2024 CVEs (page 227)
Page 227 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-37932 | High | 8.6 | 2024-07-12 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in anhvnit Woocommerce OpenPos allows File Manipulation.This issue… |
CVE-2024-37928 | High | 8.6 | 2024-07-12 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in NooTheme Jobmonster allows File Manipulation.This issue affects… |
CVE-2024-37927 | Critical | 9.8 | 2024-07-12 | Incorrect Privilege Assignment vulnerability in NooTheme Jobmonster noo-jobmonster allows Privilege Escalation.This issue affects Jobmonster: from n/a through… |
CVE-2024-37564 | High | 8.5 | 2024-07-12 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PayPlus LTD PayPlus Payment Gateway.This issue affects Pa… |
CVE-2024-37560 | High | 8.0 | 2024-07-12 | Improper Privilege Management vulnerability in IqbalRony WP User Switch allows Privilege Escalation.This issue affects WP User Switch: from n/a through 1.1.0. |
CVE-2024-37544 | Medium | 4.3 | 2024-07-12 | Missing Authorization vulnerability in Saleswonder Team: Tobias Get Better Reviews for WooCommerce more-better-reviews-for-woocommerce.This issue affects Get B… |
CVE-2024-37213 | High | 7.1 | 2024-07-12 | Cross-Site Request Forgery (CSRF) vulnerability in guru-aliexpress AliNext ali2woo-lite allows Cross Site Request Forgery.This issue affects AliNext: from n/a… |
CVE-2024-37202 | Medium | 6.5 | 2024-07-12 | Missing Authorization vulnerability in BinaryCarpenter Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter custom-add-to-cart-button-… |
CVE-2024-35773 | High | 7.1 | 2024-07-12 | Cross-Site Request Forgery (CSRF) vulnerability in WPJohnny, zerOneIT Comment Reply Email allows Cross-Site Scripting (XSS).This issue affects Comment Reply Em… |
CVE-2024-6495 | Medium | 6.4 | 2024-07-12 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Animated Text widget in all versions up to… |
CVE-2024-5325 | High | 8.8 | 2024-07-12 | The Form Vibes plugin for WordPress is vulnerable to SQL Injection via the ‘fv_export_data’ parameter in all versions up to, and including, 1.4.10 due to insuf… |
CVE-2024-41006 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: netrom: Fix a memory leak in nr_heartbeat_expiry() syzbot reported a memory leak in nr_cr… |
CVE-2024-41005 | Medium | 4.7 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: netpoll: Fix race condition in netpoll_owner_active KCSAN detected a race condition in ne… |
CVE-2024-41004 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: tracing: Build event generation tests only as modules The kprobes and synth event generat… |
CVE-2024-41003 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reg_set_min_max corruption of fake_reg Juan reported that after doing some chang… |
CVE-2024-41002 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - Fix memory leak for sec resource release The AIV is one of the SE… |
CVE-2024-41001 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: io_uring/sqpoll: work around a potential audit memory leak kmemleak complains that there'… |
CVE-2024-41000 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: block/ioctl: prefer different overflow check Running syzkaller with the newly reintroduce… |
CVE-2024-40999 | Critical | 9.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net: ena: Add validation for completion descriptors consistency Validate that `first` fla… |
CVE-2024-40998 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() In the follow… |
CVE-2024-40997 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: fix memory leak on CPU EPP exit The cpudata memory from kzalloc() in… |
CVE-2024-40996 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid splat in pskb_pull_reason syzkaller builds (CONFIG_DEBUG_NET=y) frequently tri… |
CVE-2024-40995 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() syzbot found hang… |
CVE-2024-40994 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ptp: fix integer overflow in max_vclocks_store On 32bit systems, the "4 * max" multiply c… |
CVE-2024-40993 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix suspicious rcu_dereference_protected() When destroying all sets, we… |
CVE-2024-40992 | High | 7.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix responder length checking for UD request packets According to the IBA speci… |
CVE-2024-40991 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Fix of_k3_udma_glue_parse_chn_by_id() The of_k3_udma_glue_pa… |
CVE-2024-40990 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Add check for srq max_sge attribute max_sge attribute is passed by the user, a… |
CVE-2024-40989 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Disassociate vcpus from redistributor region on teardown When tearing down a… |
CVE-2024-40988 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix UBSAN warning in kv_dpm.c Adds bounds check for sumo_vid_mapping_entry. |
