CVEs published May 21, 2024
438 CVEs were published on May 21, 2024: 17 critical, 127 high.
- Published
- 438
- Critical
- 17
- High
- 127
- Medium
- 84
- Low
- 3
- Unrated
- 207
- Now in CISA KEV
- 0
- Fix available
- 67
Most affected products
- Linux
- 361
- ZkTeco-based OEM devices with firmware ZAM170-NF-1.8.25-735…
- 6
- ait-core
- 5
- QNAP Systems QTS · QNAP Systems QuTS hero
- 5
- devitemsllc HT Mega Addons for Elementor – Elementor Widget…
- 2
- devitemsllc ShopLentor – All-in-One WooCommerce Growth & St…
- 2
- dglingren Media Library Assistant
- 2
- Sailthru Triggermail
- 2
- VMware vCenter Server · VMware Cloud Foundation
- 2
- argoproj argo-cd · github.com/argoproj/argo-cd +1
- 1
Critical 17
- CVE-2024-31989ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cacheargoproj argo-cd · github.com/argoproj/argo-cd +1
- CVE-2023-52832wifi: mac80211: don't return unset power in ieee80211_get_tx_power()Linux
- CVE-2023-52755ksmbd: fix slab out of bounds write in smb_inherit_dacl()Linux
- CVE-2023-52741cifs: Fix use-after-free in rdata->read_into_pages()Linux
- CVE-2023-52735bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itselfLinux
- CVE-2023-52732ceph: blocklist the kclient when receiving corrupted snap traceLinux
- CVE-2021-47427scsi: iscsi: Fix iscsi_task use after freeLinux
- CVE-2021-47378nvme-rdma: destroy cm id before destroy qp to avoid use after freeLinux
- CVE-2021-47348drm/amd/display: Avoid HDCP over-read and corruptionLinux
- CVE-2021-47328scsi: iscsi: Fix conn use after free during resetsLinux
- CVE-2021-47232can: j1939: fix Use-after-Free, hold skb ref while in useLinux
- CVE-2023-3943Multiple buffer overflow in ZkTeco-based OEM devicesZkTeco-based OEM devices with firmware ZAM170-NF-1.8.25-735…
- CVE-2024-35361MTab Bookmark v1.9.5 has an SQL injection vulnerability in /LinkStore/getIcon.
- CVE-2023-3941Multiple arbitrary file writes in ZkTeco-based OEM devicesZkTeco-based OEM devices with firmware ZAM170-NF-1.8.25-735…
- CVE-2023-3939Multiple command injection in ZkTeco-based OEM devicesZkTeco-based OEM devices with firmware ZAM170-NF-1.8.25-735…
- CVE-2024-4442Salon booking system <= 9.9 - Unauthenticated Arbitrary File Deletionwordpresschef Salon Booking System – Free Version
- CVE-2024-35056NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the query_packets and insert functions.ait-core
High 127
- CVE-2024-3518Media Library Assistant <= 3.15 - Authenticated (Contributor+) SQL Injection via Shortcodedglingren Media Library Assistant
- CVE-2024-21683This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and Server.Atlassian Confluence Data Center
- CVE-2024-35220@fastify/session reuses destroyed session cookiefastify session · @fastify/session
- CVE-2024-5040LCDS LAquis SCADA Path TraversalLCDS LAquis SCADA
- CVE-2024-31756An issue in MarvinTest Solutions Hardware Access Driver v.5.0.3.0 and before and fixed in v.5.0.4.0 allows a local attacker to escalate priv
- CVE-2024-25724In RTI Connext Professional 5.3.1 through 6.1.0 before 6.1.1, a buffer overflow in XML parsing from Routing Service, Recording Service, Queu
- CVE-2024-4154Incorrect Synchronization in lunary-ai/lunarylunary-ai/lunary
- CVE-2024-31757An issue in TeraByte Unlimited Image for Windows v.3.64.0.0 and before and fixed in v.4.0.0.0 allows a local attacker to escalate privileges
- CVE-2024-22274The vCenter Server contains an authenticated remote code execution vulnerability.VMware vCenter Server · VMware Cloud Foundation
- CVE-2024-22273The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability.VMware ESXi · VMware Workstation +2
- CVE-2024-36052RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI escape sequences, a different issue than CVE-202
- CVE-2024-27130QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2024-27127QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2023-52879tracing: Have trace_event_file have ref countersLinux
- CVE-2023-52874x86/tdx: Zero out the missing RSI in TDX_HYPERCALL macroLinux
- CVE-2023-52872tty: n_gsm: fix race condition in status line change on dead connectionsLinux
- CVE-2023-52871soc: qcom: llcc: Handle a second device without data corruptionLinux
- CVE-2023-52867drm/radeon: possible buffer overflowLinux
- CVE-2023-52864platform/x86: wmi: Fix opening of char deviceLinux
- CVE-2023-52852f2fs: compress: fix to avoid use-after-free on dicLinux
- CVE-2023-52847media: bttv: fix use after free error due to btv->timeout timerLinux
- CVE-2023-52846hsr: Prevent use after free in prp_create_tagged_frame()Linux
- CVE-2023-52845tipc: Change nla_policy for bearer-related names to NLA_NUL_STRINGLinux
- CVE-2023-52837nbd: fix uaf in nbd_openLinux
- CVE-2023-52834atl1c: Work around the DMA RX overflow issueLinux
