2024 CVEs (page 214)
Page 214 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-40776 | Medium | 4.3 | 2024-07-29 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17… |
CVE-2024-40775 | Medium | 5.5 | 2024-07-29 | A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6… |
CVE-2024-40774 | High | 7.1 | 2024-07-29 | A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma… |
CVE-2024-27888 | Medium | 5.5 | 2024-07-29 | A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Sonoma 14.4. An app may be able to mod… |
CVE-2024-27887 | Medium | 5.5 | 2024-07-29 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data. |
CVE-2024-27886 | Medium | 5.5 | 2024-07-29 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.7. An unprivileged app may be able to log ke… |
CVE-2024-27884 | Medium | 5.5 | 2024-07-29 | This issue was addressed with a new entitlement. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An… |
CVE-2024-27883 | Medium | 4.4 | 2024-07-29 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app m… |
CVE-2024-27882 | Medium | 4.4 | 2024-07-29 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app m… |
CVE-2024-27881 | Medium | 5.3 | 2024-07-29 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Vent… |
CVE-2024-27878 | Medium | 6.7 | 2024-07-29 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code wit… |
CVE-2024-27877 | Medium | 6.1 | 2024-07-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Processing a mali… |
CVE-2024-27873 | Medium | 5.5 | 2024-07-29 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS… |
CVE-2024-27872 | Medium | 5.5 | 2024-07-29 | This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sonoma 14.6. An app may be able to access protected user data. |
CVE-2024-27871 | Medium | 5.5 | 2024-07-29 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. An app may be able to access… |
CVE-2024-27863 | Medium | 5.5 | 2024-07-29 | An information disclosure issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sono… |
CVE-2024-27862 | Low | 2.4 | 2024-07-29 | A logic issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.6. Enabling Lockdown Mode while setting up a Mac may cause F… |
CVE-2024-27853 | Medium | 4.4 | 2024-07-29 | This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. A maliciously crafted ZIP archive may bypass Gatekeeper checks. |
CVE-2024-27826 | High | 7.8 | 2024-07-29 | The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.6, macOS Sonoma 14.5, macOS Ventura… |
CVE-2024-27823 | Medium | 5.9 | 2024-07-29 | A race condition was addressed with improved locking. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, mac… |
CVE-2024-27809 | Medium | 5.5 | 2024-07-29 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user… |
CVE-2024-23261 | High | 7.5 | 2024-07-29 | A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.8. An attacker… |
CVE-2024-7252 | High | 7.8 | 2024-07-29 | Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges… |
CVE-2024-7251 | High | 7.8 | 2024-07-29 | Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges… |
CVE-2024-7250 | High | 7.8 | 2024-07-29 | Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges… |
CVE-2024-7249 | High | 7.8 | 2024-07-29 | Comodo Firewall Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installat… |
CVE-2024-7248 | High | 7.8 | 2024-07-29 | Comodo Internet Security Pro Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on… |
CVE-2024-3219 | | 2024-07-29 | The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t support AF_UNIX, such as Windows. This pure… | |
CVE-2024-6620 | Low | 3.5 | 2024-07-29 | Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability. A(n) attacker could potentially inje… |
CVE-2024-6578 | Medium | 5.4 | 2024-07-29 | A stored cross-site scripting (XSS) vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input dur… |
CVE-2024-37859 | Medium | 6.1 | 2024-07-29 | Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the page parameter to php-lfis/… |
CVE-2024-37858 | Critical | 9.8 | 2024-07-29 | SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to php-lfis/admin/cat… |
CVE-2024-37857 | High | 8.8 | 2024-07-29 | SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php-lfis/admin/categor… |
CVE-2024-37856 | Medium | 5.4 | 2024-07-29 | Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the first, last, middle name fi… |
CVE-2024-28806 | High | 7.5 | 2024-07-29 | An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Remote unauthenticated attackers can upload files at an arbitrary path. |
CVE-2024-28805 | Critical | 9.1 | 2024-07-29 | An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. There is Incorrect Access Control. |
