2024 CVEs (page 214)
Page 214 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-3219 | | 2024-07-29 | The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t support AF_UNIX, such as Windows. This pure… | |
CVE-2024-6620 | Low | 3.5 | 2024-07-29 | Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability. A(n) attacker could potentially inje… |
CVE-2024-6578 | Medium | 5.4 | 2024-07-29 | A stored cross-site scripting (XSS) vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input dur… |
CVE-2024-37859 | Medium | 6.1 | 2024-07-29 | Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the page parameter to php-lfis/… |
CVE-2024-37858 | Critical | 9.8 | 2024-07-29 | SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to php-lfis/admin/cat… |
CVE-2024-37857 | High | 8.8 | 2024-07-29 | SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php-lfis/admin/categor… |
CVE-2024-37856 | Medium | 5.4 | 2024-07-29 | Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the first, last, middle name fi… |
CVE-2024-28806 | High | 7.5 | 2024-07-29 | An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Remote unauthenticated attackers can upload files at an arbitrary path. |
CVE-2024-28805 | Critical | 9.1 | 2024-07-29 | An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. There is Incorrect Access Control. |
CVE-2024-28804 | High | 7.1 | 2024-07-29 | An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Stored Cross-site scripting (XSS) can occur via POST. |
CVE-2024-6727 | Medium | 5.4 | 2024-07-29 | A flaw in versions of Delphix Data Control Tower (DCT) prior to 19.0.0 results in broken authentication through the enable-scale-testing functionality of the a… |
CVE-2024-6726 | High | 8.8 | 2024-07-29 | Versions of Delphix Engine prior to Release 25.0.0.0 contain a flaw which results in Remote Code Execution (RCE). |
CVE-2024-42098 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: ecdh - explicitly zeroize private_key private_key is overwritten with the key par… |
CVE-2024-42097 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ALSA: emux: improve patch ioctl data validation In load_data(), make the validation of an… |
CVE-2024-42096 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profile_pc() The 'profile_pc()' function is used for tim… |
CVE-2024-42095 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_omap: Implementation of Errata i2310 As per Errata i2310[0], Erroneous timeo… |
CVE-2024-42094 | High | 7.1 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y ke… |
CVE-2024-42093 | High | 7.3 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: net/dpaa2: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y k… |
CVE-2024-42092 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: gpio: davinci: Validate the obtained number of IRQs Value of pdata->gpio_unbanked is take… |
CVE-2024-42091 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Check pat.ops before dumping PAT settings We may leave pat.ops unset when running… |
CVE-2024-6748 | High | 8.3 | 2024-07-29 | Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM versions 128317 and below are vulnerable to authenticated SQL injection in the URL monit… |
CVE-2024-42090 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER In create_pinctrl()… |
CVE-2024-42089 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl-asoc-card: set priv->pdev before using it priv->pdev pointer was set after bein… |
CVE-2024-42088 | High | 7.3 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link Commit e70b8dd26711… |
CVE-2024-42087 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep The ilitek-ili98… |
CVE-2024-42086 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: bme680: Fix overflows in compensate() functions There are cases in the com… |
CVE-2024-42085 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock W… |
CVE-2024-42084 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ftruncate: pass a signed offset The old ftruncate() syscall, using the 32-bit off_t misse… |
CVE-2024-33365 | High | 7.5 | 2024-07-29 | Buffer Overflow vulnerability in Tenda AC10 v4 US_AC10V4.0si_V16.03.10.20_cn allows a remote attacker to execute arbitrary code via the Virtual_Data_Check func… |
CVE-2024-42083 | High | 8.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ionic: fix kernel panic due to multi-buffer handling Currently, the ionic_run_xdp() doesn… |
CVE-2024-42082 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: xdp: Remove WARN() from __xdp_reg_mem_model() syzkaller reports a warning in __xdp_reg_me… |
CVE-2024-42081 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/xe_devcoredump: Check NULL before assignments Assign 'xe_devcoredump_snapshot *' a… |
CVE-2024-42080 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: RDMA/restrack: Fix potential invalid address access struct rdma_restrack_entry's kern_nam… |
