2024 CVEs (page 212)
Page 212 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-41802 | High | 8.1 | 2024-07-30 | Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API routes inside the CMS responsible for Filtering DataSets. T… |
CVE-2024-4188 | | 2024-07-30 | Unprotected Transport of Credentials vulnerability in OpenText™ Documentum™ Server could allow Credential Stuffing.This issue affects Documentum™ Server: from… | |
CVE-2024-41109 | Medium | 6.3 | 2024-07-30 | Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Navigating to `/admin/index/statistics` with a logged in Pimcore user exposes inf… |
CVE-2024-39320 | Medium | 6.1 | 2024-07-30 | Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, the vulnerability allows an attacker to inject iframes from any domain, bypass… |
CVE-2024-37299 | Medium | 4.9 | 2024-07-30 | Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, crafting requests to submit very long tag group names can reduce the availabil… |
CVE-2024-37165 | Medium | 6.3 | 2024-07-30 | Discourse is an open source discussion platform. Prior to 3.2.3 and 3.3.0.beta3, improperly sanitized Onebox data could lead to an XSS vulnerability in some si… |
CVE-2024-38909 | Critical | 9.8 | 2024-07-30 | Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension between server directories allows an arbitrar… |
CVE-2024-23091 | High | 7.5 | 2024-07-30 | Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwords from hash values. |
CVE-2024-6699 | Critical | 9.8 | 2024-07-30 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mikafon Electronic Inc. Mikafon MA7 allows SQL Injection… |
CVE-2024-7127 | Medium | 6.1 | 2024-07-30 | Improper Neutralization of Input During Web Page Generation vulnerability in Stackposts Social Marketing Tool allows Cross-site Scripting (XSS) attack. By subm… |
CVE-2024-41702 | Critical | 9.8 | 2024-07-30 | SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
CVE-2024-41701 | Medium | 5.3 | 2024-07-30 | AccuPOS - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
CVE-2024-7226 | Medium | 4.3 | 2024-07-30 | A vulnerability was found in SourceCodester Medicine Tracker System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the fi… |
CVE-2024-7225 | Low | 3.5 | 2024-07-30 | A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /S… |
CVE-2024-41924 | High | 7.2 | 2024-07-30 | Acceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4 series. If this vulnerability is exploited, an attacker who obtaine… |
CVE-2024-41696 | High | 7.5 | 2024-07-30 | Priority PRI WEB Portal Add-On for Priority ERP on prem - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
CVE-2024-41695 | High | 7.5 | 2024-07-30 | Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory |
CVE-2024-41694 | Medium | 5.3 | 2024-07-30 | Cybonet - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
CVE-2024-41693 | Medium | 6.1 | 2024-07-30 | Mashov - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) |
CVE-2024-41141 | Medium | 6.1 | 2024-07-30 | Stored cross-site scripting vulnerability exists in EC-CUBE Web API Plugin. When there are multiple users using OAuth Management feature and one of them inputs… |
CVE-2024-40895 | Medium | 6.4 | 2024-07-30 | FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 allow a remote unauthenticated attacker to execut… |
CVE-2024-38432 | Medium | 5.5 | 2024-07-30 | Matrix Tafnit v8 - CWE-646: Reliance on File Name or Extension of Externally-Supplied File |
CVE-2024-38431 | Medium | 5.3 | 2024-07-30 | Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy |
CVE-2024-38430 | Medium | 5.4 | 2024-07-30 | Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CVE-2024-38429 | High | 7.5 | 2024-07-30 | Matrix Tafnit v8 - CWE-552: Files or Directories Accessible to External Parties |
CVE-2024-7224 | Medium | 6.3 | 2024-07-30 | A vulnerability was found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected by this issue is some unknown functional… |
CVE-2024-7223 | Medium | 6.3 | 2024-07-30 | A vulnerability has been found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2024-42231 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix calc_available_free_space() for zoned mode calc_available_free_space()… |
CVE-2024-42230 | Medium | 4.4 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix scv instruction crash with kexec kexec on pseries disables AIL (relo… |
CVE-2024-42229 | Medium | 4.1 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: crypto: aead,cipher - zeroize key buffer after use I.G 9.7.B for FIPS 140-3 specifies tha… |
CVE-2024-42228 | High | 7.0 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc Initialize t… |
CVE-2024-42227 | Medium | 4.7 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix overlapping copy within dml_core_mode_programming [WHY] &mode_lib->m… |
