CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- linux, linux kernel, acrn +2 morecppc_cpufreq: Fix possible null pointer dereference7.5 High
- linux, linux kernel +1 morewifi: ath12k: fix out-of-bound access of qmi_invoke_handler()7.8 High
- linux, linux kernel +1 morethermal/drivers/tsens: Fix null pointer dereference5.5 Medium
- linux, linux kernel +1 moregfs2: Fix potential glock use-after-free on unmount9.8 Critical
- linux, linux kernel +1 moredrivers/perf: hisi_pcie: Fix out-of-bound access when valid event group7.8 High
- linux, linux kernel +1 moredrivers/perf: hisi: hns3: Fix out-of-bound access when valid event group7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: carl9170: add a proper sanity check for endpoints5.5 Medium
- linux, linux kernel +1 morebpf: Fix verifier assumptions about socket->sk5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: ar5523: enable proper endpoint verification5.5 Medium
- linux, linux kernel +1 morebpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE7.8 High
- linux, linux kernel +1 morewifi: mt76: mt7996: fix potential memory leakage when reading chip temperature5.5 Medium
- linux, linux kernel +1 morewifi: nl80211: Avoid address calculations via out of bounds array indexing7.8 High
- linux, linux kernel +1 morekunit: Fix kthread reference7.0 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morescsi: bfa: Ensure the copied buf is NUL terminated7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morescsi: qedf: Ensure the copied buf is NUL terminated4.4 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenet: openvswitch: fix overwriting ct original tuple for ICMPv610.0 Critical
- linux, linux kernel +1 morenet/mlx5: Reload only IB representors upon lag disable/enable5.5 Medium
- linux, linux kernel +1 morenet/mlx5: Add a timeout to acquire the command queue semaphore7.8 High
- linux, linux kernel +1 morenet/mlx5: Discard command completions in internal error7.0 High
- linux, linux kernel +1 moreax25: Fix reference count leak issue of net_device5.5 Medium
- linux, linux kernel +1 morenet: fec: remove .ndo_poll_controller to avoid deadlocks5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrm/amd/display: Fix potential index out of bounds in color transformation function7.3 High
- linux, linux kernel +1 moreASoC: mediatek: Assign dummy when codec not specified for a DAI link5.5 Medium
- linux, linux kernel +1 moreASoC: kirkwood: Fix potential NULL dereference4.4 Medium
- linux, linux kernel +1 moredrm/mediatek: Add 0 size check to mtk_drm_gem_obj5.5 Medium
- linux, linux kernel +1 moredrm: bridge: cdns-mhdp8546: Fix possible null pointer dereference5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremedia: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries5.5 Medium
- linux, linux kernel +1 moredrm: vc4: Fix possible null pointer dereference5.5 Medium
- linux, linux kernel +1 moreRDMA/hns: Fix UAF for cq async event7.8 High
- linux, linux kernel +1 moreRDMA/rxe: Fix seg fault in rxe_comp_queue_pkt9.8 Critical
- linux, linux kernel +1 morelib/test_hmm.c: handle src_pfns and dst_pfns allocation failure5.5 Medium
- linux, linux kernel +1 moreRDMA/mana_ib: boundary check before installing cq callbacks7.8 High
- linux, linux kernel +1 moreof: module: add buffer overflow check in of_modalias()7.8 High
- linux, linux kernel +1 morebnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq4.4 Medium
- linux, linux kernel +1 moreRDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use siw7.5 High
- linux, linux kernel +1 morenet: bridge: xmit: make sure we have at least eth header len bytes7.3 High
- linux, linux kernel +1 morenet: bridge: mst: fix vlan use-after-free7.8 High
- ninjaforms ninja formsWordPress Ninja Forms plugin <= 3.6.25 - Contributor+ Broken Access Control vulnerability7.6 High
- woo automatewooWordPress AutomateWoo plugin <= 5.7.5 - Broken Access Control vulnerability6.5 Medium
- woo woocommerce warranty requestsWordPress WooCommerce Warranty Requests plugin <= 2.1.9 - Broken Access Control vulnerability8.1 High
- elementor proWordPress Elementor Pro plugin <= 3.13.0 - Auth. Broken Access Control vulnerability5.4 Medium
- woocommerce stripe payment gatewayWordPress WooCommerce Stripe Payment Gateway plugin <= 7.4.0 - Unauthenticated Broken Access Control vulnerability7.5 High
- brainstorm force premium starter templates, starter templates +1 moreBroken Access Control vulnerability in multiple Brainstorm Force plugins6.5 Medium
- theme-fusion avadaWordPress Avada theme <= 7.11.1 - Authenticated Broken Access Control vulnerability4.3 Medium
- paid memberships pro memberships pro, strangerstudios paid memberships pro +1 moreWordPress Paid Memberships Pro plugin <= 1.2.3 - Broken Access Control vulnerability5.4 Medium
- wpmet elements kit elementor addonsWordPress ElementsKit Lite plugin <= 2.9.0 - Broken Access Control vulnerability4.3 Medium
- muffingroup bethemeWordPress BeTheme theme <= 27.1.1 - Author+ Broken Access Control vulnerability8.2 High
- servmask all-in-one wp migration box extension, all-in-one wp migration dropbox extension, all-in-one wp migration google drive extension +2 more +4 moreUnauth. Access Token Manipulation vulnerability in multiple ServMask WordPress plugins7.3 High
- paid memberships pro ccbill gateway, paidmembershipspro cc bill gateway plugin +1 moreWordPress Paid Memberships Pro CCBill Gateway plugin <= 0.3 - Unauthenticated Broken Access Control vulnerability8.2 High
- brainstorm force astra bulk edit, brainstormforce astra +1 moreWordPress Astra Bulk Edit plugin <= 1.2.7 - Broken Access Control vulnerability5.4 Medium
- Show moreLoading…