CVE-2024-40987 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix UBSAN warning in kv_dpm.c Adds bounds check for sumo_vid_mapping_entry. |
CVE-2024-40986 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx: xdma: Fix data synchronisation in xdma_channel_isr() Requests the vcha… |
CVE-2024-40985 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net/tcp_ao: Don't leak ao_info on error-path It seems I introduced it together with TCP_A… |
CVE-2024-40984 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." Undo the… |
CVE-2024-40983 | Critical | 9.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: tipc: force a dst refcount before doing decryption As it says in commit 3bc07321ccc2 ("xf… |
CVE-2024-40981 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bypass empty buckets in batadv_purge_orig_ref() Many syzbot reports are point… |
CVE-2024-40980 | High | 7.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drop_monitor: replace spin_lock by raw_spin_lock trace_drop_common() is called with preem… |
CVE-2024-40979 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix kernel crash during resume Currently during resume, QMI target memory i… |
CVE-2024-40978 | High | 7.1 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix crash while reading debugfs attribute The qedi_dbg_do_not_recover_cmd_rea… |
CVE-2024-40977 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery During chip recovery (… |
CVE-2024-40976 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/lima: mask irqs in timeout path before hard reset There is a race condition in which… |
CVE-2024-40975 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Unregister devices in reverse order Not all subsystems… |
CVE-2024-40974 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Enforce hcall result buffer validity and size plpar_hcall(), plpar_hcall… |
CVE-2024-40973 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: media: mtk-vcodec: potential null pointer deference in SCP The return value of devm_kzall… |
CVE-2024-40972 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ext4: do not create EA inode under buffer lock ext4_xattr_set_entry() creates new EA inod… |
CVE-2024-40971 | High | 7.3 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: f2fs: remove clear SB_INLINECRYPT flag in default_options In f2fs_remount, SB_INLINECRYPT… |
CVE-2024-40970 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: Avoid hw_desc array overrun in dw-axi-dmac I have a use case where nr_buffers = 3 and in… |
CVE-2024-40969 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: f2fs: don't set RO when shutting down f2fs Shutdown does not check the error of thaw_supe… |
CVE-2024-40968 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: MIPS: Octeon: Add PCIe link status check The standard PCIe configuration read-write inter… |
CVE-2024-40967 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: serial: imx: Introduce timeout when waiting on transmitter empty By waiting at most 1 sec… |
CVE-2024-40966 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: tty: add the option to have a tty reject a new ldisc ... and use it to limit the virtual… |
CVE-2024-40965 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: i2c: lpi2c: Avoid calling clk_get_rate during transfer Instead of repeatedly calling clk_… |
CVE-2024-40964 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind() The cs35l41… |
CVE-2024-40963 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: make sure CBR is correctly set It was discovered that some device h… |
CVE-2024-40962 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: allocate dummy checksums for zoned NODATASUM writes Shin'ichiro reported th… |
CVE-2024-40961 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL deref in fib6_nh_init() syzbot reminds us that in6_dev_get()… |
CVE-2024-40960 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL dereference in rt6_probe() syzbot caught a NULL dereference i… |
CVE-2024-40959 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() ip6_dst_idev() can return N… |
CVE-2024-40958 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: netns: Make get_net_ns() handle zero refcount net Syzkaller hit a warning: refcount_t: ad… |
CVE-2024-40957 | High | 7.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors input… |
CVE-2024-40956 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list Use list_for_each_e… |
CVE-2024-40955 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists() We can trigger a… |
CVE-2024-40954 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net: do not leave a dangling sk pointer, when socket creation fails It is possible to tri… |
CVE-2024-40953 | High | 7.9 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() Use {READ,WRITE}_ONCE() t… |
CVE-2024-40952 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL pointer dereference in ocfs2_journal_dirty() bdev->bd_super has been remo… |
