2024 CVEs (page 213)
Page 213 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-42122 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer check for kzalloc [Why & How] Check return pointer of k… |
CVE-2024-42121 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index msg_id before read or write [WHAT] msg_id is used as an arra… |
CVE-2024-42120 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check pipe offset before setting vblank pipe_ctx has a size of MAX_PIPES… |
CVE-2024-42119 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip finding free audio for unknown engine_id [WHY] ENGINE_ID_UNKNOWN =… |
CVE-2024-42118 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not return negative stream id for array [WHY] resource_stream_to_stre… |
CVE-2024-42117 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: ASSERT when failing to find index by plane/stream id [WHY] find_disp_cfg… |
CVE-2024-42115 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: jffs2: Fix potential illegal address access in jffs2_free_inode During the stress testing… |
CVE-2024-42114 | Medium | 4.4 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values syzbot is able to trigger softlo… |
CVE-2024-42113 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: initialize num_q_vectors for MSI/INTx interrupts When using MSI/INTx interrup… |
CVE-2024-42112 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: free isb resources at the right time When using MSI/INTx interrupt, the share… |
CVE-2024-42111 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: btrfs: always do the basic checks for btrfs_qgroup_inherit structure [BUG] Syzbot reports… |
CVE-2024-42110 | High | 7.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() The fo… |
CVE-2024-42109 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally flush pending work before notifier syzbot reports: … |
CVE-2024-42108 | Critical | 9.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: net: rswitch: Avoid use-after-free in rswitch_poll() The use-after-free is actually in rs… |
CVE-2024-42107 | Medium | 4.7 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: ice: Don't process extts if PTP is disabled The ice_ptp_extts_event() function can race w… |
CVE-2024-42106 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: inet_diag: Initialize pad field in struct inet_diag_req_v2 KMSAN reported uninit-value ac… |
CVE-2024-42105 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix inode number range checks Patch series "nilfs2: fix potential issues related… |
CVE-2024-42104 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: add missing check for inode numbers on directory entries Syzbot reported that mou… |
CVE-2024-42103 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix adding block group to a reclaim list and the unused list during reclaim There… |
CVE-2024-42102 | Medium | 4.7 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" Patch seri… |
CVE-2024-42101 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes In nouveau_conne… |
CVE-2024-42100 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common In order to set t… |
CVE-2024-42099 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix invalid dereferencing of indirect CCW data pointer Fix invalid dereferenci… |
CVE-2024-7222 | Medium | 6.3 | 2024-07-30 | A vulnerability, which was classified as critical, was found in SourceCodester Lot Reservation Management System 1.0. Affected is an unknown function of the fi… |
CVE-2024-7221 | Medium | 6.3 | 2024-07-30 | A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. This affects an unknown part of the file /admin/manage_user.php. T… |
CVE-2024-7100 | Medium | 6.4 | 2024-07-30 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bt_bb_button shortcode in all versions up to, and incl… |
CVE-2024-40094 | Medium | 5.3 | 2024-07-30 | GraphQL Java (aka graphql-java) before 21.5 does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service via introspect… |
CVE-2024-7220 | Medium | 6.3 | 2024-07-30 | A vulnerability was found in SourceCodester/Campcodes School Log Management System 1.0. Affected by this issue is some unknown functionality of the file /admin… |
CVE-2024-7219 | High | 7.3 | 2024-07-30 | A vulnerability has been found in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2024-6536 | Medium | 5.4 | 2024-07-30 | The Zephyr Project Manager WordPress plugin before 3.3.99 does not sanitise and escape some of its settings, which could allow high privilege users such as edi… |
CVE-2024-6230 | Medium | 6.5 | 2024-07-30 | The پلاگین پرداخت دلخواه WordPress plugin through 2.9.8 does not have CSRF check in place when resetting its form fields, which could allow attackers to make a… |
CVE-2024-6226 | Medium | 6.1 | 2024-07-30 | The WpStickyBar WordPress plugin through 2.1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Si… |
