2024

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee802

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab out of bounds write in smb_inherit_

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix use-after-free in rdata->read_into_pages(

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Don't let sock_map_{close,destroy,unh

In the Linux kernel, the following vulnerability has been resolved: ceph: blocklist the kclient when receiving corrupte

In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: Fix iscsi_task use after free Commit

In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: destroy cm id before destroy qp to avoid

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid HDCP over-read and corruptio

In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: Fix conn use after free during resets

In the Linux kernel, the following vulnerability has been resolved: can: j1939: fix Use-after-Free, hold skb ref while

Stack-based Buffer Overflow vulnerability in ZkTeco-based OEM devices allows, in some cases, the execution of arbitrary

MTab Bookmark v1.9.5 has an SQL injection vulnerability in /LinkStore/getIcon. An attacker can execute arbitrary SQL sta

Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker to write any file on the system w

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in ZkTeco-base

The Salon booking system plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and includ

An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single sig

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.

Quanxun Huiju Network Technology (Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was discovered to be vulnerable

A Prototype Pollution issue in Blackprint @blackprint/engine v.0.9.0 allows an attacker to execute arbitrary code via th

A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Properly link new fs rules into the tree

Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a

Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded password that cannot be cha

In the mintupload package through 4.2.0 for Linux Mint, service-name mishandling leads to command injection via shell me

In the Linux kernel, the following vulnerability has been resolved: dma-direct: Leak pages on dma_set_decrypted() failu

In the Linux kernel, the following vulnerability has been resolved: udp: do not accept non-tunnel GSO skbs landing in a

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in smb2_reconnect_server() Th

In the Linux kernel, the following vulnerability has been resolved: smb: client: guarantee refcounted children from par

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_opl

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_lea

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in is_valid_oplock_b

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_network_n

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_signal_cifsd

Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for

QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, an

The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulner

A remote code execution (RCE) vulnerability exists in the berriai/litellm project due to improper control of the generat

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv: ensure NUL termination The

In the Linux kernel, the following vulnerability has been resolved: crypto: safexcel - Add error handling for dma_map_s

An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attackers to exec

An arbitrary file upload vulnerability in the component \modstudent\controller.php of Pisay Online E-Learning System usi

Unrestricted Upload of File with Dangerous Type vulnerability in JumpDEMAND Inc. ActiveDEMAND allows Using Malicious Fil

Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "

Improper Control of Generation of Code ('Code Injection') vulnerability in WPCustomify Customify Site Library allows Cod

Improper Privilege Management vulnerability in UkrSolution Barcode Scanner with Inventory & Order Manager allows Privile

Improper Privilege Management vulnerability in 8theme XStore Core allows Privilege Escalation.This issue affects XStore

Improper Privilege Management vulnerability in Astoundify Simple Registration for WooCommerce allows Privilege Escalatio

Improper Privilege Management vulnerability in CodeRevolution Demo My WordPress allows Privilege Escalation.This issue a

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Sizam Design Rehub allow