2024 CVEs (page 267)
Page 267 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-35428 | High | 7.1 | 2024-05-30 | ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via BaseMediaFile. An authenticated user can delete local files from the server which can le… |
CVE-2024-35359 | Critical | 9.8 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Maste… |
CVE-2024-35353 | Critical | 9.8 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Users… |
CVE-2024-35352 | Medium | 6.1 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/Users.p… |
CVE-2024-35351 | Medium | 5.4 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/SystemS… |
CVE-2024-35350 | Critical | 9.8 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/?page=b… |
CVE-2024-35349 | Critical | 9.8 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/categor… |
CVE-2024-5519 | High | 7.3 | 2024-05-30 | A vulnerability classified as critical was found in ItsourceCode Learning Management System Project In PHP 1.0. This vulnerability affects unknown code of the… |
CVE-2024-5518 | Medium | 6.3 | 2024-05-30 | A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file change_profile_pict… |
CVE-2024-3301 | High | 8.5 | 2024-05-30 | An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to post-authentication remote code execution. |
CVE-2024-3300 | Critical | 9.0 | 2024-05-30 | An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to pre-authentication remote code execution. |
CVE-2024-36959 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() If we fail to allocate prop… |
CVE-2024-36958 | Critical | 9.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix nfsd4_encode_fattr4() crasher Ensure that args.acl is initialized early. It is… |
CVE-2024-36957 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: avoid off-by-one read from userspace We try to access count + 1 byte from u… |
CVE-2024-36956 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: thermal/debugfs: Free all thermal zone debug memory on zone removal Because thermal_debug… |
CVE-2024-36955 | High | 7.7 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node() The documentation f… |
CVE-2024-36954 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix a possible memleak in tipc_buf_append __skb_linearize() doesn't free the skb wh… |
CVE-2024-36953 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() vgic_v2_parse_attr()… |
CVE-2024-36952 | Medium | 4.7 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cas… |
CVE-2024-36951 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: range check cp bad op exception interrupts Due to a CP interrupt bug, bad pac… |
CVE-2024-36950 | Medium | 4.4 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: mask bus reset interrupts between ISR and bottom half In the FireWire OHC… |
CVE-2024-36949 | Medium | 4.7 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: sync all devices to wait all processes being evicted If there are more than o… |
CVE-2024-36948 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/xe_migrate: Cast to output precision before multiplying operands Addressing potent… |
CVE-2024-36947 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: qibfs: fix dentry leak simple_recursive_removal() drops the pinning references to all pos… |
CVE-2024-36946 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: phonet: fix rtm_phonet_notify() skb allocation fill_route() stores three components in th… |
CVE-2024-36945 | High | 7.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix neighbour and rtable leak in smc_ib_find_route() In smc_ib_find_route(), the… |
CVE-2024-36944 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: Reapply "drm/qxl: simplify qxl_fence_wait" This reverts commit 07ed11afb68d94eadd4ffc082b… |
CVE-2024-36943 | High | 7.3 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: fix loss of young/dirty bits during pagemap scan make_uffd_wp_pte() was… |
CVE-2024-36941 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: don't free NULL coalescing rule If the parsing fails, we can dereference a… |
CVE-2024-36940 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrl_enable() The "pctldev" struct is allocate… |
CVE-2024-36939 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: nfs: Handle error of rpc_proc_register() in nfs_net_init(). syzkaller reported a warning… |
CVE-2024-36938 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue Fix NULL pointer… |
CVE-2024-36937 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: xdp: use flags field to disambiguate broadcast redirect When redirecting a packet using X… |
CVE-2024-36936 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: efi/unaccepted: touch soft lockup during memory accept Commit 50e782a86c98 ("efi/unaccept… |
CVE-2024-36935 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ice: ensure the copied buf is NUL terminated Currently, we allocate a count-sized kernel… |
CVE-2024-36934 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: bna: ensure the copied buf is NUL terminated Currently, we allocate a nbytes-sized kernel… |
CVE-2024-36933 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). syzbo… |
CVE-2024-36932 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: thermal/debugfs: Prevent use-after-free from occurring after cdev removal Since thermal_d… |
CVE-2024-36931 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: s390/cio: Ensure the copied buf is NUL terminated Currently, we allocate a lbuf-sized ker… |
CVE-2024-36930 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: spi: fix null pointer dereference within spi_sync If spi_sync() is called with the non-em… |
CVE-2024-36929 | High | 7.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: net: core: reject skb_copy(_expand) for fraglist GSO skbs SKB_GSO_FRAGLIST skbs must not… |
CVE-2024-36928 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: s390/qeth: Fix kernel panic after setting hsuid Symptom: When the hsuid attribute is set… |
CVE-2024-36927 | Medium | 4.7 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in __ip_make_skb() KMSAN reported uninit-value access in __… |
CVE-2024-36926 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE At the time of LPAR bo… |
CVE-2024-36925 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y Using restricted DMA… |
CVE-2024-36924 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() lpfc_worker_wake_up() ca… |
CVE-2024-36922 | High | 8.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: read txq->read_ptr under lock If we read txq->read_ptr without lock, we ca… |
CVE-2024-36921 | High | 8.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: guard against invalid STA ID on removal Guard against invalid station… |
CVE-2024-36920 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Avoid memcpy field-spanning write WARNING When the "storcli2 show" command… |
CVE-2024-36919 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload The session reso… |
