CVEs published July 16, 2024
253 CVEs were published on July 16, 2024: 23 critical, 72 high. 1 is now in CISA KEV.
- Published
- 253
- Critical
- 23
- High
- 72
- Medium
- 77
- Low
- 10
- Unrated
- 71
- Now in CISA KEV
- 1
- Fix available
- 63
Most affected products
- Linux
- 98
- Google Chrome
- 26
- Oracle MySQL Server
- 20
- GitHub Enterprise Server
- 7
- Oracle Java SE JDK and JRE
- 6
- Oracle Database - Enterprise Edition
- 4
- Oracle WebLogic Server
- 4
- Oracle PeopleSoft Enterprise PT PeopleTools
- 3
- Oracle VM VirtualBox
- 3
- Oracle MySQL NDB Cluster · Oracle MySQL Server
- 2
Critical 23
- CVE-2024-21181Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2023-4860Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2024-39700Remote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Actionjupyterlab extension-template · jupyterlab
- CVE-2024-22442The vulnerability could be remotely exploited to bypass authentication.Hewlett Packard Enterprise (HPE) HPE 3PAR Service Processor
- CVE-2022-48851staging: gdm724x: fix use after free in gdm_lte_rx()Linux
- CVE-2022-48829NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizesLinux
- CVE-2022-48828NFSD: Fix ia_size underflowLinux
- CVE-2022-48790nvme: fix a possible use-after-free in controller reset during loadLinux
- CVE-2022-48789nvme-tcp: fix possible use-after-free in transport error_recovery workLinux
- CVE-2022-48788nvme-rdma: fix possible use-after-free in transport error_recovery workLinux
- CVE-2024-6457HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injectionrealmag777 HUSKY – Products Filter Professional for WooComm…
- CVE-2019-16639An issue was found on the Ruijie EG-2000 series gateway.
- CVE-2024-33180Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/save
- CVE-2024-35338Tenda i29V1.0 V1.0.0.5 was discovered to contain a hardcoded password for root.
- CVE-2024-40130open5gs v2.6.4 is vulnerable to Buffer Overflow.
- CVE-2024-40392SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code 1.0 was discovered to co
- CVE-2024-40393Online Clinic Management System In PHP With Free Source code v1.0 was discovered to contain a SQL injection vulnerability via the user param
- CVE-2024-40394Simple Library Management System Project Using PHP/MySQL v1.0 was discovered to contain an arbitrary file upload vulnerability via the compo
- CVE-2024-40425File Upload vulnerability in Nanjin Xingyuantu Technology Co Sparkshop (Spark Mall B2C Mall v.1.1.6 and before allows a remote attacker to e
- CVE-2024-40456ThinkSAAS v3.7.0 was discovered to contain a SQL injection vulnerability via the name parameter at \system\action\update.php.
- CVE-2024-40505Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi compo
- CVE-2024-40515An issue in SHENZHEN TENDA TECHNOLOGY CO.,LTD Tenda AX2pro V16.03.29.48_cn allows a remote attacker to execute arbitrary code via the Routin
- CVE-2024-40535Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 was discovered to contain a stack overflow via the apn_name_3g parameter in the conf
High 72
- CVE-2024-21184Vulnerability in the Oracle Database RDBMS Security component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2024-21183Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2024-21182Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2024-21175Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2024-21167Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Party Search UI).Oracle Trading Community
- CVE-2024-21153Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Quality Management SpecOracle Process Manufacturing Product Development
- CVE-2024-21152Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite (component: Allocation Rules).Oracle Process Manufacturing Financials
- CVE-2024-21149Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Work Definition Issues).Oracle Enterprise Asset Management
- CVE-2024-21147Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: HotspotOracle Java SE JDK and JRE
- CVE-2024-21146Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accounts).Oracle Trade Management
- CVE-2024-21141Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2024-21136Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security).Oracle Retail Xstore Office
- CVE-2024-3176Out of bounds write in SwiftShader in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to perform an out of bounds memory writGoogle Chrome
- CVE-2023-7012Insufficient data validation in Permission Prompts in Google Chrome prior to 117.0.5938.62 allowed an attacker who convinced a user to instaGoogle Chrome
- CVE-2023-7010Use after free in WebRTC in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2024-3175Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform privilege escalationGoogle Chrome
- CVE-2024-3174Inappropriate implementation in V8 in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit object corruptiGoogle Chrome
