2024 CVEs (page 121)
Page 121 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-50103 | Medium | 5.5 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() A devm_kzalloc()… |
CVE-2024-50102 | Medium | 5.5 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: x86: fix user address masking non-canonical speculation issue It turns out that AMD has a… |
CVE-2024-50101 | High | 7.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices Previously, the do… |
CVE-2024-50100 | Medium | 5.5 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: USB: gadget: dummy-hcd: Fix "task hung" problem The syzbot fuzzer has been encountering "… |
CVE-2024-50099 | High | 7.3 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: arm64: probes: Remove broken LDR (literal) uprobe support The simulate_ldr_literal() and… |
CVE-2024-50098 | Medium | 5.5 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down There is a history of deadlock if… |
CVE-2024-9579 | High | 7.5 | 2024-11-05 | A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation… |
CVE-2024-51362 | Medium | 6.5 | 2024-11-05 | The LSC Smart Connect Indoor IP Camera V7.6.32 is vulnerable to an information disclosure issue where live camera footage can be accessed through the RTSP prot… |
CVE-2024-51132 | Critical | 9.8 | 2024-11-05 | An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying… |
CVE-2024-50097 | Medium | 5.5 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: net: fec: don't save PTP state if PTP is unsupported Some platforms (such as i.MX25 and i… |
CVE-2024-50096 | High | 7.3 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error The `nouveau_dmem_copy_… |
CVE-2024-50095 | High | 7.5 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Improve handling of timed out WRs of mad agent Current timeout handler of mad a… |
CVE-2024-50094 | High | 7.5 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: sfc: Don't invoke xdp_do_flush() from netpoll. Yury reported a crash in the sfc driver or… |
CVE-2024-50093 | Medium | 5.5 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: thermal: intel: int340x: processor: Fix warning during module unload The processor_therma… |
CVE-2024-50092 | Low | 3.3 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: net: netconsole: fix wrong warning A warning is triggered when there is insufficient spac… |
CVE-2024-50091 | High | 7.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: dm vdo: don't refer to dedupe_context after releasing it Clear the dedupe_context pointer… |
CVE-2024-50090 | High | 7.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix overflow in oa batch buffer By default xe_bb_create_job() appends a MI_BAT… |
CVE-2024-49522 | High | 7.8 | 2024-11-05 | Substance3D - Painter versions 10.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con… |
CVE-2024-48312 | Medium | 5.4 | 2024-11-05 | WebLaudos v20.8 (118) was discovered to contain a cross-site scripting (XSS) vulnerability via the login page. |
CVE-2024-52030 | Medium | 5.7 | 2024-11-05 | Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at ru_wan_flow.cgi. This vulnerability allows attacker… |
CVE-2024-52029 | Medium | 5.7 | 2024-11-05 | Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at genie_pptp.cgi. This vulnerability allows attackers… |
CVE-2024-52028 | Medium | 5.7 | 2024-11-05 | Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at wiz_pptp.cgi. This vulnerability allows attackers t… |
CVE-2024-52026 | Medium | 5.7 | 2024-11-05 | Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at bsw_pppoe.cgi… |
CVE-2024-52025 | Medium | 5.7 | 2024-11-05 | Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at geniepppoe.cgi… |
CVE-2024-52024 | Medium | 5.7 | 2024-11-05 | Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at wizpppoe.cgi… |
CVE-2024-52023 | Medium | 5.7 | 2024-11-05 | Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe2.cgi. Th… |
CVE-2024-52022 | High | 8.0 | 2024-11-05 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the compon… |
CVE-2024-52021 | High | 8.0 | 2024-11-05 | Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at bsw_fix.cgi. This vulnerability allows att… |
CVE-2024-52020 | High | 8.0 | 2024-11-05 | Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at wiz_fix2.cgi. This vulnerability allows at… |
CVE-2024-52019 | High | 8.0 | 2024-11-05 | Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at genie_fix2.cgi. This vulnerability allows… |
CVE-2024-52018 | High | 8.0 | 2024-11-05 | Netgear XR300 v1.0.3.78 was discovered to contain a command injection vulnerability in the system_name parameter at genie_dyn.cgi. This vulnerability allows at… |
CVE-2024-52017 | Medium | 5.7 | 2024-11-05 | Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at bridge_wireless_main.cgi. This vulnerability allows attacker… |
