Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from the presence of an overflow problem...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a double-release problem with net:atlantic...

GHSA-76W8-MQX4-WJRF Doctrine DBAL SQL injection possibility

The identifier quoting in Doctrine DBAL has a potential security problem when user-input is passed into this function, making the security aspect of this functionality obsolete. If you make use of AbstractPlatform::quoteIdentifier or Doctrine::quoteIdentifier please upgrade immediately. The ORM...

Doctrine DBAL SQL injection possibility

The identifier quoting in Doctrine DBAL has a potential security problem when user-input is passed into this function, making the security aspect of this functionality obsolete. If you make use of AbstractPlatform::quoteIdentifier or Doctrine::quoteIdentifier please upgrade immediately. The ORM...

CVE-2021-32026

CVE-2021-32026 affects the NATS server (nats-server) prior to version 2.2.3. The issue arises when TLS parameters are supplied via CLI flags, which overrides the default restricted ciphersuite settings and allows negotiation of all ciphersuites supported by Go. The documented impact is potential ...

CVE-2023-33327

CVE-2023-33327 refers to a high-severity Privilege Escalation in the WordPress Leyka plugin (versions

CVE-2024-27281

A vulnerability exists in RDoc versions 6.3.3 through 6.6.2 , distributed in Ruby 3.x through 3.3.0 . The root cause is a lack of restrictions on classes that can be restored when parsing .rdoc_options as a YAML file , which can lead to object injection and remote code execution (RCE) . This impa...

CVE-2024-27280

A buffer-overread vulnerability exists in the StringIO component of the Ruby programming language. The issue is caused by the ungetbyte and ungetc methods, which can read past the end of a string; a subsequent call to StringIO.gets may then return the resulting memory value. This affects Ruby 3.0...

CVE-2023-41651

CVE-2023-41651 corresponds to a WordPress plugin vulnerability in the Multi-column Tag Map plugin (versions

CVE-2024-0042

Technical details are not publicly available in the provided documents. No affected products/versions or remediation specifics are listed. Monitor for updates.

CVE-2024-0022

CVE-2024-0022 affects Android’s CompanionDeviceManagerService.java. The issue is improper input validation that can cause a NotificationAccessConfirmationActivity to be launched for another user profile, enabling local information disclosure without extra privileges and without user interaction. ...

CVE-2024-0027

The CVE-2024-0027 issue affects Google Android’s SnoozeHelper.java, where multiple methods can exhaust resources and cause a local boot loop/denial of service. Vulnerability details across connected sources consistently describe a DoS resulting from resource exhaustion with no extra privileges an...

CVE-2024-23694

CVE-2024-23694 is an Android Bluetooth elevation-of-privilege issue reported in Pixel/Android bulletins. The connected OSV entry details a use-after-free in a paired Bluetooth LE audio device that can enable code execution with no user interaction, on affected Pixel and non-Pixel Android devices....

CVE-2023-31234

CVE-2023-31234: Tilda Publishing WordPress plugin

Compatibility license - avoid mixed editions when renewing Universal HMC or Citrix for Private Cloud

What is the mixed edition problem? Mixed edition means combining Premium with Standard or Advanced editions, or Advanced with Standard editions on the same site. This also applies to mixing license types User/Device U/D and Concurrent CCU; for example Premium U/D with Premium CCU or Advanced U/D...

PVS 2402 | Console Setup: EdgeWebView2 not installing correctly

When launching the "Console Installer" it tries to install the prerequired software which includes Edge WebView2. In some cases when installing it from the iso, Edge WebView2 might not show up in "appwiz.cpl" or "Apps and Features". If you start the "Console Installer" again it is shown as "not...

CVE-2024-23702

CVE-2024-23702 is listed in the Wear OS/MAY 2024 bulletin as an Elevation of Privilege issue within the Framework component, enabling local privilege escalation by a malicious app with no extra execution privileges needed. The vulnerability is part of the 2024-05-01 patch level addressed in the W...

CVE-2024-23703

CVE-2024-23703 is reported in the Wear OS Security Bulletin (May 2024) with a local elevation of privilege (EoP) in the Framework component, rated High. The issue could allow a malicious app to escalate privileges with no additional execution privileges. Details in the bulletin indicate the full ...

CVE-2024-23701

CVE-2024-23701 affects Wear OS (Framework component) and is listed in the May 2024 Wear OS Security Bulletin as a local escalation of privilege (EoP) vulnerability that can be exploited by a malicious app with no additional execution privileges required. The issue is classified as High severity. ...

CVE-2024-23700

CVE-2024-23700 is referenced in a Wear OS security bulletin as a Framework‑level vulnerability that could enable local privilege escalation by a malicious app with no extra privileges. PT-2026-3764 notes a PoC and claims the exploit can silently obtain permissions to read/write contacts, SMS, cal...