- CVE-2024-3173Insufficient data validation in Updater in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform OS-level privilege escaGoogle Chrome
- CVE-2024-3172Insufficient data validation in DevTools in Google Chrome prior to 121.0.6167.85 allowed a remote attacker who convinced a user to engage inGoogle Chrome
- CVE-2024-3171Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who convinced a user to engage in specificGoogle Chrome
- CVE-2024-3170Use after free in WebRTC in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2024-3169Use after free in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a craftedGoogle Chrome
- CVE-2024-3168Use after free in DevTools in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crGoogle Chrome
- CVE-2024-6779Out of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escapeGoogle Chrome
- CVE-2024-6778Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to injecGoogle Chrome
- CVE-2024-6777Use after free in Navigation in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extensGoogle Chrome
- CVE-2024-6776Use after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2024-6775Use after free in Media Stream in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specificGoogle Chrome
- CVE-2024-6774Use after free in Screen Capture in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specifGoogle Chrome
- CVE-2024-6773Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruptionGoogle Chrome
- CVE-2024-6772Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to perform out of bounds memory accessGoogle Chrome
- CVE-2024-5795Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed resource exhaustionGitHub Enterprise Server
- CVE-2024-21687This High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 and 9.6.0 of Bamboo DataAtlassian Bamboo Data Center · Atlassian Bamboo Server
- CVE-2024-21686This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data Center and Server.Atlassian Confluence Data Center · Atlassian Confluence Ser…
- CVE-2024-6492Exposure of Sensitive Information in edge browser session proxy feature in Devolutions Remote Desktop Manager 2024.2.14.0 and earlier on WinDevolutions Remote Desktop Manager
- CVE-2024-6089Rockwell Automation Major nonrecoverable fault in 5015 – AENFTXTRockwell Automation 5015 - AENFTXT
- CVE-2024-40626Stored Cross-site Scripting (XSS) vulnerability in Outline editoroutline
- CVE-2024-3232Formula Injection VulnerabilityTenable Identity Exposure
- CVE-2024-6655Gtk3: gtk2: library injection from cwdgtk · Red Hat Enterprise Linux
- CVE-2022-45449Sensitive information disclosure due to excessive privileges assigned to Acronis Agent.Acronis Cyber Protect
- CVE-2024-32861Software House C•CURE - CouchDB executable protectionJohnson Controls Software House C•CURE 9000 Installer
- CVE-2024-6435Rockwell Automation Privilege Escalation Vulnerability in Pavilion8®Rockwell Automation Pavilion8®
- CVE-2022-48864vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET commandLinux
- CVE-2022-48858net/mlx5: Fix a race on command flush flowLinux
- CVE-2022-48847watch_queue: Fix filter limit checkLinux
- CVE-2022-48839net/packet: fix slab-out-of-bounds access in packet_recvmsg()Linux
- CVE-2022-48830can: isotp: fix potential CAN frame reception race in isotp_rcv()Linux
- CVE-2022-48827NFSD: Fix the behavior of READ near OFFSET_MAXLinux
- CVE-2022-48822usb: f_fs: Fix use-after-free for epfileLinux
- CVE-2022-48821misc: fastrpc: avoid double fput() on failed usercopyLinux
- CVE-2022-48816SUNRPC: lock against ->sock changing during sysfs readLinux
- CVE-2022-48803phy: ti: Fix missing sentinel for clk_div_tableLinux
- CVE-2022-48801iio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTLLinux
- CVE-2022-48797mm: don't try to NUMA-migrate COW pages that have other usesLinux
- CVE-2022-48796iommu: Fix potential use-after-free during probeLinux
- CVE-2022-48792scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_taskLinux
- CVE-2022-48791scsi: pm8001: Fix use-after-free for aborted TMF sas_taskLinux
- CVE-2022-48787iwlwifi: fix use-after-freeLinux
- CVE-2022-48786vsock: remove vsock from connected table when connect is interrupted by a signalLinux
- CVE-2022-48785ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()Linux
- CVE-2022-48782mctp: fix use after freeLinux
- CVE-2022-48779net: mscc: ocelot: fix use-after-free in ocelot_vlan_del()Linux
- CVE-2024-1937Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modificationthemefusecom Brizy – Page Builder
- CVE-2024-41008drm/amdgpu: change vm->task_info handlingLinux
- CVE-2023-52290Apache StreamPark (incubating): Unchecked SQL query fields trigger SQL injection vulnerabilityApache Software Foundation Apache StreamPark
- CVE-2019-16638An issue was found on the Ruijie EG-2000 series gateway.
- CVE-2019-16640An issue was found in upload.php on the Ruijie EG-2000 series gateway.
- CVE-2019-16641An issue was found on the Ruijie EG-2000 series gateway.
