2024 CVEs (page 188)
Page 188 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-44552 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv. |
CVE-2024-44551 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv. |
CVE-2024-44550 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv. |
CVE-2024-44549 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv. |
CVE-2024-43967 | Medium | 5.9 | 2024-08-26 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Stark Digital WP Testimonial Widget allows Stored… |
CVE-2024-43319 | Medium | 4.3 | 2024-08-26 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in bPlugins LLC Flash & HTML5 Video.This issue affects Flash & HTML5 Video: from n/a t… |
CVE-2024-43289 | High | 7.5 | 2024-08-26 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a through 2.3.4. |
CVE-2024-43283 | Medium | 5.3 | 2024-08-26 | Insertion of Sensitive Information Into Sent Data vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affec… |
CVE-2024-42818 | Medium | 6.1 | 2024-08-26 | A cross-site scripting (XSS) vulnerability in the Config-Create function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML… |
CVE-2024-42816 | Medium | 6.1 | 2024-08-26 | A cross-site scripting (XSS) vulnerability in the Create Product function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML… |
CVE-2024-42791 | High | 8.8 | 2024-08-26 | A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=delete_genre. |
CVE-2024-42788 | Medium | 6.1 | 2024-08-26 | A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0. This vulnerabilit… |
CVE-2024-41285 | Critical | 9.8 | 2024-08-26 | A stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted fil… |
CVE-2024-34087 | Critical | 9.8 | 2024-08-26 | An SEH-based buffer overflow in the BPQ32 HTTP Server in BPQ32 6.0.24.1 allows remote attackers with access to the Web Terminal to achieve remote code executio… |
CVE-2024-8169 | High | 7.3 | 2024-08-26 | A vulnerability was found in code-projects Online Quiz Site 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the fil… |
CVE-2024-8168 | High | 7.3 | 2024-08-26 | A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been declared as critical. Affected by this vulnerability is an unknown func… |
CVE-2024-8167 | High | 7.3 | 2024-08-26 | A vulnerability was found in code-projects Job Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /forget.php. The man… |
CVE-2024-8166 | Medium | 4.7 | 2024-08-26 | A vulnerability has been found in Ruijie EG2000K 11.1(6)B2 and classified as critical. This vulnerability affects unknown code of the file /tool/index.php?c=do… |
CVE-2024-7988 | Critical | 9.8 | 2024-08-26 | A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with Syst… |
CVE-2024-7987 | High | 7.8 | 2024-08-26 | A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with Syst… |
CVE-2024-43966 | High | 7.6 | 2024-08-26 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stark Digital WP Testimonial Widget.This issue affects WP… |
CVE-2024-42789 | Medium | 6.3 | 2024-08-26 | A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/controller.php?page=test" in Kashipara Music Management System v1.0. This vulnerabili… |
CVE-2024-42787 | Medium | 6.1 | 2024-08-26 | A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Management System v1.0. This vulnerabi… |
CVE-2024-39097 | Medium | 6.1 | 2024-08-26 | There is an Open Redirect vulnerability in Gnuboard v6.0.4 and below via the `url` parameter in login path. |
CVE-2024-38859 | Medium | 6.1 | 2024-08-26 | XSS in the view page with the SLA column configured in Checkmk versions prior to 2.3.0p14, 2.2.0p33, 2.1.0p47 and 2.0.0 (EOL) allowed malicious users to execut… |
CVE-2024-8165 | Medium | 4.3 | 2024-08-26 | A vulnerability was identified in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This vulnerability affects the function exportZip of the file /ad… |
CVE-2024-8164 | Medium | 6.3 | 2024-08-26 | A vulnerability was determined in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This affects the function rename of the file /Admin/Http/Controll… |
CVE-2024-8163 | Medium | 5.4 | 2024-08-26 | A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin… |
CVE-2024-8162 | Critical | 9.8 | 2024-08-26 | A vulnerability classified as critical has been found in TOTOLINK T10 AC1200 4.1.8cu.5207. Affected is an unknown function of the file /squashfs-root/web_cste/… |
CVE-2024-44558 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo. |
CVE-2024-44556 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo. |
CVE-2024-44942 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC syzbot reports a… |
CVE-2024-44941 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to cover read extent cache access with lock syzbot reports a f2fs bug as below… |
CVE-2024-44940 | High | 7.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: fou: remove warn in gue_gro_receive on unsupported protocol Drop the WARN_ON_ONCE inn gue… |
CVE-2024-44939 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix null ptr deref in dtInsertEntry [syzbot reported] general protection fault, prob… |