CVE-2024-28804 | High | 7.1 | 2024-07-29 | An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Stored Cross-site scripting (XSS) can occur via POST. |
CVE-2024-6727 | Medium | 5.4 | 2024-07-29 | A flaw in versions of Delphix Data Control Tower (DCT) prior to 19.0.0 results in broken authentication through the enable-scale-testing functionality of the a… |
CVE-2024-6726 | High | 8.8 | 2024-07-29 | Versions of Delphix Engine prior to Release 25.0.0.0 contain a flaw which results in Remote Code Execution (RCE). |
CVE-2024-42098 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: ecdh - explicitly zeroize private_key private_key is overwritten with the key par… |
CVE-2024-42097 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ALSA: emux: improve patch ioctl data validation In load_data(), make the validation of an… |
CVE-2024-42096 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profile_pc() The 'profile_pc()' function is used for tim… |
CVE-2024-42095 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_omap: Implementation of Errata i2310 As per Errata i2310[0], Erroneous timeo… |
CVE-2024-42094 | High | 7.1 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y ke… |
CVE-2024-42093 | High | 7.3 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: net/dpaa2: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y k… |
CVE-2024-42092 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: gpio: davinci: Validate the obtained number of IRQs Value of pdata->gpio_unbanked is take… |
CVE-2024-42091 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Check pat.ops before dumping PAT settings We may leave pat.ops unset when running… |
CVE-2024-6748 | High | 8.3 | 2024-07-29 | Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM versions 128317 and below are vulnerable to authenticated SQL injection in the URL monit… |
CVE-2024-42090 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER In create_pinctrl()… |
CVE-2024-42089 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl-asoc-card: set priv->pdev before using it priv->pdev pointer was set after bein… |
CVE-2024-42088 | High | 7.3 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link Commit e70b8dd26711… |
CVE-2024-42087 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep The ilitek-ili98… |
CVE-2024-42086 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: bme680: Fix overflows in compensate() functions There are cases in the com… |
CVE-2024-42085 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock W… |
CVE-2024-42084 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ftruncate: pass a signed offset The old ftruncate() syscall, using the 32-bit off_t misse… |
CVE-2024-33365 | High | 7.5 | 2024-07-29 | Buffer Overflow vulnerability in Tenda AC10 v4 US_AC10V4.0si_V16.03.10.20_cn allows a remote attacker to execute arbitrary code via the Virtual_Data_Check func… |
CVE-2024-42083 | High | 8.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ionic: fix kernel panic due to multi-buffer handling Currently, the ionic_run_xdp() doesn… |
CVE-2024-42082 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: xdp: Remove WARN() from __xdp_reg_mem_model() syzkaller reports a warning in __xdp_reg_me… |
CVE-2024-42081 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/xe_devcoredump: Check NULL before assignments Assign 'xe_devcoredump_snapshot *' a… |
CVE-2024-42080 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: RDMA/restrack: Fix potential invalid address access struct rdma_restrack_entry's kern_nam… |
CVE-2024-42079 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix NULL pointer dereference in gfs2_log_flush In gfs2_jindex_free(), set sdp->sd_j… |
CVE-2024-42078 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: nfsd: initialise nfsd_info.mutex early. nfsd_info.mutex can be dereferenced by svc_pool_s… |
CVE-2024-42077 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix DIO failure due to insufficient transaction credits The code in ocfs2_dio_end_… |
CVE-2024-42076 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: Initialize unused data in j1939_send_one() syzbot reported kernel-infole… |
CVE-2024-42075 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix remap of arena. The bpf arena logic didn't account for mremap operation. Add a r… |
CVE-2024-42074 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: add a null check for chip_pdev structure When acp platform device creatio… |
CVE-2024-42073 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems The following two s… |
CVE-2024-42072 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix may_goto with negative offset. Zac's syzbot crafted a bpf prog that exposed two… |