- CVE-2023-52829wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps()Linux
- CVE-2023-52827wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats()Linux
- CVE-2023-52825drm/amdkfd: Fix a race condition of vram buffer unref in svm codeLinux
- CVE-2023-52810fs/jfs: Add check for negative db_l2nbperpageLinux
- CVE-2023-52805jfs: fix array-index-out-of-bounds in diAllocLinux
- CVE-2023-52804fs/jfs: Add validity check for db_maxag and db_agprefLinux
- CVE-2023-52801iommufd: Fix missing update of domains_itree after splitting iopt_areaLinux
- CVE-2023-52799jfs: fix array-index-out-of-bounds in dbFindLeafLinux
- CVE-2023-52798wifi: ath11k: fix dfs radar event lockingLinux
- CVE-2023-52790swiotlb: fix out-of-bounds TLB allocations with CONFIG_SWIOTLB_DYNAMICLinux
- CVE-2023-52777wifi: ath11k: fix gtk offload status event lockingLinux
- CVE-2023-52776wifi: ath12k: fix dfs-radar and temperature event lockingLinux
- CVE-2023-52775net/smc: avoid data corruption caused by declineLinux
- CVE-2023-52772af_unix: fix use-after-free in unix_stream_read_actor()Linux
- CVE-2023-52769wifi: ath12k: fix htt mlo-offset event lockingLinux
- CVE-2023-52768wifi: wilc1000: use vmm_table as array in wilc structLinux
- CVE-2023-52766i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handlerLinux
- CVE-2023-52761riscv: VMAP_STACK overflow detection thread-safeLinux
- CVE-2023-52760gfs2: Fix slab-use-after-free in gfs2_qd_deallocLinux
- CVE-2023-52752smb: client: fix use-after-free bug in cifs_debug_data_proc_show()Linux
- CVE-2023-52751smb: client: fix use-after-free in smb2_query_info_compound()Linux
- CVE-2023-52745IB/IPoIB: Fix legacy IPoIB due to wrong number of queuesLinux
- CVE-2023-52739Fix page corruption caused by racy check in __free_pagesLinux
- CVE-2023-52731fbdev: Fix invalid page access after closing deferred I/O devicesLinux
- CVE-2023-52707sched/psi: Fix use-after-free in ep_remove_wait_queue()Linux
- CVE-2023-52704freezer,umh: Fix call_usermode_helper_exec() vs SIGKILLLinux
- CVE-2021-47421drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resumeLinux
- CVE-2021-47419net/sched: sch_taprio: properly cancel timer from taprio_destroy()Linux
- CVE-2021-47412block: don't call rq_qos_ops->done_bio if the bio isn't trackedLinux
- CVE-2021-47403ipack: ipoctal: fix module reference leakLinux
- CVE-2021-47402net: sched: flower: protect fl_walk() with rcuLinux
- CVE-2021-47401ipack: ipoctal: fix stack information leakLinux
- CVE-2021-47400net: hns3: do not allow call hns3_nic_net_open repeatedlyLinux
- CVE-2021-47397sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootbLinux
- CVE-2021-47394netfilter: nf_tables: unlink table before deleting itLinux
- CVE-2021-47391RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requestsLinux
- CVE-2021-47390KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect()Linux
- CVE-2021-47388mac80211: fix use-after-free in CCMP/GCMP RXLinux
- CVE-2021-47386hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure fieldLinux
- CVE-2021-47383tty: Fix out-of-bound vmalloc access in imageblitLinux
- CVE-2021-47380HID: amd_sfh: Fix potential NULL pointer dereferenceLinux
- CVE-2021-47374dma-debug: prevent an error message from causing runtime problemsLinux
- CVE-2021-47371nexthop: Fix memory leaks in nexthop notification chain listenersLinux
- CVE-2021-47368enetc: Fix illegal access when reading affinity_hintLinux
- CVE-2021-47366afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS serverLinux
- CVE-2020-36788drm/nouveau: avoid a use-after-free when BO init failsLinux
- CVE-2024-33526A Stored Cross-site Scripting (XSS) vulnerability in the "Import of user role and title of user role" feature in ILIAS 7 before 7.30 and ILI
- CVE-2024-33529ILIAS 7 before 7.30 and ILIAS 8 before 8.11 as well as ILIAS 9.0 allow remote authenticated attackers with administrative privileges to exec
- CVE-2021-47358staging: greybus: uart: fix tty use after freeLinux
- CVE-2021-47356mISDN: fix possible use-after-free in HFC_cleanup()Linux
- CVE-2021-47354drm/sched: Avoid data corruptionsLinux
- CVE-2021-47352virtio-net: Add validation for used lengthLinux
- CVE-2021-47351ubifs: Fix races between xattr_{set|get} and listxattr operationsLinux
- CVE-2021-47347wl1251: Fix possible buffer overflow in wl1251_cmd_scanLinux
- CVE-2021-47346coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()Linux
- CVE-2021-47343dm btree remove: assign new_root only when removal succeedsLinux
- CVE-2021-47341KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmioLinux
- CVE-2021-47338fbmem: Do not delete the mode that is still in useLinux
- CVE-2021-47327iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get failsLinux
