Latest CVE Feed
-
8.8
HIGHCVE-2024-37335
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability... Read more
- Published: Sep. 10, 2024
- Modified: Sep. 23, 2024
-
9.8
CRITICALCVE-2024-8944
A vulnerability, which was classified as critical, was found in code-projects Hospital Management System 1.0. This affects an unknown part of the file check_availability.php. The manipulation of the argument email leads to sql injection. It is possible to... Read more
- Published: Sep. 17, 2024
- Modified: Sep. 23, 2024
-
5.5
MEDIUMCVE-2024-46773
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check denominator pbn_div before used [WHAT & HOW] A denominator cannot be 0, and is checked before used. This fixes 1 DIVIDE_BY_ZERO issue reported by Coverity.... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2024
- Modified: Sep. 23, 2024
-
8.8
HIGHCVE-2024-26191
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability... Read more
- Published: Sep. 10, 2024
- Modified: Sep. 23, 2024
-
8.8
HIGHCVE-2024-26186
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability... Read more
- Published: Sep. 10, 2024
- Modified: Sep. 23, 2024
-
9.8
CRITICALCVE-2024-37341
Microsoft SQL Server Elevation of Privilege Vulnerability... Read more
- Published: Sep. 10, 2024
- Modified: Sep. 23, 2024
-
5.5
MEDIUMCVE-2024-46779
In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Free pvr_vm_gpuva after unlink This caused a measurable memory leak. Although the individual allocations are small, the leaks occurs in a high-usage codepath (remapping... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2024
- Modified: Sep. 23, 2024
-
5.5
MEDIUMCVE-2024-46781
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix missing cleanup on rollforward recovery error In an error injection test of a routine for mount-time recovery, KASAN found a use-after-free bug. It turned out that if data ... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2024
- Modified: Sep. 23, 2024
-
7.8
HIGHCVE-2024-46782
In the Linux kernel, the following vulnerability has been resolved: ila: call nf_unregister_net_hooks() sooner syzbot found an use-after-free Read in ila_nf_input [1] Issue here is that ila_xlat_exit_net() frees the rhashtable, then call nf_unregister_... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2024
- Modified: Sep. 23, 2024
-
7.8
HIGHCVE-2024-46759
In the Linux kernel, the following vulnerability has been resolved: hwmon: (adc128d818) Fix underflows seen when writing limit attributes DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large negative number such as -9223372036854775808... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2024
- Modified: Sep. 23, 2024
-
7.1
HIGHCVE-2024-37342
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability... Read more
- Published: Sep. 10, 2024
- Modified: Sep. 23, 2024
-
5.5
MEDIUMCVE-2024-46760
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: usb: schedule rx work after everything is set up Right now it's possible to hit NULL pointer dereference in rtw_rx_fill_rx_status on hw object and/or its fields because ini... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2024
- Modified: Sep. 23, 2024
-
5.5
MEDIUMCVE-2024-46799
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX If number of TX queues are set to 1 we get a NULL pointer dereference during XDP_TX. ~# ethtool -L eth0 tx 1 ~# ./xdp-traff... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2024
- Modified: Sep. 23, 2024
-
7.8
HIGHCVE-2024-46766
In the Linux kernel, the following vulnerability has been resolved: ice: move netif_queue_set_napi to rtnl-protected sections Currently, netif_queue_set_napi() is called from ice_vsi_rebuild() that is not rtnl-locked when called from the reset. This cre... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2024
- Modified: Sep. 23, 2024
-
5.5
MEDIUMCVE-2024-46763
In the Linux kernel, the following vulnerability has been resolved: fou: Fix null-ptr-deref in GRO. We observed a null-ptr-deref in fou_gro_receive() while shutting down a host. [0] The NULL pointer is sk->sk_user_data, and the offset 8 is of protocol... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2024
- Modified: Sep. 23, 2024
-
5.5
MEDIUMCVE-2024-46770
In the Linux kernel, the following vulnerability has been resolved: ice: Add netif_device_attach/detach into PF reset flow Ethtool callbacks can be executed while reset is in progress and try to access deleted resources, e.g. getting coalesce settings c... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2024
- Modified: Sep. 23, 2024
-
5.5
MEDIUMCVE-2024-46762
In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Fix possible access to a freed kirqfd instance Nothing prevents simultaneous ioctl calls to privcmd_irqfd_assign() and privcmd_irqfd_deassign(). If that happens, it is pos... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2024
- Modified: Sep. 23, 2024
-
5.5
MEDIUMCVE-2024-46761
In the Linux kernel, the following vulnerability has been resolved: pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv The hotplug driver for powerpc (pci/hotplug/pnv_php.c) causes a kernel crash when we try to hot-unplug/disable the PCIe switch/b... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2024
- Modified: Sep. 23, 2024
-
7.8
HIGHCVE-2024-30073
Windows Security Zone Mapping Security Feature Bypass Vulnerability... Read more
Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_21h2 +10 more products- Published: Sep. 10, 2024
- Modified: Sep. 23, 2024
-
5.5
MEDIUMCVE-2024-28170
Improper access control in Intel(R) RAID Web Console all versions may allow an authenticated user to potentially enable information disclosure via local access.... Read more
Affected Products : raid_web_console- Published: Sep. 16, 2024
- Modified: Sep. 23, 2024