CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- linux, linux kernel +1 moreKVM: VMX: Prevent RSB underflow before vmenter5.5 Medium
- linux, linux kernel +1 moreice: Fix memory corruption in VF driver7.8 High
- linux, linux kernel +1 morex86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave)7.8 High
- linux, linux kernel +1 moredm integrity: fix memory corruption when tag_size is less than digest size7.8 High
- linux, linux kernel +1 morenet: openvswitch: fix leak of nested actions5.5 Medium
- linuxipmi:ssif: Fix a memory leak when scanning for an adapter8.4 High
- linux, linux kernel +1 morenet/mlx5e: Check for NOT_READY flag state after locking4.7 Medium
- linux, linux kernel +1 morecpufreq: Init completion before kobject_init_and_add()5.5 Medium
- linux, linux kernel +1 moreice: Don't tx before switchdev is fully configured5.5 Medium
- linuxi40e: Fix DMA mappings leak8.1 High
- linux, linux kernel +1 moremedia: dvbdev: adopts refcnt to avoid UAF7.8 High
- linux, linux kernel +1 moresctp: handle the error returned from sctp_auth_asoc_init_active_key7.8 High
- linux, linux kernel +1 morescsi: qla2xxx: Fix crash when I/O abort times out8.8 High
- linux, linux kernel +1 morenet: sched: fix memory leak in tcindex_set_parms5.5 Medium
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu8.8 High
- linux, linux kernel +1 morex86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly5.5 Medium
- linux, linux kernel +1 morecifs: fix potential double free during failed mount7.8 High
- zephyrproject zephyrBT: HCI: adv_ext_report Improper discarding in adv_ext_report7.6 High
- zephyrproject zephyrBT: Classic: SDP OOB access in get_att_search_list7.6 High
- zephyrproject zephyrBT: Unchecked user input in bap_broadcast_assistant6.3 Medium
- zephyrproject zephyrBT: Missing length checks of net_buf in rfcomm_handle_data6.8 Medium
- zephyrproject zephyrBT: Encryption procedure host vulnerability8.2 High
- linuxcrypto: qat - fix out-of-bounds read7.1 High
- qdocs smart school management system, smart school +1 moreQDocs Smart School Management System Chat mynewuser sql injection5.3 Medium
- opentibiabr myaacOpenTibiaBR MyAAC Post Reply new_post.php cross site scripting5.3 Medium
- heyewei jfinalcmsJFinalCMS edit delete path traversal5.3 Medium
- linux, linux kernel +1 moreNFSv4: Fix free of uninitialized nfs4_label on referral lookup.9.8 Critical
- lenovo hx1331 certified node (thinkagile) bios, hx2330 appliance (thinkagile) bios, hx2331 certified node (thinkagile) bios +112 more +114 moreAn internal product security audit discovered a UEFI SMM (System Management Mode) callout...6.7 Medium
- lenovo xclarity administratorA valid, authenticated LXCA user without sufficient privileges may be able to use the device...6.3 Medium
- lenovo xclarity administratorA valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the...4.3 Medium
- lenovo xclarity administratorA privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that...6.8 Medium
- lenovo hx enclosure certified node (thinkagile) xcc, hx1021 edge certified node 3yr (thinkagile) xcc, hx1320 appliance (thinkagile) xcc +155 more +157 moreAn input validation weakness was discovered in XCC that could allow a valid, authenticated XCC...7.2 High
- lenovo hx enclosure certified node (thinkagile) xcc, hx1021 edge certified node 3yr (thinkagile) xcc, hx1320 appliance (thinkagile) xcc +155 more +157 moreAn input validation weakness was discovered in XCC that could allow a valid, authenticated XCC...7.2 High
- lenovo hx enclosure certified node (thinkagile) xcc, hx1021 edge certified node 3yr (thinkagile) xcc, hx1320 appliance (thinkagile) xcc +155 more +157 moreA privilege escalation vulnerability was discovered in XCC that could allow a valid,...7.2 High
- lenovo hx enclosure certified node (thinkagile) xcc, hx1021 edge certified node 3yr (thinkagile) xcc, hx1320 appliance (thinkagile) xcc +155 more +157 moreA privilege escalation vulnerability was discovered in XCC that could allow a valid,...7.2 High
- lenovo hx enclosure certified node (thinkagile) xcc, hx1021 edge certified node 3yr (thinkagile) xcc, hx1320 appliance (thinkagile) xcc +137 more +139 moreIPMI credentials may be captured in XCC audit log entries when the account username length is 16...4.3 Medium
- lenovo 10w (type 82st, 82su) laptop (lenovo) bios, 10w firmware, l390 (type 20nr, 20ns) laptops (thinkpad) bios +2 more +4 moreA potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could...6.8 Medium
- lenovo p360 workstation (thinkstation) bios, st50 (thinksystem) bios, st50 v2 (thinksystem) bios +7 more +9 moreA potential buffer overflow vulnerability was reported in some Lenovo ThinkSystem and...6.7 Medium
- lenovo 100w gen 3 laptop (lenovo) bios, 100w gen 4 laptop (lenovo) bios, 100w gen 3 firmware +76 more +78 moreA potential buffer overflow vulnerability was reported in some Lenovo Notebook products that...6.7 Medium
- eaton foreseer, foreseer electrical power monitoring system +1 moreThe Eaton Foreseer software provides multiple customizable input fields for the users to...5.6 Medium
- eaton foreseer, foreseer electrical power monitoring system +1 moreThe Eaton Foreseer software provides the feasibility for the user to configure external servers...6.3 Medium
- eaton foreseer, foreseer electrical power monitoring system +1 moreThe Eaton Foreseer software provides users the capability to customize the dashboard in WebView...6.7 Medium
- automationdirect directlogic h2-dm1e, h2-dm1e firmware +1 moreAutomationDirect DirectLogic H2-DM1E Session Fixation8.7 High
- automationdirect directlogic h2-dm1e, h2-dm1e firmware +1 moreAutomationDirect DirectLogic H2-DM1E Authentication Bypass by Capture-replay8.7 High
- lunary, lunary-ai lunary-ai/lunary, lunary-ai\/lunary +2 moreCross-Site Request Forgery (CSRF) in lunary-ai/lunary7.4 High
- lunary, lunary-ai lunary-ai/lunary, lunary-ai\/lunary +2 moreInformation Disclosure in lunary-ai/lunary4.3 Medium
- lunary, lunary-ai lunary-ai/lunary, lunary-ai\/lunary +2 moreImproper Access Control in lunary-ai/lunary6.5 Medium
- lunary, lunary-ai lunary-ai/lunary, lunary-ai\/lunary +2 moreBroken Access Control in lunary-ai/lunary6.5 Medium
- berriai berriai/litellm, litellm +1 moreSSRF in berriai/litellm7.5 High
- ubiquiti unifi network applicationA Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi...7.8 High
- Show moreLoading…