2024 CVEs (page 275)
Page 275 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-24293 | High | 8.8 | 2024-05-20 | A Prototype Pollution issue in MiguelCastillo @bit/loader v.10.0.3 allows an attacker to execute arbitrary code via the M function e argument in index.js. |
CVE-2024-34948 | High | 7.5 | 2024-05-20 | An issue in Quanxun Huiju Network Technology(Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 allows attackers to cause a Denial of Service (DoS) when at… |
CVE-2024-34947 | Critical | 9.4 | 2024-05-20 | Quanxun Huiju Network Technology (Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was discovered to be vulnerable to an ICMP redirect attack. |
CVE-2024-24294 | Critical | 9.8 | 2024-05-20 | A Prototype Pollution issue in Blackprint @blackprint/engine v.0.9.0 allows an attacker to execute arbitrary code via the _utils.setDeepProperty function of en… |
CVE-2024-0401 | High | 7.2 | 2024-05-20 | ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and remote attacker can execute arbitrary op… |
CVE-2024-4151 | High | 8.1 | 2024-05-20 | An Improper Access Control vulnerability exists in lunary-ai/lunary version 1.2.2, where users can view and update any prompts in any projects due to insuffici… |
CVE-2024-3482 | High | 8.7 | 2024-05-20 | A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability… |
CVE-2024-34953 | High | 7.5 | 2024-05-20 | An issue in taurusxin ncmdump v1.3.2 allows attackers to cause a Denial of Service (DoS) via memory exhaustion by supplying a crafted .ncm file |
CVE-2024-34952 | Medium | 5.0 | 2024-05-20 | taurusxin ncmdump v1.3.2 was discovered to contain a segmentation violation via the NeteaseCrypt::FixMetadata() function at /src/ncmcrypt.cpp. This vulnerabili… |
CVE-2024-2835 | High | 8.7 | 2024-05-20 | A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability… |
CVE-2024-4287 | High | 7.2 | 2024-05-20 | In mintplex-labs/anything-llm, a vulnerability exists due to improper input validation in the workspace update process. Specifically, the application fails to… |
CVE-2024-27312 | High | 8.1 | 2024-05-20 | Zohocorp ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged user to perform admin actions. Note: This… |
CVE-2024-4323 | Critical | 9.8 | 2024-05-20 | A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may resu… |
CVE-2024-5137 | Low | 2.4 | 2024-05-20 | A vulnerability classified as problematic was found in PHPGurukul Directory Management System 1.0. Affected by this vulnerability is an unknown functionality o… |
CVE-2024-36009 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: ax25: Fix netdev refcount issue The dev_tracker is added to ax25_cb in ax25_bind(). When… |
CVE-2024-36008 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: ipv4: check for NULL idev in ip_route_use_hint() syzbot was able to trigger a NULL deref… |
CVE-2024-36007 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix warning during rehash As previously explained, the rehash d… |
CVE-2024-36006 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage Both the function that migrates al… |
CVE-2024-36005 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: honor table dormant flag from netdev release event path Check for t… |
CVE-2024-36004 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue Issue reported by customer during SRIO… |
CVE-2024-36003 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: ice: fix LAG and VF lock dependency in ice_reset_vf() 9f74a3dfcf83 ("ice: Fix VF Reset pa… |
CVE-2024-36002 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: dpll: fix dpll_pin_on_pin_register() for multiple parent pins In scenario where pin is re… |
CVE-2024-36001 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix the pre-flush when appending to a file in writethrough mode In netfs_perform_w… |
CVE-2024-36000 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix missing hugetlb_lock for resv uncharge There is a recent report on UFFDIO… |
CVE-2024-35999 | High | 7.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: smb3: missing lock when picking channel Coverity spotted a place where we should have bee… |
CVE-2024-35998 | High | 7.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: smb3: fix lock ordering potential deadlock in cifs_sync_mid_result Coverity spotted that… |
CVE-2024-35997 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up The flag I2C_HID_READ_P… |
CVE-2024-35996 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: cpu: Re-enable CPU mitigations by default for !X86 architectures Rename x86's to CPU_MITI… |
CVE-2024-35995 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Use access_width over bit_width for system memory accesses To align with ACPI… |
CVE-2024-35994 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: Fix memory related IO errors and crashes It turns out that wh… |
CVE-2024-35993 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: mm: turn folio_test_hugetlb into a PageType The current folio_test_hugetlb() can be foole… |
