2024 CVEs (page 140)
Page 140 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-47703 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: bpf, lsm: Add check for BPF LSM return value A bpf prog returning a positive number attac… |
CVE-2024-47702 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fail verification for sign-extension of packet data/data_end/data_meta syzbot report… |
CVE-2024-47701 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem When looking up… |
CVE-2024-47700 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: check stripe size compatibility on remount as well We disable stripe size in __ext4… |
CVE-2024-47699 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() Patch series "nilfs2: fix po… |
CVE-2024-47698 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error Ensure index in r… |
CVE-2024-47697 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error Ensure index in r… |
CVE-2024-47696 | High | 7.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency In the commit aee242… |
CVE-2024-47695 | Critical | 9.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds In the function init_conns(), a… |
CVE-2024-47694 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix UMR pd cleanup on error flow of driver init The cited commit moves the pd al… |
CVE-2024-47693 | Medium | 6.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix ib_cache_setup_one error flow cleanup When ib_cache_update return an error… |
CVE-2024-47692 | Medium | 6.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: nfsd: return -EINVAL when namelen is 0 When we have a corrupted main.sqlite in /var/lib/n… |
CVE-2024-47691 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread() syzbot reports a f2fs bug as b… |
CVE-2024-47690 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: f2fs: get rid of online repaire on corrupted directory syzbot reports a f2fs bug as below… |
CVE-2024-47689 | Medium | 5.3 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error() syzbot reports a f2fs bu… |
CVE-2024-47688 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: driver core: Fix a potential null-ptr-deref in module_add_driver() Inject fault while pro… |
CVE-2024-47687 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix invalid mr resource destroy Certain error paths from mlx5_vdpa_dev_add() c… |
CVE-2024-47686 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate() The psc->div[] array has psc->n… |
CVE-2024-47685 | Critical | 9.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() syzbot reported that nf_reject_… |
CVE-2024-47684 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: tcp: check skb is non-NULL in tcp_rto_delta_us() We have some machines running stock Ubun… |
CVE-2024-47683 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip Recompute DSC Params if no Stream on Link [why] Encounter NULL poin… |
CVE-2024-47682 | High | 8.6 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix off-by-one error in sd_read_block_characteristics() Ff the device returns p… |
CVE-2024-47681 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he Fix the NULL p… |
CVE-2024-47680 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: f2fs: check discard support for conventional zones As the helper function f2fs_bdev_suppo… |
CVE-2024-47679 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: vfs: fix race between evice_inodes() and find_inode()&iput() Hi, all Recently I noticed… |
CVE-2024-47678 | Critical | 9.4 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: icmp: change the order of rate limits ICMP messages are ratelimited : After the blamed c… |
CVE-2024-47677 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: exfat: resolve memory leak from exfat_create_upcase_table() If exfat_load_upcase_table re… |
CVE-2024-47676 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway Syzbot reports a UAF in hugetlb_fau… |
CVE-2024-47675 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() If bpf_link_prime() fails, bpf_… |
CVE-2024-47328 | High | 7.6 | 2024-10-21 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman FunnelKit Automations wp-marketing-automations allow… |
