Browse CVEs

MEDIUM 5.5 CVE-2024-26587 In the Linux kernel, the following vulnerability has been resolved: net: netdevsim: don't try to destroy PHC on VFs PHC gets initialized in nsim_in… Linux Kernel 6.6.14 / 6.7.2+ Fix from $1,6002024-02-22 MEDIUM 6.5 CVE-2023-29179 A null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, Fortiproxy version 7.2.0 thro… Fortios 6.4.13 / 7.0.11+ Fix from $1,6002024-02-22 HIGH 7.5 CVE-2023-29180 A null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.14, 6.0.0 t… Fortiproxy 2.0.13 / 6.0.17+ Fix from $1,9502024-02-22 HIGH 7.5 CVE-2024-26130 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to versi… Cryptography 42.0.4+ Fix from $1,9502024-02-21 MEDIUM 6.5 CVE-2024-25197 Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent() f… Nav2 after 1.1.17 Fix from $1,6002024-02-20 MEDIUM 5.3 CVE-2023-6397 A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG FLEX series firmware versions f… Atp100 Firmware 5.37+ Fix from $1,6002024-02-20 HIGH 7.8 CVE-2024-0035 In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due to a missing null check. This co… Android Patch available Fix from $1,9502024-02-16 HIGH 7.5 CVE-2024-24989 When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note:… Nginx Open Source Mitigation only Fix from $1,9502024-02-14 HIGH 7.5 CVE-2024-24775 When a virtual server is enabled with VLAN group and SNAT listener is configured, undisclosed traffic can cause the Traffic Management Microkernel (T… Big Ip Access Policy Manager 15.1.9 / 16.1.4+ Fix from $1,9502024-02-14 HIGH 7.5 CVE-2024-23308 When a BIG-IP Advanced WAF or BIG-IP ASM policy with a Request Body Handling option is attached to a virtual server, undisclosed requests can cause t… Big Ip Advanced Web Application Firewall 17.1.1+ Fix from $1,9502024-02-14 HIGH 7.5 CVE-2024-21763 When BIG-IP AFM Device DoS or DoS profile is configured with NXDOMAIN attack vector and bad actor detection, undisclosed queries can cause the Traffi… Big Ip Advanced Firewall Manager 17.1.1+ Fix from $1,9502024-02-14 HIGH 7.5 CVE-2024-21404 .NET Denial of Service Vulnerability Asp.net Core 6.0.27 / 7.0.16+ Fix from $1,9502024-02-13 MEDIUM 6.5 CVE-2024-21356 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability Windows 10 1507 10.0.10240.20469 / 10.0.14393.6709+ Fix from $1,6002024-02-13 MEDIUM 5.5 CVE-2024-1096 Twister Antivirus v8.17 is vulnerable to a Denial of Service vulnerability by triggering the 0x80112067, 0x801120CB 0x801120CC 0x80112044, 0x8011204B… Twister Antivirus Mitigation only Fix from $1,6002024-02-13 MEDIUM 5.5 CVE-2024-23799 A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007… Tecnomatix Plant Simulation 2302.0007+ Fix from $1,6002024-02-13 MEDIUM 5.5 CVE-2024-23800 A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007… Tecnomatix Plant Simulation 2302.0007+ Fix from $1,6002024-02-13 MEDIUM 5.5 CVE-2024-23801 A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007… Tecnomatix Plant Simulation 2302.0007+ Fix from $1,6002024-02-13 MEDIUM 5.5 CVE-2024-22043 A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.251), Parasolid V35.1 (All versions < V35.1.170). The affected applicati… Parasolid 35.0.251 / 35.1.170+ Fix from $1,6002024-02-13 MEDIUM 6.5 CVE-2023-48363 A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PCS … Openpcs 7 after 18 Fix from $1,6002024-02-13 MEDIUM 6.5 CVE-2023-48364 A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PCS … Openpcs 7 after 18 Fix from $1,6002024-02-13 HIGH 7.5 CVE-2024-23327 Envoy is a high-performance edge/middle/service proxy. When PPv2 is enabled both on a listener and subsequent cluster, the Envoy instance will segfau… Envoy 1.26.7 / 1.27.3+ Fix from $1,9502024-02-09 MEDIUM 5.5 CVE-2024-25453 Bento4 v1.6.0-640 was discovered to contain a NULL pointer dereference via the AP4_StszAtom::GetSampleSize() function. Bento4 No fix yet Fix from $1,6002024-02-09 MEDIUM 5.5 CVE-2024-25454 Bento4 v1.6.0-640 was discovered to contain a NULL pointer dereference via the AP4_DescriptorFinder::Test() function. Bento4 No fix yet Fix from $1,6002024-02-09 HIGH 7.5 CVE-2023-6356 A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages whe… Codeready Linux Builder Eus Mitigation only Fix from $1,9502024-02-07 HIGH 7.5 CVE-2023-6535 A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages whe… Linux Kernel Mitigation only Fix from $1,9502024-02-07 HIGH 7.5 CVE-2023-6536 A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages whe… Linux Kernel 5.4.268 / 5.10.209+ Fix from $1,9502024-02-07 HIGH 7.5 CVE-2023-43522 Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. Aqt1000 Firmware Mitigation only Fix from $1,9502024-02-06 MEDIUM 5.3 CVE-2024-24860 A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can result in a null pointer dere… Linux Kernel after 6.7.2 Fix from $1,6002024-02-05 MEDIUM 5.5 CVE-2023-40546 A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an err… Shim 15.8+ Fix from $1,6002024-01-29 MEDIUM 5.5 CVE-2024-23441 Vba32 Antivirus v3.36.0 is vulnerable to a Denial of Service vulnerability by triggering the 0x2220A7 IOCTL code of the Vba32m64.sys driver. Vba32 No fix yet Fix from $1,6002024-01-29