CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- linux, linux kernel +1 morebpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets7.8 High
- linux, linux kernel +1 morenet: fix possible store tearing in neigh_periodic_work()8.8 High
- linux, linux kernel +1 moreplatform/x86: think-lmi: Fix reference leak5.5 Medium
- linux, linux kernel +1 moreHID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit7.1 High
- linux, linux kernel +1 morespi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain7.8 High
- linux, linux kernel +1 moredma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock5.5 Medium
- linux, linux kernel +1 moreRDMA/srp: Do not call scsi_done() from srp_abort()9.8 Critical
- linux, linux kernel +1 moreRDMA/siw: Fix connection failure handling7.5 High
- linux, linux kernel +1 morepinctrl: nuvoton: wpcm450: fix out of bounds write5.5 Medium
- linux, linux kernel +1 morespi: sun6i: reduce DMA RX transfer width to single byte5.3 Medium
- linux, linux kernel +1 moreieee802154: ca8210: Fix a potential UAF in ca8210_probe7.8 High
- linux, linux kernel +1 moreravb: Fix use-after-free issue in ravb_tx_timeout_work()7.8 High
- linux, linux kernel +1 morenvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()5.5 Medium
- linux, linux kernel +1 morenfc: nci: assert requested protocol is valid7.1 High
- linux, linux kernel +1 moreLoongArch: Set all reserved memblocks on Node#0 at initialization5.5 Medium
- linux, linux kernel +1 morephy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers4.7 Medium
- linux, linux kernel +1 morex86/alternatives: Disable KASAN in apply_alternatives()7.1 High
- linux, linux kernel +1 moretee: amdtee: fix use-after-free vulnerability in amdtee_close_session7.8 High
- linux, linux kernel +1 morenet: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()8.8 High
- linux, linux kernel +1 morering-buffer: Do not attempt to read past "commit"7.1 High
- linux, linux kernel +1 morescsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command5.5 Medium
- linux, linux kernel +1 morepowerpc/47x: Fix 47x syscall return crash5.5 Medium
- linux, linux kernel +1 moreceph: drop messages from MDS when unmounting5.5 Medium
- linux, linux kernel +1 moremm: huge_memory: don't force huge page alignment on 32 bit8.2 High
- debian linux, linux kernel +1 morevt: fix memory overlapping when deleting chars in the buffer5.5 Medium
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreCreate user API role not enforced7.2 High
- g5plus ultimate bootstrap elements for elementorUltimate Bootstrap Elements for Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- averta master slider – responsive touch slider, master slider +1 moreMaster Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- averta master slider – responsive touch slider, master slider +1 moreMaster Slider – Responsive Touch Slider <= 3.9.9 - Authenticated(Editor+) Stored Cross-Site Scripting via slider callback4.4 Medium
- averta master slider – responsive touch slider, master slider +1 moreMaster Slider - Responsive Touch Slider <= 3.9.10 - Cross-Site Request Forgery via process_bulk_action5.4 Medium
- jordymeow ai engine, jordy meow ai-engine, tigroumeow ai engine – the chatbot, ai framework & mcp for wordpress +2 moreAI Engine <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting6.5 Medium
- nextendweb nextend social login and register, nextend social login +1 moreNextend Social Login and Register <= 3.1.12 - Reflected Self-Based Cross-Site Scripting via error_description5.4 Medium
- complianz – gdpr/ccpa cookie consent, really-simple-plugins complianz +1 moreComplianz – GDPR/CCPA Cookie Consent <= 6.5.6 - Cross-Site Request Forgery to Data Request Deletion4.3 Medium
- hikvision hikcentral professionalDue to insufficient server-side validation, an attacker with login privileges could access...4.3 Medium
- hikvision hikcentral professionalDue to insufficient server-side validation, a successful exploit of this vulnerability could...7.5 High
- anzhiyu-c hexo-theme-anzhiyuhexo-theme-anzhiyu Cross-site Scripting vulnerability6.1 Medium
- hp inc. designjet, hp cq891c firmware, cq893c firmware +3 more +5 moreCertain HP DesignJet print products are potentially vulnerable to information disclosure related...7.5 High
- linux, linux kernel +1 morehabanalabs/gaudi: Fix a potential use after free in gaudi_memset_device_memory7.8 High
- linux, linux kernel +1 moreRDMA/core: Prevent divide-by-zero error triggered by the user5.5 Medium
- linux, linux kernel +1 moreplatform/x86: ideapad-laptop: fix a NULL pointer dereference5.5 Medium
- linux, linux kernel +1 moreRDMA/rxe: Clear all QP fields if creation failed7.8 High
- linux, linux kernel +1 morescsi: qedf: Add pointer checks in qedf_update_link_speed()5.5 Medium
- linux, linux kernel +1 moreRDMA/rxe: Return CQE error if invalid lkey was supplied5.5 Medium
- linux, linux kernel +1 morenvmet: fix memory leak in nvmet_alloc_ctrl()5.3 Medium
- linux, linux kernel +1 morenvme-loop: fix memory leak in nvme_loop_create_ctrl()5.5 Medium
- linux, linux kernel +1 moreplatform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios5.5 Medium
- linux, linux kernel +1 morebtrfs: fix removed dentries still existing after log is synced5.5 Medium
- linux, linux kernel +1 moreuio_hv_generic: Fix a memory leak in error handling paths5.5 Medium
- linux, linux kernel +1 moreuio_hv_generic: Fix another memory leak in error handling paths5.5 Medium
- linux, linux kernel +1 moreipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry7.8 High
- Show moreLoading…