Skip to contentLinuxfoundation vulnerabilities
Products
Show 5 moreShow less
Newest
- linuxfoundation onnx, onnx onnx/onnx +1 moreArbitrary File Overwrite in download_model_with_test_data in onnx/onnxCVE-2024-5187Fix available8.8 High
- argoproj argo cd, argo-cd +1 moreUnauthenticated Access to sensitive settings in Argo CDCVE-2024-37152Fix available5.3 Medium
- harborSQL Injection in Harbor scan log APICVE-2024-22261Fix available2.7 Low
- harborHarbor Open Redirect URLCVE-2024-22244Fix available4.3 Medium
- linuxfoundation opendaylightThe OpenDaylight 0.15.3 controller allows topology poisoning via API requests because an...CVE-2024-370189.1 Critical
- google android, linuxfoundation yocto, mediatek mt2737 +61 more +63 moreIn DA, there is a possible permission bypass due to an incorrect status check. This could lead to...CVE-2023-32871Fix available5.3 Medium
- linuxfoundation ric-app-kpimon-go, o-ran ricapp kpimon go +1 moreO-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message.CVE-2024-340435.3 Medium
- linuxfoundation onos-lib-goOpen Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition...CVE-2023-527285.5 Medium
- linuxfoundation onos-lib-goOpen Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition...CVE-2023-527278.1 High
- linuxfoundation onos-ric-sdk-go, onosproject onos +1 moreOpen Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the...CVE-2023-527266.5 Medium
- linuxfoundation onos-kpimon, open networking foundation sd-ran onos +1 moreOpen Networking Foundation SD-RAN ONOS onos-kpimon 0.4.7 allows blocking of the errCh channel...CVE-2023-527256.5 Medium
- linuxfoundation onos-kpimonOpen Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the...CVE-2023-527248.1 High
- linuxfoundation pytorch, pytorchlightning pytorch lightning +1 morePytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit...CVE-2024-31584Fix available5.5 Medium
- linuxfoundation pytorch, pytorchlightning pytorch lightning +1 morePytorch use-after-free vulnerabilityCVE-2024-31583Fix available7.8 High
- linuxfoundation pytorchPyTorch heap buffer overflow vulnerabilityCVE-2024-31580Fix available4.0 Medium
- google android, linuxfoundation yocto, mediatek iot yocto +1 more +3 moreIn imgsys, there is a possible information disclosure due to a missing bounds check. This could...CVE-2024-200556.3 Medium
- google android, linuxfoundation yocto, mediatek mt6761 +23 more +25 moreIn gnss, there is a possible escalation of privilege due to a missing bounds check. This could...CVE-2024-200546.6 Medium
- google android, linuxfoundation yocto, mediatek mt2713 +45 more +47 moreIn flashc, there is a possible out of bounds write due to an uncaught exception. This could lead...CVE-2024-200538.4 High
- google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2737, mt6781, mt6789, mt6835, mt6855, mt6879, mt6880, mt6886, mt6890, mt6895, mt6980, mt6983, mt6985, mt6989, mt6990, mt8167, mt8168, mt8173, mt8175, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8796, mt8797, mt8798 +2 more +4 moreIn flashc, there is a possible information disclosure due to an uncaught exception. This could...CVE-2024-200524.4 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2737, mt6781, mt6789, mt6835, mt6855, mt6879, mt6880, mt6886, mt6890, mt6895, mt6980, mt6983, mt6985, mt6989, mt6990, mt8167, mt8168, mt8173, mt8175, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8796, mt8797, mt8798 +2 more +4 moreIn flashc, there is a possible system crash due to an uncaught exception. This could lead to...CVE-2024-200512.3 Low
- google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2737, mt6781, mt6789, mt6835, mt6855, mt6879, mt6880, mt6886, mt6890, mt6895, mt6980, mt6983, mt6985, mt6989, mt6990, mt8167, mt8168, mt8173, mt8175, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8796, mt8797, mt8798 +2 more +4 moreIn flashc, there is a possible information disclosure due to an uncaught exception. This could...CVE-2024-200504.4 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2737, mt6781, mt6789, mt6835, mt6855, mt6879, mt6880, mt6886, mt6890, mt6895, mt6980, mt6983, mt6985, mt6989, mt6990, mt8167, mt8168, mt8173, mt8175, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8796, mt8797, mt8798 +2 more +4 moreIn flashc, there is a possible information disclosure due to an uncaught exception. This could...CVE-2024-200494.4 Medium
- google android, linux kernel, linuxfoundation yocto +48 more +50 moreIn wlan firmware, there is a possible out of bounds write due to improper input validation. This...CVE-2024-20040Fix available8.8 High
