Latest CVE Feed
-
5.5
MEDIUMCVE-2021-31812
In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.... Read more
- Published: Jun. 12, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-50224
In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: Fix crash when not using GPIO chip select Add check for the return value of spi_get_csgpiod() to avoid passing a NULL pointer to gpiod_direction_output(), preventing ... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 13, 2024
-
5.5
MEDIUMCVE-2021-31821
When the Windows Tentacle docker image starts up it logs all the commands that it runs along with the arguments, which writes the Octopus Server API key in plaintext. This does not affect the Linux Docker image... Read more
- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-50240
In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb: fix NULL-deref on runtime suspend Commit 413db06c05e7 ("phy: qcom-qmp-usb: clean up probe initialisation") removed most users of the platform device driver data, but... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 14, 2024
-
5.5
MEDIUMCVE-2024-50239
In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend Commit 413db06c05e7 ("phy: qcom-qmp-usb: clean up probe initialisation") removed most users of the platform device driver da... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 14, 2024
-
5.5
MEDIUMCVE-2024-50237
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Avoid potentially crashing in the driver because of uninitialized private data... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 14, 2024
-
5.5
MEDIUMCVE-2020-15306
An issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize() in IlmImf/ImfMisc.cpp.... Read more
- Published: Jun. 26, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2020-15250
In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when fil... Read more
- Published: Oct. 12, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-50258
In the Linux kernel, the following vulnerability has been resolved: net: fix crash when config small gso_max_size/gso_ipv4_max_size Config a small gso_max_size/gso_ipv4_max_size will lead to an underflow in sk_dst_gso_max_size(), which may trigger a BUG... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: May. 02, 2025
-
5.5
MEDIUMCVE-2024-50238
In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend Commit 413db06c05e7 ("phy: qcom-qmp-usb: clean up probe initialisation") removed most users of the platform device driver data fro... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 14, 2024
-
5.5
MEDIUMCVE-2020-1510
An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vul... Read more
Affected Products : windows_10 windows_10_1607 windows_10_1809 windows_10_1507 windows_10_1803 windows_10_1909- Published: Aug. 17, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2020-1503
An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerabili... Read more
Affected Products : sharepoint_enterprise_server office word sharepoint_server 365_apps office_web_apps excel office_online_server- Published: Aug. 17, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-50236
In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: Fix memory leak in management tx In the current logic, memory is allocated for storing the MSDU context during management packet TX but this memory is not being freed duri... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 14, 2024
-
5.5
MEDIUMCVE-2024-50232
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() In the ad7124_write_raw() function, parameter val can potentially be zero. This may lead to a division by zero when DI... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 13, 2024
-
5.5
MEDIUMCVE-2024-50225
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix error propagation of split bios The purpose of btrfs_bbio_propagate_error() shall be propagating an error of split bio to its original btrfs_bio, and tell the error to the up... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 13, 2024
-
5.5
MEDIUMCVE-2024-50223
In the Linux kernel, the following vulnerability has been resolved: sched/numa: Fix the potential null pointer dereference in task_numa_work() When running stress-ng-vm-segv test, we found a null pointer dereference error in task_numa_work(). Here is th... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 13, 2024
-
5.5
MEDIUMCVE-2024-50231
In the Linux kernel, the following vulnerability has been resolved: iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() modprobe iio-test-gts and rmmod it, then the following memory leak occurs: unreferenced object 0xffffff80c810be0... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 13, 2024
-
5.5
MEDIUMCVE-2020-14330
An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in ... Read more
- Published: Sep. 11, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2020-14323
A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local user could use this flaw to crash the winbind service causing denial of service.... Read more
- Published: Oct. 29, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-50214
In the Linux kernel, the following vulnerability has been resolved: drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic() modprobe drm_connector_test and then rmmod drm_connector_test, the following memory leak occurs. The `mode` allo... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 13, 2024