CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- linux, linux kernel +1 morewifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan5.5 Medium
- linux, linux kernel +1 morewifi: ath12k: fix crash when unbinding7.8 High
- linux, linux kernel +1 moreio_uring: check for overflows in io_pin_pages5.5 Medium
- linux, linux kernel +1 moreksmbd: fix use-after-free in SMB request handling9.8 Critical
- linux, linux kernel +1 moresmb: client: fix NULL ptr deref in crypto_aead_setkey()7.5 High
- linux, linux kernel +1 moreum: ubd: Do not use drvdata in release5.5 Medium
- linux, linux kernel +1 moreum: net: Do not use drvdata in release5.5 Medium
- linux, linux kernel +1 moreRevert "block, bfq: merge bfq_release_process_ref() into bfq_put_cooperator()"7.8 High
- linux, linux kernel +1 moreum: vector: Do not use drvdata in release5.5 Medium
- linux, linux kernel +1 moreALSA: pcm: Add sanity NULL check for the default mmap fault handler5.5 Medium
- linux, linux kernel +1 moresmb: client: fix use-after-free of signing key9.8 Critical
- linux, linux kernel +1 moresmb: Don't leak cfid when reconnect races with open_cached_dir7.5 High
- linux, linux kernel +1 moresmb: prevent use-after-free due to open_cached_dir error paths9.8 Critical
- linux, linux kernel +1 moresmb: During unmount, ensure all cached dir instances drop their dentry9.8 Critical
- linux, linux kernel +1 moreipc: fix memleak if msg_init_ns failed in create_ipc_ns5.5 Medium
- linux, linux kernel +1 moreSUNRPC: make sure cache entry active before cache_show7.8 High
- linux, linux kernel +1 moreNFSv4.0: Fix a use-after-free problem in the asynchronous open()7.8 High
- linux, linux kernel +1 moreubi: fastmap: Fix duplicate slab cache names while attaching5.5 Medium
- linux, linux kernel +1 moreubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreblock: fix uaf for flush rq while iterating tags7.8 High
- linux, linux kernel +1 morenvme-fabrics: fix kernel crash while shutting down controller9.8 Critical
- linux, linux kernel +1 moresunrpc: fix one UAF issue caused by sunrpc kernel tcp socket7.8 High
- linux, linux kernel +1 morenfs/blocklayout: Don't attempt unregister for invalid block device7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreblock, bfq: fix bfqq uaf in bfq_limit_depth()7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moresh: intc: Fix use-after-free bug in register_intc_controller()7.4 High
- linux, linux kernel +1 moresh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morenet: sched: fix ordering of qlen adjustment7.8 High
- huawei ips module, ips module firmware, ngfw module +15 more +17 moreThere are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common...3.7 Low
- huawei ips module, ips module firmware, ngfw module +15 more +17 moreThere are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common...3.7 Low
- huawei lion-al00c, lion-al00c firmware +1 moreThere is a stack overflow vulnerability in some Huawei smart phone. An attacker can craft...6.3 Medium
- huawei fusioncomputeThere is an improper interface design vulnerability in Huawei product. A module interface of the...8.8 High
- huawei fusioncomputeThere is a privilege escalation vulnerability in Huawei FusionCompute product. Due to...7.0 High
- huawei mate 30, mate 30 firmware +1 moreThere is an out-of-bound read and write vulnerability in Huawei smartphone. A module dose not...6.4 Medium
- huawei myna, myna firmware +1 moreThere is an insufficient integrity vulnerability in Huawei products. A module does not perform...6.8 Medium
- palo alto networks pan-os, cloud ngfw, paloaltonetworks prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet8.7 High
- huawei p30 pro, p30 pro firmware +1 moreThere is an information vulnerability in Huawei smartphones. A function in a module can be called...3.3 Low
- huawei b612 firmware, 4g router b612 +1 moreThere is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may...4.3 Medium
- huawei b612 firmware, 4g router b612 +1 moreThere is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send...5.3 Medium
- huawei mate 20, mate 20 firmware +1 moreThere is an information disclosure vulnerability in several smartphones. The system has a logic...3.5 Low
- huawei mate 20, p30, p30 pro +11 more +13 moreThere is an improper authorization vulnerability in some Huawei smartphones. An attacker could...3.5 Low
- huawei mate 20 pro, mate 20 pro (ud), nova 5i +3 more +5 moreThere is an improper privilege management vulnerability in Huawei smart phone product. A local,...7.8 High
- code-projects hospital management systemcode-projects Hospital Management System Edit Doctor Details Page manage-doctors.php cross site scripting5.1 Medium
- phpgurukul blood bank & donor management system, blood bank \& donor management system +1 morePHPGurukul Blood Bank & Donor Management System update-contactinfo.php cross site scripting5.1 Medium
- givewpGive < 3.19.0 - Reflected XSS4.8 Medium
- digireturn dn shipping by weight for woocommerce, shipping by weight for woocommerce +1 moreDN Shipping by Weight for WooCommerce < 1.2 - Settings Update via CSRF4.3 Medium
- computy float blockFloat Block <= 1.7 - Admin+ Stored XSS via Widget4.8 Medium
- salko wp-svgWP-SVG <= 0.9 - Contributor+ Stored XSS via Shortcode5.9 Medium
- unknown wp-publicationsWP Publications <= 1.2 - Admin+ Stored XSS4.8 Medium
- codeastro car rental systemCodeAstro Car Rental System bookingconfirm.php sql injection5.3 Medium
- anisha job recruitmentcode-projects Job Recruitment _all_edits.php fln_update cross site scripting6.9 Medium
- Show moreLoading…