- CVE-2021-47324watchdog: Fix possible use-after-free in wdt_startup()Linux
- CVE-2021-47323watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()Linux
- CVE-2021-47317powerpc/bpf: Fix detecting BPF atomic instructionsLinux
- CVE-2021-47316nfsd: fix NULL dereference in nfs3svc_encode_getaclresLinux
- CVE-2021-47313cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_initLinux
- CVE-2021-47309net: validate lwtstate->data before returning from skb_tunnel_info()Linux
- CVE-2021-47308scsi: libfc: Fix array index out of bound exceptionLinux
- CVE-2021-47307cifs: prevent NULL deref in cifs_compose_mount_options()Linux
- CVE-2021-47303bpf: Track subprog poke descriptors correctly and fix use-after-freeLinux
- CVE-2021-47300bpf: Fix tail_call_reachable rejection for interpreter when jit failedLinux
- CVE-2021-47296KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leakLinux
- CVE-2021-47295net: sched: fix memory leak in tcindex_partial_destroy_workLinux
- CVE-2021-47291ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptionsLinux
- CVE-2021-47290scsi: target: Fix NULL dereference on XCOPY completionLinux
- CVE-2021-47282spi: bcm2835: Fix out-of-bounds access with more than 4 slavesLinux
- CVE-2021-47281ALSA: seq: Fix race of snd_seq_timer_open()Linux
- CVE-2021-47274tracing: Correct the length check which causes memory corruptionLinux
- CVE-2021-47262KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint messageLinux
- CVE-2021-47261IB/mlx5: Fix initializing CQ fragments bufferLinux
- CVE-2021-47259NFS: Fix use-after-free in nfs4_init_client()Linux
- CVE-2021-47254gfs2: Fix use-after-free in gfs2_glock_shrink_scanLinux
- CVE-2021-47248udp: fix race between close() and udp_abort()Linux
- CVE-2021-47247net/mlx5e: Fix use-after-free of encap entry in neigh update handlerLinux
- CVE-2021-47245netfilter: synproxy: Fix out of bounds when parsing TCP optionsLinux
- CVE-2021-47244mptcp: Fix out of bounds when parsing TCP optionsLinux
- CVE-2021-47243sch_cake: Fix out of bounds when parsing TCP options and headerLinux
- CVE-2021-47242mptcp: fix soft lookup in subflow_error_report()Linux
- CVE-2021-47241ethtool: strset: fix message length calculationLinux
- CVE-2021-47240net: qrtr: fix OOB Read in qrtr_endpoint_postLinux
- CVE-2021-47226x86/fpu: Invalidate FPU state after a failed XRSTOR from a user bufferLinux
- CVE-2021-47224net: ll_temac: Make sure to free skb when it is completely usedLinux
- CVE-2021-47222net: bridge: fix vlan tunnel dst refcnt when egressingLinux
- CVE-2024-35386An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_do_gc function in the mjs.c file.
- CVE-2023-3942Multiple SQLi in ZkTeco-based OEM devicesZkTeco-based OEM devices with firmware ZAM170-NF-1.8.25-735…
- CVE-2023-3940Multiple arbitrary file reads in ZkTeco-based OEM devicesZkTeco-based OEM devices with firmware ZAM170-NF-1.8.25-735…
- CVE-2024-4988Improper permission control in com.transsion.videocallenhancerTECNO com.transsion.videocallenhancer
- CVE-2024-4566ShopLentor <= 2.8.8 - Missing Authorization to WordPress Option Modificationdevitemsllc ShopLentor – All-in-One WooCommerce Growth & St…
- CVE-2024-4290Sailthru Triggermail <= 1.1 - Admin+ Stored XSSSailthru Triggermail
- CVE-2024-35057An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet.ait-core
- CVE-2024-35058An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string.ait-core
- CVE-2024-35059An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands.ait-core
- CVE-2024-35060An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file
- CVE-2024-35061NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-thait-core
Medium, low and unrated 294
- CVE-2024-3519Media Library Assistant <= 3.15 - Reflected Cross-Site Scripting via langdglingren Media Library Assistant
- CVE-2024-34274OpenBD 20210306203917-6cbe797 is vulnerable to Deserialization of Untrusted Data.
- CVE-2024-33525A Stored Cross-site Scripting (XSS) vulnerability in the "Import of organizational units and title of organizational unit" feature in ILIAS
- CVE-2024-34240QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting (XSS) resulting in arbitrary code execution in admin functions related to add
- CVE-2024-22275The vCenter Server contains a partial file read vulnerability.VMware vCenter Server · VMware Cloud Foundation
- CVE-2024-27129QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2024-27128QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2024-21902QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2024-1721Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows allows Malicious Software Update.This issue aHYPR Passwordless
- CVE-2024-31847An issue was discovered in Italtel Embrace 1.6.4.
- CVE-2024-31845An issue was discovered in Italtel Embrace 1.6.4.
