CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- linux, linux kernel +1 moreNFS: Fix use-after-free in nfs4_init_client()7.8 High
- linux, linux kernel +1 morescsi: core: Fix error handling of scsi_host_alloc()5.5 Medium
- linux, linux kernel +1 morenet: ieee802154: fix null deref in parse dev addr5.5 Medium
- linux, linux kernel +1 moremm/memory-failure: make sure wait for page writeback in memory_failure5.5 Medium
- linux, linux kernel +1 morekvm: LAPIC: Restore guard to prevent illegal APIC register access7.1 High
- linux, linux kernel +1 moregfs2: Fix use-after-free in gfs2_glock_shrink_scan7.8 High
- linux, linux kernel +1 moredrm/amd/display: Fix potential memory leak in DMUB hw_init5.5 Medium
- linux, linux kernel +1 morebatman-adv: Avoid WARN_ON timing related checks5.5 Medium
- linux, linux kernel +1 moremac80211: fix skb length check in ieee80211_scan_rx()7.8 High
- linux, linux kernel +1 morenet: ipv4: fix memory leak in netlbl_cipsov4_add_std5.5 Medium
- linux, linux kernel +1 morenet: rds: fix memory leak in rds_recvmsg5.5 Medium
- linux, linux kernel +1 moreudp: fix race between close() and udp_abort()7.8 High
- debian linux, linux kernel +1 morenet/mlx5e: Fix use-after-free of encap entry in neigh update handler7.8 High
- linux, linux kernel +1 morenet/mlx5e: Fix page reclaim for dead peer hairpin5.5 Medium
- linux, linux kernel +1 morenetfilter: synproxy: Fix out of bounds when parsing TCP options8.2 High
- linux, linux kernel +1 moremptcp: Fix out of bounds when parsing TCP options8.2 High
- linux, linux kernel +1 moresch_cake: Fix out of bounds when parsing TCP options and header7.1 High
- linux, linux kernel +1 moremptcp: fix soft lookup in subflow_error_report()7.5 High
- linux, linux kernel +1 moreethtool: strset: fix message length calculation7.5 High
- linux, linux kernel +1 morenet: qrtr: fix OOB Read in qrtr_endpoint_post8.4 High
- linux, linux kernel +1 morenet: usb: fix possible use-after-free in smsc75xx_bind7.8 High
- linux, linux kernel +1 morenet: ipv4: fix memory leak in ip_mc_add1_src5.5 Medium
- linux, linux kernel +1 morenet: hamradio: fix memory leak in mkiss_close5.5 Medium
- linux, linux kernel +1 morenet: cdc_eem: fix tx fixup skb leak5.5 Medium
- linux, linux kernel +1 morenet: ethernet: fix potential use-after-free in ec_bhf_remove7.8 High
- linux, linux kernel +1 morephy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init()5.5 Medium
- linux, linux kernel +1 moreregulator: rt4801: Fix NULL pointer dereference if priv->enable_gpios is NULL5.5 Medium
- linux, linux kernel +1 morecan: j1939: fix Use-after-Free, hold skb ref while in use9.8 Critical
- linux, linux kernel +1 morecan: mcba_usb: fix memory leak in mcba_usb5.5 Medium
- linux, linux kernel +1 moreKVM: x86: Immediately reset the MMU context when the SMM flag is cleared6.6 Medium
- linux, linux kernel +1 morePCI: aardvark: Fix kernel panic during PIO transfer5.5 Medium
- linux, linux kernel +1 morex86/ioremap: Map EFI-reserved memory as encrypted for SEV6.2 Medium
- linux, linux kernel +1 morex86/fpu: Prevent state corruption in __fpu__restore_sig()5.5 Medium
- linux, linux kernel +1 morex86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer7.1 High
- linux, linux kernel +1 moremac80211: fix deadlock in AP/VLAN handling5.5 Medium
- linux, linux kernel +1 morenet: ll_temac: Make sure to free skb when it is completely used7.8 High
- linux, linux kernel +1 morenet: bridge: fix vlan tunnel dst null pointer dereference5.5 Medium
- linux, linux kernel +1 morenet: bridge: fix vlan tunnel dst refcnt when egressing7.8 High
- linux, linux kernel +1 moremm/slub: actually fix freelist pointer vs redzoning5.5 Medium
- wpmet elementskit, elementskit pro +1 moreElementsKit Pro <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- umbraco cms, umbraco-cms +1 moreUmbraco CMS Vulnerable to Stored XSS on Content Page Through Markdown Editor Preview Pane4.2 Medium
- cesanta mjsAn issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the...4.3 Medium
- cesanta mjsAn issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the...5.5 Medium
- cesanta mjsAn issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the...7.5 High
- zkteco facedepot 7b, smartec st fr041me, smartec st fr043 +1 more +3 moreMultiple buffer overflow in ZkTeco-based OEM devices10.0 Critical
- umbraco cms, umbraco-cms +1 moreOpen Redirect Bypass Protection6.1 Medium
- ome omero-webOMERO.web JSONP callback vulnerability6.1 Medium
- zkteco facedepot 7b, smartec st fr041me, smartec st fr043 +1 more +3 moreMultiple SQLi in ZkTeco-based OEM devices7.5 High
- mtab bookmarkMTab Bookmark v1.9.5 has an SQL injection vulnerability in /LinkStore/getIcon. An attacker can...9.8 Critical
- google tink, tink (legacy), tink c\+\+ +2 moreDenial of Service in Tink-cc6.8 Medium
- Show moreLoading…