Vulnerabilidades CVE

A continuación la lista de las últimas vulnerabilidades publicadas por el instituto NIST:

Borrar filtros
CVE ID Publicado Severidad CVSS Descripción
CVE-2023-54000 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix deadlock issue when externel_lb and reset are executed together When externel_lb and reset are executed…
CVE-2023-53999 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Fix internal port memory leak The flow rule can be splited, and the extra post_act rules…
CVE-2023-53998 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on data_avail and actual data The virtio rng device kicks off a new…
CVE-2023-53997 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: thermal: of: fix double-free on unregistration Since commit 3d439b1a2ad3 ("thermal/core: Alloc-copy-free the thermal zone parameters structure"), thermal_zone_device_register() allocates…
CVE-2023-53996 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: x86/sev: Make enc_dec_hypercall() accept a size instead of npages enc_dec_hypercall() accepted a page count instead of a size,…
CVE-2023-53995 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix one memleak in __inet_del_ifa() I got the below warning when do fuzzing test: unregister_netdevice: waiting…
CVE-2023-53994 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: ionic: remove WARN_ON to prevent panic_on_warn Remove unnecessary early code development check and the WARN_ON that it uses.…
CVE-2023-53993 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: PCI/DOE: Fix memory leak with CONFIG_DEBUG_OBJECTS=y After a pci_doe_task completes, its work_struct needs to be destroyed to avoid…
CVE-2023-53992 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: ocb: don't leave if not joined If there's no OCB state, don't ask the driver/mac80211 to…
CVE-2023-53991 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Disallow unallocated resources to be returned In the event that the topology requests resources that have not…
CVE-2023-53990 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: SMB3: Add missing locks to protect deferred close file list cifs_del_deferred_close function has a critical section which modifies…
CVE-2023-53989 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: arm64: mm: fix VA-range sanity check Both create_mapping_noalloc() and update_mapping_prot() sanity-check their 'virt' parameter, but the check itself…
CVE-2023-53988 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de() Here is a BUG report from syzbot: BUG: KASAN: slab-out-of-bounds in hdr_delete_de+0xe0/0x150…
CVE-2023-53987 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: ping: Fix potentail NULL deref for /proc/net/icmp. After commit dbca1596bbb0 ("ping: convert to RCU lookups, get rid of…
CVE-2023-53986 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: disable RAC flush for TP1 RAC flush causes kernel panics on BCM6358 with EHCI/OHCI when…
CVE-2023-53867 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: ceph: fix potential use-after-free bug when trimming caps When trimming the caps and just after the 'session->s_cap_lock' is…
CVE-2022-50711 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix possible memory leak in mtk_probe() If mtk_wed_add_hw() has been called, mtk_wed_exit() needs be called…
CVE-2022-50710 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: ice: set tx_tstamps when creating new Tx rings via ethtool When the user changes the number of queues…
CVE-2022-50709 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() syzbot is reporting uninit value at ath9k_htc_rx_msg() [1], for ioctl(USB_RAW_IOCTL_EP_WRITE)…
CVE-2022-50708 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: HSI: ssi_protocol: fix potential resource leak in ssip_pn_open() ssip_pn_open() claims the HSI client's port with hsi_claim_port(). When hsi_register_port_event()…
CVE-2022-50707 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session() 'vc_ctrl_req' is alloced in virtio_crypto_alg_skcipher_close_session(), and should be freed in the invalid…
CVE-2022-50706 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: net/ieee802154: don't warn zero-sized raw_sendmsg() syzbot is hitting skb_assert_len() warning at __dev_queue_xmit() [1], for PF_IEEE802154 socket's zero-sized raw_sendmsg()…
CVE-2022-50705 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: defer fsnotify calls to task context We can't call these off the kiocb completion as that might…
CVE-2022-50704 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix use-after-free during usb config switch In the process of switching USB config from rndis to…
CVE-2022-50703 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() There are two refcount leak bugs in qcom_smsm_probe(): (1)…
CVE-2022-50702 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() Inject fault while probing module, if device_register() fails in…
CVE-2022-50701 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host SDIO may need addtional 511 bytes to align bus…
CVE-2022-50700 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: Delay the unmapping of the buffer On WCN3990, we are seeing a rare scenario where copy…
CVE-2022-50699 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() The following warning was triggered on a hardware…
CVE-2022-50698 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() If clk_hw_register() fails, the corresponding clk should not be…
CVE-2022-50697 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: mrp: introduce active flags to prevent UAF when applicant uninit The caller of del_timer_sync must prevent restarting of…
CVE-2025-64641 2025-12-24 MEDIUM 4.1 Mattermost versions 11.1.x
CVE-2025-13767 2025-12-24 MEDIUM 4.3 Mattermost versions 11.1.x
CVE-2025-57840 2025-12-24 LOW 2.2 ADB(Android Debug Bridge) is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability.
CVE-2024-58335 2025-12-24 MEDIUM 5.0 OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java.
CVE-2025-66445 2025-12-24 HIGH 7.1 Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics component) and Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component).This issue affects Hitachi Infrastructure…
CVE-2025-66444 2025-12-24 HIGH 8.2 Cross-site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics component) and Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component).This issue affects Hitachi Infrastructure…
CVE-2025-13773 2025-12-24 CRITICAL 9.8 The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.8.0 via the 'WooCommerce_Delivery_Notes::update'…
CVE-2025-68695 2025-12-24 N/A 0.0 Rejected reason: Not used
CVE-2025-68694 2025-12-24 N/A 0.0 Rejected reason: Not used
CVE-2025-68693 2025-12-24 N/A 0.0 Rejected reason: Not used
CVE-2025-68692 2025-12-24 N/A 0.0 Rejected reason: Not used
CVE-2025-68691 2025-12-24 N/A 0.0 Rejected reason: Not used
CVE-2025-68690 2025-12-24 N/A 0.0 Rejected reason: Not used
CVE-2025-68689 2025-12-24 N/A 0.0 Rejected reason: Not used
CVE-2025-68688 2025-12-24 N/A 0.0 Rejected reason: Not used
CVE-2025-68687 2025-12-24 N/A 0.0 Rejected reason: Not used
CVE-2025-15053 2025-12-24 HIGH 7.3 A flaw has been found in code-projects Student Information System 1.0. This issue affects some unknown processing of the file /searchresults.php. Executing manipulation of the argument searchbox can…
CVE-2025-15052 2025-12-24 LOW 3.5 A vulnerability was detected in code-projects Student Information System 1.0. This vulnerability affects unknown code of the file /profile.php. Performing manipulation of the argument firstname/lastname results in cross…
CVE-2025-15050 2025-12-24 MEDIUM 6.3 A security vulnerability has been detected in code-projects Student File Management System 1.0. This affects an unknown part of the file /save_file.php. Such manipulation of the argument File…