CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- linux, linux kernel +1 moredrm/amd/display: Add null checker before passing variables5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Fix NULL pointer dereference for DTN log in DCN4015.5 Medium
- linux, linux kernel +1 moremedia: xc2028: avoid use-after-free in load_firmware_cb()7.8 High
- linux, linux kernel +1 moredrm/amd/display: Fix null pointer deref in dcn20_resource.c5.5 Medium
- linux, linux kernel +1 morenet: drop bad gso csum_start and offset in virtio_net_hdr7.8 High
- linux, linux kernel +1 moreASoC: cs-amp-lib: Fix NULL pointer crash if efi.get_variable is NULL5.5 Medium
- linux, linux kernel +1 moredrm/client: fix null pointer dereference in drm_client_modeset_probe5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreserial: core: check uartclk for zero to avoid divide by zero5.5 Medium
- linux, linux kernel +1 morememcg: protect concurrent access to mem_cgroup_idr7.8 High
- linux, linux kernel +1 moretracing: Have format file honor EVENT_FILE_FL_FREED7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moretracing: Fix overflow in get_free_elt()5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morepadata: Fix possible divide-by-0 panic in padata_mt_helper()5.5 Medium
- linux, linux kernel +1 moremm: list_lru: fix UAF for memory cgroup7.8 High
- linux, linux kernel +1 morenet/tcp: Disable TCP-AO static key after RCU grace period4.7 Medium
- linux, linux kernel +1 moredrm/amd/display: Add null check in resource_log_pipe_topology_update5.5 Medium
- ciges cigesv2SQL injection vulnerability in CIGESv2 system9.8 Critical
- otrs, otrs ag ((otrs)) community edition +1 morePasswords are written to Admin Log Module8.2 High
- otrs ag ((otrs)) community edition, otrs +1 moreStored XSS in process management4.9 Medium
- otrs ag ((otrs)) community edition, otrs +1 moreStored XSS in System Configuration4.9 Medium
- linux, linux kernel +1 moreBluetooth: MGMT: Add error handling to pair_device()5.5 Medium
- getshieldsecurity shield securityShield Security < 20.0.6 - Reflected XSS6.1 Medium
- expresstech quiz and survey master, unknown quiz and survey master (qsm) +1 moreQuiz and Survey Master (QSM) < 9.1.1 - Contributor+ Stored XSS4.7 Medium
- hillstone networks web application firewallCommand Injection Vulnerability in Hillstone Networks Web Application Firewall9.8 Critical
- skyss arfa-cms, skysystem arfa cms +1 moreA SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows...9.8 Critical
- malwared byobAn arbitrary file write issue in the exfiltration endpoint in BYOB (Build Your Own Botnet) 2.0...9.8 Critical
- centralsquare crywolfA traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf (False Alarm Management)...7.5 High
- gazelle project gazelleA cross-site scripting (XSS) vulnerability in the component /managers/enable_requests.php of...6.1 Medium
- picuploader project picuploaderA cross-site scripting (XSS) vulnerability in the component /auth/AzureRedirect.php of...6.1 Medium
- gazelle project gazelleA cross-site scripting (XSS) vulnerability in the component /login/disabled.php of Gazelle commit...6.1 Medium
- picuploader commit, xiebruce picuploader +1 moreA cross-site scripting (XSS) vulnerability in the component /master/auth/OnedriveRedirect.php of...6.1 Medium
- gazelle project gazelleA cross-site scripting (XSS) vulnerability in the component /managers/multiple_freeleech.php of...6.1 Medium
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the function...9.8 Critical
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function...9.8 Critical
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the...9.8 Critical
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function...9.8 Critical
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the...9.8 Critical
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function...9.8 Critical
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function...9.8 Critical
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the...9.8 Critical
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function...9.8 Critical
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the...9.8 Critical
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function...9.8 Critical
- ruoyiRuoYi CMS v4.7.9 was discovered to contain a SQL injection vulnerability via the job_id parameter...9.8 Critical
- jenkins testlinkTestLink before v.1.9.20 is vulnerable to Cross Site Scripting (XSS) via the pop-up on upload...6.1 Medium
- fastapi-admin proFastAPI Admin Cross-site Scripting vulnerability in the Config-Create function6.1 Medium
- fastapi-admin proFastAPI Admin cross-site scripting (XSS) vulnerability in the Create Product function6.1 Medium
- kashipara music management systemA Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System...3.5 Low
- kashipara music management systemA Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System...8.8 High
- kashipara music management systemA Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/index.php?page=test" in...5.4 Medium
- kashipara music management systemA Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/controller.php?page...6.3 Medium
- Show moreLoading…