2024

In pt_sysctl_command of pt.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead

In dumpBatteryDefend of dump_power.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could

In dvfs_plugin_caller of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to

In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to l

OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device.

In the Linux kernel, the following vulnerability has been resolved: arm64/sme: Always exit sme_alloc() early with exist

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix illegal rmb_desc access in SMC-D conne

In the Linux kernel, the following vulnerability has been resolved: netfs, fscache: Prevent Oops in fscache_put_cache()

The Photos and Files Contest Gallery WordPress plugin before 21.3.1 does not sanitize and escape some parameters, which

The User Registration WordPress plugin before 2.12 does not prevent users with at least the contributor role from render

The Paid Memberships Pro WordPress plugin before 2.12.9 does not prevent user with at least the contributor role from le

The Starbox WordPress plugin before 3.5.0 does not sanitise and escape some parameters, which could allow users with a r

The Ultimate Posts Widget WordPress plugin before 2.3.1 does not validate and escape some of its Widget options before o

The Enhanced Text Widget WordPress plugin before 1.6.6 does not validate and escape some of its Widget options before ou

The Login as User or Customer WordPress plugin through 3.8 does not prevent users to log in as any other user on the sit

The Seriously Simple Podcasting WordPress plugin before 3.0.0 discloses the Podcast owner's email address (which by defa

In the Linux kernel, the following vulnerability has been resolved: PM: sleep: Fix possible deadlocks in core system-wi

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Drop chan lock before queuing buffe

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fix NULL pointer in channel unregistrati

In the Linux kernel, the following vulnerability has been resolved: mm: migrate: fix getting incorrect page mapping dur

In the Linux kernel, the following vulnerability has been resolved: mm/sparsemem: fix race in accessing memory_section-

In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: convert from _raw_ to _noinc_ re

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix peer flow lists handling The cited

In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag due to a logic error in

In smp_proc_sec_req of smp_act.cc, there is a possible out of bounds read due to improper input validation. This could l

In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input valid

An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces

Amazon AWS aws-js-s3-explorer (aka AWS JavaScript S3 Explorer) 1.0.0 allows XSS via a crafted S3 bucket name to index.ht

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in AOL AIM Triton 1.0.4. It has been declared as problematic.

A vulnerability, which was classified as problematic, was found in Dreamer CMS 4.1.3. Affected is an unknown function of

A vulnerability, which was classified as critical, has been found in 1Panel up to 1.10.1-lts. Affected by this issue is

A vulnerability classified as critical was found in CodeAstro Ecommerce Site 1.0. Affected by this vulnerability is an u

A vulnerability classified as critical has been found in CodeAstro Membership Management System 1.0. Affected is an unkn

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. This issu

A vulnerability was found in SourceCodester Tourist Reservation System 1.0. It has been declared as critical. This vulne

The Colibri Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by t

Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity (who has access to th

The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocks in all versions up

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site Scripting

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized loss of data d

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized email sending

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized modification o

Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An atta

jose is JavaScript module for JSON Object Signing and Encryption, providing support for JSON Web Tokens (JWT), JSON Web

JWX is Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. This vulnerabili

RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request.

CWE-1385 vulnerability in OpenText Documentum D2 affecting versions16.5.1 to CE 23.2. The vulnerability could allow uplo

IBM SPSS Statistics 26.0, 27.0.1, and 28.0 IO Module could allow a local user to create multiple files that could exhaus