Latest CVE Feed
-
5.5
MEDIUMCVE-2021-47538
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() Need to call rxrpc_put_local() for peer candidate before kfree() as it holds a ref to rxrpc_local. [DH: v2: Changed to abstract the p... Read more
Affected Products : linux_kernel- Published: May. 24, 2024
- Modified: Sep. 18, 2025
-
5.5
MEDIUMCVE-2024-27391
In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: do not realloc workqueue everytime an interface is added Commit 09ed8bfc5215 ("wilc1000: Rename workqueue from "WILC_wq" to "NETDEV-wq"") moved workqueue creation in wil... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Sep. 18, 2025
-
5.5
MEDIUMCVE-2024-27390
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down() As discussed in the past (commit 2d3916f31891 ("ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()")... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Sep. 18, 2025
-
5.5
MEDIUMCVE-2023-38259
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. An app may be able to access user-sensitive data.... Read more
Affected Products : macos- Published: Jul. 27, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-38244
Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati... Read more
- Published: Aug. 10, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-38241
Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati... Read more
- Published: Aug. 10, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-38235
Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati... Read more
- Published: Aug. 10, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-47532
In the Linux kernel, the following vulnerability has been resolved: drm/msm/devfreq: Fix OPP refcnt leak... Read more
Affected Products : linux_kernel- Published: May. 24, 2024
- Modified: Sep. 18, 2025
-
5.5
MEDIUMCVE-2024-27389
In the Linux kernel, the following vulnerability has been resolved: pstore: inode: Only d_invalidate() is needed Unloading a modular pstore backend with records in pstorefs would trigger the dput() double-drop warning: WARNING: CPU: 0 PID: 2569 at fs... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Sep. 18, 2025
-
5.5
MEDIUMCVE-2023-3649
iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file... Read more
Affected Products : wireshark- Published: Jul. 14, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-36406
Windows Hyper-V Information Disclosure Vulnerability... Read more
- Published: Nov. 14, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-35136
An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN se... Read more
Affected Products : usg20w-vpn_firmware zld usg_20w-vpn_firmware usg_flex_100_firmware vpn100_firmware atp100_firmware atp100 atp200 atp500 atp100w +15 more products- Published: Nov. 28, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-34475
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an applicatio... Read more
- Published: Jun. 16, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-47567
In the Linux kernel, the following vulnerability has been resolved: powerpc/32: Fix hardlockup on vmap stack overflow Since the commit c118c7303ad5 ("powerpc/32: Fix vmap stack - Do not activate MMU before reading task struct") a vmap stack overflow res... Read more
Affected Products : linux_kernel- Published: May. 24, 2024
- Modified: Sep. 18, 2025
-
5.5
MEDIUMCVE-2024-27063
In the Linux kernel, the following vulnerability has been resolved: leds: trigger: netdev: Fix kernel panic on interface rename trig notify Commit d5e01266e7f5 ("leds: trigger: netdev: add additional specific link speed mode") in the various changes, re... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Sep. 18, 2025
-
5.5
MEDIUMCVE-2024-27039
In the Linux kernel, the following vulnerability has been resolved: clk: hisilicon: hi3559a: Fix an erroneous devm_kfree() 'p_clk' is an array allocated just before the for loop for all clk that need to be registered. It is incremented at each loop iter... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Sep. 18, 2025
-
5.5
MEDIUMCVE-2025-59354
Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the DragonFly2 uses a variety of hash functions, including the MD5 hash, for downloaded files. This allows attackers to replace files with malicious one... Read more
Affected Products : dragonfly- Published: Sep. 17, 2025
- Modified: Sep. 18, 2025
- Vuln Type: Cryptography
-
5.5
MEDIUMCVE-2021-47558
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Disable Tx queues when reconfiguring the interface The Tx queues were not disabled in situations where the driver needed to stop the interface to apply a new configuration.... Read more
Affected Products : linux_kernel- Published: May. 24, 2024
- Modified: Sep. 18, 2025
-
5.5
MEDIUMCVE-2021-47555
In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix underflow for the real_dev refcnt Inject error before dev_hold(real_dev) in register_vlan_dev(), and execute the following testcase: ip link add dev dummy1 type dummy ip... Read more
Affected Products : linux_kernel- Published: May. 24, 2024
- Modified: Sep. 18, 2025
-
5.5
MEDIUMCVE-2024-27057
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Workaround for crashed firmware on system suspend When the system is suspended while audio is active, the sof_ipc4_pcm_hw_free() is invoked to reset the pipelines s... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Sep. 18, 2025