CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- linux, linux kernel +1 morecachefiles: fix dentry leak in cachefiles_open_file()5.5 Medium
- linux, linux kernel +1 morebtrfs: send: fix buffer overflow detection when copying path to cache entry7.8 High
- linux, linux kernel +1 morebtrfs: fix a NULL pointer dereference when failed to start a new trasacntion5.5 Medium
- linux, linux kernel +1 morebtrfs: wait for fixup workers before stopping cleaner kthread during umount7.8 High
- linux, linux kernel +1 moretracing/timerlat: Fix a race during cpuhp processing7.8 High
- linux, linux kernel +1 moredrm/xe/vm: move xa_alloc to prevent UAF7.8 High
- linux, linux kernel +1 morerxrpc: Fix a race between socket set up and I/O thread creation7.5 High
- linux, linux kernel +1 morevhost/scsi: null-ptr-dereference in vhost_scsi_get_req()5.5 Medium
- nginxui nginx ui, 0xjacky nginx-ui +1 moreUnchecked logrotate settings lead to arbitrary command execution8.9 High
- nginxui nginx ui, 0xjacky nginx-ui +1 moreNginx UI's log path can be controlled5.5 Medium
- hikashop, hikashop.com hikashop component for joomla +1 moreExtension - hikashop.com - Stored cross site scripting vulnerability in Hikashop component for Joomla < 5.1.15.4 Medium
- nginxui nginx ui, 0xjacky nginx-ui +1 moreNginx UI's json field can construct a directory traversal payload, causing arbitrary files to be written7.7 High
- cryptocoinjs secp256k1-nodesecp256k1-node vulnerable to private key extraction over ECDH8.7 High
- onedev project onedevOneDev vulnerable to arbitrary file reading for unauthenticated user8.7 High
- qemu, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability8.2 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server secondaries may crash due to forced index constraints6.5 Medium
libgsfUbuntulibgsf vulnerabilitiesNo scorecups-browsedUbuntucups-browsed vulnerabilityNo score- linux, linux kernel +1 morepowercap: intel_rapl: Fix off by one in get_rpi()7.1 High
- linux, linux kernel +1 morebpf: Fix helper writes to read-only maps7.8 High
- linux, linux kernel +1 moreACPI: sysfs: validate return type of _STR method7.3 High
- linux, linux kernel +1 moref2fs: fix to check atomic_file in f2fs ioctl interfaces7.8 High
- linux, linux kernel +1 moreefistub/tpm: Use ACPI reclaim memory for event log to avoid corruption5.5 Medium
- linux, linux kernel +1 morewifi: iwlwifi: mvm: set the cipher for secured NDP ranging7.1 High
- linux, linux kernel +1 morex86/sgx: Fix deadlock in SGX NUMA node search5.5 Medium
- linux, linux kernel +1 morenbd: fix race between timeout and normal completion9.8 Critical
- linux, linux kernel +1 moreblock, bfq: fix uaf for accessing waker_bfqq after splitting7.8 High
- linux, linux kernel +1 morefirmware: arm_scmi: Fix double free in OPTEE transport7.8 High
- linux, linux kernel +1 morescsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moretpm: Clean up TPM space after command failure5.5 Medium
- linux, linux kernel +1 morebpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos5.5 Medium
- linux, linux kernel +1 morenilfs2: fix potential oob read in nilfs_btree_check_delete()7.1 High
- linux, linux kernel +1 morePCI: keystone: Fix if-statement expression in ks_pcie_quirk()5.5 Medium
- linux, linux kernel +1 moremedia: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning5.5 Medium
- linux, linux kernel +1 moremedia: mediatek: vcodec: Fix VP8 stateless decoder smatch warning5.5 Medium
- linux, linux kernel +1 moremedia: mediatek: vcodec: Fix H264 stateless decoder smatch warning5.5 Medium
- linux, linux kernel +1 morePCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()7.8 High
- linux, linux kernel +1 moreRDMA/hns: Fix Use-After-Free of rsv_qp on HIP087.8 High
- linux, linux kernel +1 moreRDMA/cxgb4: Added NULL check for lookup_atid7.5 High
- linux, linux kernel +1 morevhost_vdpa: assign irq bypass producer token correctly7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenet: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition7.8 High
- linux, linux kernel +1 morefuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set5.5 Medium
- debian linux, linux kernel +1 moremm: call the security_mmap_file() LSM hook in remap_file_pages()7.8 High
- linux, linux kernel +1 moreKVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock5.5 Medium
- linux, linux kernel +1 moreKEYS: prevent NULL pointer dereference in find_asymmetric_key()5.5 Medium
- debian linux, linux kernel +1 morefirmware_loader: Block path traversal7.8 High
- linux, linux kernel +1 morebtrfs: fix race setting file private on concurrent lseek using same fd7.8 High
- linux, linux kernel +1 moref2fs: Require FMODE_WRITE for atomic write ioctls7.1 High
- linux, linux kernel +1 morepadata: use integer wrap around to prevent deadlock on seq_nr overflow7.5 High
- linux, linux kernel +1 morewifi: mac80211: don't use rate mask for offchannel TX either3.3 Low
- Show moreLoading…