Latest CVE Feed
-
5.5
MEDIUMCVE-2024-0443
A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading to a cgroup blkio memory leakage problem. When a cgroup is being destroyed, cgroup_rstat_flush() is only called at css_release_work_fn(), which is called whe... Read more
- Published: Jan. 12, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-0094
NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where an untrusted guest VM can cause improper control of the interaction frequency in the host. A successful exploit of this vulnerability might lead to denial of service... Read more
Affected Products :- Published: Jun. 13, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-6795
An OS command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall.... Read more
- Published: Dec. 13, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-5595
Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV.... Read more
Affected Products : gpac- Published: Oct. 16, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-53013
In the Linux kernel, the following vulnerability has been resolved: ptdma: pt_core_execute_cmd() should use spinlock The interrupt handler (pt_core_irq_handler()) of the ptdma driver can be called from interrupt context. The code flow in this function c... Read more
Affected Products : linux_kernel- Published: Mar. 27, 2025
- Modified: Apr. 14, 2025
- Vuln Type: Race Condition
-
5.5
MEDIUMCVE-2023-52902
In the Linux kernel, the following vulnerability has been resolved: nommu: fix memory leak in do_mmap() error path The preallocation of the maple tree nodes may leak if the error path to "error_just_free" is taken. Fix this by moving the freeing of the... Read more
Affected Products : linux_kernel- Published: Aug. 21, 2024
- Modified: Sep. 13, 2024
-
5.5
MEDIUMCVE-2023-52779
In the Linux kernel, the following vulnerability has been resolved: fs: Pass AT_GETATTR_NOSEC flag to getattr interface function When vfs_getattr_nosec() calls a filesystem's getattr interface function then the 'nosec' should propagate into this functio... Read more
Affected Products : linux_kernel- Published: May. 21, 2024
- Modified: Apr. 02, 2025
-
5.5
MEDIUMCVE-2023-52704
In the Linux kernel, the following vulnerability has been resolved: freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL Tetsuo-San noted that commit f5d39b020809 ("freezer,sched: Rewrite core freezer logic") broke call_usermodehelper_exec() for the ... Read more
Affected Products : linux_kernel- Published: May. 21, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-52684
In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: qseecom: fix memory leaks in error paths Fix instances of returning error codes directly instead of jumping to the relevant labels where memory allocated for the SCM cal... Read more
Affected Products : linux_kernel- Published: May. 17, 2024
- Modified: Apr. 07, 2025
-
5.5
MEDIUMCVE-2023-52512
In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: wpcm450: fix out of bounds write Write into 'pctrl->gpio_bank' happens before the check for GPIO index validity, so out of bounds write may happen. Found by Linux Ver... Read more
Affected Products : linux_kernel- Published: Mar. 02, 2024
- Modified: Mar. 19, 2025
-
5.5
MEDIUMCVE-2023-52499
In the Linux kernel, the following vulnerability has been resolved: powerpc/47x: Fix 47x syscall return crash Eddie reported that newer kernels were crashing during boot on his 476 FSP2 system: kernel tried to execute user page (b7ee2000) - exploit a... Read more
Affected Products : linux_kernel- Published: Mar. 02, 2024
- Modified: Jan. 13, 2025
-
5.5
MEDIUMCVE-2023-52485
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wake DMCUB before sending a command [Why] We can hang in place trying to send commands when the DMCUB isn't powered on. [How] For functions that execute within a DC co... Read more
Affected Products : linux_kernel- Published: Feb. 29, 2024
- Modified: Jan. 09, 2025
-
5.5
MEDIUMCVE-2023-52284
Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can have an "double free or corruption" error for a valid WebAssembly module because push_pop_frame_ref_offset is mishandled.... Read more
Affected Products : webassembly_micro_runtime- Published: Dec. 31, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-51744
A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visualization V14.1 (All versions < V14.1.0.12), Teamcenter Visualization V14.2 (All versions < V14.2.0.9), Tea... Read more
- Published: Jan. 09, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-51258
A memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause a denial of service via the new_Token function in the modules/preprocs/nasm/nasm-pp:1512.... Read more
Affected Products : yasm- Published: Jan. 18, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2025-10390
A weakness has been identified in CRMEB up to 5.6.1. The affected element is the function editAddress of the file app/services/user/UserAddressServices.php. Executing manipulation of the argument ID can lead to improper authorization. The attack may be la... Read more
Affected Products :- Published: Sep. 14, 2025
- Modified: Sep. 15, 2025
- Vuln Type: Authorization
-
5.5
MEDIUMCVE-2023-49555
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_smacro function in the modules/preprocs/nasm/nasm-pp.c component.... Read more
Affected Products : yasm- Published: Jan. 03, 2024
- Modified: Jun. 17, 2025
-
5.5
MEDIUMCVE-2025-10321
A flaw has been found in Wavlink WL-WN578W2 221110. Impacted is an unknown function of the file /live_online.shtml. Executing manipulation can lead to information disclosure. The attack can be executed remotely. The exploit has been published and may be u... Read more
Affected Products :- Published: Sep. 12, 2025
- Modified: Sep. 15, 2025
- Vuln Type: Information Disclosure
-
5.5
MEDIUMCVE-2025-10288
A vulnerability was found in roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40. The impacted element is an unknown function of the file /user/info/list. Performing manipulation results in improper authentication. It is possible to initiate ... Read more
Affected Products :- Published: Sep. 12, 2025
- Modified: Sep. 15, 2025
- Vuln Type: Authentication
-
5.5
MEDIUMCVE-2023-48039
GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leak in gf_mpd_parse_string media_tools/mpd.c:75.... Read more
Affected Products : gpac- Published: Nov. 20, 2023
- Modified: Nov. 21, 2024