|
21
|
6.1
-
|
MEDIUM
Network
|
Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.
|
CWE-79
Cross-site Scripting
|
CVE-2024-37383
|
cpe:2.3:o:debian:debian_linux:10.0:*
|
|
|
|
|
2024-11-21 18:23
2024-06-7
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
22
|
8.1
-
|
HIGH
Network
|
An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary application memo…
|
CWE-125
Out-of-bounds Read
|
CVE-2024-5629
|
cpe:2.3:o:debian:debian_linux:10.0:*
|
|
|
|
|
2024-11-21 18:48
2024-06-6
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
23
|
7.8
-
|
HIGH
Local
|
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix potential UAF in cifs_dump_full_key()
Skip sessions that are being teared down (status == SES_EXITING) to
avoid …
|
CWE-416
Use After Free
|
CVE-2024-35866
|
cpe:2.3:o:debian:debian_linux:11.0:*
|
|
|
|
|
2026-04-22 04:07
2024-05-19
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
24
|
5.5
-
|
MEDIUM
Local
|
In the Linux kernel, the following vulnerability has been resolved:
fat: fix uninitialized field in nostale filehandles
When fat_encode_fh_nostale() encodes file handle without a parent it
stores o…
|
-
|
CVE-2024-26973
|
cpe:2.3:o:debian:debian_linux:10.0:*
|
|
|
|
|
2025-03-4 02:47
2024-05-1
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
25
|
5.5
-
|
MEDIUM
Local
|
In the Linux kernel, the following vulnerability has been resolved:
serial/pmac_zilog: Remove flawed mitigation for rx irq flood
The mitigation was intended to stop the irq completely. That may be
…
|
-
|
CVE-2024-26999
|
cpe:2.3:o:debian:debian_linux:10.0:*
|
|
|
|
|
2025-03-4 02:47
2024-05-1
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
26
|
5.5
-
|
MEDIUM
Local
|
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix command flush on cable pull
System crash due to command failed to flush back to SCSI layer.
BUG: unable to h…
|
-
|
CVE-2024-26931
|
cpe:2.3:o:debian:debian_linux:10.0:*
|
|
|
|
|
2025-03-4 02:47
2024-05-1
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
27
|
7.0
-
|
HIGH
Local
|
In the Linux kernel, the following vulnerability has been resolved:
RDMA/srpt: Do not register event handler until srpt device is fully setup
Upon rare occasions, KASAN reports a use-after-free Wri…
|
-
|
CVE-2024-26872
|
cpe:2.3:o:debian:debian_linux:10.0:*
|
|
|
|
|
2025-03-4 02:47
2024-04-17
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
28
|
4.7
-
|
MEDIUM
Local
|
In the Linux kernel, the following vulnerability has been resolved:
drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
It's possible that mtk_crtc->event is NULL in
mtk_drm_crt…
|
-
|
CVE-2024-26874
|
cpe:2.3:o:debian:debian_linux:10.0:*
|
|
|
|
|
2025-03-4 02:47
2024-04-17
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
29
|
4.7
-
|
MEDIUM
Local
|
In the Linux kernel, the following vulnerability has been resolved:
packet: annotate data-races around ignore_outgoing
ignore_outgoing is read locklessly from dev_queue_xmit_nit()
and packet_getsoc…
|
-
|
CVE-2024-26862
|
cpe:2.3:o:debian:debian_linux:10.0:*
|
|
|
|
|
2025-03-4 02:47
2024-04-17
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
30
|
4.7
-
|
MEDIUM
Local
|
In the Linux kernel, the following vulnerability has been resolved:
net/bnx2x: Prevent access to a freed page in page_pool
Fix race condition leading to system crash during EEH error handling
Duri…
|
-
|
CVE-2024-26859
|
cpe:2.3:o:debian:debian_linux:10.0:*
|
|
|
|
|
2025-03-4 02:47
2024-04-17
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|