CVE-2024-44938 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: jfs: Fix shift-out-of-bounds in dbDiscardAG When searching for the next smaller log2 bloc… |
CVE-2024-44565 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the function form_fast_setting_internet_set. |
CVE-2024-44563 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo. |
CVE-2024-41879 | High | 7.8 | 2024-08-26 | Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co… |
CVE-2024-44937 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-vbtn: Protect ACPI notify handler against recursion Since commit e2ff… |
CVE-2024-44936 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: power: supply: rt5033: Bring back i2c_set_clientdata Commit 3a93da231c12 ("power: supply… |
CVE-2024-44935 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: sctp: Fix null-ptr-deref in reuseport_add_sock(). syzbot reported a null-ptr-deref while… |
CVE-2024-44934 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: wait for previous gc cycles when removing port syzbot hit a use-after… |
CVE-2024-44933 | High | 7.3 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en : Fix memory out-of-bounds in bnxt_fill_hw_rss_tbl() A recent commit has modified… |
CVE-2024-44932 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix UAFs when destroying the queues The second tagged commit started sometimes (ver… |
CVE-2024-44931 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: gpio: prevent potential speculation leaks in gpio_device_get_desc() Userspace may trigger… |
CVE-2024-43914 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid BUG_ON() while continue reshape after reassembling Currently, mdadm suppo… |
CVE-2024-43913 | High | 7.0 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: nvme: apple: fix device reference counting Drivers must call nvme_uninit_ctrl after a suc… |
CVE-2024-43912 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: disallow setting special AP channel widths Setting the AP channel width is… |
CVE-2024-43911 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL dereference at band check in starting tx ba session In MLD conne… |
CVE-2024-43910 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: bpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory accesses Curren… |
CVE-2024-43909 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix the null pointer dereference for smu7 optimize the code to avoid pass… |
CVE-2024-43908 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix the null pointer dereference to ras_manager Check ras_manager before usin… |
CVE-2024-43907 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules Check the poi… |
CVE-2024-43906 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/admgpu: fix dereferencing null pointer context When user space sets an invalid ta typ… |
CVE-2024-43905 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr Check return value and cond… |
CVE-2024-43904 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing This commi… |
CVE-2024-43902 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checker before passing variables Checks null pointer before pas… |
CVE-2024-43901 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL pointer dereference for DTN log in DCN401 When users run the co… |
CVE-2024-43900 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: media: xc2028: avoid use-after-free in load_firmware_cb() syzkaller reported use-after-fr… |
CVE-2024-43899 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null pointer deref in dcn20_resource.c Fixes a hang thats triggered… |
CVE-2024-43897 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: net: drop bad gso csum_start and offset in virtio_net_hdr Tighten csum_start and csum_off… |
CVE-2024-43896 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: ASoC: cs-amp-lib: Fix NULL pointer crash if efi.get_variable is NULL Call efi_rt_services… |
CVE-2024-43894 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/client: fix null pointer dereference in drm_client_modeset_probe In drm_client_modese… |
CVE-2024-43893 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: serial: core: check uartclk for zero to avoid divide by zero Calling ioctl TIOCSSERIAL wi… |
CVE-2024-43892 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: memcg: protect concurrent access to mem_cgroup_idr Commit 73f576c04b94 ("mm: memcontrol… |
CVE-2024-43891 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: tracing: Have format file honor EVENT_FILE_FL_FREED When eventfs was introduced, special… |
CVE-2024-43890 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix overflow in get_free_elt() "tracing_map->next_elt" in get_free_elt() is at r… |
CVE-2024-43889 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: padata: Fix possible divide-by-0 panic in padata_mt_helper() We are hit with a not easily… |
CVE-2024-43888 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: mm: list_lru: fix UAF for memory cgroup The mem_cgroup_from_slab_obj() is supposed to be… |