CVE-2024-42079 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix NULL pointer dereference in gfs2_log_flush In gfs2_jindex_free(), set sdp->sd_j… |
CVE-2024-42078 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: nfsd: initialise nfsd_info.mutex early. nfsd_info.mutex can be dereferenced by svc_pool_s… |
CVE-2024-42077 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix DIO failure due to insufficient transaction credits The code in ocfs2_dio_end_… |
CVE-2024-42076 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: Initialize unused data in j1939_send_one() syzbot reported kernel-infole… |
CVE-2024-42075 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix remap of arena. The bpf arena logic didn't account for mremap operation. Add a r… |
CVE-2024-42074 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: add a null check for chip_pdev structure When acp platform device creatio… |
CVE-2024-42073 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems The following two s… |
CVE-2024-42072 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix may_goto with negative offset. Zac's syzbot crafted a bpf prog that exposed two… |
CVE-2024-42071 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ionic: use dev_consume_skb_any outside of napi If we're not in a NAPI softirq context, we… |
CVE-2024-42070 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers register s… |
CVE-2024-42069 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix possible double free in error handling path When auxiliary_device_add() re… |
CVE-2024-42068 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro() set_memory_ro(… |
CVE-2024-42067 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro() set_mem… |
CVE-2024-42066 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix potential integer overflow in page size calculation Explicitly cast tbo->page… |
CVE-2024-42065 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Add a NULL check in xe_ttm_stolen_mgr_init Add an explicit check to ensure that t… |
CVE-2024-42064 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip pipe if the pipe idx not set properly [why] Driver crashes when pip… |
CVE-2024-42063 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode syzbot reported u… |
CVE-2024-41819 | High | 8.7 | 2024-07-29 | Note Mark is a web-based Markdown notes app. A stored cross-site scripting (XSS) vulnerability in Note Mark allows attackers to execute arbitrary web scripts v… |
CVE-2024-41818 | High | 7.5 | 2024-07-29 | fast-xml-parser is an open source, pure javascript xml parser. a ReDOS exists on currency.js. This vulnerability is fixed in 4.4.1. |
CVE-2024-41817 | High | 7.0 | 2024-07-29 | ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The `AppImage` version `ImageMagick` might use an empty… |
CVE-2024-41810 | Medium | 6.1 | 2024-07-29 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. The `twisted.web.util.redirectTo` function contains an HTML injection vu… |
CVE-2024-41640 | Medium | 6.1 | 2024-07-29 | Cross Site Scripting (XSS) vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter. |
CVE-2024-41631 | High | 7.5 | 2024-07-29 | Buffer Overflow vulnerability in host-host NEUQ_board v.1.0 allows a remote attacker to cause a denial of service via the password.h component. |
CVE-2024-41624 | Medium | 6.3 | 2024-07-29 | Incorrect access control in Himalaya Xiaoya nano smart speaker rom_version 1.6.96 allows a remote attacker to have an unspecified impact. |
CVE-2024-41098 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix null pointer dereference on error If the ata_port_alloc() call in a… |
CVE-2024-41097 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: fix endpoint checking in cxacru_bind() Syzbot is still reporting quite… |
CVE-2024-41096 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: PCI/MSI: Fix UAF in msi_capability_init KFENCE reports the following UAF: BUG: KFENCE… |
CVE-2024-41095 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes In nv17_tv_get… |
CVE-2024-41094 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-dma: Only set smem_start is enable per module option Only export struct fb_info… |
CVE-2024-41093 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid using null object of framebuffer Instead of using state->fb->obj[0] dir… |
CVE-2024-41092 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix potential UAF by revoke of fence registers CI has been sporadically repo… |
CVE-2024-41089 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes In nv17_tv_get… |
CVE-2024-41088 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: can: mcp251xfd: fix infinite loop when xmit fails When the mcp251xfd_start_xmit() functio… |
CVE-2024-41087 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix double free on error If e.g. the ata_port_alloc() call in ata_host_… |
