress is vulnerable to authentication bypass in all versions up to, an

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to S

An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful explo

An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful explo

An authenticated command injection vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. A succes

Tenda AC6 v2.0 V15.03.06.50 was discovered to contain a buffer overflow in the function 'formSetPPTPServer'.