CVE-2024-42225 | High | 8.3 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: replace skb_put with skb_put_zero Avoid potentially reusing uninitialized data |
CVE-2024-42224 | High | 7.0 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Correct check for empty list Since commit a3c53be55c95 ("net: dsa: m… |
CVE-2024-42223 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: tda10048: Fix integer overflow state->xtal_hz can be up to 16M, so… |
CVE-2024-42162 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: gve: Account for stopped queues when reading NIC stats We now account for the fact that t… |
CVE-2024-42161 | Medium | 6.3 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD [Changes from V1: - Use a defau… |
CVE-2024-42160 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: f2fs: check validation of fault attrs in f2fs_build_fault_attr() - It missed to check val… |
CVE-2024-42159 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Sanitise num_phys Information is stored in mr_sas_port->phy_mask, values la… |
CVE-2024-42158 | Medium | 4.1 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings Replace memzero_explicit() an… |
CVE-2024-42157 | Medium | 4.1 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe sensitive data on failure Wipe sensitive data from stack also if the copy… |
CVE-2024-42156 | Medium | 4.1 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of clear-key structures on failure Wipe all sensitive data from st… |
CVE-2024-42155 | Low | 1.9 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of protected- and secure-keys Although the clear-key of neither pr… |
CVE-2024-42154 | Medium | 4.4 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: validate source addr length I don't see anything checking that TCP_METRICS_A… |
CVE-2024-42153 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr When del_timer… |
CVE-2024-42152 | High | 7.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a possible leak when destroy a ctrl during qp establishment In nvmet_sq_destro… |
CVE-2024-42151 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable Test case dummy_st_ops/dummy_… |
CVE-2024-42150 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: remove separate irq request for MSI and INTx When using MSI or INTx interrupt… |
CVE-2024-42149 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: fs: don't misleadingly warn during thaw operations The block device may have been frozen… |
CVE-2024-42148 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when us… |
CVE-2024-42147 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/debugfs - Fix debugfs uninit process issue During the zip probe process… |
CVE-2024-42146 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Add outer runtime_pm protection to xe_live_ktest@xe_dma_buf Any kunit doing any m… |
CVE-2024-42145 | High | 7.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: IB/core: Implement a limit on UMAD receive List The existing behavior of ib_umad, which m… |
CVE-2024-42144 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/mediatek/lvts_thermal: Check NULL ptr on lvts_data Verify that lvts_data… |
CVE-2024-42142 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-switch, Create ingress ACL when needed Currently, ingress acl is used for thr… |
CVE-2024-42141 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Check socket flag instead of hcon This fixes the following Smatch static… |
CVE-2024-42140 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: riscv: kexec: Avoid deadlock in kexec crash path If the kexec crash code is called in the… |
CVE-2024-42139 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper extts handling Extts events are disabled and enabled by the application… |
CVE-2024-42138 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file In case… |
CVE-2024-42137 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot Commit 272970be… |
CVE-2024-42136 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: cdrom: rearrange last_media_change check to avoid unintentional overflow When running syz… |
CVE-2024-42135 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: vhost_task: Handle SIGKILL by flushing work and exiting Instead of lingering until the de… |
CVE-2024-42134 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Check if is_avq is NULL [bug] In the virtio_pci_common.c function vp_del_vqs… |
CVE-2024-42133 | High | 7.6 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Ignore too large handle values in BIG hci_le_big_sync_established_evt is neces… |
CVE-2024-42132 | High | 7.6 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX Syzbot hit warning… |
CVE-2024-42131 | Medium | 4.4 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty throttling logic The dirty throttling logic is interspersed… |
CVE-2024-42129 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: leds: mlxreg: Use devm_mutex_init() for mutex initialization In this driver LEDs are regi… |