- CVE-2024-33181Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parameter at ip/goform/add
- CVE-2024-33182Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/addW
- CVE-2024-40129Open5GS v2.6.4 is vulnerable to Buffer Overflow.
- CVE-2024-40516An issue in H3C Technologies Co., Limited H3C Magic RC3000 RC3000V100R009 allows a remote attacker to execute arbitrary code via the Routing
Medium, low and unrated 158
- CVE-2022-35640IBM Sterling Partner Engagement Manager information disclosureIBM Sterling Partner Engagement Manager
- CVE-2024-40637Implicit override for built-in materializations from installed packages in dbt-coredbt-labs dbt-core · dbt-core
- CVE-2024-21188Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Oracle Financial Services Revenue Management and Billing
- CVE-2024-21185Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2024-21180Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2024-21179Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2024-21178Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2024-21177Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL NDB Cluster · Oracle MySQL Server
- CVE-2024-21176Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling).Oracle MySQL Server
- CVE-2024-21174Vulnerability in the Java VM component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2024-21173Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2024-21171Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-21170Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python).Oracle MySQL Connectors
- CVE-2024-21169Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Partners).Oracle Marketing
- CVE-2024-21168Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).Oracle JD Edwards EnterpriseOne Orchestrator
- CVE-2024-21166Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2024-21165Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth).Oracle MySQL Server
- CVE-2024-21164Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2024-21163Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-21162Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-21161Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2024-21160Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2024-21159Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2024-21158Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2024-21157Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2024-21155Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: User Interface).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2024-21154Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Human Resources).Oracle PeopleSoft Enterprise HCM Human Resources
- CVE-2024-21151Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem).Oracle Solaris Operating System
- CVE-2024-21150Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2024-21148Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).Oracle Applications Framework
- CVE-2024-21145Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).Oracle Java SE JDK and JRE
- CVE-2024-21144Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).Oracle Java SE JDK and JRE
- CVE-2024-21143Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Management).Oracle iStore
- CVE-2024-21142Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2024-21140Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: HotspotOracle Java SE JDK and JRE
- CVE-2024-21139Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Answers).Oracle Business Intelligence Enterprise Edition
- CVE-2024-21138Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: HotspotOracle Java SE JDK and JRE
- CVE-2024-21137Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-21135Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-21134Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling).Oracle MySQL Server
- CVE-2024-21133Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Servlet).Oracle Reports Developer
- CVE-2024-21132Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Approvals).Oracle Purchasing
- CVE-2024-21131Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: HotspotOracle Java SE JDK and JRE
- CVE-2024-21130Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-21129Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2024-21128Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: APIs).Oracle Application Object Library
- CVE-2024-21127Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2024-21126Vulnerability in the Oracle Database Portable Clusterware component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2024-21125Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS).Oracle MySQL NDB Cluster · Oracle MySQL Server
- CVE-2024-21123Vulnerability in the Oracle Database Core component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2024-21122Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft (component: Text Catalog).Oracle PeopleSoft Enterprise HCM Shared Components
