Lucene search
+L

7051 matches found

Vulnrichment
Vulnrichment
added 2024/10/28 9:8 p.m.17 views

CVE-2024-44285

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.1 and iPadOS 18.1, watchOS 11.1, visionOS 2.1, tvOS 18.1. An app may be able to cause unexpected system termination or corrupt kernel memory...

5.9AI score0.00664EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/10/28 9:8 p.m.30 views

CVE-2024-44285

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. An app may be able to cause unexpected system termination or corrupt kernel memory...

0.00664EPSS
SaveExploits0References5
OSV
OSV
added 2024/10/28 1:15 a.m.7 views

UBUNTU-CVE-2024-50067

In the Linux kernel, the following vulnerability has been resolved: uprobe: avoid out-of-bounds memory access of fetching args Uprobe needs to fetch args into a percpu buffer, and then copy to ring buffer to avoid non-atomic context problem. Sometimes user-space strings, arrays can be very large,...

7.8CVSS6.4AI score0.00235EPSS
SaveExploits0References37
Positive Technologies
Positive Technologies
added 2024/10/28 12:0 a.m.4 views

PT-2024-31100 · Apple · Visionos +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.1 iPadOS versions prior to 18.1 visionOS versions prior to 2.1 tvOS versions prior to 18.1 Description: The issue was addressed with improved memory handling. An app may be able to cause unexpected system termination ...

7.8CVSS6AI score0.00238EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.5 views

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 18.1 and Apple iPadOS version 18.1, which originates from an...

8.4CVSS6.2AI score0.00664EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/10/28 12:0 a.m.4 views

PT-2024-31109 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.1 iPadOS versions prior to 18.1 watchOS versions prior to 11.1 visionOS versions prior to 2.1 tvOS versions prior to 18.1 Description: A use-after-free issue was addressed with improved memory management. This issue m...

8.4CVSS6.1AI score0.00664EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.8 views

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 18.1 and Apple iPadOS version 18.1, which originates from an...

7.8CVSS6.1AI score0.00238EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2024/10/24 3:18 a.m.6 views

SUSE CVE-2024-49964

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix memfdpinfolios freehugepages leak memfdpinfolios followed by unpinfolios fails to restore freehugepages if the pages were not already faulted in, because the folio refcount for pages created by memfdallocfolio nev...

5.5CVSS6.5AI score0.00202EPSS
SaveExploits0References5
NVD
NVD
added 2024/10/23 10:15 p.m.29 views

CVE-2024-40431

A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTLSCSIPASSTHROUGH control of the SD card reader driver allows an attacker to write to predictable kernel memory locations, even as a low-privileged user...

8.8CVSS0.0126EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2024/10/23 12:0 a.m.9 views

CVE-2024-40431

A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTLSCSIPASSTHROUGH control of the SD card reader driver allows an attacker to write to predictable kernel memory locations, even as a low-privileged user...

7AI score0.0126EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2024/10/23 12:0 a.m.25 views

CVE-2024-40431

A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTLSCSIPASSTHROUGH control of the SD card reader driver allows an attacker to write to predictable kernel memory locations, even as a low-privileged user...

0.0126EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:0 a.m.6 views

The vulnerability of the iucv_cpu_down_prep() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iucvcpudownprep function in the net/iucv/iucv.c module of the Linux kernel is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

7.8CVSS7.1AI score0.00233EPSS
SaveExploits0References37Affected Software7
CNNVD
CNNVD
added 2024/10/23 12:0 a.m.6 views

Realtek SD card reader driver 安全漏洞

The Realtek SD card reader driver is a card reader driver from China-based Realtek Semiconductor Realtek. A security vulnerability exists in Realtek SD card reader driver version 10.0.26100.21374 and prior versions, which stems from a lack of input validation and allows an attacker to write to...

8.8CVSS6.7AI score0.0126EPSS
SaveExploits2References1
CVE
CVE
added 2024/10/23 12:0 a.m.81 views

CVE-2024-40431

CVE-2024-40431 involves Realtek SD card reader driver with insufficient input validation in IOCTL_SCSI_PASS_THROUGH, allowing a low-privileged user to write to predictable kernel memory locations. Affected: Realtek SD card reader driver versions prior to 10.0.26100.21374. Impact: potential kernel...

8.8CVSS6.7AI score0.0126EPSS
SaveExploits2References1
OSV
OSV
added 2024/10/21 8:15 p.m.10 views

AZL-51242 CVE-2024-50035 affecting package kernel for versions less than 6.6.57.1-1

In the Linux kernel, the following vulnerability has been resolved: ppp: fix pppasyncencode illegal access syzbot reported an issue in pppasyncencode 1 In this case, pppoesendmsg is called with a zero size. Then pppasyncencode is called with an empty skb. BUG: KMSAN: uninit-value in pppasyncencod...

7.1CVSS6.7AI score0.00272EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/21 8:15 p.m.1 views

DEBIAN-CVE-2024-50035

In the Linux kernel, the following vulnerability has been resolved: ppp: fix pppasyncencode illegal access syzbot reported an issue in pppasyncencode 1 In this case, pppoesendmsg is called with a zero size. Then pppasyncencode is called with an empty skb. BUG: KMSAN: uninit-value in pppasyncencod...

7.1CVSS6.1AI score0.00272EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2024/10/21 3:47 p.m.10 views

SUSE CVE-2024-47685

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfrejectipv6: fix nfrejectip6tcphdrput syzbot reported that nfrejectip6tcphdrput was possibly sending garbage on the four reserved tcp bits th-res1 Use skbputzero to clear the whole TCP header, as done in...

6.5CVSS6.5AI score0.01369EPSS
SaveExploits0References21
OSV
OSV
added 2024/10/21 1:15 p.m.5 views

UBUNTU-CVE-2024-47727

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix "in-kernel MMIO" check TDX only supports kernel-initiated MMIO operations. The handlemmio function checks if the VE exception occurred in the kernel and rejects the operation if it did not. However, userspace can...

7.8CVSS6.5AI score0.00247EPSS
SaveExploits0References22
CVE
CVE
added 2024/10/21 12:14 p.m.142 views

CVE-2024-47728

CVE-2024-47728 concerns the Linux kernel where a vulnerability in the BPF subsystem could leak memory due to ARG_PTR_TO_{LONG,INT} arguments on error paths. The resolved description indicates the fix zeros the former ARG_PTR_TO_{LONG,INT} inputs for non-tracing helpers when an error occurs, preve...

5.5CVSS6.8AI score0.00236EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/14 12:0 a.m.6 views

PT-2024-7499 · Realtek · Rtsper.Sys +1

Name of the Vulnerable Software and Affected Versions: Realtek SD card reader driver versions before 10.0.26100.21374 Description: The issue is related to a lack of input validation in the Realtek SD card reader driver, specifically through the implementation of the IOCTL SFFDISK DEVICE COMMAND...

6.8CVSS7.7AI score0.00391EPSS
SaveExploits1References7
Rows per page
Query Builder