Latest CVE Feed
-
5.5
MEDIUMCVE-2017-9208
libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to releaseResolved functions, aka qpdf-infiniteloop1.... Read more
- EPSS Score: %0.43
- Published: May. 23, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-9210
libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to unparse functions, aka qpdf-infiniteloop3.... Read more
- EPSS Score: %0.28
- Published: May. 23, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2024-57978
In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Fix potential error pointer dereference in detach_pm() The proble is on the first line: if (jpeg->pd_dev[i] && !pm_runtime_suspended(jpeg->pd_dev[i])) If jpeg->pd_de... Read more
Affected Products : linux_kernel- Published: Feb. 27, 2025
- Modified: Mar. 13, 2025
- Vuln Type: Misconfiguration
-
5.5
MEDIUMCVE-2024-56535
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg() kmalloc may fail, return value might be NULL and will cause NULL pointer dereference. Add check NULL return of kma... Read more
Affected Products : linux_kernel- Published: Dec. 27, 2024
- Modified: Jan. 08, 2025
-
5.5
MEDIUMCVE-2020-36310
An issue was discovered in the Linux kernel before 5.8. arch/x86/kvm/svm/svm.c allows a set_memory_region_test infinite loop for certain nested page faults, aka CID-e72436bc3a52.... Read more
- EPSS Score: %0.11
- Published: Apr. 07, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-29932
llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand.... Read more
Affected Products : llvm- EPSS Score: %0.03
- Published: May. 05, 2023
- Modified: Jan. 29, 2025
-
5.5
MEDIUMCVE-2024-8835
PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to expl... Read more
- Published: Nov. 22, 2024
- Modified: Nov. 29, 2024
-
5.5
MEDIUMCVE-2023-3022
A flaw was found in the IPv6 module of the Linux kernel. The arg.result was not used consistently in fib6_rule_lookup, sometimes holding rt6_info and other times fib6_info. This was not accounted for in other parts of the code where rt6_info was expected ... Read more
Affected Products : linux_kernel- EPSS Score: %0.02
- Published: Jun. 19, 2023
- Modified: Mar. 11, 2025
-
5.5
MEDIUMCVE-2014-6554
Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.1 and 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Admin Console.... Read more
Affected Products : fusion_middleware- EPSS Score: %0.18
- Published: Oct. 15, 2014
- Modified: Apr. 12, 2025
-
5.5
MEDIUMCVE-2024-36286
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() syzbot reported that nf_reinject() could be called without rcu_read_lock() : WARNING: suspicious RCU usage... Read more
Affected Products : linux_kernel- Published: Jun. 21, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2024-8834
PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to expl... Read more
- Published: Nov. 22, 2024
- Modified: Nov. 29, 2024
-
5.5
MEDIUMCVE-2023-30775
A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c.... Read more
Affected Products : libtiff- EPSS Score: %0.05
- Published: May. 19, 2023
- Modified: Jan. 21, 2025
-
5.5
MEDIUMCVE-2025-21280
Windows Virtual Trusted Platform Module Denial of Service Vulnerability... Read more
Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 windows +5 more products- Published: Jan. 14, 2025
- Modified: Jan. 27, 2025
- Vuln Type: Denial of Service
-
5.5
MEDIUMCVE-2025-21694
In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix softlockup in __read_vmcore (part 2) Since commit 5cbcb62dddf5 ("fs/proc: fix softlockup in __read_vmcore") the number of softlockups in __read_vmcore at kdump time have go... Read more
Affected Products : linux_kernel- Published: Feb. 12, 2025
- Modified: Feb. 14, 2025
- Vuln Type: Denial of Service
-
5.5
MEDIUMCVE-2024-41084
In the Linux kernel, the following vulnerability has been resolved: cxl/region: Avoid null pointer dereference in region lookup cxl_dpa_to_region() looks up a region based on a memdev and DPA. It wrongly assumes an endpoint found mapping the DPA is also... Read more
Affected Products : linux_kernel- Published: Jul. 29, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2025-21833
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE There is a WARN_ON_ONCE to catch an unlikely situation when domain_remove_dev_pasid can't find the `pasid`. In case it nevertheless happ... Read more
Affected Products : linux_kernel- Published: Mar. 06, 2025
- Modified: Mar. 25, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2025-22059
In the Linux kernel, the following vulnerability has been resolved: udp: Fix multiple wraparounds of sk->sk_rmem_alloc. __udp_enqueue_schedule_skb() has the following condition: if (atomic_read(&sk->sk_rmem_alloc) > sk->sk_rcvbuf) goto drop... Read more
Affected Products : linux_kernel- Published: Apr. 16, 2025
- Modified: May. 06, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2024-0641
A denial of service vulnerability was found in tipc_crypto_key_revoke in net/tipc/crypto.c in the Linux kernel’s TIPC subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.... Read more
- EPSS Score: %0.01
- Published: Jan. 17, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2025-21682
In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: always recalculate features after XDP clearing, fix null-deref Recalculate features when XDP is detached. Before: # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp # ... Read more
Affected Products : linux_kernel- Published: Jan. 31, 2025
- Modified: Feb. 04, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2022-24959
An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/hamradio/yam.c.... Read more
- EPSS Score: %0.09
- Published: Feb. 11, 2022
- Modified: Nov. 21, 2024