CVE-2024-52016 | Medium | 5.7 | 2024-11-05 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the componen… |
CVE-2024-52015 | Medium | 5.7 | 2024-11-05 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter… |
CVE-2024-52014 | Medium | 5.7 | 2024-11-05 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter… |
CVE-2024-52013 | Medium | 5.7 | 2024-11-05 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter… |
CVE-2024-51024 | High | 8.0 | 2024-11-05 | D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via the HostName parameter in the SetWanSettings function. This vulnerabil… |
CVE-2024-51023 | High | 8.8 | 2024-11-05 | D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via the Address parameter in the SetNetworkTomographySettings function. Th… |
CVE-2024-51022 | Medium | 5.7 | 2024-11-05 | Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid parameter in bridge_wireless_main.cgi. This vulnerability allows attackers to c… |
CVE-2024-51021 | High | 8.0 | 2024-11-05 | Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a command injection vulnerability via the wan_gateway parameter at… |
CVE-2024-51020 | Medium | 5.7 | 2024-11-05 | Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the apn parameter at usbISP_detail_edit.cgi. This vulnerability allows attackers to ca… |
CVE-2024-51019 | Medium | 5.7 | 2024-11-05 | Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pppoe_localnetmask parameter at pppoe.cgi. This vulnerability allows attackers to… |
CVE-2024-51018 | Medium | 5.7 | 2024-11-05 | Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at pptp.cgi. This vulnerability allows attackers to ca… |
CVE-2024-51017 | Medium | 5.7 | 2024-11-05 | Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the l2tp_user_netmask parameter at l2tp.cgi. This vulnerability allows attackers to ca… |
CVE-2024-51016 | Medium | 5.7 | 2024-11-05 | Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the addName%d parameter in usb_approve.cgi. This vulnerability allows attackers to cause… |
CVE-2024-51015 | Medium | 5.7 | 2024-11-05 | Netgear R7000P v1.3.3.154 was discovered to contain a command injection vulnerability via the device_name2 parameter at operation_mode.cgi. This vulnerability… |
CVE-2024-51014 | Medium | 5.7 | 2024-11-05 | Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid_an parameter in bridge_wireless_main.cgi. This vulnerability allows attackers t… |
CVE-2024-51013 | Medium | 5.7 | 2024-11-05 | Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the RADIUSAddr%d_wla parameter at wireless.cgi. This vulnerability allows attackers to… |
CVE-2024-51012 | Medium | 5.7 | 2024-11-05 | Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6_pri_dns parameter at ipv6_fix.cgi. This vulnerability allows attackers to caus… |
CVE-2024-51011 | Medium | 5.7 | 2024-11-05 | Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe.cgi. Thi… |
CVE-2024-51010 | High | 8.0 | 2024-11-05 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the compon… |
CVE-2024-51009 | High | 8.0 | 2024-11-05 | Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at ether.cgi. This vulnerability allows attac… |
CVE-2024-51008 | High | 8.0 | 2024-11-05 | Netgear XR300 v1.0.3.78 was discovered to contain a command injection vulnerability in the system_name parameter at wiz_dyn.cgi. This vulnerability allows atta… |
CVE-2024-51007 | Medium | 5.7 | 2024-11-05 | Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at wireless.cgi. This vulnerability allows attackers to cause a… |
CVE-2024-51006 | Medium | 5.7 | 2024-11-05 | Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6_static_ip parameter in the ipv6_tunnel function. This vulnerability allows att… |
CVE-2024-51005 | High | 8.0 | 2024-11-05 | Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the share_name parameter at usb_remote_smb_conf.cgi. This vulnerability… |
CVE-2024-51004 | Medium | 5.7 | 2024-11-05 | Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in the component usb_device.cgi via the cifs_user, re… |
CVE-2024-51003 | Medium | 5.7 | 2024-11-05 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the componen… |
CVE-2024-51002 | Medium | 5.7 | 2024-11-05 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the l2tp_user_ip parameter… |
CVE-2024-51001 | Medium | 5.7 | 2024-11-05 | Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the sysDNSHost parameter at ddns.cgi. This vulnerability allows attackers to cause a De… |
CVE-2024-51000 | Medium | 5.7 | 2024-11-05 | Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component wireless.cgi via the opmode, opmode_an, and opmode_… |
CVE-2024-50999 | Medium | 5.7 | 2024-11-05 | Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at password.cgi. This vulnerability allows a… |
CVE-2024-50998 | Medium | 5.7 | 2024-11-05 | Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component openvpn.cgi via the openvpn_service_port and openvp… |
