2024 CVEs (page 168)
Page 168 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-46551 | High | 7.5 | 2024-09-18 | Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_Pwd parameter at inet15.cgi. This vulnerability allows attackers to cause a… |
CVE-2024-46550 | High | 7.5 | 2024-09-18 | Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the CGIbyFieldName parameter at chglog.cgi. This vulnerability allows attackers to c… |
CVE-2024-45858 | High | 7.8 | 2024-09-18 | An arbitrary code execution vulnerability exists in versions 0.2.9 up to 0.5.10 of the Guardrails AI Guardrails framework because of the way it validates XML f… |
CVE-2024-44542 | Critical | 9.8 | 2024-09-18 | SQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code via the /todesk.com/news.html parameter. |
CVE-2024-39590 | High | 7.5 | 2024-09-18 | Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb… |
CVE-2024-39589 | High | 7.5 | 2024-09-18 | Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb… |
CVE-2024-36981 | High | 7.5 | 2024-09-18 | An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88… |
CVE-2024-36980 | High | 7.5 | 2024-09-18 | An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88… |
CVE-2024-35515 | Critical | 9.8 | 2024-09-18 | Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code. |
CVE-2024-34026 | Critical | 9.0 | 2024-09-18 | A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007… |
CVE-2024-8891 | Medium | 5.3 | 2024-09-18 | An attacker with no knowledge of the current users in the web application, could build a dictionary of potential users and check the server responses as it ind… |
CVE-2024-39081 | Medium | 4.2 | 2024-09-18 | An issue in SMART TYRE CAR & BIKE v4.2.0 allows attackers to perform a man-in-the-middle attack via Bluetooth communications. |
CVE-2024-31198 | Medium | 5.3 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31197 | Medium | 5.3 | 2024-09-18 | Improper Null Termination vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routi… |
CVE-2024-31196 | Medium | 5.3 | 2024-09-18 | Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is asso… |
CVE-2024-31195 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31194 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31193 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31192 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31191 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31190 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31189 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31188 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31187 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31186 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31185 | Medium | 5.3 | 2024-09-18 | Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is asso… |
CVE-2024-31184 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31183 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31182 | Medium | 5.3 | 2024-09-18 | Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is asso… |
CVE-2024-31181 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31180 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31179 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31178 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31177 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg modules). This vulnerability is associated with program routines fl… |
CVE-2024-31176 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31175 | Medium | 5.3 | 2024-09-18 | Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is asso… |
CVE-2024-31174 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31173 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31172 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31171 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31170 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31169 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31168 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31167 | Medium | 5.3 | 2024-09-18 | Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is asso… |
CVE-2024-31166 | Medium | 6.5 | 2024-09-18 | Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine flui… |
CVE-2024-31165 | Medium | 5.3 | 2024-09-18 | Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is asso… |
CVE-2024-31164 | Medium | 5.3 | 2024-09-18 | Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is asso… |
CVE-2024-23916 | Medium | 5.3 | 2024-09-18 | Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is asso… |
CVE-2024-23915 | Medium | 5.3 | 2024-09-18 | Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is asso… |
CVE-2024-8892 | Medium | 5.3 | 2024-09-18 | Vulnerability in CIRCUTOR TCP2RS+ firmware version 1.3b, which could allow an attacker to modify any configuration value, even if the device has the user/passw… |
CVE-2024-8890 | High | 8.0 | 2024-09-18 | An attacker with access to the network where the CIRCUTOR Q-SMT is located in its firmware version 1.0.4, could obtain legitimate credentials or steal sessions… |
CVE-2024-8889 | Critical | 9.3 | 2024-09-18 | Vulnerability in CIRCUTOR TCP2RS+ firmware version 1.3b, which could allow an attacker to modify any configuration value, even if the device has the user/passw… |
CVE-2024-8888 | Critical | 10.0 | 2024-09-18 | An attacker with access to the network where CIRCUTOR Q-SMT is located in its firmware version 1.0.4, could steal the tokens used on the web, since these have… |
CVE-2024-6406 | | 2024-09-18 | Missing Authentication for Critical Function, Missing Authorization vulnerability in Yordam Information Technology Mobile Library Application allows Retrieve E… | |
CVE-2024-5682 | Medium | 6.5 | 2024-09-18 | Improper Restriction of Excessive Authentication Attempts vulnerability in Yordam Information Technology Yordam Library Automation System allows Interface Mani… |
CVE-2024-43188 | Medium | 4.9 | 2024-09-18 | IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform unauthorized activities due to improper client… |
CVE-2024-8887 | Critical | 10.0 | 2024-09-18 | CIRCUTOR Q-SMT in its firmware version 1.0.4, could be affected by a denial of service (DoS) attack if an attacker with access to the web service bypasses the… |