- CVE-2024-20996Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2020-36765Insufficient policy enforcement in Navigation in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data viaGoogle Chrome
- CVE-2019-25154Inappropriate implementation in iframe in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially perform a sandbox escGoogle Chrome
- CVE-2024-5500Inappropriate implementation in Sign-In in Google Chrome prior to 1.3.36.351 allowed a remote attacker to bypass navigation restrictions viaGoogle Chrome
- CVE-2024-2884Out of bounds read in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially perform out of bounds memory acceGoogle Chrome
- CVE-2023-7013Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially spoof securityGoogle Chrome
- CVE-2023-7011Inappropriate implementation in Picture in Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to spoof the contents Google Chrome
- CVE-2024-6395GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Deploy KeysGitHub Enterprise Server
- CVE-2024-6336Security misconfiguration was identified in GitHub Enterprise Server that allowed sensitive data exposureGitHub Enterprise Server
- CVE-2024-5817Improper authorization allows read access to issue content in GitHub Enterprise ServerGitHub Enterprise Server
- CVE-2024-5816Improper authorization allows persistent access in GitHub Enterprise ServerGitHub Enterprise Server
- CVE-2024-5815Cross Site Request Forgery was identified in GitHub Enterprise Server that allowed write in a user owned repositoryGitHub Enterprise Server
- CVE-2024-5566Improper Privilege Management allows for access to unauthorized repository content during migrationGitHub Enterprise Server
- CVE-2020-25836Potential information leakage resulting in unauthorized accessOpenText NetIQ Directory and Resource Administrator
- CVE-2024-39908Denial of service in REXMLruby rexml · rexml
- CVE-2024-6326Rockwell Automation Unsecured Private Keys in FactoryTalk® System ServicesRockwell Automation FactoryTalk® System Services · Rockwell…
- CVE-2024-6325Rockwell Automation Unsecured Private Keys in FactoryTalk® System ServicesRockwell Automation FactoryTalk® System Services · Rockwell…
- CVE-2022-48866HID: hid-thrustmaster: fix OOB read in thrustmaster_interruptsLinux
- CVE-2022-48865tipc: fix kernel panic when enabling bearerLinux
- CVE-2022-48863mISDN: Fix memory leak in dsp_pipeline_build()Linux
- CVE-2022-48862vhost: fix hung thread due to erroneous iotlb entriesLinux
- CVE-2022-48861vdpa: fix use-after-free on vp_vdpa_removeLinux
- CVE-2022-48860ethernet: Fix error handling in xemaclite_of_probeLinux
- CVE-2022-48859net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addrLinux
- CVE-2022-48857NFC: port100: fix use-after-free in port100_send_completeLinux
- CVE-2022-48856gianfar: ethtool: Fix refcount leak in gfar_get_ts_infoLinux
- CVE-2022-48855sctp: fix kernel-infoleak for SCTP socketsLinux
- CVE-2022-48854net: arc_emac: Fix use after free in arc_mdio_probe()Linux
- CVE-2022-48853Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""Linux
- CVE-2022-48852drm/vc4: hdmi: Unregister codec device on unbindLinux
- CVE-2022-48850net-sysfs: add check for netdevice being present to speed_showLinux
- CVE-2022-48849drm/amdgpu: bypass tiling flag check in virtual display case (v2)Linux
- CVE-2022-48848tracing/osnoise: Do not unregister events twiceLinux
- CVE-2022-48846block: release rq qos structures for queue without diskLinux
- CVE-2022-48845MIPS: smp: fill in sibling and core maps earlierLinux
- CVE-2022-48844Bluetooth: hci_core: Fix leaking sent_cmd skbLinux
- CVE-2022-48842ice: Fix race condition during interface enslaveLinux
- CVE-2022-48841ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats()Linux
- CVE-2022-48840iavf: Fix hang during reboot/shutdownLinux
- CVE-2022-48838usb: gadget: Fix use-after-free bug by not setting udc->dev.driverLinux
- CVE-2022-48837usb: gadget: rndis: prevent integer overflow in rndis_set_response()Linux
- CVE-2022-48836Input: aiptek - properly check endpoint typeLinux
- CVE-2022-48835scsi: mpt3sas: Page fault in reply q processingLinux
- CVE-2022-48834usb: usbtmc: Fix bug in pipe direction for control transfersLinux
- CVE-2022-48833btrfs: skip reserved bytes warning on unmount after log cleanup failureLinux
- CVE-2022-48832audit: don't deref the syscall args when checking the openat2 open_how::flagsLinux
- CVE-2022-48831ima: fix reference leak in asymmetric_verify()Linux
- CVE-2022-48826drm/vc4: Fix deadlock on DSI device attach errorLinux
- CVE-2022-48825scsi: qedf: Add stag_work to all the vportsLinux
- CVE-2022-48824scsi: myrs: Fix crash in error caseLinux
- CVE-2022-48823scsi: qedf: Fix refcount issue when LOGO is received during TMFLinux
- CVE-2022-48820phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable()Linux
- CVE-2022-48819tcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) caseLinux
- CVE-2022-48818net: dsa: mv88e6xxx: don't use devres for mdiobusLinux
- CVE-2022-48817net: dsa: ar9331: register the mdiobus under devresLinux
- CVE-2022-48815net: dsa: bcm_sf2: don't use devres for mdiobusLinux
- CVE-2022-48814net: dsa: seville: register the mdiobus under devresLinux
