2024

In the Linux kernel, the following vulnerability has been resolved: fork: do not invoke uffd on fork if error occurs P

In the Linux kernel, the following vulnerability has been resolved: ocfs2: pass u64 to ocfs2_truncate_inline maybe over

In the Linux kernel, the following vulnerability has been resolved: xfs: fix finding a last resort AG in xfs_filestream

In the Linux kernel, the following vulnerability has been resolved: drm/connector: hdmi: Fix memory leak in drm_display

In the Linux kernel, the following vulnerability has been resolved: drm/tests: hdmi: Fix memory leaks in drm_display_mo

In the Linux kernel, the following vulnerability has been resolved: lib: alloc_tag_module_unload must wait for pending

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quomodosoft Elemen

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bestweblayout Real

Server-Side Request Forgery (SSRF) vulnerability in Nks Responsive Filterable Portfolio responsive-filterable-portfolio

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to time-based SQL Injecti

The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vul

The Attesa Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4.2

The Contact Form 7 – PayPal & Stripe Add-on plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to

The Quform - WordPress Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions

The Code Embed plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2

The Envo Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.3 vi

The Countdown Timer block – Display the event's date into a timer. plugin for WordPress is vulnerable to Informatio

The Content Slider Block plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including

The Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages plugin for WordPress is vulnerable to Reflecte

The SKT Addons for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and inclu

The Anih - Creative Agency WordPress Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via admin se

The Lenxel Core for Lenxel(LNX) LMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploa

The User Meta – User Profile Builder and User management plugin plugin for WordPress is vulnerable to Insecure Direct Ob

The Cowidgets – Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads

The Cowidgets – Elementor Addons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and i

The Debug Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on th

The CE21 Suite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

A data.all admin team member who has access to the customer-owned AWS Account where data.all is deployed may be able to

An authenticated data.all user is able to manipulate a getDataset query to fetch additional information regarding the pa

Due to inconsistent authorization permissions, data.all may allow an external actor with an authenticated account to per

Authentication tokens issued via Cognito in data.all are not invalidated on log out, allowing for previously authenticat

An authenticated data.all user is able to perform mutating UPDATE operations on persisted Notification records in data.a

Combodo iTop is a simple, web based IT Service Management tool. In affected versions portal users are able to access for

Combodo iTop is a simple, web based IT Service Management tool. Affected versions are subject to a reflected Cross-site

vmir e8117 was discovered to contain a segmentation violation via the export_function function at /src/vmir_wasm_parser.

vmir e8117 was discovered to contain a segmentation violation via the function_prepare_parse function at /src/vmir_funct

vmir e8117 was discovered to contain a segmentation violation via the import_function function at /src/vmir_wasm_parser.

vmir e8117 was discovered to contain a segmentation violation via the wasm_parse_block function at /src/vmir_wasm_parser

wac commit 385e1 was discovered to contain a heap overflow.

wac commit 385e1 was discovered to contain a heap overflow via the load_module function at /wac-asan/wa.c. This vulnerab

wac commit 385e1 was discovered to contain a heap overflow via the setup_call function at /wac-asan/wa.c. This vulnerabi

wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerabil

07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http://erp.07fly.net:80/

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9 are susceptible to a Denial of Service (DoS) vulnerab

An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php componen

hopetree izone lts c011b48 contains a Cross Site Scripting (XSS) vulnerability in the article comment function. In \apps

An Improper Authorization (Access Control Misconfiguration) vulnerability in MGT-COMMERCE GmbH CloudPanel v2.0.0 to v2.4

A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcS

A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 allo

A Cross-site Scripting (XSS) vulnerability in manage_account.php in Sourcecodester Cab Management System 1.0 allows remo