2024 CVEs (page 267)
Page 267 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-5345 | High | 8.8 | 2024-05-31 | The Responsive Owl Carousel for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.2.0 via the layout… |
CVE-2024-32850 | Critical | 9.8 | 2024-05-31 | Improper neutralization of special elements used in a command ('Command Injection') exists in SkyBridge MB-A100/MB-A110 firmware Ver. 4.2.2 and earlier and Sky… |
CVE-2024-37018 | Critical | 9.1 | 2024-05-31 | The OpenDaylight 0.15.3 controller allows topology poisoning via API requests because an application can manipulate the path that is taken by discovery packets. |
CVE-2024-37017 | High | 8.1 | 2024-05-31 | asdcplib (aka AS-DCP Lib) 2.13.1 has a heap-based buffer over-read in ASDCP::TimedText::MXFReader::h__Reader::MD_to_TimedText_TDesc in AS_DCP_TimedText.cpp in… |
CVE-2024-5499 | High | 8.8 | 2024-05-30 | Out of bounds write in Streams API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted… |
CVE-2024-5498 | High | 8.8 | 2024-05-30 | Use after free in Presentation API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2024-5497 | High | 8.8 | 2024-05-30 | Out of bounds memory access in Browser UI in Google Chrome prior to 125.0.6422.141 allowed a remote attacker who convinced a user to engage in specific UI gest… |
CVE-2024-5496 | High | 8.8 | 2024-05-30 | Use after free in Media Session in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTM… |
CVE-2024-5495 | High | 8.8 | 2024-05-30 | Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-5494 | High | 8.8 | 2024-05-30 | Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-5493 | High | 8.8 | 2024-05-30 | Heap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2024-36119 | Low | 1.8 | 2024-05-30 | Statamic is a, Laravel + Git powered CMS designed for building websites. In affected versions users registering via the `user:register_form` tag will have thei… |
CVE-2024-1298 | Medium | 6.0 | 2024-05-30 | EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful… |
CVE-2024-5271 | High | 7.8 | 2024-05-30 | Fuji Electric Monitouch V-SFT is vulnerable to an out-of-bounds write because of a type confusion, which could result in arbitrary code execution. |
CVE-2024-35189 | Medium | 6.5 | 2024-05-30 | Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve `ConnectionConfiguration` records and their a… |
CVE-2024-34171 | High | 7.8 | 2024-05-30 | Fuji Electric Monitouch V-SFT is vulnerable to a stack-based buffer overflow, which could allow an attacker to execute arbitrary code. |
CVE-2024-32877 | Medium | 4.2 | 2024-05-30 | Yii 2 is a PHP application framework. During internal penetration testing of a product based on Yii2, users discovered a Cross-site Scripting (XSS) vulnerabili… |
CVE-2024-35228 | Medium | 5.5 | 2024-05-30 | Wagtail is an open source content management system built on Django. Due to an improperly applied permission check in the `wagtail.contrib.settings` module, a… |
CVE-2024-35469 | Critical | 9.8 | 2024-05-30 | A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the p… |
CVE-2024-35468 | Medium | 5.4 | 2024-05-30 | A SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via t… |
CVE-2024-35433 | High | 8.1 | 2024-05-30 | ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Incorrect Access Control. An authenticated user, without the permissions of managing users, can create a new adm… |
CVE-2024-2422 | High | 8.8 | 2024-05-30 | LenelS2 NetBox access control and event monitoring system was discovered to contain an authenticated RCE in versions prior to and including 5.6.1, which allows… |
CVE-2024-2421 | Critical | 9.8 | 2024-05-30 | LenelS2 NetBox access control and event monitoring system was discovered to contain an unauthenticated RCE in versions prior to and including 5.6.1, which allo… |
CVE-2024-2420 | Critical | 9.8 | 2024-05-30 | LenelS2 NetBox access control and event monitoring system was discovered to contain Hardcoded Credentials in versions prior to and including 5.6.1 which allows… |
CVE-2024-36118 | Low | 3.5 | 2024-05-30 | MeterSphere is a test management and interface testing tool. In affected versions users without workspace permissions can view functional test cases of other w… |
CVE-2024-35431 | High | 7.5 | 2024-05-30 | ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64. An unauthenticated user can download local files from the server. NOTE: Thi… |
CVE-2024-35429 | Medium | 6.5 | 2024-05-30 | ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via eventRecord. |
CVE-2024-35428 | High | 7.1 | 2024-05-30 | ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via BaseMediaFile. An authenticated user can delete local files from the server which can le… |
CVE-2024-35359 | Critical | 9.8 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Maste… |
CVE-2024-35353 | Critical | 9.8 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Users… |