CVE-2024-6224 | Medium | 5.9 | 2024-07-30 | The Send email only on Reply to My Comment WordPress plugin through 1.0.6 does not have CSRF check in some places, and is missing sanitisation as well as escap… |
CVE-2024-6223 | Medium | 6.1 | 2024-07-30 | The Send email only on Reply to My Comment WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leadi… |
CVE-2024-6021 | Medium | 6.8 | 2024-07-30 | The Donation Block For PayPal WordPress plugin through 2.1.0 does not sanitise and escape form submissions, leading to a stored cross-site scripting vulnerabil… |
CVE-2024-5975 | Critical | 9.1 | 2024-07-30 | The CZ Loan Management WordPress plugin through 1.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action ava… |
CVE-2024-5809 | Medium | 6.1 | 2024-07-30 | The WP Ajax Contact Form WordPress plugin through 2.2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected… |
CVE-2024-5808 | Medium | 4.3 | 2024-07-30 | The WP Ajax Contact Form WordPress plugin through 2.2.2 does not have CSRF check in place when deleting emails from the email list, which could allow attackers… |
CVE-2024-5807 | High | 7.2 | 2024-07-30 | The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP files, which could allo… |
CVE-2024-5765 | Critical | 9.8 | 2024-07-30 | The WpStickyBar WordPress plugin through 2.1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action availab… |
CVE-2024-4096 | Medium | 5.9 | 2024-07-30 | The Responsive Tabs WordPress plugin through 4.0.8 does not sanitise and escape some of its Tab settings, which could allow high privilege users such as Contri… |
CVE-2024-3986 | Medium | 4.8 | 2024-07-30 | The SportsPress WordPress plugin before 2.7.22 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perf… |
CVE-2024-3669 | Medium | 6.8 | 2024-07-30 | The Web Directory Free WordPress plugin before 1.7.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cro… |
CVE-2024-3113 | Medium | 5.9 | 2024-07-30 | The FormFlow: WhatsApp Social and Advanced Form Builder with Easy Lead Collection WordPress plugin before 2.12.2 does not sanitise and escape some of its setti… |
CVE-2024-1287 | Medium | 6.5 | 2024-07-30 | The pmpro-member-directory WordPress plugin before 1.2.6 does not prevent users with at least the contributor role from leaking other users' sensitive informat… |
CVE-2024-1286 | Medium | 4.9 | 2024-07-30 | The pmpro-membership-maps WordPress plugin before 0.7 does not prevent users with at least the contributor role from leaking sensitive information about users… |
CVE-2024-7218 | Low | 3.5 | 2024-07-30 | A flaw has been found in SourceCodester/Campcodes School Log Management System 1.0. Affected is an unknown function of the file /admin/ajax.php?action=save_stu… |
CVE-2024-7217 | Medium | 6.3 | 2024-07-30 | A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been declared as critical. This vulnerability affects the function loginauth of the file /cgi-… |
CVE-2024-7216 | Low | 2.6 | 2024-07-30 | A vulnerability was found in TOTOLINK LR1200 9.3.1cu.2832. It has been classified as problematic. This affects an unknown part of the file /etc/shadow.sample… |
CVE-2024-7215 | Medium | 6.3 | 2024-07-30 | A vulnerability was found in TOTOLINK LR1200 9.3.1cu.2832 and classified as critical. Affected by this issue is the function NTPSyncWithHost of the file /cgi-b… |
CVE-2024-7214 | Medium | 6.3 | 2024-07-30 | A vulnerability has been found in TOTOLINK LR350 9.3.5u.6369_B20220309 and classified as critical. Affected by this vulnerability is the function setWanCfg of… |
CVE-2024-7213 | High | 8.8 | 2024-07-30 | A vulnerability, which was classified as critical, was found in TOTOLINK A7000R 9.1.0u.6268_B20220504. Affected is the function setWizardCfg of the file /cgi-b… |
CVE-2024-7212 | High | 8.8 | 2024-07-30 | A vulnerability, which was classified as critical, has been found in TOTOLINK A7000R 9.1.0u.6268_B20220504. This issue affects the function loginauth of the fi… |
CVE-2024-40836 | Medium | 5.5 | 2024-07-29 | A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, watchOS 10… |
CVE-2024-40835 | Medium | 5.5 | 2024-07-29 | A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS S… |
CVE-2024-40834 | Medium | 4.4 | 2024-07-29 | This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8… |
CVE-2024-40833 | Medium | 5.5 | 2024-07-29 | A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura… |
CVE-2024-40832 | Low | 3.3 | 2024-07-29 | The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. An app may be able to view a contact's phone number in system logs. |
CVE-2024-40829 | Medium | 4.6 | 2024-07-29 | The issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Ventura 13.6.8, watchOS 10.6… |
CVE-2024-40828 | High | 7.8 | 2024-07-29 | The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A malicious app may be abl… |
CVE-2024-40827 | Medium | 5.5 | 2024-07-29 | The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app may be able to over… |
CVE-2024-40824 | Medium | 5.5 | 2024-07-29 | This issue was addressed through improved state management. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, watchOS 10.6. An app… |