CVE-2024-43945 | Medium | 6.5 | 2024-10-21 | Cross-Site Request Forgery (CSRF) vulnerability in Latepoint LatePoint allows Cross Site Request Forgery.This issue affects LatePoint: from n/a through 4.9.91. |
CVE-2024-8625 | High | 7.2 | 2024-10-21 | The TS Poll WordPress plugin before 2.4.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injectio… |
CVE-2024-10202 | High | 8.8 | 2024-10-21 | Administrative Management System from Wellchoose has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and exe… |
CVE-2024-10201 | High | 8.8 | 2024-10-21 | Administrative Management System from Wellchoose does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload an… |
CVE-2024-10200 | High | 7.5 | 2024-10-21 | Administrative Management System from Wellchoose has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to… |
CVE-2024-43689 | Critical | 9.8 | 2024-10-21 | Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitrary code may be execut… |
CVE-2024-10199 | Low | 2.4 | 2024-10-21 | A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionali… |
CVE-2024-10198 | Low | 2.4 | 2024-10-21 | A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown fu… |
CVE-2024-10197 | Low | 2.4 | 2024-10-21 | A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /… |
CVE-2024-10196 | Medium | 6.3 | 2024-10-21 | A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /a… |
CVE-2024-44000 | Critical | 9.8 | 2024-10-20 | Insufficiently Protected Credentials vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Authentication Bypass.This issue affects Li… |
CVE-2024-49628 | Medium | 4.3 | 2024-10-20 | Cross-Site Request Forgery (CSRF) vulnerability in whiletrue Most And Least Read Posts Widget most-and-least-read-posts-widget allows Cross Site Request Forger… |
CVE-2024-49627 | Medium | 4.3 | 2024-10-20 | Cross-Site Request Forgery (CSRF) vulnerability in Noor Alam WordPress Image SEO allows Cross Site Request Forgery.This issue affects WordPress Image SEO: from… |
CVE-2024-49325 | Medium | 4.3 | 2024-10-20 | Missing Authorization vulnerability in wpdiscover Photo Gallery Builder photo-gallery-builder allows Accessing Functionality Not Properly Constrained by ACLs.T… |
CVE-2024-49306 | Medium | 5.3 | 2024-10-20 | Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Content Copy Protection & No Right Click wp-content-copy-protector allows Cross Site Request Forge… |
CVE-2024-49290 | Medium | 4.3 | 2024-10-20 | Cross-Site Request Forgery (CSRF) vulnerability in Gora Tech LLC Cooked Pro allows Cross Site Request Forgery.This issue affects Cooked Pro: from n/a before 1… |
CVE-2024-49275 | Medium | 4.3 | 2024-10-20 | Cross-Site Request Forgery (CSRF) vulnerability in Northern Beaches Websites IdeaPush ideapush allows Cross Site Request Forgery.This issue affects IdeaPush: f… |
CVE-2024-49274 | Medium | 5.4 | 2024-10-20 | Cross-Site Request Forgery (CSRF) vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Cross Site Request Forgery.This issue affects VOD In… |
CVE-2024-49272 | Medium | 4.3 | 2024-10-20 | Cross-Site Request Forgery (CSRF) vulnerability in wpweb Social Auto Poster social-auto-poster allows Cross Site Request Forgery.This issue affects Social Auto… |
CVE-2024-49250 | Medium | 4.3 | 2024-10-20 | Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Table of Contents Plus table-of-contents-plus allows Cross Site Request Forgery.This issue affec… |
CVE-2024-47634 | Medium | 5.4 | 2024-10-20 | Cross-Site Request Forgery (CSRF) vulnerability in Streamline CartBounty – Save and recover abandoned carts for WooCommerce woo-save-abandoned-carts allows Cro… |
CVE-2024-49629 | High | 7.1 | 2024-10-20 | Cross-Site Request Forgery (CSRF) vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Stored XSS.This issue affects Endless… |
CVE-2024-49620 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mrcheck116 FERMA.ru.net ferma-ru-net-checkout allows Blin… |
CVE-2024-49619 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in acespritech Social Link Groups social-link-groups allows… |
CVE-2024-49618 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jordan Lyall MyTweetLinks mytweetlinks allows Blind SQL I… |
