Lucene search
+L

1390 matches found

OSV
OSV
added 2024/03/27 10:15 p.m.6 views

UBUNTU-CVE-2024-0078

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user in a guest can cause a NULL-pointer dereference in the host, which may lead to denial of service...

6.5CVSS5.8AI score0.00192EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/26 8:15 p.m.6 views

UBUNTU-CVE-2024-2955

T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.1AI score0.01403EPSS
SaveExploits1References4
OSV
OSV
added 2024/03/25 10:15 a.m.6 views

UBUNTU-CVE-2021-47163

In the Linux kernel, the following vulnerability has been resolved: tipc: wait and exit until all work queues are done On some host, a crash could be triggered simply by repeating these commands several times: modprobe tipc tipc bearer enable media udp name UDP1 localip 127.0.0.1 rmmod tipc BUG:...

7.8CVSS6.2AI score0.00186EPSS
SaveExploits0References14
OSV
OSV
added 2024/03/25 9:15 a.m.7 views

UBUNTU-CVE-2021-47151

In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: bcm-voter: add a missing ofnodeput Add a missing ofnodeput in ofbcmvoterget to avoid the reference leak...

5.5CVSS5.7AI score0.00222EPSS
SaveExploits0References5
OSV
OSV
added 2024/03/25 9:15 a.m.8 views

UBUNTU-CVE-2021-47144

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

5.5CVSS7.2AI score
SaveExploits0References7
OSV
OSV
added 2024/03/22 6:15 p.m.8 views

UBUNTU-CVE-2024-2824

A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and ma...

6.3CVSS5.8AI score0.00734EPSS
SaveExploits0References6
OSV
OSV
added 2024/03/20 6:15 a.m.8 views

UBUNTU-CVE-2024-28563

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the Imf22::DwaCompressor::Classifier::Classifier function when reading images in EXR format...

5.9CVSS5.8AI score0.0046EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/19 12:0 a.m.5 views

UBUNTU-CVE-2024-2613

Data was not properly sanitized when decoding a QUIC ACK frame; this could have led to unrestricted memory consumption and a crash. This vulnerability affects Firefox 124...

7.5CVSS7.2AI score0.00501EPSS
SaveExploits0References5
OSV
OSV
added 2024/03/15 6:15 p.m.5 views

UBUNTU-CVE-2024-2193

A Speculative Race Condition SRC vulnerability that impacts modern CPU architectures supporting speculative execution related to Spectre V1 has been disclosed. An unauthenticated attacker can exploit this vulnerability to disclose arbitrary data from the CPU using race conditions to access the...

5.7CVSS6.2AI score0.01231EPSS
SaveExploits0References9
OSV
OSV
added 2024/02/29 1:42 a.m.5 views

UBUNTU-CVE-2023-50658

The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value...

7.5CVSS5.8AI score0.00824EPSS
SaveExploits0References5
OSV
OSV
added 2024/02/27 4:15 p.m.6 views

UBUNTU-CVE-2024-26464

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.8AI score
SaveExploits0References3
OSV
OSV
added 2024/02/20 2:15 p.m.8 views

UBUNTU-CVE-2024-1552

Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.Note: This issue only affects 32-bit ARM devices. This vulnerability affects Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8...

7.5CVSS7.4AI score0.00667EPSS
SaveExploits0References11
OSV
OSV
added 2024/02/19 5:15 a.m.7 views

UBUNTU-CVE-2024-26328

An issue was discovered in QEMU 7.1.0 through 8.2.1. registervfs in hw/pci/pciesriov.c does not set NumVFs to PCISRIOVTOTALVF, and thus interaction with hw/nvme/ctrl.c is mishandled...

6CVSS7.1AI score0.0029EPSS
SaveExploits0References5
OSV
OSV
added 2024/02/14 2:15 p.m.6 views

UBUNTU-CVE-2023-26586

Uncaught exception for some IntelR PROSet/Wireless and IntelR KillerTM Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

6.5CVSS5.8AI score0.00365EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/12 3:15 a.m.14 views

UBUNTU-CVE-2024-25739

createemptylvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi-lebsize...

5.5CVSS6.7AI score0.00248EPSS
SaveExploits0References30
OSV
OSV
added 2024/02/09 3:15 p.m.17 views

UBUNTU-CVE-2024-25450

imlib2 v1.9.1 was discovered to mishandle memory allocation in the function initimlibfonts...

8.8CVSS5.8AI score0.00659EPSS
SaveExploits1References4
OSV
OSV
added 2024/02/09 12:0 a.m.6 views

UBUNTU-CVE-2023-42282

The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses such as 0x7f.1 are improperly categorized as globally routable via isPublic...

9.8CVSS6.8AI score0.01613EPSS
SaveExploits1References5
OSV
OSV
added 2024/02/05 6:15 p.m.8 views

UBUNTU-CVE-2024-24266

gpac v2.2.1 was discovered to contain a Use-After-Free UAF vulnerability via the dasherconfigurepid function at /src/filters/dasher.c...

7.5CVSS5.8AI score0.01327EPSS
SaveExploits1References3
OSV
OSV
added 2024/02/05 3:15 p.m.22 views

UBUNTU-CVE-2023-7216

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which allows files ...

5.3CVSS6.1AI score0.00899EPSS
SaveExploits1References4
OSV
OSV
added 2024/02/01 6:15 p.m.16 views

UBUNTU-CVE-2023-51446

GLPI is a Free Asset and IT Management Software package. When authentication is made against a LDAP, the authentication form can be used to perform LDAP injection. Upgrade to 10.0.12...

8.1CVSS7.2AI score0.0087EPSS
SaveExploits0References5
Rows per page
Query Builder