CVE-2024-35352 | Medium | 6.1 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/Users.p… |
CVE-2024-35351 | Medium | 5.4 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/SystemS… |
CVE-2024-35350 | Critical | 9.8 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/?page=b… |
CVE-2024-35349 | Critical | 9.8 | 2024-05-30 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/categor… |
CVE-2024-5519 | High | 7.3 | 2024-05-30 | A vulnerability classified as critical was found in ItsourceCode Learning Management System Project In PHP 1.0. This vulnerability affects unknown code of the… |
CVE-2024-5518 | Medium | 6.3 | 2024-05-30 | A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file change_profile_pict… |
CVE-2024-3301 | High | 8.5 | 2024-05-30 | An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to post-authentication remote code execution. |
CVE-2024-3300 | Critical | 9.0 | 2024-05-30 | An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to pre-authentication remote code execution. |
CVE-2024-36959 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() If we fail to allocate prop… |
CVE-2024-36958 | Critical | 9.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix nfsd4_encode_fattr4() crasher Ensure that args.acl is initialized early. It is… |
CVE-2024-36957 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: avoid off-by-one read from userspace We try to access count + 1 byte from u… |
CVE-2024-36956 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: thermal/debugfs: Free all thermal zone debug memory on zone removal Because thermal_debug… |
CVE-2024-36955 | High | 7.7 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node() The documentation f… |
CVE-2024-36954 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix a possible memleak in tipc_buf_append __skb_linearize() doesn't free the skb wh… |
CVE-2024-36953 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() vgic_v2_parse_attr()… |
CVE-2024-36952 | Medium | 4.7 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cas… |
CVE-2024-36951 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: range check cp bad op exception interrupts Due to a CP interrupt bug, bad pac… |
CVE-2024-36950 | Medium | 4.4 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: mask bus reset interrupts between ISR and bottom half In the FireWire OHC… |
CVE-2024-36949 | Medium | 4.7 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: sync all devices to wait all processes being evicted If there are more than o… |
CVE-2024-36948 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/xe_migrate: Cast to output precision before multiplying operands Addressing potent… |
CVE-2024-36947 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: qibfs: fix dentry leak simple_recursive_removal() drops the pinning references to all pos… |
CVE-2024-36946 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: phonet: fix rtm_phonet_notify() skb allocation fill_route() stores three components in th… |
CVE-2024-36945 | High | 7.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix neighbour and rtable leak in smc_ib_find_route() In smc_ib_find_route(), the… |
CVE-2024-36944 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: Reapply "drm/qxl: simplify qxl_fence_wait" This reverts commit 07ed11afb68d94eadd4ffc082b… |
CVE-2024-36943 | High | 7.3 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: fix loss of young/dirty bits during pagemap scan make_uffd_wp_pte() was… |
CVE-2024-36941 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: don't free NULL coalescing rule If the parsing fails, we can dereference a… |
CVE-2024-36940 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrl_enable() The "pctldev" struct is allocate… |
CVE-2024-36939 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: nfs: Handle error of rpc_proc_register() in nfs_net_init(). syzkaller reported a warning… |
CVE-2024-36938 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue Fix NULL pointer… |
CVE-2024-36937 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: xdp: use flags field to disambiguate broadcast redirect When redirecting a packet using X… |
CVE-2024-36936 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: efi/unaccepted: touch soft lockup during memory accept Commit 50e782a86c98 ("efi/unaccept… |
CVE-2024-36935 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ice: ensure the copied buf is NUL terminated Currently, we allocate a count-sized kernel… |
CVE-2024-36934 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: bna: ensure the copied buf is NUL terminated Currently, we allocate a nbytes-sized kernel… |
CVE-2024-36933 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). syzbo… |
CVE-2024-36932 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: thermal/debugfs: Prevent use-after-free from occurring after cdev removal Since thermal_d… |