CVE-2024-42071 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ionic: use dev_consume_skb_any outside of napi If we're not in a NAPI softirq context, we… |
CVE-2024-42070 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers register s… |
CVE-2024-42069 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix possible double free in error handling path When auxiliary_device_add() re… |
CVE-2024-42068 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro() set_memory_ro(… |
CVE-2024-42067 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro() set_mem… |
CVE-2024-42066 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix potential integer overflow in page size calculation Explicitly cast tbo->page… |
CVE-2024-42065 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Add a NULL check in xe_ttm_stolen_mgr_init Add an explicit check to ensure that t… |
CVE-2024-42064 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip pipe if the pipe idx not set properly [why] Driver crashes when pip… |
CVE-2024-42063 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode syzbot reported u… |
CVE-2024-41819 | High | 8.7 | 2024-07-29 | Note Mark is a web-based Markdown notes app. A stored cross-site scripting (XSS) vulnerability in Note Mark allows attackers to execute arbitrary web scripts v… |
CVE-2024-41818 | High | 7.5 | 2024-07-29 | fast-xml-parser is an open source, pure javascript xml parser. a ReDOS exists on currency.js. This vulnerability is fixed in 4.4.1. |
CVE-2024-41817 | High | 7.0 | 2024-07-29 | ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The `AppImage` version `ImageMagick` might use an empty… |
CVE-2024-41810 | Medium | 6.1 | 2024-07-29 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. The `twisted.web.util.redirectTo` function contains an HTML injection vu… |
CVE-2024-41640 | Medium | 6.1 | 2024-07-29 | Cross Site Scripting (XSS) vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter. |
CVE-2024-41631 | High | 7.5 | 2024-07-29 | Buffer Overflow vulnerability in host-host NEUQ_board v.1.0 allows a remote attacker to cause a denial of service via the password.h component. |
CVE-2024-41624 | Medium | 6.3 | 2024-07-29 | Incorrect access control in Himalaya Xiaoya nano smart speaker rom_version 1.6.96 allows a remote attacker to have an unspecified impact. |
CVE-2024-41098 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix null pointer dereference on error If the ata_port_alloc() call in a… |
CVE-2024-41097 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: fix endpoint checking in cxacru_bind() Syzbot is still reporting quite… |
CVE-2024-41096 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: PCI/MSI: Fix UAF in msi_capability_init KFENCE reports the following UAF: BUG: KFENCE… |
CVE-2024-41095 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes In nv17_tv_get… |
CVE-2024-41094 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-dma: Only set smem_start is enable per module option Only export struct fb_info… |
CVE-2024-41093 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid using null object of framebuffer Instead of using state->fb->obj[0] dir… |
CVE-2024-41092 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix potential UAF by revoke of fence registers CI has been sporadically repo… |
CVE-2024-41089 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes In nv17_tv_get… |
CVE-2024-41088 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: can: mcp251xfd: fix infinite loop when xmit fails When the mcp251xfd_start_xmit() functio… |
CVE-2024-41087 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix double free on error If e.g. the ata_port_alloc() call in ata_host_… |
CVE-2024-41086 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: bcachefs: Fix sb_field_downgrade validation - bch2_sb_downgrade_validate() wasn't checkin… |
CVE-2024-41085 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: cxl/mem: Fix no cxl_nvd during pmem region auto-assembling When CXL subsystem is auto-ass… |
CVE-2024-41084 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Avoid null pointer dereference in region lookup cxl_dpa_to_region() looks up… |
CVE-2024-41083 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_page_mkwrite() to check folio->mapping is valid Fix netfs_page_mkwrite()… |
CVE-2024-41799 | High | 8.4 | 2024-07-29 | tgstation-server is a production scale tool for BYOND server management. Prior to 6.8.0, low permission users using the "Set .dme Path" privilege could potenti… |
CVE-2024-41676 | Medium | 4.1 | 2024-07-29 | Magento-lts is a long-term support alternative to Magento Community Edition (CE). This XSS vulnerability affects the design/header/welcome, design/header/logo_… |