Latest CVE Feed
-
5.5
MEDIUMCVE-2013-5688
Multiple directory traversal vulnerabilities in index.php in AjaXplorer 5.0.2 and earlier allow remote authenticated users to read arbitrary files via a ../%00 (dot dot backslash encoded null byte) in the file parameter in a (1) download or (2) get_conten... Read more
- EPSS Score: %3.04
- Published: Nov. 05, 2013
- Modified: Apr. 11, 2025
-
5.5
MEDIUMCVE-2024-35888
In the Linux kernel, the following vulnerability has been resolved: erspan: make sure erspan_base_hdr is present in skb->head syzbot reported a problem in ip6erspan_rcv() [1] Issue is that ip6erspan_rcv() (and erspan_rcv()) no longer make sure erspan_b... Read more
- Published: May. 19, 2024
- Modified: Apr. 07, 2025
-
5.5
MEDIUMCVE-2024-35882
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP Jan Schunk reports that his small NFS servers suffer from memory exhaustion after just a few days. A bisect shows that commi... Read more
Affected Products : linux_kernel- Published: May. 19, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2013-5459
Unspecified vulnerability in IBM Rational Software Architect (RSA) Design Manager and Rational Rhapsody Design Manager 3.x through 3.0.1 and 4.x before 4.0.6 allows remote authenticated users to modify data by leveraging improper parameter checking.... Read more
- EPSS Score: %0.35
- Published: Apr. 21, 2014
- Modified: Apr. 12, 2025
-
5.5
MEDIUMCVE-2024-35858
In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix memory leak when bringing down interface When bringing down the TX rings we flush the rings but forget to reclaimed the flushed packets. This leads to a memory leak sin... Read more
Affected Products : linux_kernel- Published: May. 17, 2024
- Modified: Dec. 30, 2024
-
5.5
MEDIUMCVE-2024-35850
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix NULL-deref on non-serdev setup Qualcomm ROME controllers can be registered from the Bluetooth line discipline and in this case the HCI UART serdev pointer is NULL. ... Read more
Affected Products : linux_kernel- Published: May. 17, 2024
- Modified: Dec. 30, 2024
-
5.5
MEDIUMCVE-2024-35833
In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA This dma_alloc_coherent() is undone neither in the remove function, nor in the error handling path of fsl_qdma_pr... Read more
- Published: May. 17, 2024
- Modified: Apr. 07, 2025
-
5.5
MEDIUMCVE-2024-35809
In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the .runtime_idle() callback and the .remove() callback in the rtsx_pcr PCI driver leads to a kernel ... Read more
Affected Products : linux_kernel- Published: May. 17, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-35795
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix deadlock while reading mqd from debugfs An errant disk backup on my desktop got into debugfs and triggered the following deadlock scenario in the amdgpu debugfs files. T... Read more
Affected Products : linux_kernel- Published: May. 17, 2024
- Modified: Jan. 10, 2025
-
5.5
MEDIUMCVE-2022-44445
In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.... Read more
- EPSS Score: %0.02
- Published: Jan. 04, 2023
- Modified: Apr. 10, 2025
-
5.5
MEDIUMCVE-2013-3718
evince is missing a check on number of pages which can lead to a segmentation fault... Read more
- EPSS Score: %0.52
- Published: Nov. 01, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-27816
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An attacker may be able to access user data.... Read more
- Published: May. 14, 2024
- Modified: Dec. 12, 2024
-
5.5
MEDIUMCVE-2024-27412
In the Linux kernel, the following vulnerability has been resolved: power: supply: bq27xxx-i2c: Do not free non existing IRQ The bq27xxx i2c-client may not have an IRQ, in which case client->irq will be 0. bq27xxx_battery_i2c_probe() already has an if (... Read more
Affected Products : linux_kernel- Published: May. 17, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-27078
In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: fix some memleaks in tpg_alloc In tpg_alloc, resources should be deallocated in each and every error-handling paths, since they are allocated in for statements. Otherwi... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Dec. 23, 2024
-
5.5
MEDIUMCVE-2024-27076
In the Linux kernel, the following vulnerability has been resolved: media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak Free the memory allocated in v4l2_ctrl_handler_init on release.... Read more
- Published: May. 01, 2024
- Modified: Dec. 23, 2024
-
5.5
MEDIUMCVE-2024-27072
In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Remove useless locks in usbtv_video_free() Remove locks calls in usbtv_video_free() because are useless and may led to a deadlock as reported here: https://syzkaller.appsp... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Apr. 08, 2025
-
5.5
MEDIUMCVE-2024-27071
In the Linux kernel, the following vulnerability has been resolved: backlight: hx8357: Fix potential NULL pointer dereference The "im" pins are optional. Add missing check in the hx8357_probe().... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Dec. 23, 2024
-
5.5
MEDIUMCVE-2024-27050
In the Linux kernel, the following vulnerability has been resolved: libbpf: Use OPTS_SET() macro in bpf_xdp_query() When the feature_flags and xdp_zc_max_segs fields were added to the libbpf bpf_xdp_query_opts, the code writing them did not use the OPTS... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Apr. 08, 2025
-
5.5
MEDIUMCVE-2024-27044
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' The 'stream' pointer is used in dcn10_set_output_transfer_func() before the check if 'stre... Read more
- Published: May. 01, 2024
- Modified: Dec. 23, 2024
-
5.5
MEDIUMCVE-2024-27041
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini() Since 'adev->dm.dc' in amdgpu_dm_fini() might turn out to be NULL before the call to dc_enable_dmub_notifications(),... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Apr. 08, 2025