Vulnerability index

Browse CVEs

744 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Use of Uninitialized ResourceCWE-908 × clear
Linux Kernel MEDIUM 5.5
CVE-2024-50237

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Avoid p…

Fix: 4.19.323 / 5.4.285+
Fix from $1,600 2024-11-09
Linux Kernel MEDIUM 5.5
CVE-2024-50241

In the Linux kernel, the following vulnerability has been resolved: NFSD: Initialize struct nfsd4_copy earlier Ensure the refcount and async_copies…

Fix: 6.11.7+
Fix from $1,600 2024-11-09
Linux Kernel MEDIUM 5.5
CVE-2024-50173

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup() The gro…

Fix: 6.10.14 / 6.11.3+
Fix from $1,600 2024-11-08
Linux Kernel HIGH 7.8
CVE-2024-50143

In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in udf_get_fileshortad Check for overflow when comput…

Fix: 4.19.323 / 5.4.285+
Fix from $1,950 2024-11-07
Linux Kernel MEDIUM 5.5
CVE-2024-50110

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix one more kernel-infoleak in algo dumping During fuzz testing, the fol…

Fix: 5.15.170 / 6.1.115+
Fix from $1,600 2024-11-05
Autocad HIGH 7.8
CVE-2024-8896

A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious…

Fix: 2025.1.1+
Fix from $1,950 2024-10-29
Linux Kernel HIGH 7.1
CVE-2024-50033

In the Linux kernel, the following vulnerability has been resolved: slip: make slhc_remember() more robust against malicious packets syzbot found t…

Fix: 5.10.227 / 5.15.168+
Fix from $1,950 2024-10-21
Linux Kernel HIGH 7.1
CVE-2024-50035

In the Linux kernel, the following vulnerability has been resolved: ppp: fix ppp_async_encode() illegal access syzbot reported an issue in ppp_asyn…

Fix: 5.10.227 / 5.15.168+
Fix from $1,950 2024-10-21
Linux Kernel MEDIUM 5.5
CVE-2022-48949

In the Linux kernel, the following vulnerability has been resolved: igb: Initialize mailbox message for VF reset When a MAC address is not assigned…

Fix: 4.14.303 / 4.19.270+
Fix from $1,600 2024-10-21
Linux Kernel MEDIUM 5.5
CVE-2024-50014

In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path The following kernel t…

Fix: 6.10.14 / 6.11.3+
Fix from $1,600 2024-10-21
Linux Kernel MEDIUM 5.5
CVE-2024-49990

In the Linux kernel, the following vulnerability has been resolved: drm/xe/hdcp: Check GSC structure validity Sometimes xe_gsc is not initialized w…

Fix: 6.10.14 / 6.11.3+
Fix from $1,600 2024-10-21
Linux Kernel HIGH 7.1
CVE-2024-49900

In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of new_ea in ea_buffer syzbot reports that lzo1x_1…

Fix: 5.10.227 / 5.15.168+
Fix from $1,950 2024-10-21
Debian Linux CRITICAL 9.1
CVE-2024-47685

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() syzbot reported that …

Fix: 4.19.323 / 5.4.285+
Fix from $2,300 2024-10-21
Linux Kernel MEDIUM 5.5
CVE-2024-47687

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix invalid mr resource destroy Certain error paths from mlx5_vdpa_d…

Fix: 6.10.13 / 6.11.2+
Fix from $1,600 2024-10-21
Cncsoft G2 HIGH 7.8
CVE-2024-47966

Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a malicious page …

Mitigation only
Fix from $1,950 2024-10-10
Windows 10 1809 MEDIUM 6.5
CVE-2024-43537

Windows Mobile Broadband Driver Denial of Service Vulnerability

Fix: 10.0.17763.6414 / 10.0.19044.5011+
Fix from $1,600 2024-10-08
Windows 10 1809 HIGH 7.1
CVE-2024-43502EPSS 6%

Windows Kernel Elevation of Privilege Vulnerability

Fix: 10.0.17763.6414 / 10.0.19044.5011+
Fix from $1,950 2024-10-08
Linux Kernel HIGH 7.1
CVE-2024-46865

In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a…

Patch available
Fix from $1,950 2024-09-27
Linux Kernel MEDIUM 5.5
CVE-2024-46784

In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup Currently n…

Fix: 6.1.110 / 6.6.51+
Fix from $1,600 2024-09-18
Windows 10 1607 HIGH 7.7
CVE-2024-43458

Windows Networking Information Disclosure Vulnerability

Fix: 10.0.14393.7336+
Fix from $1,950 2024-09-10
Windows Server 2008 HIGH 8.8
CVE-2024-38260

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Fix: 10.0.14393.7336 / 10.0.17763.6293+
Fix from $1,950 2024-09-10
Windows 10 1507 MEDIUM 6.2
CVE-2024-38254

Windows Authentication Information Disclosure Vulnerability

Fix: 10.0.10240.20766 / 10.0.14393.7336+
Fix from $1,600 2024-09-10
Windows 10 1507 MEDIUM 5.5
CVE-2024-38256

Windows Kernel-Mode Driver Information Disclosure Vulnerability

Fix: 10.0.10240.20766 / 10.0.14393.7336+
Fix from $1,600 2024-09-10
Windows 10 1607 HIGH 7.5
CVE-2024-38257

Microsoft AllJoyn API Information Disclosure Vulnerability

Fix: 10.0.14393.7336 / 10.0.17763.6293+
Fix from $1,950 2024-09-10
MongoDB CRITICAL 9.8
CVE-2024-8654

MongoDB Server may access non-initialized region of memory leading to unexpected behaviour when zero arguments are called in internal aggregation sta…

Fix: after 6.0.3
Fix from $2,300 2024-09-10
FreeBSD HIGH 8.8
CVE-2024-8178

The ctl_write_buffer and ctl_read_buffer functions allocated memory to be returned to userspace, without initializing it. Malicious software running…

Fix: 13.3+
Fix from $1,950 2024-09-05
Linux Kernel HIGH 7.1
CVE-2024-44999

In the Linux kernel, the following vulnerability has been resolved: gtp: pull network headers in gtp_dev_xmit() syzbot/KMSAN reported use of uninit…

Fix: 4.19.321 / 5.4.283+
Fix from $1,950 2024-09-04
Linux Kernel MEDIUM 5.5
CVE-2024-45005

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: fix validity interception issue when gisa is switched off We might r…

Fix: 6.6.48 / 6.10.7+
Fix from $1,600 2024-09-04
Linux Kernel HIGH 7.1
CVE-2024-44983

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate vlan header Ensure there is sufficient room to a…

Fix: 5.15.166 / 6.1.107+
Fix from $1,950 2024-09-04
Linux Kernel HIGH 7.1
CVE-2024-43815

In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - Ensure payload is zero when using key slot We could leak stac…

Fix: 6.10.3+
Fix from $1,950 2024-08-17