- CVE-2024-31844An issue was discovered in Italtel Embrace 1.6.4.
- CVE-2024-31840An issue was discovered in Italtel Embrace 1.6.4.
- CVE-2023-52878can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of boundsLinux
- CVE-2023-52877usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()Linux
- CVE-2023-52876clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_dataLinux
- CVE-2023-52875clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_dataLinux
- CVE-2023-52873clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_dataLinux
- CVE-2023-52870clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_dataLinux
- CVE-2023-52869pstore/platform: Add check for kstrdupLinux
- CVE-2023-52868thermal: core: prevent potential string overflowLinux
- CVE-2023-52866HID: uclogic: Fix user-memory-access bug in uclogic_params_ugee_v2_init_event_hooks()Linux
- CVE-2023-52865clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_dataLinux
- CVE-2023-52863hwmon: (axi-fan-control) Fix possible NULL pointer dereferenceLinux
- CVE-2023-52862drm/amd/display: Fix null pointer dereference in error messageLinux
- CVE-2023-52861drm: bridge: it66121: Fix invalid connector dereferenceLinux
- CVE-2023-52860drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit processLinux
- CVE-2023-52859perf: hisi: Fix use-after-free when register pmu failsLinux
- CVE-2023-52858clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_dataLinux
- CVE-2023-52857drm/mediatek: Fix coverity issue with unintentional integer overflowLinux
- CVE-2023-52856drm/bridge: lt8912b: Fix crash on bridge detachLinux
- CVE-2023-52855usb: dwc2: fix possible NULL pointer dereference caused by driver concurrencyLinux
- CVE-2023-52854padata: Fix refcnt handling in padata_free_shell()Linux
- CVE-2023-52853hid: cp2112: Fix duplicate workqueue initializationLinux
- CVE-2023-52851IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAFLinux
- CVE-2023-52850media: hantro: Check whether reset op is defined before useLinux
- CVE-2023-52849cxl/mem: Fix shutdown orderLinux
- CVE-2023-52848f2fs: fix to drop meta_inode's page cache in f2fs_put_super()Linux
- CVE-2023-52844media: vidtv: psi: Add check for kstrdupLinux
- CVE-2023-52843llc: verify mac len before reading mac headerLinux
- CVE-2023-52842virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()Linux
- CVE-2023-52841media: vidtv: mux: Add check and kfree for kstrdupLinux
- CVE-2023-52840Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()Linux
- CVE-2023-52839drivers: perf: Do not broadcast to other cpus when starting a counterLinux
- CVE-2023-52838fbdev: imsttfb: fix a resource leak in probeLinux
- CVE-2023-52836locking/ww_mutex/test: Fix potential workqueue corruptionLinux
- CVE-2023-52835perf/core: Bail out early if the request AUX area is out of boundLinux
- CVE-2023-52833Bluetooth: btusb: Add date->evt_skb is NULL checkLinux
- CVE-2023-52831cpu/hotplug: Don't offline the last non-isolated CPULinux
- CVE-2023-52828bpf: Detect IP == ksym.end as part of BPF programLinux
- CVE-2023-52826drm/panel/panel-tpo-tpg110: fix a possible null pointer dereferenceLinux
- CVE-2023-52821drm/panel: fix a possible null pointer dereferenceLinux
- CVE-2023-52819drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and TongaLinux
- CVE-2023-52818drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7Linux
- CVE-2023-52817drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULLLinux
- CVE-2023-52816drm/amdkfd: Fix shift out-of-bounds issueLinux
- CVE-2023-52815drm/amdgpu/vkms: fix a possible null pointer dereferenceLinux
- CVE-2023-52814drm/amdgpu: Fix potential null pointer derefernceLinux
- CVE-2023-52813crypto: pcrypt - Fix hungtask for PADATA_RESETLinux
- CVE-2023-52812drm/amd: check num of link levels when update pcie paramLinux
- CVE-2023-52811scsi: ibmvfc: Remove BUG_ON in the case of an empty event poolLinux
- CVE-2023-52809scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()Linux
- CVE-2023-52808scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfsLinux
- CVE-2023-52807net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfsLinux
- CVE-2023-52806ALSA: hda: Fix possible null-ptr-deref when assigning a streamLinux
- CVE-2023-52803SUNRPC: Fix RPC client cleaned up the freed pipefs dentriesLinux
- CVE-2023-52800wifi: ath11k: fix htt pktlog lockingLinux
- CVE-2023-52797drivers: perf: Check find_first_bit() return valueLinux
- CVE-2023-52796ipvlan: add ipvlan_route_v6_outbound() helperLinux
- CVE-2023-52795vhost-vdpa: fix use after free in vhost_vdpa_probe()Linux
- CVE-2023-52794thermal: intel: powerclamp: fix mismatch in get function for max_idleLinux
