2024 CVEs (page 275)
Page 275 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-35996 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: cpu: Re-enable CPU mitigations by default for !X86 architectures Rename x86's to CPU_MITI… |
CVE-2024-35995 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Use access_width over bit_width for system memory accesses To align with ACPI… |
CVE-2024-35994 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: Fix memory related IO errors and crashes It turns out that wh… |
CVE-2024-35993 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: mm: turn folio_test_hugetlb into a PageType The current folio_test_hugetlb() can be foole… |
CVE-2024-35992 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: phy: marvell: a3700-comphy: Fix out of bounds read There is an out of bounds read access… |
CVE-2024-35991 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Convert spinlock to mutex to lock evl workqueue drain_workqueue() cannot… |
CVE-2024-35990 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: dma: xilinx_dpdma: Fix locking There are several places where either chan->lock or chan->… |
CVE-2024-35989 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms During the removal of the… |
CVE-2024-35988 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: riscv: Fix TASK_SIZE on 64-bit NOMMU On NOMMU, userspace memory can come from anywhere in… |
CVE-2024-35987 | High | 8.4 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: riscv: Fix loading 64-bit NOMMU kernels past the start of RAM commit 3335068f8721 ("riscv… |
CVE-2024-35986 | High | 7.0 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered The power_sup… |
CVE-2024-35985 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: sched/eevdf: Prevent vlag from going out of bounds in reweight_eevdf() It was possible to… |
CVE-2024-35984 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: fix NULL function pointer dereference Baruch reported an OOPS when using the… |
CVE-2024-35983 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS bits_per() rounds up… |
CVE-2024-35982 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid infinite loop trying to resize local TT If the MTU of one of an attache… |
CVE-2024-35981 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: virtio_net: Do not send RSS key if it is not supported There is a bug when setting the RS… |
CVE-2024-35980 | High | 8.4 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Fix TLBI RANGE operand KVM/arm64 relies on TLBI RANGE feature to flush TLBs w… |
CVE-2024-35979 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: raid1: fix use-after-free for original bio in raid1_write_request() r1_bio->bios[] is use… |
CVE-2024-35978 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix memory leak in hci_req_sync_complete() In 'hci_req_sync_complete()', alway… |
CVE-2024-35977 | Medium | 4.7 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_uart: properly fix race condition The cros_ec_uart_probe() funct… |
CVE-2024-35976 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING syzbot reported an illegal c… |
CVE-2024-35975 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix transmit scheduler resource leak Inorder to support shaping and schedul… |
CVE-2024-35974 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: block: fix q->blkg_list corruption during disk rebind Multiple gendisk instances can allo… |
CVE-2024-35973 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: geneve: fix header validation in geneve[6]_xmit_skb syzbot is able to trigger an uninit-v… |
CVE-2024-35972 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init() If ulp = kzalloc() fails… |
CVE-2024-35971 | High | 7.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Handle softirqs at the end of IRQ thread to fix hang The ks8851_irq() thread… |
CVE-2024-35970 | Medium | 6.3 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Clear stale u->oob_skb. syzkaller started to report deadlock of unix_gc_lock aft… |
CVE-2024-35969 | High | 8.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr Although ipv6_get_ifad… |
CVE-2024-35968 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: pds_core: Fix pdsc_check_pci_health function to use work thread When the driver notices f… |
CVE-2024-35967 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix not validating setsockopt user input syzbot reported sco_sock_setsock… |
CVE-2024-35966 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix not validating setsockopt user input syzbot reported rfcomm_sock_s… |
CVE-2024-35965 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix not validating setsockopt user input Check user input length before… |
CVE-2024-35964 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not validating setsockopt user input Check user input length before c… |
CVE-2024-35963 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: Fix not validating setsockopt user input Check user input length bef… |
CVE-2024-35962 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: netfilter: complete validation of user input In my recent commit, I missed that do_replac… |
CVE-2024-35961 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Register devlink first under devlink lock In case device is having a non fatal… |
CVE-2024-35960 | Critical | 9.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Properly link new fs rules into the tree Previously, add_rule_fg would only add… |
CVE-2024-35959 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix mlx5e_priv_init() cleanup flow When mlx5e_priv_init() fails, the cleanup f… |
CVE-2024-35958 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: net: ena: Fix incorrect descriptor free behavior ENA has two types of TX queues: - queues… |
CVE-2024-35957 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix WARN_ON in iommu probe path Commit 1a75cc710b95 ("iommu/vt-d: Use rbtree… |
CVE-2024-35956 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations Create subvolume, cre… |
CVE-2024-35955 | High | 8.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix possible use-after-free issue on kprobe registration When unloading a module… |
CVE-2024-35954 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Avoid sg device teardown race sg_remove_sfp_usercontext() must not use sg_devic… |
CVE-2024-35953 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in context_xa ivpu_device->context_xa is locked both in kernel t… |
CVE-2024-35952 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: drm/ast: Fix soft lockup There is a while-loop in ast_dp_set_on_off() that could lead to … |
CVE-2024-35951 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() Subject: [PATCH] drm/pa… |