CVE-2024-50997 | Medium | 5.7 | 2024-11-05 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter… |
CVE-2024-50996 | Medium | 5.7 | 2024-11-05 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpa_server parameter a… |
CVE-2024-50995 | Medium | 5.7 | 2024-11-05 | Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the share_name parameter at usb_remote_smb_conf.cgi. This vulnerability allows attacker… |
CVE-2024-50994 | Medium | 5.7 | 2024-11-05 | Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component ipv6_fix.cgi via the ipv6_wan_ipaddr, ipv6_lan_ipad… |
CVE-2024-50993 | High | 8.0 | 2024-11-05 | Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at admin_account.cgi. This vulnerability all… |
CVE-2024-10845 | High | 7.3 | 2024-11-05 | A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2024-10844 | High | 7.3 | 2024-11-05 | A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file search… |
CVE-2024-10842 | Low | 2.4 | 2024-11-05 | A vulnerability, which was classified as problematic, has been found in romadebrian WEB-Sekolah 1.0. Affected by this issue is some unknown functionality of th… |
CVE-2024-10841 | Medium | 5.5 | 2024-11-05 | A vulnerability classified as critical was found in romadebrian WEB-Sekolah 1.0. Affected by this vulnerability is an unknown functionality of the file /Proses… |
CVE-2024-10329 | Medium | 4.3 | 2024-11-05 | The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6… |
CVE-2024-7059 | High | 8.0 | 2024-11-05 | A high-severity vulnerability that can lead to arbitrary code execution on the system hosting the Web SDK role was found in the Genetec Security Center product… |
CVE-2024-10840 | Low | 2.4 | 2024-11-05 | A vulnerability classified as problematic has been found in romadebrian WEB-Sekolah 1.0. Affected is an unknown function of the file /Admin/akun_edit.php of th… |
CVE-2024-10263 | High | 7.3 | 2024-11-05 | The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.5.4.4. This… |
CVE-2024-9867 | Medium | 5.4 | 2024-11-05 | The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-… |
CVE-2024-9657 | Medium | 6.5 | 2024-11-05 | The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-… |
CVE-2024-51530 | Medium | 6.6 | 2024-11-05 | LaunchAnywhere vulnerability in the account module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-51529 | Medium | 5.5 | 2024-11-05 | Data verification vulnerability in the battery module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2024-9178 | Medium | 6.4 | 2024-11-05 | The XT Floating Cart for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and includin… |
CVE-2024-10319 | Medium | 4.3 | 2024-11-05 | The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including… |
CVE-2024-9878 | Medium | 4.4 | 2024-11-05 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions… |
CVE-2024-7429 | Medium | 4.3 | 2024-11-05 | The Zotpress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Zotpress_process_accounts_AJAX fu… |
CVE-2024-51528 | Medium | 4.0 | 2024-11-05 | Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-51527 | Medium | 5.1 | 2024-11-05 | Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-51526 | High | 8.2 | 2024-11-05 | Permission control vulnerability in the hidebug module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-51525 | Medium | 6.2 | 2024-11-05 | Permission control vulnerability in the clipboard module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-51524 | Medium | 4.0 | 2024-11-05 | Permission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-51523 | High | 7.1 | 2024-11-05 | Information management vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-51522 | Medium | 6.2 | 2024-11-05 | Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerability may affect availa… |
CVE-2024-51521 | Medium | 5.7 | 2024-11-05 | Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-51520 | Medium | 5.5 | 2024-11-05 | Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-51519 | Medium | 5.0 | 2024-11-05 | Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-51518 | Medium | 5.3 | 2024-11-05 | Vulnerability of message types not being verified in the advanced messaging modul Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-51517 | Medium | 5.1 | 2024-11-05 | Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-47255 | Medium | 4.7 | 2024-11-05 | In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitrary code execution… |
CVE-2024-47254 | Medium | 6.3 | 2024-11-05 | In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their… |
CVE-2024-47253 | High | 7.2 | 2024-11-05 | In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to write files on the… |
CVE-2024-10687 | Critical | 9.8 | 2024-11-05 | The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons plugin for WordPress is… |