Latest CVE Feed
-
5.5
MEDIUMCVE-2021-3764
A memory leak flaw was found in the Linux kernel's ccp_run_aes_gcm_cmd() function that allows an attacker to cause a denial of service. The vulnerability is similar to the older CVE-2019-18808. The highest threat from this vulnerability is to system avail... Read more
Affected Products : linux_kernel- Published: Aug. 23, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-3759
A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a den... Read more
- Published: Aug. 23, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-3721
A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.20.10282 that could allow an attacker with local access to trigger a blue screen error.... Read more
Affected Products : pcmanager- Published: Apr. 22, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-35015
Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.... Read more
- Published: Aug. 29, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-3681
A flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in the repository directory that are not explicitly excluded via the ``build_ignore`` list in "galaxy.yml" include files in the ``.tar.gz`` file. This contains ... Read more
- Published: Apr. 18, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-3736
A flaw was found in the Linux kernel. A memory leak problem was found in mbochs_ioctl in samples/vfio-mdev/mbochs.c in Virtual Function I/O (VFIO) Mediated devices. This flaw could allow a local attacker to leak internal kernel information.... Read more
Affected Products : linux_kernel- Published: Aug. 23, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-3669
A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource exhaustion and DoS.... Read more
Affected Products : linux_kernel enterprise_linux fedora debian_linux enterprise_linux_server_aus enterprise_linux_server_tus spectrum_protect_plus openshift_container_platform enterprise_linux_eus virtualization_host +14 more products- Published: Aug. 26, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-3659
A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from this vulnerability is... Read more
- Published: Aug. 22, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2017-5975
Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.... Read more
- Published: Mar. 01, 2017
- Modified: Jul. 10, 2025
-
5.5
MEDIUMCVE-2021-3684
A vulnerability was found in OpenShift Assisted Installer. During generation of the Discovery ISO, image pull secrets were leaked as plaintext in the installation logs. An authenticated user could exploit this by re-using the image pull secret to pull con... Read more
- Published: Mar. 24, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-3732
A flaw was found in the Linux kernel's OverlayFS subsystem in the way the user mounts the TmpFS filesystem with OverlayFS. This flaw allows a local user to gain access to hidden files that should not be accessible.... Read more
Affected Products : linux_kernel- Published: Mar. 10, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2020-12768
An issue was discovered in the Linux kernel before 5.6. svm_cpu_uninit in arch/x86/kvm/svm.c has a memory leak, aka CID-d80b64ff297e. NOTE: third parties dispute this issue because it's a one-time leak at the boot, the size is negligible, and it can't be ... Read more
- Published: May. 09, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-35004
JPEGDEC commit be4843c was discovered to contain a FPE via TIFFSHORT at /src/jpeg.inl.... Read more
Affected Products : jpegdec- Published: Aug. 16, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-30067
Winlogon Elevation of Privilege Vulnerability... Read more
Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_21h2 windows_11_22h2 +6 more products- Published: Jun. 11, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-27003
In the Linux kernel, the following vulnerability has been resolved: clk: Get runtime PM before walking tree for clk_summary Similar to the previous commit, we should make sure that all devices are runtime resumed before printing the clk_summary through ... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Dec. 23, 2024
-
5.5
MEDIUMCVE-2021-3620
A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality.... Read more
- Published: Mar. 03, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-3598
There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to... Read more
- Published: Jul. 06, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-3605
There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to applicatio... Read more
- Published: Aug. 25, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2015-9261
huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file.... Read more
- Published: Jul. 26, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-3522
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.... Read more
- Published: Jun. 02, 2021
- Modified: Nov. 21, 2024