Browse CVEs

MEDIUM 5.5 CVE-2024-53113 In the Linux kernel, the following vulnerability has been resolved: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof We triggered a NULL… Linux Kernel 6.1.119 / 6.6.63+ Fix from $1,6002024-12-02 MEDIUM 5.5 CVE-2024-53115 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle The '… Linux Kernel 6.11 / 6.11.10+ Fix from $1,6002024-12-02 MEDIUM 5.5 CVE-2024-53120 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT: Fix null-ptr-deref in add rule err flow In error flow of mlx5_tc… Linux Kernel 6.1.119 / 6.6.63+ Fix from $1,6002024-12-02 MEDIUM 6.5 CVE-2024-12002 A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected by this vulnerability is the f… Fh451 Firmware No fix yet Fix from $1,6002024-11-30 MEDIUM 6.5 CVE-2024-36620 moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go. Moby after 26.0.2 Fix from $1,6002024-11-29 MEDIUM 5.3 CVE-2024-36626 In prestashop 8.1.4, a NULL pointer dereference was identified in the math_round function within Tools.php. Prestashop Patch available Fix from $1,6002024-11-29 MEDIUM 5.5 CVE-2024-42328 When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curl_write_cb w… Zabbix 7.0.4+ Fix from $1,6002024-11-27 MEDIUM 6.5 CVE-2024-11706 A null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function, when handling m… Firefox 133.0+ Fix from $1,6002024-11-26 CRITICAL 9.1 CVE-2024-11705 `NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was passed as NULL, a segmentation fault (SEGV) occurred… Firefox 133.0+ Fix from $2,3002024-11-26 HIGH 7.5 CVE-2024-11650 A vulnerability was found in Tenda i9 1.0.0.8(3828) and classified as critical. This issue affects the function websReadEvent of the file /goform/Get… I9 Firmware No fix yet Fix from $1,9502024-11-25 MEDIUM 5.5 CVE-2024-53092 In the Linux kernel, the following vulnerability has been resolved: virtio_pci: Fix admin vq cleanup by using correct info pointer vp_modern_avq_cl… Linux Kernel 6.11.9+ Fix from $1,6002024-11-21 HIGH 7.5 CVE-2024-11588 A vulnerability was found in AVL-DiTEST-DiagDev libdoip 1.0.0. It has been rated as problematic. This issue affects the function DoIPConnection::reac… Libdoip No fix yet Fix from $1,9502024-11-21 MEDIUM 5.5 CVE-2024-53064 In the Linux kernel, the following vulnerability has been resolved: idpf: fix idpf_vc_core_init error path In an event where the platform running t… Linux Kernel 6.11.8+ Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2024-53069 In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: fix a NULL-pointer dereference Some SCM calls can be invok… Linux Kernel 6.11.8+ Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2024-53050 In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: Add encoder check in hdcp2_get_capability Add encoder check in i… Linux Kernel 6.11.7+ Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2024-53056 In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() In mtk_crtc_… Linux Kernel 6.11.7+ Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2024-53060 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpi_eval… Linux Kernel 4.19.324 / 5.4.286+ Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2024-53043 In the Linux kernel, the following vulnerability has been resolved: mctp i2c: handle NULL header address daddr can be NULL if there is no neighbour… Linux Kernel 6.1.116 / 6.6.60+ Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2024-50292 In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove In case o… Linux Kernel 5.10.230 / 5.15.172+ Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2024-50296 In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when uninstalling driver When the driver is uninsta… Linux Kernel 4.19.324 / 5.4.286+ Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2024-50298 In the Linux kernel, the following vulnerability has been resolved: net: enetc: allocate vf_state during PF probes In the previous implementation, … Linux Kernel 6.6.61 / 6.11.8+ Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2024-50281 In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation When sealing … Linux Kernel 6.11.8+ Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2024-50265 In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() S… Linux Kernel 4.19.324 / 5.4.286+ Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2024-48294 A NULL pointer dereference in the component libPdfCore.dll of Wondershare PDF Reader v1.0.9.2544 allows attackers to cause a Denial of Service (DoS) … Mitigation only Fix from $1,6002024-11-18 HIGH 7.5 CVE-2024-45969 NULL pointer dereference in the MMS Client in MZ Automation LibIEC1850 before commit 7afa40390b26ad1f4cf93deaa0052fe7e357ef33 allows a malicious serv… Patch available Fix from $1,9502024-11-15 MEDIUM 6.5 CVE-2024-24446 An uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted Init… Mitigation only Fix from $1,6002024-11-15 HIGH 8.7 CVE-2024-9472 A null pointer dereference in Palo Alto Networks PAN-OS software on PA-800 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series hardware platfo… Mitigation only Fix from $1,9502024-11-14 HIGH 7.5 CVE-2024-2550 A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to st… Pan Os 10.2.7 / 11.0.6+ Fix from $1,9502024-11-14 HIGH 7.5 CVE-2024-2551 A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on t… Pan Os 10.1.14 / 10.2.4+ Fix from $1,9502024-11-14 HIGH 7.8 CVE-2024-34719 In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local escalation of privilege with no a… Android Patch available Fix from $1,9502024-11-13