- argoproj argo cd, argo-cd +1 moreArgo CD vulnerable to Bypassing of Rate Limit and Brute Force Protection Using Cache OverflowCVE-2024-21662Fix available7.5 High
- fluid-cloudnative fluidOS Command Injection for Fluid Users with JuicefsRuntimeCVE-2023-51699Fix available4.0 Medium
- linuxfoundation software for open networking in the cloud, microsoft software for open networking in the cloud (sonic) +1 moreSoftware for Open Networking in the Cloud (SONiC) Elevation of Privilege VulnerabilityCVE-2024-214187.8 High
- google android, linuxfoundation yocto, mediatek mt2713 +25 more +27 moreIn flashc, there is a possible out of bounds write due to lack of valudation. This could lead to...CVE-2024-20023Fix available6.7 Medium
- google android, linuxfoundation yocto, mediatek mt2737 +32 more +34 moreIn lk, there is a possible escalation of privilege due to a missing bounds check. This could lead...CVE-2024-20022Fix available6.7 Medium
- linuxfoundation onnx, fedoraproject fedora +1 moreOnnx Out-of-bounds Read vulnerabilityCVE-2024-27319Fix available4.4 Medium
- linuxfoundation onnx, fedoraproject fedora +1 moreOnnx Directory Traversal vulnerabilityCVE-2024-27318Fix available7.5 High
- backstage, linuxfoundation backstage backend-common +1 more`@backstage/backend-common` vulnerable to path traversal through symlinksCVE-2024-26150Fix available8.7 High
- linuxfoundation yocto, yocto project yoctoproject, yoctoproject poky +2 moreYocto Project Security Advisory - BitBake/ToasterCVE-2024-256268.8 High
- linuxfoundation runc, fedoraproject fedora, red hat ocp-tools-4.15-rhel-8 +26 more +28 morerunc container breakout through process.cwd trickery and leaked fdsCVE-2024-21626Public exploitFix availableEPSS 18.9%8.6 High
- dexidp dexDex 2.37.0 is discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphersCVE-2024-23656Fix available7.5 High
- argoproj argo-cd, argo cd +1 moreCross-Site Request Forgery (CSRF) in github.com/argoproj/argo-cdCVE-2024-22424Fix available8.4 High
- redhat red hat developer hub, linuxfoundation backstage, red hat rhdh-1.1-rhel-9 +2 moreRhdh: catalog-import function leaks credentials to frontendCVE-2023-6944Fix available5.7 Medium
- cubefsCubeFS leaks users key in logsCVE-2023-46742Fix available4.8 Medium
- cubefsCubeFS leaks magic secret key when starting Blobstore access serviceCVE-2023-46741Fix available4.8 Medium
- cubefsInsecure random string generator used for sensitive dataCVE-2023-46740Fix available6.5 Medium
- cubefsTiming attack can leak user passwordsCVE-2023-46739Fix available6.5 Medium
- cubefsAuthenticated users can crash the CubeFS servers with maliciously crafted requestsCVE-2023-46738Fix available6.5 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2735, mt2737, mt6765, mt6768, mt6769, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6880, mt6885, mt6889, mt6890, mt6893, mt6895, mt6980, mt6983, mt6985, mt6990, mt8667, mt8765, mt8768, mt8786, mt8791, mt8791t, mt8791wifi, mt8798 +2 more +4 moreIn aee, there is a possible escalation of privilege due to a missing permission check. This could...CVE-2023-328556.7 Medium
- linuxfoundation nats-server, nats nkeys +1 morexkeys Seal encryption used fixed key for all encryptionCVE-2023-46129Fix available7.5 High
- linuxfoundation nats-serverNATS.io: Adding accounts for just the system account adds auth bypassCVE-2023-47090Fix available6.5 Medium
- linuxfoundation harbor, harbor project +1 moreTiming attack risk in HarborCVE-2023-20902Fix available5.9 Medium
- google android, linuxfoundation yocto, mediatek iot yocto +15 more +17 moreIn apusys, there is a possible out of bounds write due to an integer overflow. This could lead to...CVE-2023-328296.7 Medium
- google android, linux kernel, linuxfoundation yocto +41 more +43 moreIn wlan firmware, there is a possible firmware assertion due to improper input handling. This...CVE-2023-32820Fix available7.5 High
- lfedge eve, lf-edge, zededa eve os, linuxfoundation edge virtualization engine +2 moreVault Key Partially PredeterminedCVE-2023-43637Fix available7.8 High
- lf-edge, zededa eve os, linuxfoundation edge virtualization engine +1 moreSSH as Root Unlockable Without Triggering Measured BootCVE-2023-43631Fix available8.8 High
- lfedge eve, lf-edge, zededa eve os, linuxfoundation edge virtualization engine +2 moreFreely Allocate Buffer on The Stack With Data From SocketCVE-2023-43632Fix available9.0 Critical
- Show moreLoading…