Latest CVE Feed
-
5.5
MEDIUMCVE-2023-24755
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_weighted_pred_8_fallback function at fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.... Read more
- EPSS Score: %0.02
- Published: Mar. 01, 2023
- Modified: Mar. 07, 2025
-
5.5
MEDIUMCVE-2016-9960
game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).... Read more
- EPSS Score: %0.10
- Published: Jun. 06, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-0556
An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Prod... Read more
Affected Products : android- EPSS Score: %0.12
- Published: Apr. 07, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2023-23506
A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be able to access user-sensitive data.... Read more
Affected Products : macos- EPSS Score: %0.03
- Published: Feb. 27, 2023
- Modified: Mar. 11, 2025
-
5.5
MEDIUMCVE-2023-23005
In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas it is actually an error pointer). NOTE: this is disputed by third parties because there are no realistic c... Read more
- EPSS Score: %0.02
- Published: Mar. 01, 2023
- Modified: Mar. 19, 2025
-
5.5
MEDIUMCVE-2023-23002
In the Linux kernel before 5.16.3, drivers/bluetooth/hci_qca.c misinterprets the devm_gpiod_get_index_optional return value (expects it to be NULL in the error case, whereas it is actually an error pointer).... Read more
Affected Products : linux_kernel- EPSS Score: %0.02
- Published: Mar. 01, 2023
- Modified: Mar. 20, 2025
-
5.5
MEDIUMCVE-2023-22997
In the Linux kernel before 6.1.2, kernel/module/decompress.c misinterprets the module_get_next_page return value (expects it to be NULL in the error case, whereas it is actually an error pointer).... Read more
Affected Products : linux_kernel- EPSS Score: %0.01
- Published: Feb. 28, 2023
- Modified: Mar. 20, 2025
-
5.5
MEDIUMCVE-2023-22017
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.46 and Prior to 7.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the... Read more
Affected Products : vm_virtualbox- EPSS Score: %0.05
- Published: Jul. 18, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUM- EPSS Score: %0.28
- Published: Feb. 14, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21620
FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitatio... Read more
- EPSS Score: %0.02
- Published: Feb. 17, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21584
FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of ... Read more
- EPSS Score: %0.02
- Published: Feb. 17, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2020-3958
VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5.2) and VMware Fusion (11.x before 11.5.2) contain a denial-of-service vulnerability in the shader functionality. Successful exploitatio... Read more
- EPSS Score: %0.10
- Published: May. 29, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21569
Azure DevOps Server Spoofing Vulnerability... Read more
Affected Products : azure_devops_server- EPSS Score: %0.28
- Published: Jun. 14, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-20265
A vulnerability in the web-based management interface of a small subset of Cisco IP Phones could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vuln... Read more
- EPSS Score: %0.08
- Published: Nov. 21, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2020-3812
qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for the existence of files and directories anywhere in the filesystem because qmail-verify runs as root and tests for the existence of fil... Read more
- EPSS Score: %0.05
- Published: May. 26, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2020-3809
Adobe After Effects versions 17.0.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .... Read more
- EPSS Score: %2.60
- Published: Jun. 26, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-49902
In the Linux kernel, the following vulnerability has been resolved: block: Fix possible memory leak for rq_wb on add_disk failure kmemleak reported memory leaks in device_add_disk(): kmemleak: 3 new suspected memory leaks unreferenced object 0xffff888... Read more
Affected Products : linux_kernel- Published: May. 01, 2025
- Modified: May. 07, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2022-49867
In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix memory leak in ipc_wwan_dellink IOSM driver registers network device without setting the needs_free_netdev flag, and does NOT call free_netdev() when unregisters ne... Read more
Affected Products : linux_kernel- Published: May. 01, 2025
- Modified: May. 07, 2025
-
5.5
MEDIUMCVE-2022-49855
In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg ipc_pcie_read_bios_cfg() is using the acpi_evaluate_dsm() to obtain the wwan power state configuration from BIOS but is not fr... Read more
Affected Products : linux_kernel- Published: May. 01, 2025
- Modified: May. 07, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2022-49854
In the Linux kernel, the following vulnerability has been resolved: mctp: Fix an error handling path in mctp_init() If mctp_neigh_init() return error, the routes resources should be released in the error handling path. Otherwise some resources leak.... Read more
Affected Products : linux_kernel- Published: May. 01, 2025
- Modified: May. 07, 2025
- Vuln Type: Misconfiguration