Vulnerability index

Browse CVEs

869 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Infinite LoopCWE-835 × clear
Linux Kernel MEDIUM 5.5
CVE-2023-53051

In the Linux kernel, the following vulnerability has been resolved: dm crypt: add cond_resched() to dmcrypt_write() The loop in dmcrypt_write may b…

Fix: 4.14.312 / 4.19.280+
Fix from $1,600 2025-05-02
Unclassified HIGH 7.5
CVE-2025-3857

When reading binary Ion data through Amazon.IonDotnet using the RawBinaryReader class, Amazon.IonDotnet does not check the number of bytes read from …

Mitigation only
Fix from $1,950 2025-04-21
Linux Kernel MEDIUM 5.5
CVE-2024-58097

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix RCU stall while reaping monitor destination ring While proces…

Fix: 6.14.2+
Fix from $1,600 2025-04-16
Peertube HIGH 7.5
CVE-2025-32947

This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint wh…

Fix: 7.1.1+
Fix from $1,950 2025-04-15
Suricata MEDIUM 5.5
CVE-2025-29918

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A PCRE rule can be written that…

Fix: 7.0.9+
Fix from $1,600 2025-04-10
Unclassified MEDIUM 6.9
CVE-2025-32029

ts-asn1-der is a collection of utility classes to encode ASN.1 data following DER rule. Incorrect number DER encoding can lead to denial on service f…

Patch available
Fix from $1,600 2025-04-07
Linux Kernel MEDIUM 5.5
CVE-2025-21971

In the Linux kernel, the following vulnerability has been resolved: net_sched: Prevent creation of classes with TC_H_ROOT The function qdisc_tree_r…

Fix: 5.4.292 / 5.10.236+
Fix from $1,600 2025-04-01
Linux Kernel MEDIUM 5.5
CVE-2025-21942

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix extent range end unlock in cow_file_range() Running generic/7…

Fix: 6.13.7+
Fix from $1,600 2025-04-01
Linux Kernel MEDIUM 5.5
CVE-2023-53026

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix ib block iterator counter overflow When registering a new DMA MR…

Fix: 5.4.231 / 5.10.166+
Fix from $1,600 2025-03-27
Linux Kernel MEDIUM 5.5
CVE-2025-21871

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix supplicant wait loop OP-TEE supplicant is a user-space daemon a…

Fix: 5.4.291 / 5.10.235+
Fix from $1,600 2025-03-27
Gecko Os MEDIUM 6.5
CVE-2025-2838

Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to …

Mitigation only
Fix from $1,600 2025-03-26
Zenml HIGH 7.5
CVE-2024-9340

A Denial of Service (DoS) vulnerability in zenml-io/zenml version 0.66.0 allows unauthenticated attackers to cause excessive resource consumption by …

Fix: 0.68.0+
Fix from $1,950 2025-03-20
Llamaindex HIGH 7.5
CVE-2024-12704

A vulnerability in the LangChainLLM class of the run-llama/llama_index repository, version v0.12.5, allows for a Denial of Service (DoS) attack. The …

Patch available
Fix from $1,950 2025-03-20
Fastchat HIGH 7.5
CVE-2024-10907

In lm-sys/fastchat Release v0.2.36, the server fails to handle excessive characters appended to the end of multipart boundaries. This flaw can be exp…

No fix yet
Fix from $1,950 2025-03-20
Unclassified HIGH 7.5
CVE-2024-10821

A Denial of Service (DoS) vulnerability in the multipart request boundary processing mechanism of the Invoke-AI server (version v5.0.1) allows unauth…

Mitigation only
Fix from $1,950 2025-03-20
Db Gpt HIGH 7.5
CVE-2024-10829

A Denial of Service (DoS) vulnerability in the multipart request boundary processing mechanism of eosphoros-ai/db-gpt v0.6.0 allows unauthenticated a…

No fix yet
Fix from $1,950 2025-03-20
Unclassified HIGH 8.7
CVE-2025-29776

Azle is a WebAssembly runtime for TypeScript and JavaScript on ICP. Calling `setTimer` in Azle versions `0.27.0`, `0.28.0`, and `0.29.0` causes an im…

Mitigation only
Fix from $1,950 2025-03-14
Linux Kernel MEDIUM 5.5
CVE-2025-21850

In the Linux kernel, the following vulnerability has been resolved: nvmet: Fix crash when a namespace is disabled The namespace percpu counter prot…

Fix: 6.13.5+
Fix from $1,600 2025-03-12
Unclassified HIGH 8.7
CVE-2025-27497

OpenDJ is an LDAPv3 compliant directory service. OpenDJ prior to 4.9.3 contains a denial-of-service (DoS) vulnerability that causes the server to bec…

Patch available
Fix from $1,950 2025-03-05
Nginx Unit MEDIUM 5.3
CVE-2025-1695

In NGINX Unit before version 1.34.2 with the Java Language Module in use, undisclosed requests can lead to an infinite loop and cause an increase in …

Fix: 1.34.2+
Fix from $1,600 2025-03-04
Linux Kernel MEDIUM 5.5
CVE-2022-49317

In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid infinite loop to flush node pages xfstests/generic/475 can give EIO…

Fix: 5.18.4+
Fix from $1,600 2025-02-26
Linux Kernel MEDIUM 5.5
CVE-2022-49097

In the Linux kernel, the following vulnerability has been resolved: NFS: Avoid writeback threads getting stuck in mempool_alloc() In a low memory s…

Fix: 5.10.111 / 5.15.34+
Fix from $1,600 2025-02-26
5th Gen Gpu Architecture Kernel Driver MEDIUM 6.1
CVE-2024-6790

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd…

Mitigation only
Fix from $1,600 2025-02-03
Linux Kernel MEDIUM 5.5
CVE-2025-21681

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on tx to unregistering netdev with carrier Commit in a …

Fix: 6.1.127 / 6.6.74+
Fix from $1,600 2025-01-31
Linux Kernel MEDIUM 5.5
CVE-2025-21665

In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64-bit offset to 32 bits On 32-bit kernels, folio_see…

Fix: 5.15.177 / 6.1.127+
Fix from $1,600 2025-01-31
Linux Kernel MEDIUM 5.5
CVE-2025-21667

In the Linux kernel, the following vulnerability has been resolved: iomap: avoid avoid truncating 64-bit offset to 32 bits on 32-bit kernels, iomap…

Fix: 6.1.127 / 6.6.74+
Fix from $1,600 2025-01-31
Linux Kernel MEDIUM 5.5
CVE-2025-21668

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: add missing loop break condition Currently imx8mp_bl…

Fix: 6.1.127 / 6.6.74+
Fix from $1,600 2025-01-31
Android HIGH 7.5
CVE-2024-40675

In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service wi…

Mitigation only
Fix from $1,950 2025-01-28
Linux Kernel MEDIUM 5.5
CVE-2024-57940

In the Linux kernel, the following vulnerability has been resolved: exfat: fix the infinite loop in exfat_readdir() If the file system is corrupted…

Fix: 6.1.125 / 6.6.72+
Fix from $1,600 2025-01-21
Unclassified MEDIUM 5.4
CVE-2025-23221

Fedify is a TypeScript library for building federated server apps powered by ActivityPub and other standards. This vulnerability allows a user to man…

Patch available
Fix from $1,600 2025-01-20