- CVE-2023-52792cxl/region: Do not try to cleanup after cxl_region_setup_targets() failsLinux
- CVE-2023-52791i2c: core: Run atomic i2c xfer when !preemptibleLinux
- CVE-2023-52789tty: vcc: Add check for kstrdup() in vcc_probe()Linux
- CVE-2023-52788i915/perf: Fix NULL deref bugs with drm_dbg() callsLinux
- CVE-2023-52787blk-mq: make sure active queue usage is held for bio_integrity_prep()Linux
- CVE-2023-52786ext4: fix racy may inline data check in dio writeLinux
- CVE-2023-52785scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISRLinux
- CVE-2023-52784bonding: stop the device in bond_setup_by_slave()Linux
- CVE-2023-52783net: wangxun: fix kernel panic due to null pointerLinux
- CVE-2023-52782net/mlx5e: Track xmit submission to PTP WQ after populating metadata mapLinux
- CVE-2023-52781usb: config: fix iteration issue in 'usb_get_bos_descriptor()'Linux
- CVE-2023-52780net: mvneta: fix calls to page_pool_get_statsLinux
- CVE-2023-52779fs: Pass AT_GETATTR_NOSEC flag to getattr interface functionLinux
- CVE-2023-52778mptcp: deal with large GSO sizeLinux
- CVE-2023-52774s390/dasd: protect device queue against concurrent accessLinux
- CVE-2023-52773drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer()Linux
- CVE-2023-52771cxl/port: Fix delete_endpoint() vs parent unregistration raceLinux
- CVE-2023-52770f2fs: split initial and dynamic conditions for extent_cacheLinux
- CVE-2023-52767tls: fix NULL deref on tls_sw_splice_eof() with empty recordLinux
- CVE-2023-52765mfd: qcom-spmi-pmic: Fix revid implementationLinux
- CVE-2023-52764media: gspca: cpia1: shift-out-of-bounds in set_flickerLinux
- CVE-2023-52763i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data.Linux
- CVE-2023-52762virtio-blk: fix implicit overflow on virtio_max_dma_sizeLinux
- CVE-2023-52757smb: client: fix potential deadlock when releasing midsLinux
- CVE-2023-52754media: imon: fix access to invalid resource for the second interfaceLinux
- CVE-2023-52753drm/amd/display: Avoid NULL dereference of timing generatorLinux
- CVE-2023-52750arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newerLinux
- CVE-2023-52749spi: Fix null dereference on suspendLinux
- CVE-2023-52748f2fs: avoid format-overflow warningLinux
- CVE-2022-48710drm/radeon: fix a possible null pointer dereferenceLinux
- CVE-2021-47432lib/generic-radix-tree.c: Don't overflow in peek()Linux
- CVE-2023-52747IB/hfi1: Restore allocated resources on failed copyoutLinux
- CVE-2023-52746xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()Linux
- CVE-2023-52744RDMA/irdma: Fix potential NULL-ptr-dereferenceLinux
- CVE-2023-52743ice: Do not use WQ_MEM_RECLAIM flag for workqueueLinux
- CVE-2023-52742net: USB: Fix wrong-direction WARNING in plusb.cLinux
- CVE-2023-52740powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switchLinux
- CVE-2023-52738drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/finiLinux
- CVE-2023-52737btrfs: lock the inode in shared mode before starting fiemapLinux
- CVE-2023-52736ALSA: hda: Do not unset preset when cleaning up codecLinux
- CVE-2023-52730mmc: sdio: fix possible resource leaks in some error pathsLinux
- CVE-2023-52708mmc: mmc_spi: fix error handling in mmc_spi_probe()Linux
- CVE-2023-52706gpio: sim: fix a memory leakLinux
- CVE-2023-52705nilfs2: fix underflow in second superblock position calculationsLinux
- CVE-2023-52703net/usb: kalmia: Don't pass act_len in usb_bulk_msg error pathLinux
- CVE-2023-52702net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()Linux
- CVE-2023-52701net: use a bounce buffer for copying skb->markLinux
- CVE-2023-52700tipc: fix kernel warning when sending SYN messageLinux
- CVE-2022-48709ice: switch: fix potential memleak in ice_add_adv_recipe()Linux
- CVE-2022-48708pinctrl: single: fix potential NULL dereferenceLinux
- CVE-2022-48707cxl/region: Fix null pointer dereference for resetting decoderLinux
- CVE-2022-48706vdpa: ifcvf: Do proper cleanup if IFCVF init failsLinux
- CVE-2021-47431drm/amdgpu: fix gart.bo pin_count leakLinux
- CVE-2021-47430x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=nLinux
- CVE-2021-47429powerpc/64s: Fix unrecoverable MCE calling async handler from NMILinux
- CVE-2021-47428powerpc/64s: fix program check interrupt emergency stack pathLinux
- CVE-2021-47426bpf, s390: Fix potential memory leak about jit_dataLinux
- CVE-2021-47425i2c: acpi: fix resource leak in reconfiguration device additionLinux
- CVE-2021-47424i40e: Fix freeing of uninitialized misc IRQ vectorLinux
- CVE-2021-47423drm/nouveau/debugfs: fix file release memory leakLinux
