Browse CVEs

HIGH 7.5 CVE-2025-61100 FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump function at ospf_opaque.c. … Frrouting after 10.4.1 Fix from $1,9502025-10-27 HIGH 7.5 CVE-2025-61099 FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail function at ospf_opaque.c. Th… Frrouting after 10.4.1 Fix from $1,9502025-10-27 MEDIUM 5.5 CVE-2025-12206 A flaw has been found in Kamailio 5.5. The impacted element is the function rve_is_constant of the file src/core/rvalue.c. This manipulation causes n… Kamailio No fix yet Fix from $1,6002025-10-27 MEDIUM 5.5 CVE-2025-12207 A vulnerability has been found in Kamailio 5.5. This affects the function yyerror_at of the file src/core/cfg.y of the component Grammar Rule Handler… Kamailio No fix yet Fix from $1,6002025-10-27 MEDIUM 5.5 CVE-2025-23300 NVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could cause a null pointer dereference by allocating a sp… Mitigation only Fix from $1,6002025-10-23 MEDIUM 5.5 CVE-2025-23330 NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference. A successful exploit … Mitigation only Fix from $1,6002025-10-23 MEDIUM 5.0 CVE-2025-23332 NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might be able to trigger a null pointer deference. A s… No fix yet Fix from $1,6002025-10-23 HIGH 7.5 CVE-2025-50950 Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function. Audiofile No fix yet Fix from $1,9502025-10-23 HIGH 7.5 CVE-2025-60336 A NULL pointer dereference in the sub_41773C function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) v… N600r Firmware No fix yet Fix from $1,9502025-10-22 HIGH 7.5 CVE-2025-60335 A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a c… N600r Firmware No fix yet Fix from $1,9502025-10-22 HIGH 7.5 CVE-2025-60332 A NULL pointer dereference in the SetWLanRadioSettings function of D-Link DIR-823G A1 v1.0.2B05 allows attackers to cause a Denial of Service (DoS) v… Dir 823g Firmware No fix yet Fix from $1,9502025-10-22 MEDIUM 5.5 CVE-2022-4981 A vulnerability was detected in DCMTK up to 3.6.7. The impacted element is the function DcmQueryRetrieveConfig::readPeerList of the file /dcmqrcnf.cc… Dcmtk 3.6.8+ Fix from $1,6002025-10-21 HIGH 7.5 CVE-2025-62409 Envoy is a cloud-native, open source edge and service proxy. Prior to 1.36.1, 1.35.5, 1.34.9, and 1.33.10, large requests and responses can potential… Envoy 1.33.11 / 1.34.9+ Fix from $1,9502025-10-16 MEDIUM 6.5 CVE-2025-61908 Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, when creating an invalid reference, such as a refere… Icinga 2.13.13 / 2.14.7+ Fix from $1,6002025-10-16 MEDIUM 5.5 CVE-2025-9548 A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to … Mitigation only Fix from $1,6002025-10-15 HIGH 7.5 CVE-2025-61960 When a per-request policy is configured on a BIG-IP APM portal access virtual server, undisclosed traffic can cause the Traffic Management Microkerne… Big Ip Access Policy Manager 16.1.6.1 / 17.1.3+ Fix from $1,9502025-10-15 HIGH 7.5 CVE-2025-58120 When HTTP/2 Ingress is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions whic… Big Ip Next Cloud Native Network Functions 1.7.14+ Fix from $1,9502025-10-15 MEDIUM 5.5 CVE-2025-54270 Animate versions 23.0.13, 24.0.10 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to memory exposure. An attacke… Animate 23.0.15 / 24.0.12+ Fix from $1,6002025-10-15 HIGH 7.7 CVE-2025-55698 Null pointer dereference in Windows DirectX allows an authorized attacker to deny service over a network. Windows 11 24h2 10.0.26100.6899 / 10.0.26200.6899+ Fix from $1,9502025-10-14 MEDIUM 5.3 CVE-2025-42902 Due to the memory corruption vulnerability in SAP NetWeaver AS ABAP and ABAP Platform, an unauthenticated attacker can send a corrupted SAP Logon Tic… Mitigation only Fix from $1,6002025-10-14 HIGH 7.5 CVE-2025-59836 Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.1.5 and 1.0.2, there is a nil pointer dereference vulnerability in… Omni 1.0.2 / 1.1.5+ Fix from $1,9502025-10-13 MEDIUM 6.8 CVE-2025-9337 A null pointer dereference has been identified in the AsIO3.sys driver. The vulnerability can be triggered by a specially crafted input, which may le… Mitigation only Fix from $1,6002025-10-13 MEDIUM 6.5 CVE-2025-11550 A vulnerability was found in Tenda W12 3.0.0.6(3948). The impacted element is the function wifiScheduledSet of the file /goform/modules of the compon… W12 Firmware No fix yet Fix from $1,6002025-10-09 MEDIUM 6.5 CVE-2025-59967 A NULL Pointer Dereference vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved on ACX7024, ACX7024X, ACX710… Junos Os Evolved Mitigation only Fix from $1,6002025-10-09 MEDIUM 5.5 CVE-2025-39959 In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: Fix incorrect retrival of acp_chip_info Use dev_get_drvdata(dev… Linux Kernel 6.16.9+ Fix from $1,6002025-10-09 MEDIUM 5.5 CVE-2023-53681 In the Linux kernel, the following vulnerability has been resolved: bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent In s… Linux Kernel 4.19.291 / 5.4.253+ Fix from $1,6002025-10-07 MEDIUM 5.5 CVE-2023-53686 In the Linux kernel, the following vulnerability has been resolved: net/handshake: fix null-ptr-deref in handshake_nl_done_doit() We should not cal… Linux Kernel 6.5.4+ Fix from $1,6002025-10-07 MEDIUM 5.5 CVE-2023-53678 In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix system suspend without fbdev being initialized If fbdev is not in… Linux Kernel 6.1.18 / 6.2.5+ Fix from $1,6002025-10-07 MEDIUM 5.5 CVE-2023-53664 In the Linux kernel, the following vulnerability has been resolved: OPP: Fix potential null ptr dereference in dev_pm_opp_get_required_pstate() "op… Linux Kernel 6.5.3+ Fix from $1,6002025-10-07 MEDIUM 5.5 CVE-2023-53667 In the Linux kernel, the following vulnerability has been resolved: net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize Currently in cdc_ncm_… Linux Kernel 4.14.317 / 4.19.285+ Fix from $1,6002025-10-07