CVE-2024-49617 | High | 8.2 | 2024-10-20 | Cross-Site Request Forgery (CSRF) vulnerability in anciwasim Back Link Tracker back-link-tracker allows Blind SQL Injection.This issue affects Back Link Tracke… |
CVE-2024-49616 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in nyasro Rate Own Post rate-own-post allows Blind SQL Injec… |
CVE-2024-49615 | High | 8.2 | 2024-10-20 | Cross-Site Request Forgery (CSRF) vulnerability in Henrique Rodrigues SafetyForms safetymails-forms allows Blind SQL Injection.This issue affects SafetyForms… |
CVE-2024-49614 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SermonAudio SermonAudio Widgets sermonaudio-widgets allow… |
CVE-2024-49613 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in developersnote Simple Code Insert Shortcode simple-code-i… |
CVE-2024-49612 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sanjeev SW Contact Form sw-contact-form allows Blind SQL… |
CVE-2024-49609 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brandon White Author Discussion author-discussion allows… |
CVE-2024-49605 | High | 7.1 | 2024-10-20 | Cross-Site Request Forgery (CSRF) vulnerability in Stefan Nour AVChat Video Chat avchat-3 allows Stored XSS.This issue affects AVChat Video Chat: from n/a thro… |
CVE-2024-49335 | High | 7.1 | 2024-10-20 | Cross-Site Request Forgery (CSRF) vulnerability in sh4d0w28 GoogleDrive folder list googledrive-folder-list allows Stored XSS.This issue affects GoogleDrive fo… |
CVE-2024-47325 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle MPG multiple-pages-generator-by-porthas allows… |
CVE-2024-44061 | High | 7.1 | 2024-10-20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory EU/UK VAT Manager for WooCommerce eu-vat-for-wo… |
CVE-2024-49625 | Critical | 9.8 | 2024-10-20 | Deserialization of Untrusted Data vulnerability in sphoid SiteBuilder Dynamic Components sitebuilder-dynamic-components allows Object Injection.This issue affe… |
CVE-2024-49624 | Critical | 9.8 | 2024-10-20 | Deserialization of Untrusted Data vulnerability in smartdevth Advanced Advertising System advanced-advertising-system allows Object Injection.This issue affect… |
CVE-2024-49623 | High | 8.5 | 2024-10-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hasan movahed Duplicate Title Validate duplicate-title-va… |
CVE-2024-49622 | High | 8.2 | 2024-10-20 | Cross-Site Request Forgery (CSRF) vulnerability in aatmaadhikari Apa Banner Slider apa-banner-slider allows SQL Injection.This issue affects Apa Banner Slider… |
CVE-2024-49621 | High | 8.2 | 2024-10-20 | Cross-Site Request Forgery (CSRF) vulnerability in aatmaadhikari APA Register Newsletter Form apa-register-newsletter-form allows SQL Injection.This issue affe… |
CVE-2024-49610 | Critical | 10.0 | 2024-10-20 | Unrestricted Upload of File with Dangerous Type vulnerability in photokiteditor photokit photokit allows Upload a Web Shell to a Web Server.This issue affects… |
CVE-2024-49608 | High | 8.8 | 2024-10-20 | Incorrect Privilege Assignment vulnerability in gerryworks GERRYWORKS Post by Mail gerryworks-post-by-mail allows Privilege Escalation.This issue affects GERRY… |
CVE-2024-49607 | Critical | 10.0 | 2024-10-20 | Unrestricted Upload of File with Dangerous Type vulnerability in redhopit WP Dropbox Dropins wp-dropbox-dropins allows Upload a Web Shell to a Web Server.This… |
CVE-2024-49332 | Critical | 9.8 | 2024-10-20 | Deserialization of Untrusted Data vulnerability in giveawayboost Giveaway Boost giveaway-boost allows Object Injection.This issue affects Giveaway Boost: from… |
CVE-2024-49331 | Critical | 9.9 | 2024-10-20 | Unrestricted Upload of File with Dangerous Type vulnerability in Myriad Solutionz Property Lot Management System plms allows Upload a Web Shell to a Web Server… |
CVE-2024-49330 | Critical | 10.0 | 2024-10-20 | Unrestricted Upload of File with Dangerous Type vulnerability in brx8r Nice Backgrounds nicebackgrounds allows Upload a Web Shell to a Web Server.This issue af… |
CVE-2024-49329 | Critical | 10.0 | 2024-10-20 | Unrestricted Upload of File with Dangerous Type vulnerability in vivek2tamrakar WP REST API FNS rest-api-fns allows Upload a Web Shell to a Web Server.This iss… |
