Latest CVE Feed
-
8.8
HIGHCVE-2024-7293
In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack is possible through weak password requirements.... Read more
- Published: Oct. 09, 2024
- Modified: Oct. 15, 2024
-
8.8
HIGHCVE-2024-7292
In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is possible through improper restriction of excessive login attempts.... Read more
- Published: Oct. 09, 2024
- Modified: Oct. 15, 2024
-
5.5
MEDIUMCVE-2024-47673
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: pause TCM when the firmware is stopped Not doing so will make us send a host command to the transport while the firmware is not alive, which will trigger a WARNING. ... Read more
Affected Products : linux_kernel- Published: Oct. 09, 2024
- Modified: Oct. 23, 2024
-
5.5
MEDIUMCVE-2024-47672
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead There is a WARNING in iwl_trans_wait_tx_queues_empty() (that was recently converted from just a message), that can be hi... Read more
Affected Products : linux_kernel- Published: Oct. 09, 2024
- Modified: Nov. 08, 2024
-
5.5
MEDIUMCVE-2024-47671
In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: prevent kernel-usb-infoleak The syzbot reported a kernel-usb-infoleak in usbtmc_write, we need to clear the structure before filling fields.... Read more
Affected Products : linux_kernel- Published: Oct. 09, 2024
- Modified: Nov. 08, 2024
-
7.8
HIGHCVE-2024-47670
In the Linux kernel, the following vulnerability has been resolved: ocfs2: add bounds checking to ocfs2_xattr_find_entry() Add a paranoia check to make sure it doesn't stray beyond valid memory region containing ocfs2 xattr entries when scanning for a m... Read more
Affected Products : linux_kernel- Published: Oct. 09, 2024
- Modified: Nov. 08, 2024
-
5.5
MEDIUMCVE-2024-47669
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix state management in error path of log writing function After commit a694291a6211 ("nilfs2: separate wait function from nilfs_segctor_write") was applied, the log writing fun... Read more
Affected Products : linux_kernel- Published: Oct. 09, 2024
- Modified: Oct. 21, 2024
-
4.7
MEDIUMCVE-2024-47668
In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() If we need to increase the tree depth, allocate a new node, and then race with another thread that increased the tree d... Read more
Affected Products : linux_kernel- Published: Oct. 09, 2024
- Modified: Oct. 23, 2024
-
5.5
MEDIUMCVE-2024-47667
In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) Errata #i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0 (SPRZ452D_July 2018_Revised December 2019 [1]) mentions whe... Read more
Affected Products : linux_kernel- Published: Oct. 09, 2024
- Modified: Oct. 23, 2024
-
5.5
MEDIUMCVE-2024-47666
In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Set phy->enable_completion only when we wait for it pm8001_phy_control() populates the enable_completion pointer with a stack address, sends a PHY_LINK_RESET / PHY_HARD_RE... Read more
Affected Products : linux_kernel- Published: Oct. 09, 2024
- Modified: Oct. 23, 2024
-
5.5
MEDIUMCVE-2024-47665
In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup Definitely condition dma_get_cache_alignment * defined value > 256 during driver initialization is not reason to BUG_ON... Read more
Affected Products : linux_kernel- Published: Oct. 09, 2024
- Modified: Oct. 23, 2024
-
5.5
MEDIUMCVE-2024-47664
In the Linux kernel, the following vulnerability has been resolved: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware If the value of max_speed_hz is 0, it may cause a division by zero error in hisi_calc_effective_speed(... Read more
Affected Products : linux_kernel- Published: Oct. 09, 2024
- Modified: Oct. 23, 2024
-
5.5
MEDIUMCVE-2024-47663
In the Linux kernel, the following vulnerability has been resolved: staging: iio: frequency: ad9834: Validate frequency parameter value In ad9834_write_frequency() clk_get_rate() can return 0. In such case ad9834_calc_freqreg() call will lead to divisio... Read more
Affected Products : linux_kernel- Published: Oct. 09, 2024
- Modified: Nov. 08, 2024
-
5.5
MEDIUMCVE-2024-47662
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection [Why] These registers should not be read from driver and triggering the security violation when DMCUB work times ... Read more
Affected Products : linux_kernel- Published: Oct. 09, 2024
- Modified: Oct. 23, 2024
-
5.5
MEDIUMCVE-2024-47661
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid overflow from uint32_t to uint8_t [WHAT & HOW] dmub_rb_cmd's ramping_boundary has size of uint8_t and it is assigned 0xFFFF. Fix it by changing it to uint8_t with... Read more
Affected Products : linux_kernel- Published: Oct. 09, 2024
- Modified: Oct. 15, 2024
-
7.8
HIGHCVE-2024-47425
Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interac... Read more
- Published: Oct. 09, 2024
- Modified: Oct. 18, 2024
-
7.8
HIGHCVE-2024-47424
Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in ... Read more
- Published: Oct. 09, 2024
- Modified: Oct. 18, 2024
-
7.8
HIGHCVE-2024-47423
Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by uploading a malicious file... Read more
- Published: Oct. 09, 2024
- Modified: Oct. 18, 2024
-
7.8
HIGHCVE-2024-47422
Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious path into the search directories... Read more
- Published: Oct. 09, 2024
- Modified: Oct. 18, 2024
-
7.8
HIGHCVE-2024-47421
Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability... Read more
- Published: Oct. 09, 2024
- Modified: Oct. 18, 2024