CVE-2024-35992 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: phy: marvell: a3700-comphy: Fix out of bounds read There is an out of bounds read access… |
CVE-2024-35991 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Convert spinlock to mutex to lock evl workqueue drain_workqueue() cannot… |
CVE-2024-35990 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: dma: xilinx_dpdma: Fix locking There are several places where either chan->lock or chan->… |
CVE-2024-35989 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms During the removal of the… |
CVE-2024-35988 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: riscv: Fix TASK_SIZE on 64-bit NOMMU On NOMMU, userspace memory can come from anywhere in… |
CVE-2024-35987 | High | 8.4 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: riscv: Fix loading 64-bit NOMMU kernels past the start of RAM commit 3335068f8721 ("riscv… |
CVE-2024-35986 | High | 7.0 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered The power_sup… |
CVE-2024-35985 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: sched/eevdf: Prevent vlag from going out of bounds in reweight_eevdf() It was possible to… |
CVE-2024-35984 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: fix NULL function pointer dereference Baruch reported an OOPS when using the… |
CVE-2024-35983 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS bits_per() rounds up… |
CVE-2024-35982 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid infinite loop trying to resize local TT If the MTU of one of an attache… |
CVE-2024-35981 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: virtio_net: Do not send RSS key if it is not supported There is a bug when setting the RS… |
CVE-2024-35980 | High | 8.4 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Fix TLBI RANGE operand KVM/arm64 relies on TLBI RANGE feature to flush TLBs w… |
CVE-2024-35979 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: raid1: fix use-after-free for original bio in raid1_write_request() r1_bio->bios[] is use… |
CVE-2024-35978 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix memory leak in hci_req_sync_complete() In 'hci_req_sync_complete()', alway… |
CVE-2024-35977 | Medium | 4.7 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_uart: properly fix race condition The cros_ec_uart_probe() funct… |
CVE-2024-35976 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING syzbot reported an illegal c… |
CVE-2024-35975 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix transmit scheduler resource leak Inorder to support shaping and schedul… |
CVE-2024-35974 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: block: fix q->blkg_list corruption during disk rebind Multiple gendisk instances can allo… |
CVE-2024-35973 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: geneve: fix header validation in geneve[6]_xmit_skb syzbot is able to trigger an uninit-v… |
CVE-2024-35972 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init() If ulp = kzalloc() fails… |
CVE-2024-35971 | High | 7.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Handle softirqs at the end of IRQ thread to fix hang The ks8851_irq() thread… |
CVE-2024-35970 | Medium | 6.3 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Clear stale u->oob_skb. syzkaller started to report deadlock of unix_gc_lock aft… |
CVE-2024-35969 | High | 8.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr Although ipv6_get_ifad… |
CVE-2024-35968 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: pds_core: Fix pdsc_check_pci_health function to use work thread When the driver notices f… |
CVE-2024-35967 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix not validating setsockopt user input syzbot reported sco_sock_setsock… |
CVE-2024-35966 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix not validating setsockopt user input syzbot reported rfcomm_sock_s… |
CVE-2024-35965 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix not validating setsockopt user input Check user input length before… |
CVE-2024-35964 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not validating setsockopt user input Check user input length before c… |
CVE-2024-35963 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: Fix not validating setsockopt user input Check user input length bef… |
CVE-2024-35962 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: netfilter: complete validation of user input In my recent commit, I missed that do_replac… |
CVE-2024-35961 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Register devlink first under devlink lock In case device is having a non fatal… |
CVE-2024-35960 | Critical | 9.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Properly link new fs rules into the tree Previously, add_rule_fg would only add… |
CVE-2024-35959 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix mlx5e_priv_init() cleanup flow When mlx5e_priv_init() fails, the cleanup f… |
CVE-2024-35958 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: net: ena: Fix incorrect descriptor free behavior ENA has two types of TX queues: - queues… |
