Search Results (5280 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-56318 2025-01-02 7.5 High
In raw\TCP.cpp in Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before 27ca6ec, there is a NULL pointer dereference in TCPBase::ProcessSingleMessage via TCP packets with zero messageSize, leading to denial of service.
CVE-2024-23808 1 Openatom 1 Openharmony 2025-01-02 5.2 Medium
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free or cause DOS through NULL pointer dereference.
CVE-2024-31078 1 Openatom 1 Openharmony 2025-01-02 3.3 Low
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through NULL pointer dereference.
CVE-2023-32084 1 Microsoft 7 Windows 10 1809, Windows 11 21h2, Windows 11 21h2 and 4 more 2025-01-01 7.5 High
HTTP.sys Denial of Service Vulnerability
CVE-2023-35338 1 Microsoft 19 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 16 more 2025-01-01 7.5 High
Windows Peer Name Resolution Protocol Denial of Service Vulnerability
CVE-2023-24910 1 Microsoft 24 365, Office, Office Long Term Servicing Channel and 21 more 2025-01-01 7.8 High
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2023-24859 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2025-01-01 7.5 High
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVE-2023-21700 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2025-01-01 7.5 High
Windows iSCSI Discovery Service Denial of Service Vulnerability
CVE-2023-21758 1 Microsoft 13 Windows 10, Windows 10 1507, Windows 10 1607 and 10 more 2025-01-01 7.5 High
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVE-2023-21757 1 Microsoft 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more 2025-01-01 7.5 High
Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability
CVE-2023-21683 1 Microsoft 20 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 17 more 2025-01-01 7.5 High
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVE-2023-21547 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-01-01 7.5 High
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
CVE-2024-38233 1 Microsoft 2 Windows 10 1607, Windows Server 2016 2024-12-31 7.5 High
Windows Networking Denial of Service Vulnerability
CVE-2024-38232 1 Microsoft 2 Windows 10 1607, Windows Server 2016 2024-12-31 7.5 High
Windows Networking Denial of Service Vulnerability
CVE-2024-41884 2024-12-24 N/A
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. If an attacker does not enter any value for a specific URL parameter, NULL pointer references will occur and the NVR will reboot. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
CVE-2024-41883 2024-12-24 N/A
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR . An attacker enters a special value for a specific URL parameter, resulting in a NULL pointer reference and a reboot of the NVR. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
CVE-2024-12656 1 Fabulatech 1 Usb Over Network 2024-12-19 5.5 Medium
A vulnerability, which was classified as problematic, was found in FabulaTech USB over Network 6.0.6.1. This affects the function 0x220448 in the library ftusbbus2.sys of the component IOCT Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2024-12655 1 Fabulatech 1 Usb Over Network 2024-12-19 5.5 Medium
A vulnerability, which was classified as problematic, has been found in FabulaTech USB over Network 6.0.6.1. Affected by this issue is the function 0x220420 in the library ftusbbus2.sys of the component IOCT Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2024-12660 1 Iobit 1 Advanced Systemcare Ultimate 2024-12-19 5.5 Medium
A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0. It has been declared as problematic. Affected by this vulnerability is the function 0x8001E018 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2024-12659 1 Iobit 1 Advanced Systemcare Ultimate 2024-12-19 5.5 Medium
A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0. It has been classified as problematic. Affected is the function 0x8001E004 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.