Latest CVE Feed
-
5.5
MEDIUMCVE-2016-3178
The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service (out-of-bounds memory access and daemon crash) via vectors involving a negative length value.... Read more
Affected Products : minissdpd- EPSS Score: %0.06
- Published: Mar. 24, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2016-3111
pulp.spec in the installation process for Pulp 2.8.3 generates the RSA key pairs used to validate messages between the pulp server and pulp consumers in a directory that is world-readable before later modifying the permissions, which might allow local use... Read more
Affected Products : pulp- EPSS Score: %0.05
- Published: Jun. 08, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2016-3095
server/bin/pulp-gen-ca-certificate in Pulp before 2.8.2 allows local users to read the generated private key.... Read more
- EPSS Score: %0.04
- Published: Jun. 08, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2024-50248
In the Linux kernel, the following vulnerability has been resolved: ntfs3: Add bounds checking to mi_enum_attr() Added bounds checking to make sure that every attr don't stray beyond valid memory region.... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Dec. 14, 2024
-
5.5
MEDIUMCVE-2024-50243
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix general protection fault in run_is_mapped_full Fixed deleating of a non-resident attribute in ntfs_create_inode() rollback.... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 17, 2024
-
5.5
MEDIUMCVE-2024-50240
In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb: fix NULL-deref on runtime suspend Commit 413db06c05e7 ("phy: qcom-qmp-usb: clean up probe initialisation") removed most users of the platform device driver data, but... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 14, 2024
-
5.5
MEDIUMCVE-2024-50238
In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend Commit 413db06c05e7 ("phy: qcom-qmp-usb: clean up probe initialisation") removed most users of the platform device driver data fro... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 14, 2024
-
5.5
MEDIUMCVE-2016-2540
Audacity before 2.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted FORMATCHUNK structure.... Read more
Affected Products : audacity- EPSS Score: %0.91
- Published: Feb. 07, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-50237
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Avoid potentially crashing in the driver because of uninitialized private data... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 14, 2024
-
5.5
MEDIUMCVE-2024-50232
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() In the ad7124_write_raw() function, parameter val can potentially be zero. This may lead to a division by zero when DI... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 13, 2024
-
5.5
MEDIUMCVE-2024-50231
In the Linux kernel, the following vulnerability has been resolved: iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() modprobe iio-test-gts and rmmod it, then the following memory leak occurs: unreferenced object 0xffffff80c810be0... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 13, 2024
-
5.5
MEDIUMCVE-2024-50223
In the Linux kernel, the following vulnerability has been resolved: sched/numa: Fix the potential null pointer dereference in task_numa_work() When running stress-ng-vm-segv test, we found a null pointer dereference error in task_numa_work(). Here is th... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 13, 2024
-
5.5
MEDIUMCVE-2016-2142
Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configuration file, which allows local users to obtain Active Directory credentials by reading the file.... Read more
- EPSS Score: %0.04
- Published: Jun. 08, 2016
- Modified: Apr. 12, 2025
-
5.5
MEDIUMCVE-2024-50210
In the Linux kernel, the following vulnerability has been resolved: posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() If get_clock_desc() succeeds, it calls fget() for the clockid's fd, and get the clk->rwsem read lock, so the error... Read more
Affected Products : linux_kernel- Published: Nov. 08, 2024
- Modified: Nov. 19, 2024
-
5.5
MEDIUMCVE-2024-50208
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages Avoid memory corruption while setting up Level-2 PBL pages for the non MR resources when num_pages > 256K. There will be a si... Read more
Affected Products : linux_kernel- Published: Nov. 08, 2024
- Modified: Nov. 19, 2024
-
5.5
MEDIUMCVE-2024-50205
In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() The step variable is initialized to zero. It is changed in the loop, but if it's not changed it will remain zero... Read more
Affected Products : linux_kernel- Published: Nov. 08, 2024
- Modified: Nov. 13, 2024
-
5.5
MEDIUMCVE-2024-50194
In the Linux kernel, the following vulnerability has been resolved: arm64: probes: Fix uprobes for big-endian kernels The arm64 uprobes code is broken for big-endian kernels as it doesn't convert the in-memory instruction encoding (which is always littl... Read more
Affected Products : linux_kernel- Published: Nov. 08, 2024
- Modified: Nov. 29, 2024
-
5.5
MEDIUMCVE-2024-50190
In the Linux kernel, the following vulnerability has been resolved: ice: fix memleak in ice_init_tx_topology() Fix leak of the FW blob (DDP pkg). Make ice_cfg_tx_topo() const-correct, so ice_init_tx_topology() can avoid copying whole FW blob. Copy just... Read more
Affected Products : linux_kernel- Published: Nov. 08, 2024
- Modified: Dec. 11, 2024
-
5.5
MEDIUMCVE-2024-50188
In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83869: fix memory corruption when enabling fiber When configuring the fiber port, the DP83869 PHY driver incorrectly calls linkmode_set_bit() with a bit mask (1 << 10) rathe... Read more
Affected Products : linux_kernel- Published: Nov. 08, 2024
- Modified: Nov. 27, 2024
-
5.5
MEDIUMCVE-2024-50184
In the Linux kernel, the following vulnerability has been resolved: virtio_pmem: Check device status before requesting flush If a pmem device is in a bad status, the driver side could wait for host ack forever in virtio_pmem_flush(), causing the system ... Read more
Affected Products : linux_kernel- Published: Nov. 08, 2024
- Modified: Dec. 09, 2024