CVE-2024-42128 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: leds: an30259a: Use devm_mutex_init() for mutex initialization In this driver LEDs are re… |
CVE-2024-42127 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/lima: fix shared irq handling on driver remove lima uses a shared interrupt, so the i… |
CVE-2024-42126 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. nmi_enter()/nmi_exit() touches… |
CVE-2024-42125 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fw: scan offload prohibit all 6 GHz channel if no 6 GHz sband We have some p… |
CVE-2024-42124 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Make qedf_execute_tmf() non-preemptible Stop calling smp_processor_id() from… |
CVE-2024-42123 | High | 7.0 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix double free err_addr pointer warnings In amdgpu_umc_bad_page_polling_time… |
CVE-2024-42122 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer check for kzalloc [Why & How] Check return pointer of k… |
CVE-2024-42121 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index msg_id before read or write [WHAT] msg_id is used as an arra… |
CVE-2024-42120 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check pipe offset before setting vblank pipe_ctx has a size of MAX_PIPES… |
CVE-2024-42119 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip finding free audio for unknown engine_id [WHY] ENGINE_ID_UNKNOWN =… |
CVE-2024-42118 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not return negative stream id for array [WHY] resource_stream_to_stre… |
CVE-2024-42117 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: ASSERT when failing to find index by plane/stream id [WHY] find_disp_cfg… |
CVE-2024-42115 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: jffs2: Fix potential illegal address access in jffs2_free_inode During the stress testing… |
CVE-2024-42114 | Medium | 4.4 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values syzbot is able to trigger softlo… |
CVE-2024-42113 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: initialize num_q_vectors for MSI/INTx interrupts When using MSI/INTx interrup… |
CVE-2024-42112 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: free isb resources at the right time When using MSI/INTx interrupt, the share… |
CVE-2024-42111 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: btrfs: always do the basic checks for btrfs_qgroup_inherit structure [BUG] Syzbot reports… |
CVE-2024-42110 | High | 7.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() The fo… |
CVE-2024-42109 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally flush pending work before notifier syzbot reports: … |
CVE-2024-42108 | Critical | 9.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: net: rswitch: Avoid use-after-free in rswitch_poll() The use-after-free is actually in rs… |
CVE-2024-42107 | Medium | 4.7 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: ice: Don't process extts if PTP is disabled The ice_ptp_extts_event() function can race w… |
CVE-2024-42106 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: inet_diag: Initialize pad field in struct inet_diag_req_v2 KMSAN reported uninit-value ac… |
CVE-2024-42105 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix inode number range checks Patch series "nilfs2: fix potential issues related… |
CVE-2024-42104 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: add missing check for inode numbers on directory entries Syzbot reported that mou… |
CVE-2024-42103 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix adding block group to a reclaim list and the unused list during reclaim There… |
CVE-2024-42102 | Medium | 4.7 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" Patch seri… |
CVE-2024-42101 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes In nouveau_conne… |
CVE-2024-42100 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common In order to set t… |
CVE-2024-42099 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix invalid dereferencing of indirect CCW data pointer Fix invalid dereferenci… |
CVE-2024-7222 | Medium | 6.3 | 2024-07-30 | A vulnerability, which was classified as critical, was found in SourceCodester Lot Reservation Management System 1.0. Affected is an unknown function of the fi… |
CVE-2024-7221 | Medium | 6.3 | 2024-07-30 | A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. This affects an unknown part of the file /admin/manage_user.php. T… |
CVE-2024-7100 | Medium | 6.4 | 2024-07-30 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bt_bb_button shortcode in all versions up to, and incl… |
CVE-2024-40094 | Medium | 5.3 | 2024-07-30 | GraphQL Java (aka graphql-java) before 21.5 does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service via introspect… |