CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- linux, linux kernel +1 morenet/smc: do not leave a dangling sk pointer in __smc_create()7.8 High
- linux, linux kernel +1 moreASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove5.5 Medium
- linux, linux kernel +1 moremedia: dvb-core: add missing buffer index check7.8 High
- linux, linux kernel +1 moremedia: cx24116: prevent overflows on SNR calculus5.5 Medium
- linux, linux kernel +1 moremedia: av7110: fix a spectre vulnerability5.5 Medium
- linux, linux kernel +1 moremedia: vivid: fix buffer overwrite when using > 32 buffers7.8 High
- linux, linux kernel +1 moremedia: v4l2-tpg: prevent the risk of a division by zero5.5 Medium
- linux, linux kernel +1 moreksmbd: fix slab-use-after-free in ksmbd_smb2_session_create9.8 Critical
- linux, linux kernel +1 moreksmbd: check outstanding simultaneous SMB operations7.5 High
- linux, linux kernel +1 moreksmbd: Fix the missing xa_store error check7.5 High
- linux, linux kernel +1 moreksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp9.8 Critical
- linux, linux kernel +1 moredrm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()7.8 High
- linux, linux kernel +1 moreKEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation7.8 High
- linux, linux kernel +1 moredm cache: fix flushing uninitialized delayed_work on cache_ctr error7.8 High
- linux, linux kernel +1 moredm cache: fix out-of-bounds access to the dirty bitset when resizing7.1 High
- linux, linux kernel +1 moredm cache: fix potential out-of-bounds access on the first resume7.1 High
- linux, linux kernel +1 moredm: fix a crash if blk_alloc_disk fails4.7 Medium
- linux, linux kernel +1 morenet: vertexcom: mse102x: Fix possible double free of TX skb9.8 Critical
- linux, linux kernel +1 morearm64/sve: Discard stale CPU state when handling SVE traps7.3 High
- linux, linux kernel +1 moreidpf: avoid vport access in idpf_get_link_ksettings7.8 High
- linux, linux kernel +1 morebtrfs: reinitialize delayed ref list after deleting it from the list7.8 High
- linux, linux kernel +1 morefilemap: Fix bounds checking in filemap_read()5.5 Medium
- linux, linux kernel +1 moresignal: restore the override_rlimit logic5.5 Medium
- linux, linux kernel +1 moremm/damon/core: avoid overflow in damon_feed_loop_next_input()5.5 Medium
- linux, linux kernel +1 moreusb: musb: sunxi: Fix accessing an released usb phy7.8 High
- linux, linux kernel +1 moreusb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()7.8 High
- linux, linux kernel +1 moreUSB: serial: io_edgeport: fix use after free in debug printk7.8 High
- linux, linux kernel +1 moreclk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs5.5 Medium
- linux, linux kernel +1 moreocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()5.5 Medium
- linux, linux kernel +1 morevsock/virtio: Initialization of the dangling pointer occurring in vsk->trans7.8 High
- linux, linux kernel +1 moredrm/amdgpu: fix possible UAF in amdgpu_cs_pass1()7.8 High
- tenda w30e firmwareTenda W30E v2.0 V16.01.0.8 was discovered to contain a hardcoded password vulnerability in ...8.0 High
- tenda w9 firmwareTenda W9 v1.0.0.7(4456) was discovered to contain a hardcoded password vulnerability in /etc_ro...8.0 High
- ganglia ganglia-webA cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of Ganglia-web...5.4 Medium
- ganglia ganglia-webA cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3...5.4 Medium
- dlink di-8003 firmwareD-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in...9.8 Critical
- tenda ac6 firmware, ac6v2.0 firmware +1 moreTenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function ...9.8 Critical
- dlink di-8100 firmwareDI-8100 v16.07.26A1 is vulnerable to Buffer Overflow In the ip_position_asp function via the ip...5.7 Medium
- oretnom23 sentiment based movie rating systemSourceCodester Sentiment Based Movie Rating System 1.0 is vulnerable to SQL Injection in /msrps...9.8 Critical
- redaxoRedaxo Core CMS Cross Site Scripting (XSS)6.1 Medium
- needrestartQualys discovered that needrestart, before version 3.8, allows local attackers to execute...7.8 High
- needrestartQualys discovered that needrestart, before version 3.8, allows local attackers to execute...7.8 High
- needrestartQualys discovered that needrestart, before version 3.8, allows local attackers to execute...7.8 High
- xian daxi information technology officeweb 365File Upload vulnerability in Xi'an Daxi Information technology OfficeWeb365 v.8.6.1.0 and v7.18...9.8 Critical
- weaver e-cologyWeaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component ...9.8 Critical
- weaver e-cologyAn issue in the component /importmould/deletefolder of Weaver Ecology v9.* allows authenticated...6.5 Medium
- weaver e-cologyWeaver Ecology v9* was discovered to contain a SQL injection vulnerability.9.8 Critical
- weaver e-cologyA remote code execution (RCE) vulnerability in the component /inventory/doCptimpoptInventory of...9.8 Critical
- needrestartQualys discovered that needrestart, before version 3.8, passes unsanitized data to a library ...7.8 High
- debian linux, module::scandeps, module scandeps needrestart +1 more +3 moreModerate: perl-Module-ScanDeps security update5.3 Medium
- Show moreLoading…