CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- linux, linux kernel +1 morenfs_common: must not hold RCU while calling nfsd_file_put_local5.5 Medium
- linux, linux kernel +1 morevfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()5.5 Medium
- linux, linux kernel +1 morenfs/localio: must clear res.replen in nfs_local_read_done7.8 High
- linux, linux kernel +1 morertc: check if __rtc_read_time was successful in rtc_timer_do_work()5.5 Medium
- linux, linux kernel +1 morenet/9p/usbg: fix handling of the failed kzalloc() memory allocation5.5 Medium
- linux, linux kernel +1 moresmb: Initialize cfid->tcon before performing network ops4.7 Medium
- linux, linux kernel +1 moreocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c5.5 Medium
- linux, linux kernel +1 moreocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c5.5 Medium
- linux, linux kernel +1 moreocteontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c5.5 Medium
- linux, linux kernel +1 moreocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c5.5 Medium
- linux, linux kernel +1 moremfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device5.5 Medium
- linux, linux kernel +1 moremfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices5.5 Medium
- linux, linux kernel +1 moreRDMA/hns: Fix cpu stuck caused by printings during reset5.5 Medium
- linux, linux kernel +1 morex86/CPU/AMD: Terminate the erratum_1386_microcode array7.1 High
- linux, linux kernel +1 morebpf, sockmap: Several fixes to bpf_msg_pop_data7.8 High
- code-projects responsive hotel sitecode-projects Responsive Hotel Site newsletter.php sql injection5.3 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: stmmac: fix TSO DMA API usage causing oops10.0 Critical
- linux, linux kernel +1 morenet/smc: protect link down work from execute after lgr freed9.8 Critical
- linux, linux kernel +1 morenet: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()7.5 High
- linux, linux kernel +1 morenetdevsim: prevent bad user input in nsim_dev_health_break_write()5.5 Medium
- linux, linux kernel +1 moreionic: Fix netdev notifier unregister on failure7.8 High
- linux, linux kernel +1 moreionic: no double destroy workqueue5.5 Medium
- linux, linux kernel +1 morenet: netdevsim: fix nsim_pp_hold_write()5.5 Medium
- linux, linux kernel +1 moreudmabuf: fix memory leak on last export_udmabuf() error path5.5 Medium
- linux, linux kernel +1 moredrm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference5.5 Medium
- linux, linux kernel +1 moreceph: fix memory leak in ceph_direct_read_write()5.5 Medium
- linux, linux kernel +1 moreio_uring: check if iowq is killed before queuing7.8 High
- codezips event management systemCodezips Event Management System contact.php sql injection5.3 Medium
- 1000 projects human resource management system1000 Projects Human Resource Management System employeeview.php sql injection6.9 Medium
- 1000 projects attendance tracking management system1000 Projects Attendance Tracking Management System attendance_action.php sql injection5.3 Medium
- phpgurukul complaint management systemPHPGurukul Complaint Management System category.php sql injection6.9 Medium
- kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 moreNinja Forms – The Contact Form Builder That Grows With You <= 3.8.22 - Authenticated (Subscriber+) Arbitrary Shortcode Execution6.3 Medium
- 1000 projects portfolio management system mca1000 Projects Portfolio Management System MCA update_ed.php sql injection5.3 Medium
- 1000 projects bookstore management system1000 Projects Bookstore Management System order_process.php sql injection6.9 Medium
- phpgurukul small crmPHPGurukul Small CRM index.php sql injection5.3 Medium
- phpgurukul small crmPHPGurukul Small CRM quote-details.php sql injection5.3 Medium
- phpgurukul small crmPHPGurukul Small CRM edit-user.php sql injection5.3 Medium
mrubyOSS-FuzzUse-of-uninitialized-value in mark_contextNo score- gnu grub2GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp...5.3 Medium
- gnu grub2GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock...8.8 High
libcrypt-random-source-perlDebianThe Crypt::Random::Source package before 0.13 for Perl has a fallback to the built-in rand()...7.5 High- code-projects online car rental systemcode-projects Online Car Rental System GET Parameter index.php cross site scripting6.9 Medium
- apache nifiApache NiFi: Missing Complete Authorization for Parameter and Service References2.1 Low
- ruifang-tech rebuildruifang-tech Rebuild Project Tasks Section tasks cross site scripting5.3 Medium
- running-elephant datartrunning-elephant Datart File Upload import extractModel deserialization5.3 Medium
magic-cryptcrates.iomagic-crypt uses insecure cryptographic algorithmsNo score- linux, linux kernel +1 moreEDAC/igen6: Avoid segmentation fault on module unload7.8 High
- linux, linux kernel +1 moreocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c5.5 Medium
- linux, linux kernel +1 mores390/cpum_sf: Fix and protect memory allocation of SDBs with mutex7.8 High
- debian linux, linux kernel +1 moremedia: atomisp: Add check for rgby_data memory allocation failure5.5 Medium
- Show moreLoading…