Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.
Matching cohort: 4,054 published records · 16 KEV · 4,054 with a forecast · 0 unknown dates
4,054 matching published records · 0 with an unknown publication date
Every segment and month is a link that preserves the other filters.
Share of cohort: KEV 0.39% · forecast 100% · unscored 24%.
Stack-based Buffer Overflow in WLAN Windows Host
Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.
Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T10:04:53.283Z. Updated 2024-11-16T04:55:25.671Z.
Buffer Copy Without Checking Size of Input in WLAN Windows Host
Memory corruption while station LL statistic handling.
Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T10:04:51.957Z. Updated 2024-11-16T04:55:24.570Z.
Cryptographic Issues in BT Controller
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T10:04:50.376Z. Updated 2024-11-04T14:56:33.847Z.
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera
Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.
Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T10:04:48.761Z. Updated 2024-11-16T04:55:23.328Z.
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera
Memory corruption while handling IOCTL calls in JPEG Encoder driver.
Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T10:04:47.459Z. Updated 2024-11-16T04:55:21.871Z.
Buffer Over-read in WLAN Host
Transient DOS while processing the CU information from RNR IE.
Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T10:04:46.138Z. Updated 2024-11-04T14:57:51.030Z.
Buffer Over-read in WLAN Firmware
Transient DOS while parsing BTM ML IE when per STA profile is not included.
Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T10:04:44.792Z. Updated 2024-11-04T14:26:39.787Z.
Use After Free in WLAN Host Communication
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T10:04:43.380Z. Updated 2024-11-04T14:38:48.207Z.
Use After Free in ComputerVision
Memory corruption while processing IOCTL calls to unmap the buffers.
Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T10:04:42.013Z. Updated 2024-11-08T04:55:15.791Z.
Improper Validation of Array Index in Camera_Linux
Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.
Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T10:04:40.667Z. Updated 2024-11-08T04:55:14.332Z.
Improper Input Validation in RIL
Memory corruption while processing the update SIM PB records request.
Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T10:04:39.355Z. Updated 2024-11-16T04:55:29.307Z.
Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Performance
Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.
Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T10:04:38.075Z. Updated 2024-11-08T04:55:12.803Z.
Use After Free in DSP Services
Memory corruption while handling the PDR in driver for getting the remote heap maps.
Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T10:04:36.813Z. Updated 2024-11-08T04:55:11.443Z.
Improper Input Validation in Video
memory corruption when WiFi display APIs are invoked with large random inputs.
Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T10:04:35.503Z. Updated 2024-11-16T04:55:28.069Z.
Reachable Assertion in Modem
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.
Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T10:04:34.231Z. Updated 2024-11-04T14:15:34.635Z.
Use of Out-of-range Pointer Offset in ComputerVision
Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.
Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T10:04:32.745Z. Updated 2024-11-08T04:55:09.987Z.
Apache Kylin: Session fixation in web interface
Session Fixation vulnerability in Apache Kylin. This issue affects Apache Kylin: from 2.0.0 through 4.x. Users are recommended to upgrade to version 5.0.0 or above, which fixes the issue.
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T09:27:06.050Z. Updated 2024-11-05T14:50:24.558Z.
Umbraco CMS Dashboard frame cross site scripting
A vulnerability was found in Umbraco CMS up to 10.7.7/12.3.6/13.5.2/14.3.1/15.1.1. It has been classified as problematic. Affected is an unknown function of the file /Umbraco/preview/frame?id{} of the component Dashboard. The manipulation of the argument culture leads to cross site scripting. It is possible to launch t…
Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T05:00:06.691Z. Updated 2025-01-22T07:47:21.294Z.
code-projects University Event Management System dodelete.php sql injection
A vulnerability was found in code-projects University Event Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dodelete.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the publ…
Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T04:31:04.451Z. Updated 2024-11-04T17:42:04.260Z.
itsourcecode Farm Management System edit-pig.php sql injection
A vulnerability has been found in itsourcecode Farm Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /edit-pig.php. The manipulation of the argument pigno/weight/arrived/breed/remark/status leads to sql injection. The attack can be initiated remotely. The exploit has…
Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2024-11-04T04:00:07.603Z. Updated 2024-11-04T17:55:07.852Z.