Latest CVE Feed
-
2.9
LOWCVE-2024-47813
Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a `wasmtime::Engine`'s internal type registry was susceptible to double-unregistration bugs due to a race condition, leading to panics and potentially type regis... Read more
Affected Products : wasmtime- Published: Oct. 09, 2024
- Modified: Oct. 10, 2024
-
9.8
CRITICALCVE-2024-41651
An issue in Prestashop v.8.1.7 and before allows a remote attacker to execute arbitrary code via the module upgrade functionality. NOTE: this is disputed by multiple parties, who report that exploitation requires that an attacker be able to hijack network... Read more
Affected Products : prestashop- Published: Aug. 12, 2024
- Modified: Oct. 09, 2024
-
7.2
HIGHCVE-2024-20470
A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. In order to exploit ... Read more
Affected Products : small_business_rv_series_router_firmware rv340_dual_wan_gigabit_vpn_router_firmware rv340w_dual_wan_gigabit_wireless-ac_vpn_router_firmware rv345_dual_wan_gigabit_vpn_router_firmware rv345p_dual_wan_gigabit_poe_vpn_router_firmware rv340_dual_wan_gigabit_vpn_router rv340w_dual_wan_gigabit_wireless-ac_vpn_router rv345_dual_wan_gigabit_vpn_router rv345p_dual_wan_gigabit_poe_vpn_router- Published: Oct. 02, 2024
- Modified: Oct. 09, 2024
-
5.5
MEDIUMCVE-2024-46834
In the Linux kernel, the following vulnerability has been resolved: ethtool: fail closed if we can't get max channel used in indirection tables Commit 0d1b7d6c9274 ("bnxt: fix crashes when reducing ring count with active RSS contexts") proves that allow... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Oct. 09, 2024
-
7.8
HIGHCVE-2024-46833
In the Linux kernel, the following vulnerability has been resolved: net: hns3: void array out of bound when loop tnl_num When query reg inf of SSU, it loops tnl_num times. However, tnl_num comes from hardware and the length of array is a fixed value. To... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Oct. 09, 2024
-
5.5
MEDIUMCVE-2024-46832
In the Linux kernel, the following vulnerability has been resolved: MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed This avoids warning: [ 0.118053] BUG: sleeping function called from invalid context at kernel/locking/mutex.c... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Oct. 09, 2024
-
7.8
HIGHCVE-2024-46836
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed_udc: validate endpoint index for ast udc We should verify the bound of the array to assure that host may not manipulate the index to point past endpoint array. Foun... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Oct. 09, 2024
-
5.5
MEDIUMCVE-2024-46837
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Restrict high priorities on group_create We were allowing any users to create a high priority group without any permission checks. As a result, this was allowing possible d... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Oct. 09, 2024
-
5.5
MEDIUMCVE-2024-46838
In the Linux kernel, the following vulnerability has been resolved: userfaultfd: don't BUG_ON() if khugepaged yanks our page table Since khugepaged was changed to allow retracting page tables in file mappings without holding the mmap lock, these BUG_ON(... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Oct. 09, 2024
-
5.5
MEDIUMCVE-2024-45005
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: fix validity interception issue when gisa is switched off We might run into a SIE validity if gisa has been disabled either via using kernel parameter "kvm.use_gisa=0" or by ... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Oct. 09, 2024
-
5.5
MEDIUMCVE-2024-45004
In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix leak of blob encryption key Trusted keys unseal the key blob on load, but keep the sealed payload in the blob field so that every subsequent read (export) will s... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Oct. 09, 2024
-
8.8
HIGHCVE-2024-45394
Authenticator is a browser extension that generates two-step verification codes. In versions 7.0.0 and below, encryption keys for user data were stored encrypted at-rest using only AES-256 and the EVP_BytesToKey KDF. Therefore, attackers with a copy of a ... Read more
Affected Products : authenticator- Published: Sep. 03, 2024
- Modified: Oct. 09, 2024
-
5.5
MEDIUMCVE-2024-45001
In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix RX buf alloc_size alignment and atomic op panic The MANA driver's RX buffer alloc_size is passed into napi_build_skb() to create SKB. skb_shinfo(skb) is located at the en... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Oct. 09, 2024
-
5.5
MEDIUMCVE-2024-44991
In the Linux kernel, the following vulnerability has been resolved: tcp: prevent concurrent execution of tcp_sk_exit_batch Its possible that two threads call tcp_sk_exit_batch() concurrently, once from the cleanup_net workqueue, once from a task that fa... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Oct. 09, 2024
-
7.8
HIGHCVE-2024-44951
In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix TX fifo corruption Sometimes, when a packet is received on channel A at almost the same time as a packet is about to be transmitted on channel B, we observe with ... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Oct. 09, 2024
-
9.0
HIGHCVE-2024-9569
A vulnerability has been found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this vulnerability is the function formEasySetPassword of the file /goform/formEasySetPassword. The manipulation of the argument curTime leads to buffer over... Read more
- Published: Oct. 07, 2024
- Modified: Oct. 09, 2024
-
9.0
HIGHCVE-2024-9568
A vulnerability, which was classified as critical, was found in D-Link DIR-619L B1 2.06. Affected is the function formAdvNetwork of the file /goform/formAdvNetwork. The manipulation of the argument curTime leads to buffer overflow. It is possible to launc... Read more
- Published: Oct. 07, 2024
- Modified: Oct. 09, 2024
-
9.0
HIGHCVE-2024-9514
A vulnerability was found in D-Link DIR-605L 2.13B01 BETA. It has been declared as critical. This vulnerability affects the function formSetDomainFilter of the file /goform/formSetDomainFilter. The manipulation of the argument curTime leads to buffer over... Read more
- Published: Oct. 04, 2024
- Modified: Oct. 09, 2024
-
9.0
HIGHCVE-2024-9515
A vulnerability was found in D-Link DIR-605L 2.13B01 BETA. It has been classified as critical. This affects the function formSetQoS of the file /goform/formSetQoS. The manipulation of the argument curTime leads to buffer overflow. It is possible to initia... Read more
- Published: Oct. 04, 2024
- Modified: Oct. 09, 2024
-
9.0
HIGHCVE-2024-9532
A vulnerability has been found in D-Link DIR-605L 2.13B01 BETA and classified as critical. This vulnerability affects the function formAdvanceSetup of the file /goform/formAdvanceSetup. The manipulation of the argument webpage leads to buffer overflow. Th... Read more
- Published: Oct. 05, 2024
- Modified: Oct. 09, 2024