- CVE-2021-47422drm/nouveau/kms/nv50-: fix file release memory leakLinux
- CVE-2021-47420drm/amdkfd: fix a potential ttm->sg memory leakLinux
- CVE-2021-47418net_sched: fix NULL deref in fifo_set_limit()Linux
- CVE-2021-47417libbpf: Fix memory leak in strsetLinux
- CVE-2021-47416phy: mdio: fix memory leakLinux
- CVE-2021-47415iwlwifi: mvm: Fix possible NULL dereferenceLinux
- CVE-2021-47414riscv: Flush current cpu icache before other cpusLinux
- CVE-2021-47413usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandleLinux
- CVE-2021-47410drm/amdkfd: fix svm_migrate_fini warningLinux
- CVE-2021-47409usb: dwc2: check return value after calling platform_get_resource()Linux
- CVE-2021-47408netfilter: conntrack: serialize hash resizes and cleanupsLinux
- CVE-2021-47407KVM: x86: Handle SRCU initialization failure during page track initLinux
- CVE-2021-47406ext4: add error checking to ext4_ext_replay_set_iblocks()Linux
- CVE-2021-47405HID: usbhid: free raw_report buffers in usbhid_stopLinux
- CVE-2021-47404HID: betop: fix slab-out-of-bounds Write in betop_probeLinux
- CVE-2021-47399ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setupLinux
- CVE-2021-47398RDMA/hfi1: Fix kernel pointer leakLinux
- CVE-2021-47396mac80211-hwsim: fix late beacon hrtimer handlingLinux
- CVE-2021-47395mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotapLinux
- CVE-2021-47393hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfsLinux
- CVE-2021-47392RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failureLinux
- CVE-2021-47389KVM: SVM: fix missing sev_decommission in sev_receive_startLinux
- CVE-2021-47387cpufreq: schedutil: Use kobject release() method to free sugov_tunablesLinux
- CVE-2021-47385hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure fieldLinux
- CVE-2021-47384hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure fieldLinux
- CVE-2021-47382s390/qeth: fix deadlock during failing recoveryLinux
- CVE-2021-47381ASoC: SOF: Fix DSP oops stack dump output contentsLinux
- CVE-2021-47379blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pdLinux
- CVE-2021-47376bpf: Add oversize check before call kvcalloc()Linux
- CVE-2021-47375blktrace: Fix uaf in blk_trace access after removing by sysfsLinux
- CVE-2021-47373irqchip/gic-v3-its: Fix potential VPE leak on errorLinux
- CVE-2021-47372net: macb: fix use after free on rmmodLinux
- CVE-2021-47370mptcp: ensure tx skbs always have the MPTCP extLinux
- CVE-2021-47369s390/qeth: fix NULL deref in qeth_clear_working_pool_list()Linux
- CVE-2021-47367virtio-net: fix pages leaking when building skb in big modeLinux
- CVE-2021-47365afs: Fix page leakLinux
- CVE-2021-47364comedi: Fix memory leak in compat_insnlist()Linux
- CVE-2021-47363nexthop: Fix division by zero while replacing a resilient groupLinux
- CVE-2021-47362drm/amd/pm: Update intermediate power state for SILinux
- CVE-2021-47361mcb: fix error handling in mcb_alloc_bus()Linux
- CVE-2021-47360binder: make sure fd closes completeLinux
- CVE-2021-47359cifs: Fix soft lockup during fsstressLinux
- CVE-2024-33527A Stored Cross-site Scripting (XSS) vulnerability in the "Import of Users and login name of user" feature in ILIAS 7 before 7.30 and ILIAS 8
- CVE-2024-33528A Stored Cross-site Scripting (XSS) vulnerability in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote authenticated attackers with
- CVE-2021-47357atm: iphase: fix possible use-after-free in ia_module_exit()Linux
- CVE-2021-47355atm: nicstar: Fix possible use-after-free in nicstar_cleanup()Linux
- CVE-2021-47353udf: Fix NULL pointer dereference in udf_symlink functionLinux
- CVE-2021-47350powerpc/mm: Fix lockup on kernel exec faultLinux
- CVE-2021-47349mwifiex: bring down link before deleting interfaceLinux
- CVE-2021-47345RDMA/cma: Fix rdma_resolve_route() memory leakLinux
- CVE-2021-47344media: zr364xx: fix memory leak in zr364xx_start_readpipeLinux
- CVE-2021-47342ext4: fix possible UAF when remounting r/o a mmp-protected file systemLinux
- CVE-2021-47340jfs: fix GPF in diFreeLinux
- CVE-2021-47339media: v4l2-core: explicitly clear ioctl input dataLinux
- CVE-2021-47337scsi: core: Fix bad pointer dereference when ehandler kthread is invalidLinux
- CVE-2021-47336smackfs: restrict bytes count in smk_set_cipso()Linux
- CVE-2021-47335f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instancesLinux
- CVE-2021-47334misc/libmasm/module: Fix two use after free in ibmasm_init_oneLinux
- CVE-2021-47333misc: alcor_pci: fix null-ptr-deref when there is no PCI bridgeLinux
- CVE-2021-47332ALSA: usx2y: Don't call free_pages_exact() with NULL addressLinux