CVE-2024-43887 | Medium | 4.7 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: net/tcp: Disable TCP-AO static key after RCU grace period The lifetime of TCP-AO static_k… |
CVE-2024-43886 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check in resource_log_pipe_topology_update [WHY] When switching… |
CVE-2024-8161 | Critical | 9.8 | 2024-08-26 | SQL injection vulnerability in ATISolutions CIGES affecting versions lower than 2.15.5. This vulnerability allows a remote attacker to send a specially crafted… |
CVE-2024-43444 | High | 8.2 | 2024-08-26 | Passwords of agents and customers are displayed in plain text in the OTRS admin log module if certain configurations regarding the authentication sources match… |
CVE-2024-43443 | Medium | 4.9 | 2024-08-26 | Improper Neutralization of Input done by an attacker with admin privileges ('Cross-site Scripting') in Process Management modules of OTRS and ((OTRS)) Communit… |
CVE-2024-43442 | Medium | 4.9 | 2024-08-26 | Improper Neutralization of Input done by an attacker with admin privileges ('Cross-site Scripting') in OTRS (System Configuration modules) and ((OTRS)) Commun… |
CVE-2024-43884 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Add error handling to pair_device() hci_conn_params_add() never checks f… |
CVE-2024-45256 | Critical | 9.8 | 2024-08-26 | An arbitrary file write issue in the exfiltration endpoint in BYOB (Build Your Own Botnet) 2.0 allows attackers to overwrite SQLite databases and bypass authen… |
CVE-2024-45241 | High | 7.5 | 2024-08-26 | A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf (False Alarm Management) through 2024-08-09 allows unauthenticated attackers to read fil… |
CVE-2024-7313 | Medium | 6.1 | 2024-08-26 | The Shield Security WordPress plugin before 20.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cros… |
CVE-2024-6879 | Medium | 4.7 | 2024-08-26 | The Quiz and Survey Master (QSM) WordPress plugin before 9.1.1 fails to validate and escape certain Quiz fields before displaying them on a page or post where… |
CVE-2024-41996 | High | 7.5 | 2024-08-26 | Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the cl… |
CVE-2024-8073 | Critical | 9.8 | 2024-08-26 | Improper Input Validation vulnerability in Hillstone Networks Hillstone Networks Web Application Firewall on 5.5R6 allows Command Injection.This issue affects… |
CVE-2024-8155 | Medium | 4.7 | 2024-08-25 | A vulnerability classified as critical was found in ContiNew Admin 3.2.0. Affected by this vulnerability is the function top.continew.starter.extension.crud.co… |
CVE-2024-8154 | Low | 3.5 | 2024-08-25 | A vulnerability classified as problematic has been found in SourceCodester QR Code Bookmark System 1.0. Affected is an unknown function of the file /endpoint/u… |
CVE-2024-8153 | Low | 3.5 | 2024-08-25 | A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been rated as problematic. This issue affects some unknown processing of the fi… |
CVE-2024-8152 | Low | 3.5 | 2024-08-25 | A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the fi… |
CVE-2024-8158 | Medium | 6.5 | 2024-08-25 | A bug in the 9p authentication implementation within lib9p allows an attacker with an existing valid user within the configured auth server to impersonate any… |
CVE-2024-8151 | Low | 3.5 | 2024-08-25 | A vulnerability was found in SourceCodester Interactive Map with Marker 1.0. It has been classified as problematic. This affects an unknown part of the file /e… |
CVE-2024-8150 | Medium | 4.7 | 2024-08-25 | A vulnerability was found in ContiNew Admin 3.2.0 and classified as critical. Affected by this issue is the function top.continew.starter.extension.crud.contro… |
CVE-2024-45258 | Critical | 9.8 | 2024-08-25 | The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intentionally uses a "garbag… |
CVE-2024-8011 | Medium | 5.5 | 2024-08-25 | Logitech Options+ on MacOS prior 1.72 allows a local attacker to inject dynamic library within Options+ runtime and abuse permissions granted by the user to Op… |
CVE-2024-8147 | Medium | 6.3 | 2024-08-25 | A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /i… |
CVE-2024-8146 | Medium | 6.3 | 2024-08-25 | A vulnerability has been found in code-projects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2024-42340 | High | 8.3 | 2024-08-25 | CyberArk - CWE-602: Client-Side Enforcement of Server-Side Security |
CVE-2024-42339 | Medium | 4.3 | 2024-08-25 | CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
CVE-2024-42338 | Medium | 4.3 | 2024-08-25 | CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
CVE-2024-42337 | Medium | 4.3 | 2024-08-25 | CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
CVE-2024-8145 | Low | 2.4 | 2024-08-25 | A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.p… |
CVE-2024-8144 | Low | 3.5 | 2024-08-25 | A vulnerability classified as problematic was found in ClassCMS 4.8. Affected by this vulnerability is an unknown functionality of the file /index.php/admin of… |