1091
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
Add check for the return value of spi_get_csgpiod() to avoid passing…
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-50224
|
2024-11-14 04:22 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1092
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
sched/numa: Fix the potential null pointer dereference in task_numa_work()
When running stress-ng-vm-segv test, we found a null p…
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-50223
|
2024-11-14 04:22 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1093
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix error propagation of split bios
The purpose of btrfs_bbio_propagate_error() shall be propagating an error
of split bio…
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-50225
|
2024-11-14 04:21 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1094
|
9.8 |
CRITICAL
Network
dell
|
enterprise_sonic_distribution
|
Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vu…
|
NVD-CWE-Other
|
CVE-2024-45764
|
2024-11-14 04:08 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
1095
|
7.2 |
HIGH
Network
|
dell
|
enterprise_sonic_distribution
|
Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker w…
|
CWE-78
OS Command
|
CVE-2024-45765
|
2024-11-14 04:06 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1096
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
In support of investigating an initialization failure report […
|
CWE-416
Use After Free
|
CVE-2024-50226
|
2024-11-14 04:04 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1097
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
net: systemport: fix potential memory leak in bcm_sysport_xmit()
The bcm_sysport_xmit() returns NETDEV_TX_OK without freeing skb
…
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2024-50171
|
2024-11-14 04:03 |
2024-11-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1098
|
8.8 |
HIGH
Network
|
salesagility
|
suitecrm
|
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Insufficient input value validation causes Blind SQL injection in DeleteRelationShip. This is…
|
CWE-89
SQL Injection
|
CVE-2024-50332
|
2024-11-14 03:59 |
2024-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1099
|
7.8 |
HIGH
Local
|
adobe
|
substance_3d_painter
|
Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-47429
|
2024-11-14 03:54 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1100
|
7.8 |
HIGH
Local
|
adobe
|
substance_3d_painter
|
Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-47428
|
2024-11-14 03:54 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|