CVE-2024-49327 | Critical | 10.0 | 2024-10-20 | Unrestricted Upload of File with Dangerous Type vulnerability in bepitulaz Woostagram Connect woostagram-connect allows Upload a Web Shell to a Web Server.This… |
CVE-2024-49326 | Critical | 10.0 | 2024-10-20 | Unrestricted Upload of File with Dangerous Type vulnerability in Vasileios Kerasiotis Affiliator affiliator-lite allows Upload a Web Shell to a Web Server.This… |
CVE-2024-49324 | Critical | 10.0 | 2024-10-20 | Unrestricted Upload of File with Dangerous Type vulnerability in sovratecdev Sovratec Case Management sovratec-case-management allows Upload a Web Shell to a W… |
CVE-2024-10195 | Medium | 4.7 | 2024-10-20 | A vulnerability was found in Tecno 4G Portable WiFi TR118 V008-20220830. It has been declared as critical. Affected by this vulnerability is an unknown functio… |
CVE-2024-49631 | Medium | 6.5 | 2024-10-20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Md Abdul Kader Easy Addons for Elementor easy-addons-for-… |
CVE-2024-49630 | Medium | 6.5 | 2024-10-20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems WP Education wp-education allows Stored XSS.This… |
CVE-2024-49626 | Critical | 9.8 | 2024-10-20 | Deserialization of Untrusted Data vulnerability in Piyush Patel Shipyaari Shipping Management shipyaari-shipping-managment allows Object Injection.This issue a… |
CVE-2024-49611 | Critical | 10.0 | 2024-10-20 | Unrestricted Upload of File with Dangerous Type vulnerability in paxmanpwnz Product Website Showcase product-websites-showcase allows Upload a Web Shell to a W… |
CVE-2024-49606 | High | 7.1 | 2024-10-20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DotsquaresLtd Google Map Locations google-map-locations a… |
CVE-2024-49604 | Critical | 9.8 | 2024-10-20 | Authentication Bypass Using an Alternate Path or Channel vulnerability in N-Media Simple User Registration wp-registration allows Authentication Bypass.This is… |
CVE-2024-49334 | High | 7.1 | 2024-10-20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unizoe Web Solutions jLayer Parallax Slider jlayer-parall… |
CVE-2024-49328 | Critical | 9.8 | 2024-10-20 | Authentication Bypass Using an Alternate Path or Channel vulnerability in vivek2tamrakar WP REST API FNS rest-api-fns allows Authentication Bypass.This issue a… |
CVE-2024-49323 | High | 7.1 | 2024-10-20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahriar Alam All in One Slider all-in-one-slider allows… |
CVE-2024-49286 | Critical | 9.6 | 2024-10-20 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Jeroen Berkvens SSV Events ssv-events allows PHP Local File Inc… |
CVE-2024-48049 | Medium | 6.5 | 2024-10-20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mighty Plugins Mighty Builder mighty-builder allows Store… |
CVE-2024-10194 | High | 8.8 | 2024-10-20 | A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been classified as critical. Affected is the function Goto_chidx of… |
CVE-2024-10193 | Medium | 4.7 | 2024-10-20 | A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028 and classified as critical. This issue affects the function ping_ddns of the… |
CVE-2024-10192 | Low | 3.5 | 2024-10-20 | A vulnerability has been found in PHPGurukul IFSC Code Finder Project 1.0 and classified as problematic. This vulnerability affects unknown code of the file se… |
CVE-2024-10191 | Low | 3.5 | 2024-10-20 | A vulnerability, which was classified as problematic, was found in PHPGurukul Boat Booking System 1.0. This affects an unknown part of the file /admin/book-det… |
CVE-2024-10173 | High | 7.3 | 2024-10-20 | A vulnerability has been found in didi DDMQ 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Console… |
CVE-2024-10171 | Medium | 4.7 | 2024-10-20 | A vulnerability, which was classified as critical, was found in code-projects Blood Bank System up to 1.0. Affected is an unknown function of the file /admin/m… |
CVE-2024-10170 | Medium | 6.3 | 2024-10-20 | A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. This issue affects some unknown processing o… |