National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 396,747 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Reset All
Found 39,245 matching advisories
Page 188 of 1,636
CVE-2024-22348 MEDIUM 5.3
hcltech/devops_velocity CWE-942 Remote (AV:N)

IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitiv...

📅 2025-01-20 Inspect Dossier →
CVE-2024-22347 MEDIUM 5.9
hcltech/devops_velocity CWE-327 Remote (AV:N)

IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information....

📅 2025-01-20 Inspect Dossier →
lizardbyte/sunshine CWE-305 Remote (AV:N)

Sunshine is a self-hosted game stream host for Moonlight. In 0.23.1 and earlier, Sunshine's pairing protocol implementation does not validate request order and is thereby vulnerable to a MITM attack, ...

📅 2025-01-20 Inspect Dossier →
CVE-2024-45647 MEDIUM 5.6
ibm/security_verify_access CWE-620 Remote (AV:N)

IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change the password of an expired user without prio...

📅 2025-01-20 Inspect Dossier →
CVE-2024-13176 MEDIUM 4.1
CWE-385

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature compu...

📅 2025-01-20 Inspect Dossier →
CVE-2024-13524 MEDIUM 4.5
CWE-426

A vulnerability has been found in obsproject OBS Studio up to 30.0.2 on Windows and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to unt...

📅 2025-01-20 Inspect Dossier →
CVE-2024-41783 CRITICAL 9.1
ibm/sterling_secure_proxy CWE-77 Remote (AV:N)

IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow a privileged user to inject commands into the underlying operating system due to improper validation of a...

📅 2025-01-19 Inspect Dossier →
ibm/txseries_for_multiplatforms CWE-770 Remote (AV:N)

IBM TXSeries for Multiplatforms 10.1 could allow a remote attacker to cause a denial of service using persistent connections due to improper allocation of resources....

📅 2025-01-19 Inspect Dossier →
ibm/txseries_for_multiplatforms CWE-770 Remote (AV:N)

IBM TXSeries for Multiplatforms 10.1 is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations. By conducting a slowloris-type attacks, a remote...

📅 2025-01-19 Inspect Dossier →
CVE-2024-38337 CRITICAL 9.1
ibm/sterling_secure_proxy CWE-732 Remote (AV:N)

IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow an unauthorized attacker to retrieve or alter sensitive information contents due to incorrect permission ...

📅 2025-01-19 Inspect Dossier →
linux/linux_kernel CWE-672

In the Linux kernel, the following vulnerability has been resolved: dm array: fix releasing a faulty array block twice in dm_array_cursor_end When dm_bm_read_lock() fails due to locking or checksum ...

📅 2025-01-19 Inspect Dossier →
linux/linux_kernel CWE-125

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix enomem handling in buffered reads If netfs_read_to_pagecache() gets an error from either ->prepare_read() or from netfs...

📅 2025-01-19 Inspect Dossier →
CVE-2024-57927 MEDIUM 5.5
linux/linux_kernel CWE-476

In the Linux kernel, the following vulnerability has been resolved: nfs: Fix oops in nfs_netfs_init_request() when copying to cache When netfslib wants to copy some data that has just been read on b...

📅 2025-01-19 Inspect Dossier →
linux/linux_kernel CWE-416

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err The pointer need to be set to NULL, otherwi...

📅 2025-01-19 Inspect Dossier →
linux/linux_kernel CWE-476

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix a missing return value check bug In the smb2_send_interim_resp(), if ksmbd_alloc_work_struct() fails to allocate a node...

📅 2025-01-19 Inspect Dossier →
CVE-2024-57924 MEDIUM 5.5
linux/linux_kernel CWE-617

In the Linux kernel, the following vulnerability has been resolved: fs: relax assertions on failure to encode file handles Encoding file handles is usually performed by a filesystem >encode_fh() met...

📅 2025-01-19 Inspect Dossier →
CVE-2024-57923 MEDIUM 5.5
linux/linux_kernel CWE-617

In the Linux kernel, the following vulnerability has been resolved: btrfs: zlib: fix avail_in bytes for s390 zlib HW compression path Since the input data length passed to zlib_compress_folios() can...

📅 2025-01-19 Inspect Dossier →
CVE-2024-57922 MEDIUM 5.5
linux/linux_kernel CWE-369

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add check for granularity in dml ceil/floor helpers [Why] Wrapper functions for dcn_bw_ceil2() and dcn_bw_floor2(...

📅 2025-01-19 Inspect Dossier →
CVE-2024-57921 MEDIUM 5.5
linux/linux_kernel CWE-667

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add a lock when accessing the buddy trim function When running YouTube videos and Steam games simultaneously, the test...

📅 2025-01-19 Inspect Dossier →
CVE-2024-57919 MEDIUM 5.5
linux/linux_kernel CWE-369

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix divide error in DM plane scale calcs dm_get_plane_scale doesn't take into account plane scaled size equal to ...

📅 2025-01-19 Inspect Dossier →
CVE-2024-57918 MEDIUM 5.5
linux/linux_kernel NVD-CWE-noinfo

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix page fault due to max surface definition mismatch DC driver is using two different values to define the maxim...

📅 2025-01-19 Inspect Dossier →
linux/linux_kernel NVD-CWE-noinfo

In the Linux kernel, the following vulnerability has been resolved: topology: Keep the cpumask unchanged when printing cpumap During fuzz testing, the following warning was discovered: different r...

📅 2025-01-19 Inspect Dossier →
CVE-2024-57916 MEDIUM 5.5
linux/linux_kernel NVD-CWE-noinfo

In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling Resolve kernel panic caused by improper handling of IRQs ...

📅 2025-01-19 Inspect Dossier →
Showing Page 188 of 1,636 • 39,245 matching CVEs (out of 396,747 NIST advisories)