2024

Swissphone DiCal-RED 4009 devices allow a remote attacker to gain read access to almost the whole file system via anonym

Missing Authorization vulnerability in VeronaLabs WP SMS.This issue affects WP SMS: from n/a through 6.9.3.

The User Private Files – WordPress File Sharing Plugin plugin for WordPress is vulnerable to Insecure Direct Object Refe

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could allow a remote attacker to obtain sensitive inform

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses weaker than expected cryptographic algorithms that

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which could

IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper a

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all

The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in

Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users

Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 and 9.8.x <= 9.8.2 fail to restrict which roles can

Mattermost versions 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 fail to enforce proper access controls which allows any authenticat

Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to restrict the input in POST

Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to sanitize user inputs in the

Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 and 9.8.x <= 9.8.2 fail to ensure that remote/synt

Mattermost versions 9.5.x <= 9.5.7 and 9.10.x <= 9.10.0 fail to time limit and size limit the CA path file in the Elasti

Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2, when shared channels are enabled,

An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper de

An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is transferred over a raw socket without

An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper de

An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper de

An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is sent between client and server with e

The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC (command and control) server. Una

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: make apf token non-zero to fix bug I

In the Linux kernel, the following vulnerability has been resolved: hwmon: Handle failure to register sensor with therm

In the Linux kernel, the following vulnerability has been resolved: ice: fix concurrent reset and removal of VFs Commi

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix crash due to incorrect copy_map_value Whe

In the Linux kernel, the following vulnerability has been resolved: bpf: Add schedule points in batch ops syzbot repor

In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in sanity checking A broke

In the Linux kernel, the following vulnerability has been resolved: io_uring: add a schedule point in io_add_buffers()

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unregister flowtable hooks on

In the Linux kernel, the following vulnerability has been resolved: nfp: flower: Fix a potential leak in nfp_tunnel_add

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memory leak during statef

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr

In the Linux kernel, the following vulnerability has been resolved: configfs: fix a race in configfs_{,un}register_subs

In the Linux kernel, the following vulnerability has been resolved: RDMA/ib_srp: Fix a deadlock Remove the flush_workq

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix crash due to out of bounds access into reg

In the Linux kernel, the following vulnerability has been resolved: iio: adc: men_z188_adc: Fix a resource leak in an e

In the Linux kernel, the following vulnerability has been resolved: iio: adc: tsc2046: fix memory corruption by prevent

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: add spinlock for rndis response

The Themify Builder plugin for WordPress is vulnerable to unauthorized post duplication due to missing checks on the dup

The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is v

The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPre

Dell Power Manager (DPM), versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability. A low pri

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Do not change route.addr.src_addr outside

In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: fix memory leak in int3400_notify

In the Linux kernel, the following vulnerability has been resolved: btrfs: prevent copying too big compressed lzo segme

In the Linux kernel, the following vulnerability has been resolved: riscv: fix oops caused by irqsoff latency tracer T

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix fault in reweight_entity Syzbot fo

In the Linux kernel, the following vulnerability has been resolved: btrfs: get rid of warning on transaction commit whe