Latest CVE Feed
-
7.5
HIGHCVE-2025-0579
A vulnerability was found in Shiprocket Module 3/4 on OpenCart. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php?route=extension/shiprocket/module/restapi of the component REST API Module.... Read more
Affected Products :- Published: Jan. 20, 2025
- Modified: Jan. 20, 2025
-
4.5
MEDIUMCVE-2024-13524
A vulnerability has been found in obsproject OBS Studio up to 30.0.2 on Windows and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to untrusted search path. The attack needs to be approached l... Read more
Affected Products :- Published: Jan. 20, 2025
- Modified: Jan. 20, 2025
-
6.1
MEDIUMCVE-2025-0583
The a+HRD from aEnrich Technology has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.... Read more
Affected Products :- Published: Jan. 20, 2025
- Modified: Jan. 20, 2025
-
5.3
MEDIUMCVE-2025-0578
A vulnerability was found in Facile Sistemas Cloud Apps up to 20250107. It has been classified as problematic. Affected is an unknown function of the file /account/forgotpassword of the component Password Reset Handler. The manipulation of the argument re... Read more
Affected Products :- Published: Jan. 20, 2025
- Modified: Jan. 20, 2025
-
6.9
MEDIUMCVE-2025-0576
A vulnerability was found in Mobotix M15 4.3.4.83 and classified as problematic. This issue affects some unknown processing of the file /control/player?center&eventlist&pda&dummy_for_reload=1736177631&p_evt. The manipulation of the argument p_qual leads t... Read more
Affected Products :- Published: Jan. 20, 2025
- Modified: Jan. 20, 2025
-
3.9
LOWCVE-2025-0575
A vulnerability has been found in Union Bank of India Vyom 8.0.34 on Android and classified as problematic. This vulnerability affects unknown code of the component Rooting Detection. The manipulation leads to protection mechanism failure. The attack need... Read more
Affected Products :- Published: Jan. 19, 2025
- Modified: Jan. 19, 2025
-
9.1
CRITICALCVE-2024-41783
IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow a privileged user to inject commands into the underlying operating system due to improper validation of a specified type of input.... Read more
- Published: Jan. 19, 2025
- Modified: Jul. 25, 2025
-
7.5
HIGHCVE-2024-41743
IBM TXSeries for Multiplatforms 10.1 could allow a remote attacker to cause a denial of service using persistent connections due to improper allocation of resources.... Read more
- Published: Jan. 19, 2025
- Modified: Jul. 16, 2025
-
7.5
HIGHCVE-2024-41742
IBM TXSeries for Multiplatforms 10.1 is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations. By conducting a slowloris-type attacks, a remote attacker could exploit this vulnerability to cause a d... Read more
- Published: Jan. 19, 2025
- Modified: Jul. 16, 2025
-
9.1
CRITICALCVE-2024-38337
IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow an unauthorized attacker to retrieve or alter sensitive information contents due to incorrect permission assignments.... Read more
- Published: Jan. 19, 2025
- Modified: Jul. 25, 2025
-
0.0
NACVE-2024-57929
In the Linux kernel, the following vulnerability has been resolved: dm array: fix releasing a faulty array block twice in dm_array_cursor_end When dm_bm_read_lock() fails due to locking or checksum errors, it releases the faulty block implicitly while l... Read more
Affected Products : linux_kernel- Published: Jan. 19, 2025
- Modified: Feb. 02, 2025
-
0.0
NACVE-2024-57928
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix enomem handling in buffered reads If netfs_read_to_pagecache() gets an error from either ->prepare_read() or from netfs_prepare_read_iterator(), it needs to decrement ->nr_ou... Read more
Affected Products : linux_kernel- Published: Jan. 19, 2025
- Modified: Jan. 19, 2025
-
5.5
MEDIUMCVE-2024-57927
In the Linux kernel, the following vulnerability has been resolved: nfs: Fix oops in nfs_netfs_init_request() when copying to cache When netfslib wants to copy some data that has just been read on behalf of nfs, it creates a new write request and calls ... Read more
Affected Products : linux_kernel- Published: Jan. 19, 2025
- Modified: Jan. 31, 2025
-
7.8
HIGHCVE-2024-57926
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err The pointer need to be set to NULL, otherwise KASAN complains about use-after-free. Because in mtk... Read more
Affected Products : linux_kernel- Published: Jan. 19, 2025
- Modified: Feb. 11, 2025
-
7.1
HIGHCVE-2024-57925
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix a missing return value check bug In the smb2_send_interim_resp(), if ksmbd_alloc_work_struct() fails to allocate a node, it returns a NULL pointer to the in_work pointer. Thi... Read more
Affected Products : linux_kernel- Published: Jan. 19, 2025
- Modified: Feb. 27, 2025
-
0.0
NACVE-2024-57924
In the Linux kernel, the following vulnerability has been resolved: fs: relax assertions on failure to encode file handles Encoding file handles is usually performed by a filesystem >encode_fh() method that may fail for various reasons. The legacy user... Read more
Affected Products : linux_kernel- Published: Jan. 19, 2025
- Modified: Jan. 23, 2025
-
0.0
NACVE-2024-57923
In the Linux kernel, the following vulnerability has been resolved: btrfs: zlib: fix avail_in bytes for s390 zlib HW compression path Since the input data length passed to zlib_compress_folios() can be arbitrary, always setting strm.avail_in to a multip... Read more
Affected Products : linux_kernel- Published: Jan. 19, 2025
- Modified: Jan. 19, 2025
-
5.5
MEDIUMCVE-2024-57922
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add check for granularity in dml ceil/floor helpers [Why] Wrapper functions for dcn_bw_ceil2() and dcn_bw_floor2() should check for granularity is non zero to avoid ass... Read more
Affected Products : linux_kernel- Published: Jan. 19, 2025
- Modified: Feb. 27, 2025
-
0.0
NACVE-2024-57921
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add a lock when accessing the buddy trim function When running YouTube videos and Steam games simultaneously, the tester found a system hang / race condition issue with the ... Read more
Affected Products : linux_kernel- Published: Jan. 19, 2025
- Modified: Jan. 19, 2025
-
5.5
MEDIUMCVE-2024-57919
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix divide error in DM plane scale calcs dm_get_plane_scale doesn't take into account plane scaled size equal to zero, leading to a kernel oops due to division by zero.... Read more
Affected Products : linux_kernel- Published: Jan. 19, 2025
- Modified: Feb. 18, 2025