Latest CVE Feed
-
5.5
MEDIUMCVE-2021-47644
In the Linux kernel, the following vulnerability has been resolved: media: staging: media: zoran: move videodev alloc Move some code out of zr36057_init() and create new functions for handling zr->video_dev. This permit to ease code reading and fix a zr... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Mar. 18, 2025
- Vuln Type: Memory Corruption
-
0.0
NACVE-2021-47643
In the Linux kernel, the following vulnerability has been resolved: media: ir_toy: free before error exiting Fix leak in error path.... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Feb. 26, 2025
-
0.0
NACVE-2021-47642
In the Linux kernel, the following vulnerability has been resolved: video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow Coverity complains of a possible buffer overflow. However, given the 'static' scope of nvidia_setup_i2c_bus() it looks l... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Feb. 26, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2021-47641
In the Linux kernel, the following vulnerability has been resolved: video: fbdev: cirrusfb: check pixclock to avoid divide by zero Do a sanity check on pixclock value to avoid divide by zero. If the pixclock value is zero, the cirrusfb driver will roun... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Mar. 18, 2025
- Vuln Type: Misconfiguration
-
7.8
HIGHCVE-2021-47640
In the Linux kernel, the following vulnerability has been resolved: powerpc/kasan: Fix early region not updated correctly The shadow's page table is not updated when PTE_RPN_SHIFT is 24 and PAGE_SHIFT is 12. It not only causes false positives but also f... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Mar. 18, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2021-47639
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU Zap both valid and invalid roots when zapping/unmapping a gfn range, as KVM must ensure it holds no references to the f... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Mar. 24, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2021-47638
In the Linux kernel, the following vulnerability has been resolved: ubifs: rename_whiteout: Fix double free for whiteout_ui->data 'whiteout_ui->data' will be freed twice if space budget fail for rename whiteout operation as following process: rename_wh... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Mar. 18, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2021-47637
In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix deadlock in concurrent rename whiteout and inode writeback Following hung tasks: [ 77.028764] task:kworker/u8:4 state:D stack: 0 pid: 132 [ 77.028820] Call Trace: ... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Mar. 18, 2025
- Vuln Type: Race Condition
-
7.1
HIGHCVE-2021-47636
In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() Function ubifs_wbuf_write_nolock() may access buf out of bounds in following process: ubifs_wbuf_write_nolock(): aligned_le... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Mar. 18, 2025
- Vuln Type: Memory Corruption
-
0.0
NACVE-2021-47635
In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix to add refcount once page is set private MM defined the rule [1] very clearly that once page was set with PG_private flag, we should increment the refcount in that page, also... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Feb. 26, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2021-47634
In the Linux kernel, the following vulnerability has been resolved: ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl Hulk Robot reported a KASAN report about use-after-free: ============================================================... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Mar. 24, 2025
- Vuln Type: Race Condition
-
0.0
NACVE-2021-47633
In the Linux kernel, the following vulnerability has been resolved: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 The bug was found during fuzzing. Stacktrace locates it in ath5k_eeprom_convert_pcal_info_5111. When none of the curve is selected in ... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Feb. 26, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2021-47632
In the Linux kernel, the following vulnerability has been resolved: powerpc/set_memory: Avoid spinlock recursion in change_page_attr() Commit 1f9ad21c3b38 ("powerpc/mm: Implement set_memory() routines") included a spin_lock() to change_page_attr() in or... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Mar. 18, 2025
- Vuln Type: Race Condition
-
5.5
MEDIUMCVE-2021-47631
In the Linux kernel, the following vulnerability has been resolved: ARM: davinci: da850-evm: Avoid NULL pointer dereference With newer versions of GCC, there is a panic in da850_evm_config_emac() when booting multi_v5_defconfig in QEMU under the palmett... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Mar. 18, 2025
- Vuln Type: Misconfiguration
-
4.3
MEDIUMCVE-2025-1091
A Broken Authorization schema exists where any authenticated user could download IOA script and configuration files if the URL is known.... Read more
Affected Products :- Published: Feb. 26, 2025
- Modified: Feb. 26, 2025
- Vuln Type: Authorization
-
2.7
LOWCVE-2025-0760
A Credential Disclosure vulnerability exists where an administrator could extract the stored SMTP account credentials due to lack of encryption.... Read more
Affected Products :- Published: Feb. 26, 2025
- Modified: Feb. 26, 2025
- Vuln Type: Information Disclosure
-
5.3
MEDIUMCVE-2024-30150
HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lead to information disclosure and potential for Server-Side Request Forgery (SSRF) and Denial of Service(DOS) attacks from unauthenticate... Read more
Affected Products :- Published: Feb. 25, 2025
- Modified: Feb. 25, 2025
- Vuln Type: Authorization
-
9.8
CRITICALCVE-2025-25521
Seacms <=13.3 is vulnerable to SQL Injection in admin_type_news.php.... Read more
Affected Products : seacms- Published: Feb. 25, 2025
- Modified: Mar. 28, 2025
- Vuln Type: Injection
-
9.8
CRITICALCVE-2025-25520
Seacms <13.3 is vulnerable to SQL Injection in admin_pay.php.... Read more
Affected Products : seacms- Published: Feb. 25, 2025
- Modified: Mar. 28, 2025
- Vuln Type: Injection
-
9.8
CRITICALCVE-2025-25519
Seacms <=13.3 is vulnerable to SQL Injection in admin_zyk.php.... Read more
Affected Products : seacms- Published: Feb. 25, 2025
- Modified: Mar. 28, 2025
- Vuln Type: Injection