Browse CVEs

MEDIUM 5.3 CVE-2024-34044 The O-RAN E2T I-Release buildPrometheusList function can have a NULL pointer dereference because peerInfo can be NULL. Mitigation only Fix from $1,6002024-04-30 MEDIUM 5.3 CVE-2023-50432 simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service (daemon crash) by sending a DHCP packet without any option fi… Mitigation only Fix from $1,6002024-04-29 MEDIUM 6.5 CVE-2024-33345 D-Link DIR-823G A1V1.0.2B05 was found to contain a Null-pointer dereference in the main function of upload_firmware.cgi, which allows remote attacker… Dir 823g Firmware No fix yet Fix from $1,6002024-04-29 MEDIUM 5.5 CVE-2022-48644 In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: avoid disabling offload when it was never enabled In an incr… Linux Kernel 5.4.215 / 5.10.146+ Fix from $1,6002024-04-28 MEDIUM 6.2 CVE-2022-48646 In the Linux kernel, the following vulnerability has been resolved: sfc/siena: fix null pointer dereference in efx_hard_start_xmit Like in previous… Linux Kernel 5.19.12+ Fix from $1,6002024-04-28 MEDIUM 5.5 CVE-2022-48647 In the Linux kernel, the following vulnerability has been resolved: sfc: fix TX channel offset when using legacy interrupts In legacy interrupt mod… Linux Kernel 5.10.146 / 5.15.71+ Fix from $1,6002024-04-28 MEDIUM 5.5 CVE-2022-48648 In the Linux kernel, the following vulnerability has been resolved: sfc: fix null pointer dereference in efx_hard_start_xmit Trying to get the chan… Linux Kernel 5.10.146 / 5.15.71+ Fix from $1,6002024-04-28 MEDIUM 5.5 CVE-2022-48652 In the Linux kernel, the following vulnerability has been resolved: ice: Fix crash by keep old cfg when update TCs more than queues There are probl… Linux Kernel 5.19 / 5.19.12+ Fix from $1,6002024-04-28 MEDIUM 5.5 CVE-2022-48663 In the Linux kernel, the following vulnerability has been resolved: gpio: mockup: fix NULL pointer dereference when removing debugfs We now remove … Linux Kernel 5.10.146 / 5.15.71+ Fix from $1,6002024-04-28 HIGH 7.8 CVE-2022-48636 In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup Fix Oop… Linux Kernel 4.9.330 / 4.14.295+ Fix from $1,9502024-04-28 MEDIUM 5.5 CVE-2022-48640 In the Linux kernel, the following vulnerability has been resolved: bonding: fix NULL deref in bond_rr_gen_slave_id Fix a NULL dereference of the s… Linux Kernel 5.15.71 / 5.19.12+ Fix from $1,6002024-04-28 MEDIUM 5.5 CVE-2023-52646 In the Linux kernel, the following vulnerability has been resolved: aio: fix mremap after fork null-deref Commit e4a0d3e720e7 ("aio: Make it possib… Linux Kernel 4.14.306 / 4.19.273+ Fix from $1,6002024-04-26 HIGH 7.6 CVE-2024-31755 cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at … Cjson No fix yet Fix from $1,9502024-04-26 HIGH 7.8 CVE-2024-26924 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: do not free live element Pablo reports a crash with … Linux Kernel 5.10.216 / 5.15.157+ Fix from $1,9502024-04-25 HIGH 7.5 CVE-2024-32661 FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to a possible `NULL` acc… Fedora 3.5.1+ Fix from $1,9502024-04-23 HIGH 7.5 CVE-2023-48183 QuickJS before c4cdd61 has a build_for_in_iterator NULL pointer dereference because of an erroneous lexical scope of "this" with eval. Quickjs 2023-12-09+ Fix from $1,9502024-04-23 MEDIUM 5.5 CVE-2024-1241 Watchdog Antivirus v1.6.415 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002014 IOCTL code of the wsdk-driver.sys driver. Mitigation only Fix from $1,6002024-04-23 MEDIUM 6.5 CVE-2023-49275 Wazuh is a free and open source platform used for threat prevention, detection, and response. A NULL pointer dereference was detected during fuzzing … Wazuh 4.7.1+ Fix from $1,6002024-04-19 MEDIUM 6.5 CVE-2024-27978 A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to … Avalanche 6.4.3.528+ Fix from $1,6002024-04-19 MEDIUM 6.5 CVE-2024-24991 A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to … Avalanche 6.4.3.528+ Fix from $1,6002024-04-19 HIGH 7.5 CVE-2024-31041 Null Pointer Dereference vulnerability in topic_filtern function in mqtt_parser.c in NanoMQ 0.21.7 allows attackers to cause a denial of service. Nanomq No fix yet Fix from $1,9502024-04-17 MEDIUM 5.5 CVE-2024-26902 In the Linux kernel, the following vulnerability has been resolved: perf: RISCV: Fix panic on pmu overflow handler (1 << idx) of int is not desired… Linux Kernel 6.6.23 / 6.7.11+ Fix from $1,6002024-04-17 MEDIUM 5.5 CVE-2024-26903 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security During our fuzz … Linux Kernel 4.19.311 / 5.4.273+ Fix from $1,6002024-04-17 MEDIUM 5.5 CVE-2024-26881 In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when 1588 is received on HIP08 devices The HIP08 de… Linux Kernel 5.15.153 / 6.1.83+ Fix from $1,6002024-04-17 MEDIUM 5.5 CVE-2024-26867 In the Linux kernel, the following vulnerability has been resolved: comedi: comedi_8255: Correct error in subdevice initialization The refactoring … Linux Kernel 6.7.11+ Fix from $1,6002024-04-17 MEDIUM 5.5 CVE-2024-26868 In the Linux kernel, the following vulnerability has been resolved: nfs: fix panic when nfs4_ff_layout_prepare_ds() fails We've been seeing the fol… Linux Kernel 6.1.83 / 6.6.23+ Fix from $1,6002024-04-17 MEDIUM 5.5 CVE-2024-26871 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix NULL pointer dereference in f2fs_submit_page_write() BUG: kernel NULL… Linux Kernel 6.6.23 / 6.7.11+ Fix from $1,6002024-04-17 MEDIUM 5.5 CVE-2024-26879 In the Linux kernel, the following vulnerability has been resolved: clk: meson: Add missing clocks to axg_clk_regmaps Some clocks were missing from… Linux Kernel 5.15.153 / 6.1.83+ Fix from $1,6002024-04-17 MEDIUM 5.5 CVE-2024-26880 In the Linux kernel, the following vulnerability has been resolved: dm: call the resume method on internal suspend There is this reported crash whe… Linux Kernel 4.19.311 / 5.4.273+ Fix from $1,6002024-04-17 HIGH 7.5 CVE-2024-26854 In the Linux kernel, the following vulnerability has been resolved: ice: fix uninitialized dplls mutex usage The pf->dplls.lock mutex is initialize… Linux Kernel 6.7.10+ Fix from $1,9502024-04-17