Latest CVE Feed
-
5.5
MEDIUMCVE-2022-42722
In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against the beacon protection of P2P devices.... Read more
- Published: Oct. 14, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-34556
In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locati... Read more
- Published: Aug. 02, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-39253
Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performing a local clone... Read more
- Published: Oct. 19, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-34496
Windows GDI Information Disclosure Vulnerability... Read more
Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 +9 more products- Published: Jul. 14, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-38428
Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Expl... Read more
- Published: Sep. 16, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-52337
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker coul... Read more
- Published: Nov. 26, 2024
- Modified: Feb. 25, 2025
-
5.5
MEDIUMCVE-2021-34454
Windows Remote Access Connection Manager Information Disclosure Vulnerability... Read more
Affected Products : windows_10 windows_8.1 windows_rt_8.1 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_20h2 windows_10_1507 +5 more products- Published: Jul. 16, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-34405
NVIDIA Linux distributions contain a vulnerability in TrustZone’s TEE_Malloc function, where an unchecked return value causing a null pointer dereference may lead to denial of service.... Read more
- Published: Jan. 18, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-34440
GDI+ Information Disclosure Vulnerability... Read more
Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 +9 more products- Published: Jul. 16, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-34252
Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Expl... Read more
- Published: Jul. 15, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-34392
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tz_map_shared_mem function can bypass boundary checks, which might lead to denial of service.... Read more
- Published: Jun. 22, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-32864
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An app may be able to disclose kernel memory.... Read more
- Published: Sep. 20, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-34334
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit... Read more
- Published: Aug. 09, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-3169
A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVME_IOCTL_RESET and the NVME_IOCTL_SUBSYS_RESET through the device file of the driver, resulting in a PCIe link disconnect.... Read more
- Published: Sep. 09, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-31628
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.... Read more
- Published: Sep. 28, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-34303
A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could re... Read more
- Published: Jul. 13, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-34299
A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could re... Read more
- Published: Jul. 13, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-34304
A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could re... Read more
- Published: Jul. 13, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-2873
An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2C_SMBUS_BLOCK_DATA (with the ioctl I2C_SMBUS) with malicious input data. This flaw allows a local user to crash th... Read more
Affected Products : linux_kernel enterprise_linux fedora debian_linux h410c_firmware h300s_firmware h500s_firmware h700s_firmware h410s_firmware h300s +4 more products- Published: Aug. 22, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-34333
A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files. A malformed inp... Read more
- Published: Jul. 13, 2021
- Modified: Nov. 21, 2024