- CVE-2021-47331usb: common: usb-conn-gpio: fix NULL pointer dereference of chargerLinux
- CVE-2021-47330tty: serial: 8250: serial_cs: Fix a memory leak in error handling pathLinux
- CVE-2021-47329scsi: megaraid_sas: Fix resource leak in case of probe failureLinux
- CVE-2021-47325iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translationLinux
- CVE-2021-47322NFSv4: Fix an Oops in pnfs_mark_request_commit() when doing O_DIRECTLinux
- CVE-2021-47321watchdog: Fix possible use-after-free by calling del_timer_sync()Linux
- CVE-2021-47320nfs: fix acl memory leak of posix_acl_create()Linux
- CVE-2021-47319virtio-blk: Fix memory leak among suspend/resume procedureLinux
- CVE-2021-47318arch_topology: Avoid use-after-free for scale_freq_dataLinux
- CVE-2021-47315memory: fsl_ifc: fix leak of IO mapping on probe failureLinux
- CVE-2021-47314memory: fsl_ifc: fix leak of private memory on probe failureLinux
- CVE-2021-47312netfilter: nf_tables: Fix dereference of null pointer flowLinux
- CVE-2021-47311net: qcom/emac: fix UAF in emac_removeLinux
- CVE-2021-47310net: ti: fix UAF in tlan_remove_oneLinux
- CVE-2021-47306net: fddi: fix UAF in fza_probeLinux
- CVE-2021-47305dma-buf/sync_file: Don't leak fences on merge failureLinux
- CVE-2021-47304tcp: fix tcp_init_transfer() to not reset icsk_ca_initializedLinux
- CVE-2021-47302igc: Fix use-after-free error during resetLinux
- CVE-2021-47301igb: Fix use-after-free error during resetLinux
- CVE-2021-47299xdp, net: Fix use-after-free in bpf_xdp_link_releaseLinux
- CVE-2021-47298bpf, sockmap: Fix potential memory leak on unlikely error caseLinux
- CVE-2021-47297net: fix uninit-value in caif_seqpkt_sendmsgLinux
- CVE-2021-47294netrom: Decrease sock refcount when sock timers expireLinux
- CVE-2021-47293net/sched: act_skbmod: Skip non-Ethernet packetsLinux
- CVE-2021-47292io_uring: fix memleak in io_init_wq_offload()Linux
- CVE-2021-47289ACPI: fix NULL pointer dereferenceLinux
- CVE-2021-47288media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()Linux
- CVE-2021-47287driver core: auxiliary bus: Fix memory leak when driver_register() failLinux
- CVE-2021-47286bus: mhi: core: Validate channel ID when processing command completionsLinux
- CVE-2021-47284isdn: mISDN: netjet: Fix crash in nj_probe:Linux
- CVE-2021-47283net:sfc: fix non-freed irq in legacy irq modeLinux
- CVE-2021-47280drm: Fix use-after-free read in drm_getunique()Linux
- CVE-2021-47279usb: misc: brcmstb-usb-pinmap: check return value after calling platform_get_resource()Linux
- CVE-2021-47278bus: mhi: pci_generic: Fix possible use-after-free in mhi_pci_remove()Linux
- CVE-2021-47277kvm: avoid speculation-based attacks from out-of-range memslot accessesLinux
- CVE-2021-47276ftrace: Do not blindly read the ip address in ftrace_bug()Linux
- CVE-2021-47275bcache: avoid oversized read request in cache missing code pathLinux
- CVE-2021-47273usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabledLinux
- CVE-2021-47272usb: dwc3: gadget: Bail from dwc3_gadget_exit() if dwc->gadget is NULLLinux
- CVE-2021-47271usb: cdnsp: Fix deadlock issue in cdnsp_thread_irq_handlerLinux
- CVE-2021-47270usb: fix various gadgets null ptr deref on 10gbps cabling.Linux
- CVE-2021-47269usb: dwc3: ep0: fix NULL pointer exceptionLinux
- CVE-2021-47268usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm portLinux
- CVE-2021-47267usb: fix various gadget panics on 10gbps cablingLinux
- CVE-2021-47266RDMA/ipoib: Fix warning caused by destroying non-initial netnsLinux
- CVE-2021-47265RDMA: Verify port when creating flow ruleLinux
- CVE-2021-47264ASoC: core: Fix Null-point-dereference in fmt_single_name()Linux
- CVE-2021-47263gpio: wcd934x: Fix shift-out-of-bounds errorLinux
- CVE-2021-47260NFS: Fix a potential NULL dereference in nfs_get_client()Linux
- CVE-2021-47258scsi: core: Fix error handling of scsi_host_alloc()Linux
- CVE-2021-47257net: ieee802154: fix null deref in parse dev addrLinux
- CVE-2021-47256mm/memory-failure: make sure wait for page writeback in memory_failureLinux
- CVE-2021-47255kvm: LAPIC: Restore guard to prevent illegal APIC register accessLinux
- CVE-2021-47253drm/amd/display: Fix potential memory leak in DMUB hw_initLinux
- CVE-2021-47252batman-adv: Avoid WARN_ON timing related checksLinux
- CVE-2021-47251mac80211: fix skb length check in ieee80211_scan_rx()Linux
- CVE-2021-47250net: ipv4: fix memory leak in netlbl_cipsov4_add_stdLinux
- CVE-2021-47249net: rds: fix memory leak in rds_recvmsgLinux
- CVE-2021-47246net/mlx5e: Fix page reclaim for dead peer hairpinLinux
- CVE-2021-47239net: usb: fix possible use-after-free in smsc75xx_bindLinux