CVE-2024-36931 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: s390/cio: Ensure the copied buf is NUL terminated Currently, we allocate a lbuf-sized ker… |
CVE-2024-36930 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: spi: fix null pointer dereference within spi_sync If spi_sync() is called with the non-em… |
CVE-2024-36929 | High | 7.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: net: core: reject skb_copy(_expand) for fraglist GSO skbs SKB_GSO_FRAGLIST skbs must not… |
CVE-2024-36928 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: s390/qeth: Fix kernel panic after setting hsuid Symptom: When the hsuid attribute is set… |
CVE-2024-36927 | Medium | 4.7 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in __ip_make_skb() KMSAN reported uninit-value access in __… |
CVE-2024-36926 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE At the time of LPAR bo… |
CVE-2024-36925 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y Using restricted DMA… |
CVE-2024-36924 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() lpfc_worker_wake_up() ca… |
CVE-2024-36922 | High | 8.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: read txq->read_ptr under lock If we read txq->read_ptr without lock, we ca… |
CVE-2024-36921 | High | 8.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: guard against invalid STA ID on removal Guard against invalid station… |
CVE-2024-36920 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Avoid memcpy field-spanning write WARNING When the "storcli2 show" command… |
CVE-2024-36919 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload The session reso… |
CVE-2024-36918 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check bloom filter map value size This patch adds a missing check to bloom filter cr… |
CVE-2024-36917 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: block: fix overflow in blk_ioctl_discard() There is no check for overflow of 'start + len… |
CVE-2024-36916 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: blk-iocost: avoid out of bounds shift UBSAN catches undefined behavior in blk-iocost, whe… |
CVE-2024-36915 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies syzbot reported unsafe calls to copy_f… |
CVE-2024-36914 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip on writeback when it's not applicable [WHY] dynamic memory safety e… |
CVE-2024-36913 | Critical | 9.3 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails In CoCo VMs it is possible… |
CVE-2024-36912 | Critical | 9.6 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl In CoCo VMs it is possible for… |
CVE-2024-36911 | Critical | 9.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Don't free decrypted memory In CoCo VMs it is possible for the untrusted host… |
CVE-2024-36910 | High | 8.4 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Don't free decrypted memory In CoCo VMs it is possible for the untrusted… |
CVE-2024-36909 | Critical | 9.3 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted In CoCo VMs it… |
CVE-2024-36908 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: blk-iocost: do not WARN if iocg was already offlined In iocg_pay_debt(), warn is triggere… |
CVE-2024-36906 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ARM: 9381/1: kasan: clear stale stack poison We found below OOB crash: [ 33.452494] ==… |
CVE-2024-36905 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets TCP_SYN_RECV state is really… |
CVE-2024-36904 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). Anderson Nascimento reported a use… |
CVE-2024-36903 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in __ip6_make_skb() As it was done in commit fc10… |
CVE-2024-36902 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() syzbot is able to… |
CVE-2024-36901 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent NULL dereference in ip6_output() According to syzbot, there is a chance tha… |
CVE-2024-36900 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when devlink reload during initialization The devlink reload… |
CVE-2024-36899 | High | 7.0 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfo_changed_notify The use-after-free issue occ… |
CVE-2024-36898 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix uninitialised kfifo If a line is requested with debounce, and that res… |
CVE-2024-36897 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atom Integrated System Info v2_2 for DCN35 New request from KMD/VBIOS in… |
CVE-2024-36896 | Critical | 9.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix access violation during port device removal Testing with KASAN and syzkall… |
CVE-2024-36895 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: use correct buffer size when parsing configfs lists This commit fixes u… |