Latest CVE Feed
-
5.5
MEDIUMCVE-2021-47385
In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field If driver read val value sufficient for (val & 0x08) && (!(val & 0x80)) && ((val & 0x7) == ((val >>... Read more
Affected Products : linux_kernel- Published: May. 21, 2024
- Modified: Dec. 23, 2024
-
5.5
MEDIUMCVE-2023-21880
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr... Read more
- Published: Jan. 18, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21869
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr... Read more
- Published: Jan. 18, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-47287
In the Linux kernel, the following vulnerability has been resolved: driver core: auxiliary bus: Fix memory leak when driver_register() fail If driver_register() returns with error we need to free the memory allocated for auxdrv->driver.name before retur... Read more
Affected Products : linux_kernel- Published: May. 21, 2024
- Modified: Dec. 23, 2024
-
5.5
MEDIUMCVE-2018-10581
In Octopus Deploy 3.4.x before 2018.4.7, an authenticated user is able to view/update/save variable values within the Tenant Variables area for Environments that do not exist within their associated Team scoping. This occurs in situations where this authe... Read more
Affected Products : octopus_deploy- Published: May. 01, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-47223
In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix vlan tunnel dst null pointer dereference This patch fixes a tunnel_dst null pointer dereference due to lockless access in the tunnel egress path. When deleting a vlan t... Read more
Affected Products : linux_kernel- Published: May. 21, 2024
- Modified: Feb. 03, 2025
-
5.5
MEDIUMCVE-2021-47217
In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails Check for a valid hv_vp_index array prior to derefencing hv_vp_index when setting Hyper-V's TSC change callbac... Read more
Affected Products : linux_kernel- Published: Apr. 10, 2024
- Modified: Jan. 14, 2025
-
5.5
MEDIUMCVE-2001-0682
ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object which prevents ZoneAlarm from starting.... Read more
- Published: Aug. 29, 2001
- Modified: Apr. 03, 2025
-
5.5
MEDIUMCVE-2018-10535
The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the output_section pointer in the case of a symtab entry with a "SECTION" type that has a "0" value, ... Read more
Affected Products : enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation binutils- Published: Apr. 29, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-10534
The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, processes a negative Data Directory size with an unbounded loop that increases the value of ... Read more
Affected Products : enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation binutils- Published: Apr. 29, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-47179
In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() Commit de144ff4234f changes _pnfs_return_layout() to call pnfs_mark_matching_lsegs_return() passing NULL as th... Read more
Affected Products : linux_kernel- Published: Mar. 25, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21776
Windows Kernel Information Disclosure Vulnerability... Read more
Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 +12 more products- Published: Jan. 10, 2023
- Modified: Jan. 01, 2025
-
5.5
MEDIUMCVE-2021-47109
In the Linux kernel, the following vulnerability has been resolved: neighbour: allow NUD_NOARP entries to be forced GCed IFF_POINTOPOINT interfaces use NUD_NOARP entries for IPv6. It's possible to fill up the neighbour table with enough entries that it ... Read more
Affected Products : linux_kernel- Published: Mar. 15, 2024
- Modified: Feb. 27, 2025
-
5.5
MEDIUMCVE-2021-47100
In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module Hi, When testing install and uninstall of ipmi_si.ko and ipmi_msghandler.ko, the system crashed. The log as follows: [ ... Read more
Affected Products : linux_kernel- Published: Mar. 04, 2024
- Modified: Feb. 03, 2025
-
5.5
MEDIUMCVE-2021-47095
In the Linux kernel, the following vulnerability has been resolved: ipmi: ssif: initialize ssif_info->client early During probe ssif_info->client is dereferenced in error path. However, it is set when some of the error checking has already been done. Th... Read more
Affected Products : linux_kernel- Published: Mar. 04, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2018-10540
An issue was discovered in WavPack 5.1.0 and earlier for W64 input. Out-of-bounds writes can occur because ParseWave64HeaderConfig in wave64.c does not validate the sizes of unknown chunks before attempting memory allocation, related to a lack of integer-... Read more
- Published: Apr. 29, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-10498
This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Samsung Email Fixed in version 5.0.02.16. An attacker must first obtain the ability to execute low-privileged code on the target system in order to ... Read more
Affected Products : samsung_email- Published: Sep. 24, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2000-1198
qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes.... Read more
Affected Products : qpopper- Published: Aug. 31, 2001
- Modified: Apr. 03, 2025
-
5.5
MEDIUMCVE-2021-46983
In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: Fix NULL deref when SEND is completed with error When running some traffic and taking down the link on peer, a retry counter exceeded error is received. This leads to nvmet_... Read more
Affected Products : linux_kernel- Published: Feb. 28, 2024
- Modified: Dec. 06, 2024
-
5.5
MEDIUMCVE-2018-10372
process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted binary file, as demonstrated by readelf.... Read more
Affected Products : enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation binutils- Published: Apr. 25, 2018
- Modified: Nov. 21, 2024