CVE Database

122268+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2024-35969
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr Although ipv6_get_ifaddr walks inet6_addr_lst under the RCU …

May 20, 2024
CVE-2024-35968
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: pds_core: Fix pdsc_check_pci_health function to use work thread When the driver notices fw_status == 0xff …

May 20, 2024
CVE-2024-35967
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix not validating setsockopt user input syzbot reported sco_sock_setsockopt() is copying data without …

May 20, 2024
CVE-2024-35966
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix not validating setsockopt user input syzbot reported rfcomm_sock_setsockopt_old() is copying data without …

May 20, 2024
CVE-2024-35965
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix not validating setsockopt user input Check user input length before copying data.

May 20, 2024
CVE-2024-35964
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not validating setsockopt user input Check user input length before copying data.

May 20, 2024
CVE-2024-35963
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: Fix not validating setsockopt user input Check user input length before copying data.

May 20, 2024
CVE-2024-35962
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: netfilter: complete validation of user input In my recent commit, I missed that do_replace() handlers …

May 20, 2024
CVE-2024-35961
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Register devlink first under devlink lock In case device is having a non fatal …

May 20, 2024
CVE-2024-35960
9.1 CRITICAL

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Properly link new fs rules into the tree Previously, add_rule_fg would only add newly …

May 20, 2024
CVE-2024-35959
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix mlx5e_priv_init() cleanup flow When mlx5e_priv_init() fails, the cleanup flow calls mlx5e_selq_cleanup which calls …

May 20, 2024
CVE-2024-35958
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: net: ena: Fix incorrect descriptor free behavior ENA has two types of TX queues: - …

May 20, 2024
CVE-2024-35957
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix WARN_ON in iommu probe path Commit 1a75cc710b95 ("iommu/vt-d: Use rbtree to track iommu …

May 20, 2024
CVE-2024-35956
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations Create subvolume, create snapshot and …

May 20, 2024
CVE-2024-35955
8.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix possible use-after-free issue on kprobe registration When unloading a module, its state is …

May 20, 2024
CVE-2024-35954
4.7 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Avoid sg device teardown race sg_remove_sfp_usercontext() must not use sg_device_destroy() after calling scsi_device_put(). …

May 20, 2024
CVE-2024-35953
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in context_xa ivpu_device->context_xa is locked both in kernel thread and IRQ context. …

May 20, 2024
CVE-2024-35952
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/ast: Fix soft lockup There is a while-loop in ast_dp_set_on_off() that could lead to infinite-loop. …

May 20, 2024
CVE-2024-35951
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() Subject: [PATCH] drm/panfrost: Fix the error path in …

May 20, 2024
CVE-2024-35950
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/client: Fully protect modes[] with dev->mode_config.mutex The modes[] array contains pointers to modes on the …

May 20, 2024
CVE-2024-35949
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: btrfs: make sure that WRITTEN is set on all metadata blocks We previously would call …

May 20, 2024
CVE-2024-35948
8.4 HIGH

In the Linux kernel, the following vulnerability has been resolved: bcachefs: Check for journal entries overruning end of sb clean section Fix a missing bounds …

May 20, 2024
CVE-2024-5136
2.4 LOW

A vulnerability classified as problematic has been found in PHPGurukul Directory Management System 1.0. Affected is an unknown function of the file /admin/search-directory.php.. The manipulation …

May 20, 2024
CVE-2024-5135
7.3 HIGH

A vulnerability was found in PHPGurukul Directory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file …

May 20, 2024
CVE-2024-3761
7.5 HIGH

In lunary-ai/lunary version 1.2.2, the DELETE endpoint located at `packages/backend/src/api/v1/datasets` is vulnerable to unauthorized dataset deletion due to missing authorization and authentication mechanisms. This vulnerability …

May 20, 2024
CVE-2024-5134
6.3 MEDIUM

A vulnerability was found in SourceCodester Electricity Consumption Monitoring Tool 1.0. It has been declared as critical. This vulnerability affects unknown code of the file …

May 20, 2024
CVE-2024-5123
4.3 MEDIUM

A vulnerability classified as problematic has been found in SourceCodester Event Registration System 1.0. This affects an unknown part of the file /registrar/. The manipulation …

May 20, 2024
CVE-2024-1968
7.5 HIGH

In scrapy/scrapy, an issue was identified where the Authorization header is not removed during redirects that only change the scheme (e.g., HTTPS to HTTP) but …

May 20, 2024
CVE-2024-5122
7.3 HIGH

A vulnerability was found in SourceCodester Event Registration System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of …

May 20, 2024
CVE-2024-5121
3.5 LOW

A vulnerability was found in SourceCodester Event Registration System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of …

May 20, 2024
CVE-2024-5120
6.3 MEDIUM

A vulnerability was found in SourceCodester Event Registration System 1.0. It has been classified as critical. Affected is an unknown function of the file /registrar/?page=registration. …

May 20, 2024
CVE-2024-5119
6.3 MEDIUM

A vulnerability was found in SourceCodester Event Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php?f=load_registration. The …

May 20, 2024
CVE-2024-3368
6.1 MEDIUM

The All in One SEO WordPress plugin before 4.6.1.1 does not validate and escape some of its Post fields before outputting them back, which could …

May 20, 2024
CVE-2024-5118
7.3 HIGH

A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/login.php. The …

May 20, 2024
CVE-2024-5117
7.3 HIGH

A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. This affects an unknown part of the file portal.php. The …

May 20, 2024
CVE-2024-5116
7.3 HIGH

A vulnerability, which was classified as critical, has been found in SourceCodester Online Examination System 1.0. Affected by this issue is some unknown functionality of …

May 20, 2024
CVE-2024-5115
6.3 MEDIUM

A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the …

May 20, 2024
CVE-2024-5114
6.3 MEDIUM

A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/teacher_attendance_history1.php. …

May 20, 2024
CVE-2024-5113
6.3 MEDIUM

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. This issue affects some unknown processing of …

May 20, 2024
CVE-2024-5112
6.3 MEDIUM

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the …

May 20, 2024
CVE-2024-5111
6.3 MEDIUM

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as critical. This affects an unknown part of the …

May 20, 2024
CVE-2024-5110
6.3 MEDIUM

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of …

May 20, 2024
CVE-2024-5109
6.3 MEDIUM

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality …

May 20, 2024
CVE-2024-5108
6.3 MEDIUM

A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file …

May 20, 2024
CVE-2024-5107
6.3 MEDIUM

A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management System 1.0. This issue affects some unknown processing of …

May 20, 2024
CVE-2024-5106
6.3 MEDIUM

A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects unknown code of the file /view/student_payment_details3.php. The …

May 19, 2024
CVE-2024-5105
6.3 MEDIUM

A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/student_payment_details.php. …

May 19, 2024
CVE-2024-4284
4.9 MEDIUM

A vulnerability in mintplex-labs/anything-llm allows for a denial of service (DoS) condition through the modification of a user's `id` attribute to a value of 0. …

May 19, 2024
CVE-2024-5104
6.3 MEDIUM

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issue is some unknown …

May 19, 2024
CVE-2024-5103
6.3 MEDIUM

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown …

May 19, 2024

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.