Latest CVE Feed
-
5.5
MEDIUMCVE-2024-35790
In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group The DisplayPort driver's sysfs nodes may be present to the userspace before typec_altmode... Read more
Affected Products : linux_kernel- Published: May. 17, 2024
- Modified: Jun. 04, 2025
-
5.5
MEDIUMCVE-2023-4256
Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plugins.c. This vulnerability can be exploited by supplying a specifically crafted file to the tcprewrite binary. This ... Read more
- Published: Dec. 21, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2015-5160
libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.... Read more
- Published: Aug. 20, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-35806
In the Linux kernel, the following vulnerability has been resolved: soc: fsl: qbman: Always disable interrupts when taking cgr_lock smp_call_function_single disables IRQs when executing the callback. To prevent deadlocks, we must disable IRQs when takin... Read more
- Published: May. 17, 2024
- Modified: Jan. 10, 2025
-
5.5
MEDIUMCVE-2021-47021
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix memleak when mt7915_unregister_device() mt7915_tx_token_put() should get call before mt76_free_pending_txwi().... Read more
Affected Products : linux_kernel- Published: Feb. 28, 2024
- Modified: Dec. 09, 2024
-
5.5
MEDIUMCVE-2024-23267
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to bypass certain Privacy preferences.... Read more
Affected Products : macos- Published: Mar. 08, 2024
- Modified: Mar. 13, 2025
-
5.5
MEDIUMCVE-2024-35795
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix deadlock while reading mqd from debugfs An errant disk backup on my desktop got into debugfs and triggered the following deadlock scenario in the amdgpu debugfs files. T... Read more
Affected Products : linux_kernel- Published: May. 17, 2024
- Modified: Jan. 10, 2025
-
5.5
MEDIUMCVE-2024-35786
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf If VM_BIND is enabled on the client the legacy submission ioctl can't be used, however if a client tries to do so regard... Read more
Affected Products : linux_kernel- Published: May. 17, 2024
- Modified: Jan. 10, 2025
-
5.5
MEDIUMCVE-2024-56702
In the Linux kernel, the following vulnerability has been resolved: bpf: Mark raw_tp arguments with PTR_MAYBE_NULL Arguments to a raw tracepoint are tagged as trusted, which carries the semantics that the pointer will be non-NULL. However, in certain c... Read more
Affected Products : linux_kernel- Published: Dec. 28, 2024
- Modified: Feb. 03, 2025
-
5.5
MEDIUMCVE-2023-52641
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame() It is preferable to exit through the out: label because internal debugging functions are located there.... Read more
Affected Products : linux_kernel- Published: Apr. 03, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2020-25673
A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system.... Read more
Affected Products : linux_kernel fedora active_iq_unified_manager solidfire_baseboard_management_controller_firmware h410c_firmware cloud_backup h300s_firmware h500s_firmware h700s_firmware h410s_firmware +12 more products- Published: May. 26, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2015-5017
IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 IFIX002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and 7.6.0 before 7.6.0.2 IFIX002 for SmartCloud Control Desk; and Maximo Asset M... Read more
Affected Products : maximo_asset_management maximo_for_life_sciences maximo_for_nuclear_power maximo_for_oil_and_gas maximo_for_transportation maximo_for_utilities smartcloud_control_desk change_and_configuration_management_database maximo_asset_management_essentials maximo_for_government +3 more products- Published: Jan. 03, 2016
- Modified: Apr. 12, 2025
-
5.5
MEDIUMCVE-2022-48904
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix I/O page table memory leak The current logic updates the I/O page table mode for the domain before calling the logic to free memory used for the page table. This results ... Read more
Affected Products : linux_kernel- Published: Aug. 22, 2024
- Modified: Sep. 12, 2024
-
5.5
MEDIUMCVE-2024-47687
In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix invalid mr resource destroy Certain error paths from mlx5_vdpa_dev_add() can end up releasing mr resources which never got initialized in the first place. This patch add... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 23, 2024
-
5.5
MEDIUMCVE-2023-23586
Due to a vulnerability in the io_uring subsystem, it is possible to leak kernel memory information to the user process. timens_install calls current_is_single_threaded to determine if the current process is single-threaded, but this call does not consider... Read more
Affected Products : linux_kernel- Published: Feb. 17, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2015-4857
Unspecified vulnerability in the RDBMS component in Oracle Database Server 12.1.0.1 and 12.1.0.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.... Read more
Affected Products : database_server- Published: Oct. 21, 2015
- Modified: Apr. 12, 2025
-
5.5
MEDIUMCVE-2015-4850
Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Talent Acquisition Management.... Read more
Affected Products : peoplesoft_products- Published: Oct. 21, 2015
- Modified: Apr. 12, 2025
-
5.5
MEDIUMCVE-2025-22033
In the Linux kernel, the following vulnerability has been resolved: arm64: Don't call NULL in do_compat_alignment_fixup() do_alignment_t32_to_handler() only fixes up alignment faults for specific instructions; it returns NULL otherwise (e.g. LDREX). Whe... Read more
Affected Products : linux_kernel- Published: Apr. 16, 2025
- Modified: Apr. 29, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2011-2918
The Performance Events subsystem in the Linux kernel before 3.1 does not properly handle event overflows associated with PERF_COUNT_SW_CPU_CLOCK events, which allows local users to cause a denial of service (system hang) via a crafted application.... Read more
Affected Products : linux_kernel- Published: May. 24, 2012
- Modified: Apr. 11, 2025
-
5.5
MEDIUMCVE-2020-6376
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Hemisphere Binary (.rh) file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts th... Read more
Affected Products : 3d_visual_enterprise_viewer- Published: Oct. 15, 2020
- Modified: Nov. 21, 2024