CVE-2024-40951 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger() bdev->bd_super has been remo… |
CVE-2024-40950 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: mm: huge_memory: fix misused mapping_large_folio_support() for anon folios When I did a l… |
CVE-2024-40949 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: mm: shmem: fix getting incorrect lruvec when replacing a shmem folio When testing shmem s… |
CVE-2024-40948 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: mm/page_table_check: fix crash on ZONE_DEVICE Not all pages may apply to pgtable check… |
CVE-2024-40947 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ima: Avoid blocking in RCU read-side critical section A panic happens in ima_match_policy… |
CVE-2024-40945 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: iommu: Return right value in iommu_sva_bind_device() iommu_sva_bind_device() should retur… |
CVE-2024-40944 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix bug with call depth tracking The call to cc_platform_has() triggers a faul… |
CVE-2024-40943 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix races between hole punching and AIO+DIO After commit "ocfs2: return real error… |
CVE-2024-40942 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects The hwmp code use objects of ty… |
CVE-2024-40941 | High | 8.1 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't read past the mfuart notifcation In case the firmware sends a n… |
CVE-2024-40940 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail In case of flow… |
CVE-2024-40939 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail In case of re… |
CVE-2024-40938 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: landlock: Fix d_parent walk The WARN_ON_ONCE() in collect_domain_accesses() can be trigge… |
CVE-2024-40937 | Critical | 9.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: gve: Clear napi->skb before dev_kfree_skb_any() gve_rx_free_skb incorrectly leaves napi->… |
CVE-2024-40936 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix memregion leaks in devm_cxl_add_region() Move the mode verification to __… |
CVE-2024-40935 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: flush all requests after setting CACHEFILES_DEAD In ondemand mode, when the d… |
CVE-2024-40934 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() Fix a memory leak o… |
CVE-2024-40933 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: iio: temperature: mlx90635: Fix ERR_PTR dereference in mlx90635_probe() When devm_regmap_… |
CVE-2024-40932 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fix memory leak in .get_modes() The duplicated EDID is never freed. Fix… |
CVE-2024-40931 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_una is properly initialized on connect This is strictly related to comm… |
CVE-2024-40930 | High | 7.1 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate HE operation element parsing Validate that the HE operation elem… |
CVE-2024-40929 | High | 7.1 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids In some versions of cfg80211… |
CVE-2024-40928 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() Clang static che… |
CVE-2024-40927 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: xhci: Handle TD clearing for multiple streams case When multiple streams are in use, mult… |
CVE-2024-40926 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't attempt to schedule hpd_work on headless cards If the card doesn't hav… |
CVE-2024-40925 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: block: fix request.queuelist usage in flush Friedrich Weber reported a kernel crash probl… |
CVE-2024-40924 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/dpt: Make DPT object unshrinkable In some scenarios, the DPT object gets shrunk… |
CVE-2024-40923 | Critical | 9.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: vmxnet3: disable rx data ring on dma allocation failure When vmxnet3_rq_create() fails to… |
CVE-2024-40922 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: don't lock while !TASK_RUNNING There is a report of io_rsrc_ref_quiesce()… |
CVE-2024-40921 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state Pass the already obta… |
CVE-2024-40920 | High | 7.1 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state I converted br_mst_set_sta… |
CVE-2024-40919 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() I… |
CVE-2024-40918 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: parisc: Try to fix random segmentation faults in package builds PA-RISC systems with PA88… |
CVE-2024-40917 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: memblock: make memblock_set_node() also warn about use of MAX_NUMNODES On an (old) x86 sy… |
CVE-2024-40916 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found When reading… |