Latest CVE Feed
-
7.1
HIGHCVE-2024-56721
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum_1386_microcode array The erratum_1386_microcode array requires an empty entry at the end. Otherwise x86_match_cpu_with_stepping() will continue iterat... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Jan. 09, 2025
-
5.5
MEDIUMCVE-2024-56720
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Several fixes to bpf_msg_pop_data Several fixes to bpf_msg_pop_data, 1. In sk_msg_shift_left, we should put_page 2. if (len == 0), return early is better 3. pop the entire... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Jan. 09, 2025
-
6.1
MEDIUMCVE-2024-13012
A vulnerability, which was classified as problematic, has been found in code-projects Hostel Management System 1.0. This issue affects some unknown processing of the file /admin/registration.php. The manipulation of the argument fname/mname/lname leads to... Read more
- Published: Dec. 29, 2024
- Modified: Feb. 18, 2025
-
9.8
CRITICALCVE-2024-13008
A vulnerability has been found in code-projects Responsive Hotel Site 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/newsletter.php. The manipulation of the argument eid leads to sql injection... Read more
Affected Products : responsive_hotel_site- Published: Dec. 29, 2024
- Modified: Feb. 25, 2025
-
5.5
MEDIUMCVE-2024-56719
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix TSO DMA API usage causing oops Commit 66600fac7a98 ("net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data") moved the assignment of tx_skbuff_dma[]'s m... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Jan. 09, 2025
-
5.5
MEDIUMCVE-2024-56718
In the Linux kernel, the following vulnerability has been resolved: net/smc: protect link down work from execute after lgr freed link down work may be scheduled before lgr freed but execute after lgr freed, which may result in crash. So it is need to ho... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Jan. 10, 2025
-
5.5
MEDIUMCVE-2024-56717
In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic() Packets injected by the CPU should have a SRC_PORT field equal to the CPU port module index in the Analyzer... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Jan. 10, 2025
-
5.5
MEDIUMCVE-2024-56716
In the Linux kernel, the following vulnerability has been resolved: netdevsim: prevent bad user input in nsim_dev_health_break_write() If either a zero count or a large one is provided, kernel can crash.... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Jan. 10, 2025
-
5.5
MEDIUMCVE-2024-56715
In the Linux kernel, the following vulnerability has been resolved: ionic: Fix netdev notifier unregister on failure If register_netdev() fails, then the driver leaks the netdev notifier. Fix this by calling ionic_lif_unregister() on register_netdev() f... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Jan. 10, 2025
-
0.0
NACVE-2024-56714
In the Linux kernel, the following vulnerability has been resolved: ionic: no double destroy workqueue There are some FW error handling paths that can cause us to try to destroy the workqueue more than once, so let's be sure we're checking for that. Th... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Dec. 29, 2024
-
0.0
NACVE-2024-56713
In the Linux kernel, the following vulnerability has been resolved: net: netdevsim: fix nsim_pp_hold_write() nsim_pp_hold_write() has two problems: 1) It may return with rtnl held, as found by syzbot. 2) Its return value does not propagate an error if... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Dec. 29, 2024
-
5.5
MEDIUMCVE-2024-56712
In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix memory leak on last export_udmabuf() error path In export_udmabuf(), if dma_buf_fd() fails because the FD table is full, a dma_buf owning the udmabuf has already been creat... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Apr. 17, 2025
-
5.5
MEDIUMCVE-2024-56711
In the Linux kernel, the following vulnerability has been resolved: drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference drm_mode_duplicate() could return NULL due to lack of memory, which will then call NULL pointer dereference. Ad... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Jan. 08, 2025
-
5.5
MEDIUMCVE-2024-56710
In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in ceph_direct_read_write() The bvecs array which is allocated in iter_get_bvecs_alloc() is leaked and pages remain pinned if ceph_alloc_sparse_ext_map() fails. T... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Apr. 17, 2025
-
0.0
NACVE-2024-56709
In the Linux kernel, the following vulnerability has been resolved: io_uring: check if iowq is killed before queuing task work can be executed after the task has gone through io_uring termination, whether it's the final task_work run or the fallback pat... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Dec. 29, 2024
-
9.8
CRITICALCVE-2024-13007
A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Affected is an unknown function of the file /contact.php. The manipulation of the argument title leads to sql injection. It is possible to launch the att... Read more
Affected Products : event_management_system- Published: Dec. 29, 2024
- Modified: Feb. 25, 2025
-
9.8
CRITICALCVE-2024-13006
A vulnerability, which was classified as critical, has been found in 1000 Projects Human Resource Management System 1.0. This issue affects some unknown processing of the file /employeeview.php. The manipulation of the argument search leads to sql injecti... Read more
Affected Products : human_resource_management_system- Published: Dec. 29, 2024
- Modified: Dec. 29, 2024
-
9.8
CRITICALCVE-2024-13005
A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/attendance_action.php. The manipulation of the argument attendance_id leads to sql inje... Read more
Affected Products : attendance_tracking_management_system- Published: Dec. 29, 2024
- Modified: Mar. 05, 2025
-
5.3
MEDIUMCVE-2024-56738
GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.... Read more
Affected Products : grub2- Published: Dec. 29, 2024
- Modified: Jun. 24, 2025
-
8.8
HIGHCVE-2024-56737
GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.... Read more
Affected Products : grub2- Published: Dec. 29, 2024
- Modified: Jun. 24, 2025