CVE-2024-40823 | Medium | 5.5 | 2024-07-29 | The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app may be able to acce… |
CVE-2024-40822 | Low | 2.4 | 2024-07-29 | This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macO… |
CVE-2024-40821 | High | 7.1 | 2024-07-29 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Thir… |
CVE-2024-40818 | Medium | 4.6 | 2024-07-29 | This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macO… |
CVE-2024-40817 | Medium | 6.1 | 2024-07-29 | The issue was addressed with improved UI handling. This issue is fixed in Safari 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Visiting… |
CVE-2024-40816 | Medium | 5.5 | 2024-07-29 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A lo… |
CVE-2024-40815 | High | 7.5 | 2024-07-29 | A race condition was addressed with additional validation. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6… |
CVE-2024-40814 | High | 7.1 | 2024-07-29 | A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.6, macOS Ventura 13.7. An app may be able to… |
CVE-2024-40813 | Medium | 4.6 | 2024-07-29 | A lock screen issue was addressed with improved state management. This issue is fixed in iOS 17.6 and iPadOS 17.6, watchOS 10.6. An attacker with physical acce… |
CVE-2024-40812 | High | 7.8 | 2024-07-29 | A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS S… |
CVE-2024-40811 | Medium | 5.5 | 2024-07-29 | The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. An app may be able to modify protected parts of the file system. |
CVE-2024-40809 | High | 7.8 | 2024-07-29 | A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS S… |
CVE-2024-40807 | Medium | 5.5 | 2024-07-29 | A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A shortcut may be able… |
CVE-2024-40806 | Medium | 5.5 | 2024-07-29 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS… |
CVE-2024-40805 | High | 7.1 | 2024-07-29 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, watchOS 10.6. An… |
CVE-2024-40804 | Medium | 5.5 | 2024-07-29 | The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. A malicious application may be able to access private information. |
CVE-2024-40803 | High | 7.5 | 2024-07-29 | A type confusion issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An attacker m… |
CVE-2024-40802 | High | 7.8 | 2024-07-29 | The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A local attacker may be ab… |
CVE-2024-40800 | Medium | 5.5 | 2024-07-29 | An input validation issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8… |
CVE-2024-40799 | High | 7.1 | 2024-07-29 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS… |
CVE-2024-40798 | Low | 3.3 | 2024-07-29 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Monterey 12.7.6, macOS So… |
CVE-2024-40796 | Medium | 5.3 | 2024-07-29 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Monterey 12.7.6… |
CVE-2024-40795 | Low | 3.3 | 2024-07-29 | This issue was addressed with improved data protection. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, watchOS 10.6. An app may… |
CVE-2024-40794 | Medium | 5.3 | 2024-07-29 | This issue was addressed through improved state management. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Private Browsing t… |
CVE-2024-40793 | Medium | 5.5 | 2024-07-29 | This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6… |
CVE-2024-40789 | Medium | 6.5 | 2024-07-29 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadO… |
CVE-2024-40788 | Medium | 5.5 | 2024-07-29 | A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monter… |
CVE-2024-40787 | High | 7.1 | 2024-07-29 | This issue was addressed by adding an additional prompt for user consent. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma… |
CVE-2024-40786 | High | 7.5 | 2024-07-29 | This issue was addressed through improved state management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Ventura 13.6.8… |
CVE-2024-40785 | Medium | 6.1 | 2024-07-29 | This issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, t… |
CVE-2024-40784 | Medium | 5.5 | 2024-07-29 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 1… |
CVE-2024-40783 | Medium | 5.5 | 2024-07-29 | The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6… |
CVE-2024-40782 | Medium | 6.5 | 2024-07-29 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17… |
CVE-2024-40781 | High | 7.8 | 2024-07-29 | The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A local attacker may be ab… |
CVE-2024-40780 | Medium | 5.5 | 2024-07-29 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6… |
CVE-2024-40779 | Medium | 5.5 | 2024-07-29 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6… |
CVE-2024-40778 | Low | 3.3 | 2024-07-29 | An authentication issue was addressed with improved state management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sono… |
CVE-2024-40777 | Medium | 5.5 | 2024-07-29 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visio… |