Browse CVEs

HIGH 7.5 CVE-2023-24859 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Windows 10 10.0.10240.19805 / 10.0.14393.5786+ Fix from $1,9502023-03-14 MEDIUM 5.5 CVE-2023-0973 STEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker to deny application usage when … Ifcmesh Library 18.102+ Fix from $1,6002023-03-13 MEDIUM 5.5 CVE-2023-1355 NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402. Vim 9.0.1402+ Fix from $1,6002023-03-11 MEDIUM 5.5 CVE-2023-24465 Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions has a null pointer reference vulne… Openharmony after 3.1.4 Fix from $1,6002023-03-10 MEDIUM 5.5 CVE-2023-25947 The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attackers can exp… Openharmony after 3.1.4 Fix from $1,6002023-03-10 MEDIUM 5.5 CVE-2023-27114 radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c. Radare2 Patch available Fix from $1,6002023-03-10 MEDIUM 6.5 CVE-2023-0845 Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client … Consul 1.14.5+ Fix from $1,6002023-03-09 MEDIUM 5.5 CVE-2023-1264 NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. Fedora 9.0.1392+ Fix from $1,6002023-03-07 MEDIUM 5.5 CVE-2023-1186 A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function … Webcam For Remote Desktop No fix yet Fix from $1,6002023-03-06 MEDIUM 5.5 CVE-2023-23005 In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas … Linux Kernel 6.2+ Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-23006 In the Linux kernel before 5.15.13, drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value (e… Linux Kernel 5.15.13+ Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-23004 In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value (expects it to be NULL in the error … Linux Kernel 5.19+ Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-23001 In the Linux kernel before 5.16.3, drivers/scsi/ufs/ufs-mediatek.c misinterprets the regulator_get return value (expects it to be NULL in the error c… Linux Kernel 5.16.3+ Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-23002 In the Linux kernel before 5.16.3, drivers/bluetooth/hci_qca.c misinterprets the devm_gpiod_get_index_optional return value (expects it to be NULL in… Linux Kernel 5.16.3+ Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-23000 In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegra_xusb_find_port_node return value. Callers expect NULL in the error cas… Linux Kernel 5.17+ Fix from $1,6002023-03-01 MEDIUM 6.5 CVE-2023-24751 libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the mc_chroma function at motion.cc. This vulnerability allows attackers to … Debian Linux Patch available Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-24752 libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_hevc_epel_pixels_8_sse function at sse-motion.cc. This vulne… Debian Linux Patch available Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-24754 libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function at sse-motion.cc. This vuln… Debian Linux Patch available Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-24755 libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_weighted_pred_8_fallback function at fallback-motion.cc. This vulner… Debian Linux Patch available Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-24756 libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_unweighted_pred_8_sse function at sse-motion.cc. This vulner… Debian Linux Patch available Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-24757 libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_unweighted_pred_16_fallback function at fallback-motion.cc. This vul… Debian Linux Patch available Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-24758 libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function at sse-motion.cc. This vuln… Debian Linux Patch available Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-1095 In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() ca… Linux Kernel 6.0+ Fix from $1,6002023-02-28 MEDIUM 5.5 CVE-2023-22997 In the Linux kernel before 6.1.2, kernel/module/decompress.c misinterprets the module_get_next_page return value (expects it to be NULL in the error … Linux Kernel 6.1.2+ Fix from $1,6002023-02-28 MEDIUM 5.5 CVE-2023-22999 In the Linux kernel before 5.16.3, drivers/usb/dwc3/dwc3-qcom.c misinterprets the dwc3_qcom_create_urs_usb_platdev return value (expects it to be NUL… Linux Kernel 5.16.3+ Fix from $1,6002023-02-28 HIGH 7.5 CVE-2023-23108 In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL pointer dereference in the functi… Crasm 1.11+ Fix from $1,9502023-02-27 MEDIUM 5.5 CVE-2021-32843 HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, `virtio.c` has is a call… Hyperkit after 0.20210107 Fix from $1,6002023-02-17 MEDIUM 5.5 CVE-2021-32844 HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, ` vi_pci_write` has is a… Hyperkit after 0.20210107 Fix from $1,6002023-02-17 MEDIUM 5.5 CVE-2023-21593 Adobe InDesign versions ID18.1 (and earlier) and ID17.4 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated at… Indesign after 17.4 Fix from $1,6002023-02-17 MEDIUM 5.5 CVE-2022-35883 NULL pointer dereference in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable denial of ser… Media Software Development Kit 22.2.2+ Fix from $1,6002023-02-16