CVE-2024-35957 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix WARN_ON in iommu probe path Commit 1a75cc710b95 ("iommu/vt-d: Use rbtree… |
CVE-2024-35956 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations Create subvolume, cre… |
CVE-2024-35955 | High | 8.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix possible use-after-free issue on kprobe registration When unloading a module… |
CVE-2024-35954 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Avoid sg device teardown race sg_remove_sfp_usercontext() must not use sg_devic… |
CVE-2024-35953 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in context_xa ivpu_device->context_xa is locked both in kernel t… |
CVE-2024-35952 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: drm/ast: Fix soft lockup There is a while-loop in ast_dp_set_on_off() that could lead to … |
CVE-2024-35951 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() Subject: [PATCH] drm/pa… |
CVE-2024-35950 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: drm/client: Fully protect modes[] with dev->mode_config.mutex The modes[] array contains… |
CVE-2024-35949 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: btrfs: make sure that WRITTEN is set on all metadata blocks We previously would call btrf… |
CVE-2024-35948 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: bcachefs: Check for journal entries overruning end of sb clean section Fix a missing boun… |
CVE-2024-5136 | Low | 2.4 | 2024-05-20 | A vulnerability classified as problematic has been found in PHPGurukul Directory Management System 1.0. Affected is an unknown function of the file /admin/sear… |
CVE-2024-5135 | High | 7.3 | 2024-05-20 | A vulnerability was found in PHPGurukul Directory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file… |
CVE-2024-3761 | High | 7.5 | 2024-05-20 | In lunary-ai/lunary version 1.2.2, the DELETE endpoint located at `packages/backend/src/api/v1/datasets` is vulnerable to unauthorized dataset deletion due to… |
CVE-2024-5134 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in SourceCodester Electricity Consumption Monitoring Tool 1.0. It has been declared as critical. This vulnerability affects unknown c… |
CVE-2024-5123 | Medium | 4.3 | 2024-05-20 | A vulnerability classified as problematic has been found in SourceCodester Event Registration System 1.0. This affects an unknown part of the file /registrar/… |
CVE-2024-1968 | High | 7.5 | 2024-05-20 | In scrapy/scrapy, an issue was identified where the Authorization header is not removed during redirects that only change the scheme (e.g., HTTPS to HTTP) but… |
CVE-2024-5122 | High | 7.3 | 2024-05-20 | A vulnerability was found in SourceCodester Event Registration System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2024-5121 | Low | 3.5 | 2024-05-20 | A vulnerability was found in SourceCodester Event Registration System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown fu… |
CVE-2024-5120 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in SourceCodester Event Registration System 1.0. It has been classified as critical. Affected is an unknown function of the file /reg… |
CVE-2024-5119 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in SourceCodester Event Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file /c… |
CVE-2024-3368 | Medium | 6.1 | 2024-05-20 | The All in One SEO WordPress plugin before 4.6.1.1 does not validate and escape some of its Post fields before outputting them back, which could allow users w… |
CVE-2024-5118 | High | 7.3 | 2024-05-20 | A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2024-5117 | High | 7.3 | 2024-05-20 | A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. This affects an unknown part of the file portal.p… |
CVE-2024-5116 | High | 7.3 | 2024-05-20 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Examination System 1.0. Affected by this issue is some unknown funct… |
CVE-2024-5115 | Medium | 6.3 | 2024-05-20 | A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown fun… |
CVE-2024-5114 | Medium | 6.3 | 2024-05-20 | A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file… |
CVE-2024-5113 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. This issue affects some unknown processi… |
CVE-2024-5112 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. This vulnerability affects unknown co… |
CVE-2024-5111 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as critical. This affects an unknown part of the… |
CVE-2024-5110 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affected by this issue is some unknown funct… |
CVE-2024-5109 | Medium | 6.3 | 2024-05-20 | A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affected by this vulnerability is an un… |
CVE-2024-5108 | Medium | 6.3 | 2024-05-20 | A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of t… |
CVE-2024-5107 | Medium | 6.3 | 2024-05-20 | A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management System 1.0. This issue affects some unknown… |
CVE-2024-5106 | Medium | 6.3 | 2024-05-19 | A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects unknown code of the f… |