CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
github.com/jub0bs/fcorsGoSome CORS middleware allow untrusted origins9.3 Criticalgithub.com/jub0bs/corsGoSome CORS middleware allow untrusted origins9.3 Critical- pterodactyl wingsServer-side Request Forgery during remote file pull in Pterodactyl wings6.4 Medium
- ibm cognos controllerIBM Cognos Controller information disclosure5.3 Medium
- ibm cognos controllerIBM Cognos Controller information disclosure3.7 Low
- ibm cognos controllerIBM Cognos Controller information disclosure4.3 Medium
- ibm cognos controllerIBM Cognos Controller information disclosure5.9 Medium
- ibm aspera orchestratorIBM Aspera Orchestrator command execution8.8 High
- linux, linux kernel +1 morethermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR5.5 Medium
- linux, linux kernel +1 moreALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()7.8 High
- linux, linux kernel +1 moreALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()7.1 High
- linux, linux kernel +1 moresched/debug: fix dentry leak in update_sched_domain_debugfs5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: fix memory leak when using debugfs_lookup()5.3 Medium
- linux, linux kernel +1 morenvmet: fix a use-after-free9.8 Critical
- linux, linux kernel +1 moreregmap: spi: Reserve space for register address/padding7.1 High
- linux, linux kernel +1 moreRDMA/irdma: Fix drain SQ hang with no completion7.5 High
- linux, linux kernel +1 moresoc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs5.5 Medium
- linux, linux kernel +1 moreRDMA/srp: Set scmnd->result only when scmnd is not NULL7.5 High
- linux, linux kernel +1 morenetfilter: nf_tables: clean up hook list when offload flags check fails5.5 Medium
- linux, linux kernel +1 moretcp: TX zerocopy should not sense pfmemalloc status7.0 High
- linux, linux kernel +1 morei40e: Fix kernel crash during module removal5.5 Medium
- linux, linux kernel +1 moreipv6: sr: fix out-of-bounds read when setting HMAC data.5.5 Medium
- linux, linux kernel +1 morenvme-tcp: fix UAF when detecting digest errors9.8 Critical
- linux, linux kernel +1 moreIB/core: Fix a nested dead lock as part of ODP flow5.5 Medium
- linux, linux kernel +1 moreerofs: fix pcluster use-after-free on UP platforms7.8 High
- linux, linux kernel +1 morenet/smc: Fix possible access to freed memory in link clear9.8 Critical
- linux, linux kernel +1 moreof: fdt: fix off-by-one error in unflatten_dt_nodes()7.8 High
- linux, linux kernel +1 morecgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()5.5 Medium
- linux, linux kernel +1 morepeci: cpu: Fix use-after-free in adev_release()7.8 High
- motorola phonesAn Implicit intent vulnerability was reported in the Motorola framework that could allow an...2.8 Low
- motorola phonesAn improper export vulnerability was reported in the Motorola Enterprise MotoDpms Provider (com...2.8 Low
- motorola phonesA hard-coded AES key vulnerability was reported in the Motorola GuideMe application, along with...6.3 Medium
- motorola phonesAn implicit intent vulnerability was reported for Motorola’s Time Weather Widget application...5.5 Medium
- motorola firmware, phones +1 moreAn improper absolute path traversal vulnerability was reported for the Ready For application...6.5 Medium
- motorola phones, smartphone firmware +1 moreAn implicit intent export vulnerability was reported in the Motorola Phone application, that...4.4 Medium
- motorola device help, phones +1 moreA PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could...5.1 Medium
- motorola phonesA path traversal vulnerability was reported in the Motorola Ready For application that could...2.8 Low
- motorola phonesAn implicit intent vulnerability was reported in the Motorola Phone Calls application that could...2.8 Low
- motorola phones, smartphone firmware +1 moreAn improper export vulnerability was reported in the Motorola Phone Extension application, that...4.4 Medium
- motorola interface test tool, phones +1 moreAn improper export vulnerability was reported in the Motorola Interface Test Tool application...4.8 Medium
- motorola phonesA an improper export vulnerability was reported in the Motorola Setup application that could...5.0 Medium
- motorola phonesAn implicit intent vulnerability was reported in the Motorola Ready For application that could...5.0 Medium
- motorola phonesA PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application...6.1 Medium
- motorola phonesAn improper use of the SD card for sensitive data vulnerability was reported in the Motorola...5.0 Medium
- motorola phonesAn improper export vulnerability was reported in the Motorola Phone Calls application that could...2.8 Low
- motorola services main, phones +1 moreAn improper export vulnerability was reported in the Motorola Services Main application that...5.0 Medium
- google protobufUse after free in C++ protobuf7.6 High
- centros digitales gescenSQL injection vulnerability in Gescen9.8 Critical
- sugarsyncUnquoted path or search item vulnerability in SugarSync7.8 High
- aws sagemaker-python-sdkDeserialization of Untrusted Data in sagemaker-python-sdk7.8 High
- Show moreLoading…