Latest CVE Feed
-
5.5
MEDIUMCVE-2022-48663
In the Linux kernel, the following vulnerability has been resolved: gpio: mockup: fix NULL pointer dereference when removing debugfs We now remove the device's debugfs entries when unbinding the driver. This now causes a NULL-pointer dereference on modu... Read more
Affected Products : linux_kernel- Published: Apr. 28, 2024
- Modified: Jan. 14, 2025
-
5.5
MEDIUMCVE-2008-2592
Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to SYS.DBMS_DEFER_SYS. NOTE: the prev... Read more
- EPSS Score: %0.60
- Published: Jul. 15, 2008
- Modified: Apr. 09, 2025
-
5.5
MEDIUMCVE-2022-48648
In the Linux kernel, the following vulnerability has been resolved: sfc: fix null pointer dereference in efx_hard_start_xmit Trying to get the channel from the tx_queue variable here is wrong because we can only be here if tx_queue is NULL, so we should... Read more
Affected Products : linux_kernel- Published: Apr. 28, 2024
- Modified: Jan. 14, 2025
-
5.5
MEDIUMCVE-2022-48642
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() It seems to me that percpu memory for chain stats started leaking since commit 3bc158f8d0330f0a ("netfilter: nf_tabl... Read more
Affected Products : linux_kernel- Published: Apr. 28, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2022-48641
In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix memory leak when blob is malformed The bug fix was incomplete, it "replaced" crash with a memory leak. The old code had an assignment to "ret" embedded into the... Read more
Affected Products : linux_kernel- Published: Apr. 28, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2022-48628
In the Linux kernel, the following vulnerability has been resolved: ceph: drop messages from MDS when unmounting When unmounting all the dirty buffers will be flushed and after the last osd request is finished the last reference of the i_count will be r... Read more
Affected Products : linux_kernel- Published: Mar. 02, 2024
- Modified: Jan. 13, 2025
-
5.5
MEDIUMCVE-2022-48627
In the Linux kernel, the following vulnerability has been resolved: vt: fix memory overlapping when deleting chars in the buffer A memory overlapping copy occurs when deleting a long line. This memory overlapping copy can cause data corruption when scr_... Read more
- Published: Mar. 02, 2024
- Modified: Apr. 29, 2025
-
5.5
MEDIUMCVE-2022-48065
GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c.... Read more
- EPSS Score: %0.02
- Published: Aug. 22, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-48063
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.... Read more
Affected Products : binutils- EPSS Score: %0.01
- Published: Aug. 22, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-47927
An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When installing with a pre-existing data directory that has weak permissions, the SQLite files are created with file mode 0644, i.e., world ... Read more
- EPSS Score: %0.03
- Published: Jan. 12, 2023
- Modified: Apr. 08, 2025
-
5.5
MEDIUMCVE-2022-47008
An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.... Read more
Affected Products : binutils- EPSS Score: %0.01
- Published: Aug. 22, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2008-1816
Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.3 have unknown impact and remote authenticated attack vectors related to (1) SDO_UTIL in the Oracle Spatial component, aka DB05; or (2) fine grained auditing in the Audit componen... Read more
Affected Products : database_server- EPSS Score: %0.57
- Published: Apr. 16, 2008
- Modified: Apr. 09, 2025
-
5.5
MEDIUMCVE-2008-1815
Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to DBMS_CDC_UTILITY, aka DB02. NOTE: the previous information was obtain... Read more
- EPSS Score: %0.46
- Published: Apr. 16, 2008
- Modified: Apr. 09, 2025
-
5.5
MEDIUMCVE-2022-46692
A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web... Read more
- EPSS Score: %0.01
- Published: Dec. 15, 2022
- Modified: Apr. 21, 2025
-
5.5
MEDIUMCVE-2022-4662
A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system.... Read more
Affected Products : linux_kernel- EPSS Score: %0.01
- Published: Dec. 22, 2022
- Modified: Apr. 09, 2025
-
5.5
MEDIUMCVE-2022-4415
A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting.... Read more
Affected Products : systemd- EPSS Score: %0.03
- Published: Jan. 11, 2023
- Modified: May. 05, 2025
-
5.5
MEDIUMCVE-2021-39343
The MPL-Publisher WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/libs/PublisherController.php file which allowed attackers with administrative user ... Read more
- EPSS Score: %0.57
- Published: Oct. 19, 2021
- Modified: Apr. 25, 2025
-
5.5
MEDIUMCVE-2022-4285
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.... Read more
- EPSS Score: %0.03
- Published: Jan. 27, 2023
- Modified: Mar. 28, 2025
-
5.5
MEDIUMCVE-2022-33220
Information disclosure in Automotive multimedia due to buffer over-read.... Read more
Affected Products : aqt1000_firmware qam8295p_firmware qca6390_firmware qca6391_firmware qca6420_firmware qca6426_firmware qca6430_firmware qca6436_firmware qca6574au_firmware qca6595au_firmware +80 more products- EPSS Score: %0.02
- Published: Sep. 05, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-40768
drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.... Read more
- EPSS Score: %0.02
- Published: Sep. 18, 2022
- Modified: Nov. 21, 2024