CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- ieisystem uefi firmwareA race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to...8.7 High
- ieisystem uefi firmwareNULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged...6.9 Medium
- No product listedImproper input validation in UEFI firmware error handler for some Intel(R) Processors may allow a...8.7 High
- No product listedImproper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged...7.0 High
- intel atom c5325 firmwareImproper access control in UEFI firmware for some Intel(R) Processors may allow a privileged user...8.7 High
- intel xeon d-2799 firmwareUntrusted pointer dereference in UEFI firmware for some Intel(R) reference processors may allow a...8.7 High
- intel xeon d-2799 firmwareImproper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged...7.3 High
- intel raid web consoleImproper access control in Intel(R) RAID Web Console all versions may allow an authenticated user...3.3 Low
- No product listedRace condition in Seamless Firmware Updates for some Intel(R) reference platforms may allow a...8.3 High
- intel raid web consoleImproper access control in Intel(R) RAID Web Console software all versions may allow an...3.5 Low
- intel raid web consoleImproper access control in Intel(R) RAID Web Console all versions may allow an authenticated user...4.6 Medium
- intel raid web consoleNULL pointer dereference in Intel(R) RAID Web Console software for all versions may allow an...4.7 Medium
- intel raid web consoleImproper input validation in some Intel(R) RAID Web Console software all versions may allow an...5.2 Medium
- intel raid web consoleUncaught exception in Intel(R) RAID Web Console software all versions may allow an authenticated...6.5 Medium
- intel raid web consoleImproper access control in Intel(R) RAID Web Console software for all versions may allow an...6.5 Medium
- intel raid web consoleImproper access control in Intel(R) RAID Web Console software for all versions may allow an...6.7 Medium
- intel raid web consoleUncontrolled search path element in Intel(R) RAID Web Console software for all versions may allow...6.7 Medium
- linux, linux kernel +1 morecgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask()5.5 Medium
- linuxobjtool: Fix SEGFAULT8.2 High
- linux, linux kernel +1 moreath9k: fix use-after-free in ath9k_hif_usb_rx_cb7.8 High
- beijerelectronics webiqWebIQ 2.15.9 Runtime on Windows - Directory Traversal Vulnerability9.3 Critical
- ibm aspera sharesIBM Aspera Shares session fixation6.3 Medium
- sfs insuree glSQLi in SFS Consulting's InsureE GL9.2 Critical
- sfs winsure, sfs consulting ww.winsure, wwwinsure +2 moreRemote Code Execution in SFS Consulting's ww.Winsure9.2 Critical
- sfs winsure, sfs consulting ww.winsure, wwwinsure +2 moreXML Injection in SFS Consulting's ww.Winsure9.2 Critical
- mattermost, mattermost desktop +1 moreInsufficient Electron Fuses Configuration2.5 Low
- mattermost, mattermost desktop +1 moreSilent Desktop Screenshot Capture3.7 Low
- linuxseccomp: Move copy_seccomp() to no failure path.5.7 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in visionOS 2.3,...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5,...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA type confusion issue was addressed with improved state handling. This issue is fixed in watchOS...4.3 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS...8.8 High
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, tvOS...9.8 Critical
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS...8.0 High
- apache seataApache Seata: Remote Code Execution vulnerability via Hessian Deserialization in Apache Seata Server9.8 Critical
- linuxdrm/client: Fix memory leak in drm_client_target_cloned7.8 High
- linuxdrm/ttm: Don't leak a resource on swapout move error7.8 High
- linuxperf tool x86: Fix perf_env memory leak7.8 High
- linuxvirt/coco/sev-guest: Double-buffer messages9.3 Critical
- linux, linux kernel +1 moreblk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()5.5 Medium
- linux, linux kernel +1 moredrm/client: Fix memory leak in drm_client_modeset_probe5.5 Medium
- linuxdrm: Prevent drm_copy_field() to attempt copying a NULL pointer7.8 High
- linux, linux kernel +1 moreskbuff: Account for tail adjustment during pull operations7.5 High
- linux, linux kernel +1 morecapabilities: fix potential memleak on error path from vfs_getxattr_alloc()5.5 Medium
- linux, linux kernel +1 moretick/nohz: unexport __init-annotated tick_nohz_full_setup()5.5 Medium
- linux, linux kernel +1 moreLSM: general protection fault in legacy_parse_param5.5 Medium
- linux, linux kernel +1 moredrm/dp_mst: Fix resetting msg rx state after topology removal7.0 High
- linux, linux kernel +1 moredriver core: fix potential null-ptr-deref in device_add()5.5 Medium
- linuxplatform/x86/amd: pmc: Fix memory leak in amd_pmc_stb_debugfs_open_v2()8.2 High
- linuxdm flakey: don't corrupt the zero page7.8 High
- Show moreLoading…