CVE-2024-41086 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: bcachefs: Fix sb_field_downgrade validation - bch2_sb_downgrade_validate() wasn't checkin… |
CVE-2024-41085 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: cxl/mem: Fix no cxl_nvd during pmem region auto-assembling When CXL subsystem is auto-ass… |
CVE-2024-41084 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Avoid null pointer dereference in region lookup cxl_dpa_to_region() looks up… |
CVE-2024-41083 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_page_mkwrite() to check folio->mapping is valid Fix netfs_page_mkwrite()… |
CVE-2024-41799 | High | 8.4 | 2024-07-29 | tgstation-server is a production scale tool for BYOND server management. Prior to 6.8.0, low permission users using the "Set .dme Path" privilege could potenti… |
CVE-2024-41676 | Medium | 4.1 | 2024-07-29 | Magento-lts is a long-term support alternative to Magento Community Edition (CE). This XSS vulnerability affects the design/header/welcome, design/header/logo_… |
CVE-2024-41671 | High | 8.3 | 2024-07-29 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipeli… |
CVE-2024-41082 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: nvme-fabrics: use reserved tag for reg read/write command In some scenarios, if too many… |
CVE-2024-41081 | Critical | 9.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ila_output() As explained in commit 1378817486d6 ("tipc: block BH before… |
CVE-2024-41080 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix possible deadlock in io_register_iowq_max_workers() The io_register_iowq_ma… |
CVE-2024-41079 | High | 7.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: nvmet: always initialize cqe.result The spec doesn't mandate that the first two double wo… |
CVE-2024-41078 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix quota root leak after quota disable failure If during the quota disabl… |
CVE-2024-41077 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: null_blk: fix validation of block size Block size should be between 512 and PAGE_SIZE and… |
CVE-2024-41076 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix memory leak in nfs4_set_security_label We leak nfs_fattr and nfs4_label every… |
CVE-2024-41075 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: add consistency check for copen/cread This prevents malicious processes from… |
CVE-2024-41074 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: Set object to close if ondemand_id < 0 in copen If copen is maliciously calle… |
CVE-2024-41073 | Critical | 9.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload If a discard request needs to be retried, and tha… |
CVE-2024-41072 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check In 'cfg80211_wext_siwscan()', add… |
CVE-2024-41070 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() Al reported a poss… |
CVE-2024-41069 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ASoC: topology: Fix references to freed memory Most users after parsing a topology file… |
CVE-2024-41068 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix sclp_init() cleanup on failure If sclp_init() fails it only partially clea… |
CVE-2024-41067 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: handle RST lookup error correctly [BUG] When running btrfs/060 with forced… |
CVE-2024-41066 | High | 7.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Add tx check to prevent skb leak Below is a summary of how the driver stores a r… |
CVE-2024-41065 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Whitelist dtl slub object for copying to userspace Reading the dispatch… |
CVE-2024-41064 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: avoid possible crash when edev->pdev changes If a PCI device is removed duri… |
CVE-2024-41063 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: cancel all works upon hci_unregister_dev() syzbot is reporting that… |
CVE-2024-41062 | High | 8.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: bluetooth/l2cap: sync sock recv cb and release The problem occurs between the system call… |
CVE-2024-41061 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport [Why] Potential… |
CVE-2024-41060 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/radeon: check bo_va->bo is non-NULL before using it The call to radeon_vm_clear_freed… |
CVE-2024-41059 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copy_name [syzbot reported] BUG: KMSAN: uninit-value in size… |
CVE-2024-41058 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in fscache_withdraw_volume() We got the following iss… |
CVE-2024-41057 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() We got the following… |
CVE-2024-41056 | High | 7.3 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files Use strnlen() instead of… |