CVE-2024-46801 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: libfs: fix get_stashed_dentry() get_stashed_dentry() tries to optimistically retrieve a s… |
CVE-2024-46800 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: sch/netem: fix use after free in netem_dequeue If netem_dequeue() enqueues packet to inne… |
CVE-2024-46799 | High | 7.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX If number of TX queues are s… |
CVE-2024-46798 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object When using kernel with the following e… |
CVE-2024-46797 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: powerpc/qspinlock: Fix deadlock in MCS queue If an interrupt occurs in queued_spin_lock_s… |
CVE-2024-46796 | Critical | 9.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2_set_path_size() If smb2_compound_op() is ca… |
CVE-2024-46795 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: unset the binding mark of a reused connection Steve French reported null pointer d… |
CVE-2024-46794 | Low | 3.3 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix data leak in mmio_read() The mmio_read() function makes a TDVMCALL to retrie… |
CVE-2024-46793 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder Since commit 13f5826… |
CVE-2024-46792 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: riscv: misaligned: Restrict user access to kernel memory raw_copy_{to,from}_user() do not… |
CVE-2024-46791 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open The mcp251x_hw_wake… |
CVE-2024-46790 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: codetag: debug: mark codetags for poisoned page as empty When PG_hwpoison pages are freed… |
CVE-2024-46789 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: mm/slub: add check for s->flags in the alloc_tagging_slab_free_hook When enable CONFIG_ME… |
CVE-2024-46788 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Use a cpumask to know what threads are kthreads The start_kthread() and… |
CVE-2024-46787 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix checks for huge PMDs Patch series "userfaultfd: fix races around pmd_tra… |
CVE-2024-46786 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF The fscache_cook… |
CVE-2024-46785 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: eventfs: Use list_del_rcu() for SRCU protected list variable Chi Zhiling reported: We… |
CVE-2024-46784 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup Currently napi_disabl… |
CVE-2024-46783 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: fix return value of tcp_bpf_sendmsg() When we cork messages in psock->cork, the… |
CVE-2024-46782 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: ila: call nf_unregister_net_hooks() sooner syzbot found an use-after-free Read in ila_nf_… |
CVE-2024-46781 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix missing cleanup on rollforward recovery error In an error injection test of a… |
CVE-2024-46780 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: protect references to superblock parameters exposed in sysfs The superblock buffe… |
CVE-2024-46779 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Free pvr_vm_gpuva after unlink This caused a measurable memory leak. Alt… |
CVE-2024-46778 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check UnboundedRequestEnabled's value CalculateSwathAndDETConfiguration_… |
CVE-2024-46777 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: udf: Avoid excessive partition lengths Avoid mounting filesystems where the partition wou… |
CVE-2024-46776 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Run DC_LOG_DC after checking link->link_enc [WHAT] The DC_LOG_DC should… |
CVE-2024-46775 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate function returns [WHAT & HOW] Function return values must be ch… |
CVE-2024-46774 | High | 7.1 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() Smatch warns: arch/… |
CVE-2024-46773 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check denominator pbn_div before used [WHAT & HOW] A denominator cannot… |
CVE-2024-46772 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check denominator crb_pipes before used [WHAT & HOW] A denominator canno… |
CVE-2024-46771 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: Remove proc entry when dev is unregistered. syzkaller reported a warning in bcm… |
CVE-2024-46770 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: ice: Add netif_device_attach/detach into PF reset flow Ethtool callbacks can be executed… |
CVE-2024-46769 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: spi: intel: Add check devm_kasprintf() returned value intel_spi_populate_chip() use devm_… |
CVE-2024-46768 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (hp-wmi-sensors) Check if WMI event data exists The BIOS can choose to return no e… |
CVE-2024-46767 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: net: phy: Fix missing of_node_put() for leds The call of of_get_child_by_name() will caus… |
CVE-2024-46766 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: ice: move netif_queue_set_napi to rtnl-protected sections Currently, netif_queue_set_napi… |
CVE-2024-46765 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: ice: protect XDP configuration with a mutex The main threat to data consistency in ice_xd… |
CVE-2024-46764 | High | 7.3 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: bpf: add check for invalid name in btf_name_valid_section() If the length of the name str… |
CVE-2024-46763 | High | 7.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: fou: Fix null-ptr-deref in GRO. We observed a null-ptr-deref in fou_gro_receive() while s… |
CVE-2024-46762 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Fix possible access to a freed kirqfd instance Nothing prevents simultaneou… |
CVE-2024-46761 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv The hotplug driver for powerpc (… |
CVE-2024-46760 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: usb: schedule rx work after everything is set up Right now it's possible to… |
CVE-2024-46759 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (adc128d818) Fix underflows seen when writing limit attributes DIV_ROUND_CLOSEST()… |