- CVE-2022-48813net: dsa: felix: don't use devres for mdiobusLinux
- CVE-2022-48812net: dsa: lantiq_gswip: don't use devres for mdiobusLinux
- CVE-2022-48811ibmvnic: don't release napi in __ibmvnic_open()Linux
- CVE-2022-48810ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure pathLinux
- CVE-2022-48809net: fix a memleak when uncloning an skb dst and its metadataLinux
- CVE-2022-48808net: dsa: fix panic when DSA master device unbinds on shutdownLinux
- CVE-2022-48807ice: Fix KASAN error in LAG NETDEV_UNREGISTER handlerLinux
- CVE-2022-48806eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAXLinux
- CVE-2022-48805net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixupLinux
- CVE-2022-48804vt_ioctl: fix array_index_nospec in vt_setactivateLinux
- CVE-2022-48802fs/proc: task_mmu.c: don't read mapcount for migration entryLinux
- CVE-2022-48800mm: vmscan: remove deadlock due to throttling failing to make progressLinux
- CVE-2022-48799perf: Fix list corruption in perf_cgroup_switch()Linux
- CVE-2022-48798s390/cio: verify the driver availability for path_event callLinux
- CVE-2022-48795parisc: Fix data TLB miss in sba_unmap_sgLinux
- CVE-2022-48794net: ieee802154: at86rf230: Stop leaking skb'sLinux
- CVE-2022-48793KVM: x86: nSVM: fix potential NULL derefernce on nested migrationLinux
- CVE-2021-47624net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_changeLinux
- CVE-2021-47623powerpc/fixmap: Fix VM debug warning on unmapLinux
- CVE-2021-47622scsi: ufs: Fix a deadlock in the error handlerLinux
- CVE-2022-48784cfg80211: fix race in netlink owner interface destructionLinux
- CVE-2022-48783net: dsa: lantiq_gswip: fix use after free in gswip_remove()Linux
- CVE-2022-48781crypto: af_alg - get rid of alg_memory_allocatedLinux
- CVE-2022-48780net/smc: Avoid overwriting the copies of clcsock callback functionsLinux
- CVE-2022-48778mtd: rawnand: gpmi: don't leak PM reference in error pathLinux
- CVE-2022-48777mtd: parsers: qcom: Fix kernel panic on skipped partitionLinux
- CVE-2022-48776mtd: parsers: qcom: Fix missing free for pparts in cleanupLinux
- CVE-2022-48775Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobjLinux
- CVE-2022-48774dmaengine: ptdma: Fix the error handling path in pt_core_init()Linux
- CVE-2022-48773xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_createLinux
- CVE-2024-6621WP RSS Aggregator <= 4.23.11 - Missing Authorization to Authenticated (Subscriber+) Feed State Updaterebelcode RSS Aggregator – RSS Import, News Feeds, Feed to…
- CVE-2023-52886USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()Linux
- CVE-2024-6579Web and WooCommerce Addons for WPBakery Builder <= 1.4.5 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modificationgenetechproducts Web and WooCommerce Addons for WPBakery Bu…
- CVE-2024-39887Apache Superset: Improper SQL authorisation, parse not checking for specific engine functionsApache Software Foundation Apache Superset · apache-superset
- CVE-2024-3587Premium Portfolio Features for Phlox theme <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ' Grid Portfolios'averta Premium Portfolio Features for Phlox theme
- CVE-2024-6565AForms <= 2.2.6 - Unauthenticated Full Path Disclosurevividcolorsjp AForms — Form Builder for Price Calculator &…
- CVE-2024-6570Glossary <= 2.2.26 - Unauthenticated Full Path Disclosuremte90 Glossary
- CVE-2024-5852WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversalnickboss Iptanus File Upload
- CVE-2024-2691WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events' Shortcodewpeventmanager WP Event Manager – Events Calendar, Registra…
- CVE-2024-3779Denial of Service in ESET products for WindowsESET s.r.o ESET NOD32 Antivirus · ESET s.r.o ESET Intern… +8
- CVE-2024-4780Image Hover Effects – Elementor Addon <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via eihe_link Parameterblocksera Image Hover Effects – Elementor Addon
- CVE-2024-6559XCloner <= 4.7.3 - Unauthenticated Full Path Disclosurewatchful Backup, Restore and Migrate your sites with XCloner
- CVE-2024-6557SchedulePress <= 5.1.3 - Unauthenticated Full Path Disclosurewpdevteam SchedulePress – Auto Post & Publish, Auto Social…
- CVE-2024-6780Improper permission control in com.android.server.telecomTECNO com.android.server.telecom
- CVE-2023-31456There is an SSRF vulnerability in the Fluid Topics platform that affects versions prior to 4.3, where the server can be forced to make arbit
- CVE-2024-39036SeaCMS v12.9 is vulnerable to Arbitrary File Read via admin_safe.php.
- CVE-2024-40322An issue was discovered in JFinalCMS v.5.0.0.
- CVE-2024-40455An arbitrary file deletion vulnerability in ThinkSAAS v3.7 allows attackers to delete arbitrary files via a crafted request.
- CVE-2024-40503An issue in Tenda AX12 v.16.03.49.18_cn+ allows a remote attacker to cause a denial of service via the Routing functionality and ICMP packet
- CVE-2024-40536Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 were discovered to contain a stack overflow via the pin_3g_code parameter in the con