- CVE-2021-47238net: ipv4: fix memory leak in ip_mc_add1_srcLinux
- CVE-2021-47237net: hamradio: fix memory leak in mkiss_closeLinux
- CVE-2021-47236net: cdc_eem: fix tx fixup skb leakLinux
- CVE-2021-47235net: ethernet: fix potential use-after-free in ec_bhf_removeLinux
- CVE-2021-47234phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init()Linux
- CVE-2021-47233regulator: rt4801: Fix NULL pointer dereference if priv->enable_gpios is NULLLinux
- CVE-2021-47231can: mcba_usb: fix memory leak in mcba_usbLinux
- CVE-2021-47230KVM: x86: Immediately reset the MMU context when the SMM flag is clearedLinux
- CVE-2021-47229PCI: aardvark: Fix kernel panic during PIO transferLinux
- CVE-2021-47228x86/ioremap: Map EFI-reserved memory as encrypted for SEVLinux
- CVE-2021-47227x86/fpu: Prevent state corruption in __fpu__restore_sig()Linux
- CVE-2021-47225mac80211: fix deadlock in AP/VLAN handlingLinux
- CVE-2021-47223net: bridge: fix vlan tunnel dst null pointer dereferenceLinux
- CVE-2021-47221mm/slub: actually fix freelist pointer vs redzoningLinux
- CVE-2024-4452ElementsKit Pro <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpmet ElementsKit Pro
- CVE-2024-35218Umbraco CMS Vulnerable to Stored XSS on Content Page Through Markdown Editor Preview PaneUmbraco-CMS · UmbracoCms.Core
- CVE-2024-35385An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_mk_ffi_sig function in the mjs.c file.
- CVE-2024-35384An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_array_length function in the mjs.c file.
- CVE-2024-34071Open Redirect Bypass Protection Umbraco-CMS · UmbracoCms.Core +1
- CVE-2024-35180OMERO.web JSONP callback vulnerabilityomero-web
- CVE-2024-4420Denial of Service in Tink-ccGoogle Tink
- CVE-2024-3268YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress <= 3.3.6 - Missing Authorization to Arbitrary Post/Page Creationemarket-design Video Gallery – YouTube Gallery & Responsive…
- CVE-2024-4619Elementor Website Builder – More than Just a Page Builder <= 3.21.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scriptingelemntor Elementor Website Builder – more than just a page…
- CVE-2024-4361Page Builder by SiteOrigin <= 2.29.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcodegpriday Page Builder by SiteOrigin
- CVE-2024-4876HT Mega – Absolute Addons For Elementor <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingdevitemsllc HT Mega Addons for Elementor – Elementor Widget…
- CVE-2024-4435BTreeMap memory leak when deallocating nodes with overflowsInternet Computer ic-stable-structures · ic-stable-structur…
- CVE-2023-3938Bypassing ZkTeco-based OEM devices/ZKTeco biometric authentication system via SQLi in QR codeZkTeco-based OEM devices with firmware ZAM170-NF-1.8.25-735…
- CVE-2024-4553WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_members Shortcodegn_themes WP Shortcodes Plugin — Shortcodes Ultimate
- CVE-2024-4695Move Addons for Elementor <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgetsmoveaddons Move Addons for Elementor
- CVE-2024-4700WP Table Builder – WordPress Table Plugin <= 1.4.14 - Authenticated (Contributor+) Stored Cross-Site Scriptingwptb WP Table Builder – Drag & Drop Table Builder
- CVE-2024-3345ShopLentor <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via woolentorsearch Shortcodedevitemsllc ShopLentor – All-in-One WooCommerce Growth & St…
- CVE-2024-4875HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Updatedevitemsllc HT Mega Addons for Elementor – Elementor Widget…
- CVE-2024-4470Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scriptingaverta Master Slider – Responsive Touch Slider
- CVE-2024-4710Uber Menu <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple ShortcodesSevenSpark UberMenu
- CVE-2024-4372Carousel Slider < 2.2.11 - Editor+ Stored XSSCarousel Slider
- CVE-2024-4289Sailthru Triggermail <= 1.1 - Reflected XSSSailthru Triggermail
- CVE-2024-4061Survey Maker < 4.2.9 - Admin+ Stored XSS via Plugin SettingsSurvey Maker
- CVE-2024-2189Social Icons Widget & Block < 4.2.18 - Admin+ Stored XSSSocial Icons Widget & Block by WPZOOM
- CVE-2024-4943Blocksy <= 2.0.46 - Authenticated (Contributor+) Stored Cross-Site Scriptingcreativethemeshq Blocksy
- CVE-2024-3155Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scriptingpickplugins Post Grid
- CVE-2024-0816The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denZyxel DX3300-T1 firmware
- CVE-2023-37929The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remotZyxel V5.50(ABPM.8)C0 firmware
- CVE-2024-36039PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.pymysql