CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()5.5 Medium
- linux, linux kernel +1 moreipv6: prevent NULL dereference in ip6_output()5.5 Medium
- linux, linux kernel +1 morenet: hns3: fix kernel crash when devlink reload during initialization5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moregpiolib: cdev: Fix use after free in lineinfo_changed_notify7.0 High
- linux, linux kernel +1 moregpiolib: cdev: fix uninitialised kfifo7.1 High
- linux, linux kernel +1 moredrm/amd/display: Atom Integrated System Info v2_2 for DCN355.5 Medium
- linux, linux kernel +1 moreUSB: core: Fix access violation during port device removal9.1 Critical
- linux, linux kernel +1 moreusb: gadget: uvc: use correct buffer size when parsing configfs lists7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreusb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete7.8 High
- linux, linux kernel +1 moreusb: typec: tcpm: Check for port partner validity before consuming it5.5 Medium
- linux, linux kernel +1 moremm/slub: avoid zeroing outside-object freepointer for single free5.5 Medium
- linux, linux kernel +1 moremaple_tree: fix mas_empty_area_rev() null pointer dereference5.5 Medium
- linux, linux kernel +1 moremm/slab: make __free(kfree) accept error pointers7.8 High
- debian linux, linux kernel +1 moremptcp: ensure snd_nxt is properly initialized on connect5.5 Medium
- linux, linux kernel +1 moreworkqueue: Fix selection of wake_cpu in kick_pool()6.2 Medium
- linux, linux kernel +1 moree1000e: change usleep_range to udelay in PHY mdic access5.5 Medium
- debian linux, linux kernel +1 moretipc: fix UAF in error path9.8 Critical
- linux, linux kernel +1 moreiommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()7.8 High
- debian linux, linux kernel +1 morenet: fix out-of-bounds access in ops_init7.8 High
- linux, linux kernel +1 moremm: use memalloc_nofs_save() in page_cache_ra_order()5.5 Medium
- linux, linux kernel +1 moremm/userfaultfd: reset ptes when close() for wr-protected ones5.5 Medium
- linux, linux kernel +1 moreBluetooth: qca: add missing firmware sanity checks7.8 High
- linux, linux kernel +1 moreBluetooth: qca: fix info leak when fetching board id7.1 High
- linux, linux kernel +1 moreBluetooth: qca: fix info leak when fetching fw build id8.1 High
- linux, linux kernel +1 morekeys: Fix overwrite of key expiration on instantiation9.8 Critical
- debian linux, linux kernel +1 moreclk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change5.5 Medium
- linux, linux kernel +1 moreocteontx2-af: fix the double free in rvu_npc_freemem()7.1 High
- linux, linux kernel +1 moremmc: sdhci-msm: pervent access to suspended controller5.5 Medium
- linux, linux kernel +1 moremm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio()4.7 Medium
- 3ds delmia aprisoPre-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 20249.0 Critical
- 3ds delmia aprisoPost-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 20248.5 High
typo3/cms-corePackagistTYPO3 Information Disclosure in Install Tool5.3 Mediumtypo3/cms-corePackagistTYPO3 Security Misconfiguration in Install Tool Cookie7.5 High- linux, linux kernel +1 morebtrfs: zoned: do not flag ZEROOUT on non-dirty extent buffer7.1 High
- linux, linux kernel +1 moredrm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/115.5 Medium
- linux, linux kernel +1 morescsi: qla2xxx: Fix off by one in qla_edif_app_getstats()5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Disable idle reallow as part of command/gpint execution4.7 Medium
- linux, linux kernel +1 moreJulia Lawall reported this null pointer dereference, this should fix it.5.5 Medium
- finesoft project finesoftA cross-site scripting (XSS) vulnerability in the login page of FineSoft v8.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL:errorname parameter…5.4 Medium
- linux, linux kernel +1 morenet: hns3: fix kernel crash when devlink reload during pf initialization5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morei40e: fix vf may be used uninitialized in this function warning7.8 High
- huggingface huggingface/text-generation-inference, text generation inference +1 moreCode Injection in huggingface/text-generation-inference4.4 Medium
- linux, linux kernel +1 moreregmap: maple: Fix cache corruption in regcache_maple_drop()7.8 High
- linux, linux kernel +1 morenouveau/uvmm: fix addr/range calcs for remap operations7.8 High
typo3/cms-corePackagistTYPO3 Cross-Site Scripting in Frontend User Login6.1 Mediumtypo3/cms-corePackagistTYPO3 Cross-Site Scripting in Backend Modal Component6.1 Mediumtypo3/cms-corePackagistTYPO3 CMS Insecure Deserialization7.5 Hightypo3/cms-corePackagistTYPO3 Cross-Site Scripting in Online Media Asset Rendering6.1 Medium- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal in parisneo/lollms-webui4.0 Medium
- adonesevangelista online blood bank management systemitsourcecode Online Blood Bank Management System changepwd.php sql injection6.9 Medium
- Show moreLoading…