Browse CVEs

MEDIUM 5.5 CVE-2024-43816 In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages O… Linux Kernel 6.10.3+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42310 In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes In cdv_int… Linux Kernel 4.19.320 / 5.4.282+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42320 In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error checks in dasd_copy_pair_store() dasd_add_busid() can retu… Linux Kernel 6.1.103 / 6.6.44+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42298 In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value devm_kasprintf(… Linux Kernel 6.6.44 / 6.10.3+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42303 In the Linux kernel, the following vulnerability has been resolved: media: imx-pxp: Fix ERR_PTR dereference in pxp_probe() devm_regmap_init_mmio() … Linux Kernel 6.6.44 / 6.10.3+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42307 In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential null pointer use in destroy_workqueue in init_cifs error pat… Linux Kernel 6.1.103 / 6.6.44+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42309 In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes In psb_int… Linux Kernel 4.19.320 / 5.4.282+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42282 In the Linux kernel, the following vulnerability has been resolved: net: mediatek: Fix potential NULL pointer dereference in dummy net_device handli… Linux Kernel 6.10.3+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42286 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: validate nvme_local_port correctly The driver load failed with e… Linux Kernel 4.19.320 / 5.4.282+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42289 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: During vport delete send async logout explicitly During vport de… Linux Kernel 4.19.320 / 5.4.282+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42269 In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). … Linux Kernel 6.1.104 / 6.6.45+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42270 In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). We had a r… Linux Kernel 6.1.104 / 6.6.45+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42277 In the Linux kernel, the following vulnerability has been resolved: iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en In sprd_iommu_cleanup() befor… Linux Kernel 5.15.165 / 6.1.103+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42278 In the Linux kernel, the following vulnerability has been resolved: ASoC: TAS2781: Fix tasdev_load_calibrated_data() This function has a reversed i… Linux Kernel 6.6.44 / 6.10+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2023-52889 In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix null pointer deref when receiving skb during sock creation The pa… Linux Kernel 5.4.282 / 5.10.224+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42266 In the Linux kernel, the following vulnerability has been resolved: btrfs: make cow_file_range_inline() honor locked_page on error The btrfs buffer… Linux Kernel 6.10.4+ Fix from $1,6002024-08-17 HIGH 8.6 CVE-2024-43357 ECMA-262 is the language specification for the scripting language ECMAScript. A problem in the ECMAScript (JavaScript) specification of async generat… Patch available Fix from $1,9502024-08-15 MEDIUM 5.5 CVE-2024-41866 InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application den… Indesign 18.5.3 / 19.5+ Fix from $1,6002024-08-14 HIGH 7.5 CVE-2024-41164 When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers… Big Ip Access Policy Manager 16.1.5+ Fix from $1,9502024-08-14 MEDIUM 5.5 CVE-2024-39395 InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application den… Indesign 18.5.3 / 19.5+ Fix from $1,6002024-08-14 MEDIUM 5.5 CVE-2024-34138 Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-se… Illustrator 27.9.5 / 28.6+ Fix from $1,6002024-08-14 MEDIUM 5.5 CVE-2024-34136 Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-se… Illustrator 27.9.5 / 28.6+ Fix from $1,6002024-08-14 MEDIUM 5.5 CVE-2024-34137 Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-se… Illustrator 27.9.5 / 28.6+ Fix from $1,6002024-08-14 HIGH 7.5 CVE-2024-37399EPSS 28% A NULL pointer dereference in WLAvalancheService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting i… Avalanche Mitigation only Fix from $1,9502024-08-14 HIGH 7.5 CVE-2024-38146 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability Windows 10 1507 10.0.10240.20751 / 10.0.14393.7259+ Fix from $1,9502024-08-13 HIGH 7.5 CVE-2024-38145 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability Windows 10 1507 10.0.10240.20751 / 10.0.14393.7259+ Fix from $1,9502024-08-13 HIGH 7.5 CVE-2024-38126 Windows Network Address Translation (NAT) Denial of Service Vulnerability Windows 10 1507 10.0.10240.20751 / 10.0.14393.7259+ Fix from $1,9502024-08-13 HIGH 7.5 CVE-2024-7006 A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures thro… Enterprise Linux after 4.6.0 Fix from $1,9502024-08-12 HIGH 7.5 CVE-2024-37826 A NULL pointer dereference in vercot Serva v4.6.0 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request. Serva Mitigation only Fix from $1,9502024-08-12 MEDIUM 5.5 CVE-2024-42254 In the Linux kernel, the following vulnerability has been resolved: io_uring: fix error pbuf checking Syz reports a problem, which boils down to NU… Linux Kernel Patch available Fix from $1,6002024-08-08