CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- linux, linux kernel +1 morenet/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte7.8 High
- linux, linux kernel +1 moreconfigfs: fix a race in configfs_{,un}register_subsystem()4.7 Medium
- linux, linux kernel +1 moreRDMA/ib_srp: Fix a deadlock5.5 Medium
- linux, linux kernel +1 morebpf: Fix crash due to out of bounds access into reg2btf_ids.5.5 Medium
- linux, linux kernel +1 moreiio: adc: men_z188_adc: Fix a resource leak in an error handling path5.5 Medium
- linux, linux kernel +1 moreiio: adc: tsc2046: fix memory corruption by preventing array overflow7.8 High
- linux, linux kernel +1 moreusb: gadget: rndis: add spinlock for rndis response list7.8 High
- linux, linux kernel +1 moreKVM: x86/mmu: make apf token non-zero to fix bug7.1 High
- linux, linux kernel +1 morehwmon: Handle failure to register sensor with thermal zone correctly5.5 Medium
- dell power manager (dpm), power manager +1 moreDell Power Manager (DPM), versions 3.15.0 and prior, contains an Incorrect Privilege Assignment...8.8 High
- themify builder, themifyme themify builder +1 moreThemify Builder <= 7.6.1 - Missing Authorization to Authenticated (Contributor+) Post Duplication4.3 Medium
- posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 moreThe Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget Settings6.4 Medium
- acyba acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress, acymailing +1 moreAcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function7.5 High
- linux, linux kernel +1 moreRDMA/cma: Do not change route.addr.src_addr outside state checks7.8 High
- linux, linux kernel +1 morethermal: int340x: fix memory leak in int3400_notify()5.5 Medium
- linux, linux kernel +1 morebtrfs: prevent copying too big compressed lzo segment7.8 High
- linux, linux kernel +1 moreriscv: fix oops caused by irqsoff latency tracer5.5 Medium
- linux, linux kernel +1 moresched/fair: Fix fault in reweight_entity4.7 Medium
- linux, linux kernel +1 morebtrfs: get rid of warning on transaction commit when using flushoncommit5.5 Medium
- linux, linux kernel +1 morecifs: fix double free race when mount fails in cifs_get_root()8.8 High
- linux, linux kernel +1 moreiwlwifi: mvm: check debugfs_dir ptr before use5.5 Medium
- linux, linux kernel +1 moreiommu/vt-d: Fix double list_add when enabling VMD in scalable mode5.5 Medium
- linux, linux kernel +1 morethermal: core: Fix TZ_GET_TRIP NULL pointer dereference5.5 Medium
- linux, linux kernel +1 morexen/netfront: destroy queues before real_num_tx_queues is zeroed5.5 Medium
- linux, linux kernel +1 moreblktrace: fix use after free for struct blk_trace7.8 High
- linux, linux kernel +1 morenetfilter: fix use-after-free in __nf_register_net_hook()7.8 High
- linux, linux kernel +1 morenetfilter: nf_queue: fix possible use-after-free7.8 High
- linux, linux kernel +1 morenet: ipv6: ensure we call ipv6_mc_down() at most once5.5 Medium
- linux, linux kernel +1 morenet/smc: fix connection leak5.5 Medium
- linux, linux kernel +1 morenet: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()5.5 Medium
- linux, linux kernel +1 moreauxdisplay: lcd2s: Fix memory leak in ->remove()5.5 Medium
- linux, linux kernel +1 moremptcp: Correctly set DATA_FIN timeout when number of retransmits is large5.5 Medium
- linux, linux kernel +1 moreibmvnic: free reset-work-item when flushing5.5 Medium
- linux, linux kernel +1 moreiommu/amd: Fix I/O page table memory leak5.5 Medium
- linux, linux kernel +1 morebtrfs: fix relocation crash due to premature return from btrfs_commit_transaction()5.5 Medium
- linux, linux kernel +1 morebtrfs: do not WARN_ON() if we have PageError set5.5 Medium
- linux, linux kernel +1 morebtrfs: do not start relocation until in progress drops are done5.5 Medium
- linux, linux kernel +1 morespi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op()5.5 Medium
hdf5OSS-FuzzUNKNOWN READ in H5FL_reg_mallocNo score- llamaindexLlamaIndex includes an exec call for `import {cls_name}`8.8 High
- matrix olmAn issue was discovered in Matrix libolm (aka Olm) through 3.2.16. There is Ed25519 signature...4.3 Medium
- matrix olmAn issue was discovered in Matrix libolm (aka Olm) through 3.2.16. Cache-timing attacks can occur...5.3 Medium
- matrix olmAn issue was discovered in Matrix libolm (aka Olm) through 3.2.16. The AES implementation is...5.3 Medium
- uci idol2, idol 2 +1 moreAn issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input...9.8 Critical
- uci idol2, idol 2 +1 moreAn issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is transferred...9.1 Critical
- uci idol2, idol 2 +1 moreAn issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input...9.8 Critical
- uci idol2, idol 2 +1 moreAn issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input...9.8 Critical
- uci idol2An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is sent between...5.3 Medium
- mirai botnetThe Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC (command...9.1 Critical
- jpressJPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause...8.8 High
- Show moreLoading…