CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- linux, linux kernel +1 moremd: Don't register sync_thread for reshape directly5.5 Medium
- linux, linux kernel +1 moremd: Don't suspend the array for interrupted reshape5.3 Medium
- debian linux, linux kernel +1 moregtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()7.8 High
- debian linux, linux kernel +1 morecrypto: virtio/akcipher - Fix stack overflow on memcpy7.8 High
- debian linux, linux kernel +1 morel2tp: pass correct message length to ip6_append_data5.5 Medium
- debian linux, linux kernel +1 moreARM: ep93xx: Add terminator to gpiod_lookup_table5.5 Medium
- linux, linux kernel +1 moreusb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()7.8 High
- linux, linux kernel +1 moreusb: cdns3: fix memory double free when handle zero packet7.8 High
- debian linux, linux kernel +1 moreusb: roles: fix NULL pointer issue when put module's reference4.4 Medium
- debian linux, linux kernel +1 moreRDMA/srpt: Support specifying the srpt_service_guid parameter5.5 Medium
- debian linux, linux kernel +1 moreRDMA/qedr: Fix qedr_create_user_qp error flow5.5 Medium
- linux, linux kernel +1 morescsi: smartpqi: Fix disable_managed_interrupts7.8 High
- linux, linux kernel +1 moredccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished().5.5 Medium
- linux, linux kernel +1 morenet/sched: act_mirred: use the backlog for mirred ingress5.5 Medium
- debian linux, linux kernel +1 morenet/sched: act_mirred: don't override retval if we already lost the skb7.8 High
- linux, linux kernel +1 morepowerpc/pseries/iommu: DLPAR add doesn't completely initialize pci_controller5.5 Medium
- linux, linux kernel +1 morebpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel7.8 High
- debian linux, linux kernel +1 moreafs: Increase buffer size in afs_update_volume_status()8.1 High
- debian linux, linux kernel, netapp 8300 firmware +7 more +9 moreipv6: sr: fix possible use-after-free and null-ptr-deref5.5 Medium
- linux, linux kernel +1 moredevlink: fix possible use-after-free and memory leaks in devlink_init()7.0 High
- debian linux, linux kernel, netapp 8200 firmware +26 more +28 morearp: Prevent overflow in arp_req_get().5.5 Medium
- linux, linux kernel +1 morenet: implement lockless setsockopt(SO_PEEK_OFF)5.5 Medium
- linux, linux kernel +1 morebpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()5.3 Medium
- linux, linux kernel +1 morehwmon: (nct6775) Fix access to temperature configuration registers7.3 High
- linux, linux kernel +1 moredrm/amd/display: Fix potential null pointer dereference in dc_dmub_srv5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: fix null-pointer dereference on edid reading7.8 High
- linux, linux kernel +1 morefs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame()5.5 Medium
- linux, linux kernel +1 morefs/ntfs3: Fix oob in ntfs_listxattr7.1 High
- erlef oidccOpenID Connect client Atom Exhaustion in provider configuration worker ets table location5.3 Medium
- vitejs viteVite's `server.fs.deny` did not deny requests for patterns with directories5.9 Medium
- hcl software bigfix inventoryHCL BigFix Inventory is vulnerable to path traversal5.3 Medium
- tp-link er605, omada er605, omada er605 firmware +2 moreTP-Link Omada ER605 Access Control Command Injection Remote Code Execution Vulnerability6.8 Medium
- cisco emergency responderA vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to...4.9 Medium
- cisco emergency responderA vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to...4.3 Medium
- cisco small business rv series router firmware, rv016 firmware, rv042 firmware +4 more +6 moreA vulnerability in the web-based management interface of Cisco Small Business RV016, RV042,...6.1 Medium
- cisco nexus dashboard fabric controller, data center network manager +1 moreA vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard...7.5 High
- cisco nexus dashboardA vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to learn...4.3 Medium
- cisco telepresence management suite (tms), telepresence management suite +1 moreA vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS...5.5 Medium
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability7.8 High
- cisco identity services engine, identity services engine software +1 moreA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...6.5 Medium
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability3.3 Low
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability7.8 High
- cisco enterprise chat and emailA vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an...5.4 Medium
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader template Use-After-Free Remote Code Execution Vulnerability7.8 High
- cisco identity services engine, identity services engine software +1 moreA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...5.5 Medium
- Show moreLoading…