CVE-2024-36918 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check bloom filter map value size This patch adds a missing check to bloom filter cr… |
CVE-2024-36917 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: block: fix overflow in blk_ioctl_discard() There is no check for overflow of 'start + len… |
CVE-2024-36916 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: blk-iocost: avoid out of bounds shift UBSAN catches undefined behavior in blk-iocost, whe… |
CVE-2024-36915 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies syzbot reported unsafe calls to copy_f… |
CVE-2024-36914 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip on writeback when it's not applicable [WHY] dynamic memory safety e… |
CVE-2024-36913 | Critical | 9.3 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails In CoCo VMs it is possible… |
CVE-2024-36912 | Critical | 9.6 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl In CoCo VMs it is possible for… |
CVE-2024-36911 | Critical | 9.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Don't free decrypted memory In CoCo VMs it is possible for the untrusted host… |
CVE-2024-36910 | High | 8.4 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Don't free decrypted memory In CoCo VMs it is possible for the untrusted… |
CVE-2024-36909 | Critical | 9.3 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted In CoCo VMs it… |
CVE-2024-36908 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: blk-iocost: do not WARN if iocg was already offlined In iocg_pay_debt(), warn is triggere… |
CVE-2024-36906 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ARM: 9381/1: kasan: clear stale stack poison We found below OOB crash: [ 33.452494] ==… |
CVE-2024-36905 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets TCP_SYN_RECV state is really… |
CVE-2024-36904 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). Anderson Nascimento reported a use… |
CVE-2024-36903 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in __ip6_make_skb() As it was done in commit fc10… |
CVE-2024-36902 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() syzbot is able to… |
CVE-2024-36901 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent NULL dereference in ip6_output() According to syzbot, there is a chance tha… |
CVE-2024-36900 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when devlink reload during initialization The devlink reload… |
CVE-2024-36899 | High | 7.0 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfo_changed_notify The use-after-free issue occ… |
CVE-2024-36898 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix uninitialised kfifo If a line is requested with debounce, and that res… |
CVE-2024-36897 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atom Integrated System Info v2_2 for DCN35 New request from KMD/VBIOS in… |
CVE-2024-36896 | Critical | 9.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix access violation during port device removal Testing with KASAN and syzkall… |
CVE-2024-36895 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: use correct buffer size when parsing configfs lists This commit fixes u… |
CVE-2024-36894 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete FFS based appli… |
CVE-2024-36893 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Check for port partner validity before consuming it typec_register_part… |
CVE-2024-36892 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid zeroing outside-object freepointer for single free Commit 284f17ac13fe ("m… |
CVE-2024-36891 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: maple_tree: fix mas_empty_area_rev() null pointer dereference Currently the code calls ma… |
CVE-2024-36890 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: mm/slab: make __free(kfree) accept error pointers Currently, if an automatically freed al… |
CVE-2024-36889 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_nxt is properly initialized on connect Christoph reported a splat hinti… |
CVE-2024-36888 | Medium | 6.2 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix selection of wake_cpu in kick_pool() With cpu_possible_mask=0-63 and cpu_o… |
CVE-2024-36887 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: e1000e: change usleep_range to udelay in PHY mdic access This is a partial revert of comm… |
CVE-2024-36886 | Critical | 9.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in error path Sam Page (sam4k) working with Trend Micro Zero Day Initiative… |
CVE-2024-36884 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault() This was missed becau… |
CVE-2024-36883 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: net: fix out-of-bounds access in ops_init net_alloc_generic is called by net_alloc, which… |
CVE-2024-36882 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: mm: use memalloc_nofs_save() in page_cache_ra_order() See commit f2c817bed58d ("mm: use m… |
CVE-2024-36881 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: mm/userfaultfd: reset ptes when close() for wr-protected ones Userfaultfd unregister incl… |
CVE-2024-36880 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: add missing firmware sanity checks Add the missing sanity checks when par… |
CVE-2024-36033 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix info leak when fetching board id Add the missing sanity check when fe… |
CVE-2024-36032 | High | 8.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix info leak when fetching fw build id Add the missing sanity checks and… |
CVE-2024-36031 | Critical | 9.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: keys: Fix overwrite of key expiration on instantiation The expiry time of a key is uncond… |
CVE-2024-36030 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix the double free in rvu_npc_freemem() Clang static checker(scan-build) w… |
CVE-2024-36029 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-msm: pervent access to suspended controller Generic sdhci code registers LED d… |
CVE-2024-36028 | Medium | 4.7 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() When I did memo… |
CVE-2024-36027 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: do not flag ZEROOUT on non-dirty extent buffer Btrfs clears the content of… |
CVE-2024-35432 | Medium | 6.1 | 2024-05-30 | ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Cross Site Scripting (XSS) via an Audio File. An authenticated user can injection malicious JavaScript code to t… |
CVE-2024-35430 | High | 8.1 | 2024-05-30 | In ZKTeco ZKBio CVSecurity v6.1.1_R and earlier (fixed in 6.1.3_R) an authenticated user can bypass password checks while exporting data from the application. |
CVE-2024-35358 | Medium | 6.5 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Maste… |
CVE-2024-35357 | Medium | 5.3 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Maste… |
CVE-2024-35356 | Medium | 6.3 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Maste… |
CVE-2024-35355 | Critical | 9.8 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Maste… |