CVE-2024-35950 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: drm/client: Fully protect modes[] with dev->mode_config.mutex The modes[] array contains… |
CVE-2024-35949 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: btrfs: make sure that WRITTEN is set on all metadata blocks We previously would call btrf… |
CVE-2024-35948 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: bcachefs: Check for journal entries overruning end of sb clean section Fix a missing boun… |
CVE-2024-5136 | Low | 2.4 | 2024-05-20 | A vulnerability classified as problematic has been found in PHPGurukul Directory Management System 1.0. Affected is an unknown function of the file /admin/sear… |
CVE-2024-5135 | High | 7.3 | 2024-05-20 | A vulnerability was found in PHPGurukul Directory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file… |
CVE-2024-3761 | High | 7.5 | 2024-05-20 | In lunary-ai/lunary version 1.2.2, the DELETE endpoint located at `packages/backend/src/api/v1/datasets` is vulnerable to unauthorized dataset deletion due to… |
CVE-2024-5134 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in SourceCodester Electricity Consumption Monitoring Tool 1.0. It has been declared as critical. This vulnerability affects unknown c… |
CVE-2024-5123 | Medium | 4.3 | 2024-05-20 | A vulnerability classified as problematic has been found in SourceCodester Event Registration System 1.0. This affects an unknown part of the file /registrar/… |
CVE-2024-1968 | High | 7.5 | 2024-05-20 | In scrapy/scrapy, an issue was identified where the Authorization header is not removed during redirects that only change the scheme (e.g., HTTPS to HTTP) but… |
CVE-2024-5122 | High | 7.3 | 2024-05-20 | A vulnerability was found in SourceCodester Event Registration System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2024-5121 | Low | 3.5 | 2024-05-20 | A vulnerability was found in SourceCodester Event Registration System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown fu… |
CVE-2024-5120 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in SourceCodester Event Registration System 1.0. It has been classified as critical. Affected is an unknown function of the file /reg… |
CVE-2024-5119 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in SourceCodester Event Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file /c… |
CVE-2024-3368 | Medium | 6.1 | 2024-05-20 | The All in One SEO WordPress plugin before 4.6.1.1 does not validate and escape some of its Post fields before outputting them back, which could allow users w… |
CVE-2024-5118 | High | 7.3 | 2024-05-20 | A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2024-5117 | High | 7.3 | 2024-05-20 | A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. This affects an unknown part of the file portal.p… |
CVE-2024-5116 | High | 7.3 | 2024-05-20 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Examination System 1.0. Affected by this issue is some unknown funct… |
CVE-2024-5115 | Medium | 6.3 | 2024-05-20 | A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown fun… |
CVE-2024-5114 | Medium | 6.3 | 2024-05-20 | A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file… |
CVE-2024-5113 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. This issue affects some unknown processi… |
CVE-2024-5112 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. This vulnerability affects unknown co… |
CVE-2024-5111 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as critical. This affects an unknown part of the… |
CVE-2024-5110 | Medium | 6.3 | 2024-05-20 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affected by this issue is some unknown funct… |
CVE-2024-5109 | Medium | 6.3 | 2024-05-20 | A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affected by this vulnerability is an un… |
CVE-2024-5108 | Medium | 6.3 | 2024-05-20 | A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of t… |
CVE-2024-5107 | Medium | 6.3 | 2024-05-20 | A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management System 1.0. This issue affects some unknown… |
CVE-2024-5106 | Medium | 6.3 | 2024-05-19 | A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects unknown code of the f… |
CVE-2024-5105 | Medium | 6.3 | 2024-05-19 | A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /v… |
CVE-2024-4284 | Medium | 4.9 | 2024-05-19 | A vulnerability in mintplex-labs/anything-llm allows for a denial of service (DoS) condition through the modification of a user's `id` attribute to a value of… |
CVE-2024-5104 | Medium | 6.3 | 2024-05-19 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issue is some unknown f… |
CVE-2024-5103 | Medium | 6.3 | 2024-05-19 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. Affected by this vulnerability is an… |
CVE-2024-36081 | Critical | 9.8 | 2024-05-19 | Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a cleartext password. NOTE: this is a ser… |
CVE-2024-36080 | Critical | 9.8 | 2024-05-19 | Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded password that cannot be changed. NOTE: this is a serial-to-Etherne… |
CVE-2024-36078 | Medium | 6.7 | 2024-05-19 | In Zammad before 6.3.1, a Ruby gem bundled by Zammad is installed with world-writable file permissions. This allowed a local attacker on the server to modify t… |
CVE-2024-36076 | High | 8.8 | 2024-05-19 | Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30 causes attackers to escalate privileges and obtain sensitive information wh… |
CVE-2024-36070 | High | 7.5 | 2024-05-19 | tine before 2023.11.8, when an LDAP backend is used, allows anonymous remote attackers to obtain sensitive authentication information via setup.php because of… |
CVE-2024-36053 | Critical | 9.0 | 2024-05-19 | In the mintupload package through 4.2.0 for Linux Mint, service-name mishandling leads to command injection via shell metacharacters in check_connection, drop_… |
CVE-2024-5101 | Medium | 6.3 | 2024-05-19 | A vulnerability was found in SourceCodester Simple Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2024-5100 | Medium | 6.3 | 2024-05-19 | A vulnerability was found in SourceCodester Simple Inventory System 1.0. It has been classified as critical. This affects an unknown part of the file tableedit… |
CVE-2024-35947 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: dyndbg: fix old BUG_ON in >control parser Fix a BUG_ON from 2009. Even if it looks "unre… |
CVE-2024-35946 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix null pointer access when abort scan During cancel scan we might use vif… |
CVE-2024-35945 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net: phy: phy_device: Prevent nullptr exceptions on ISR If phydev->irq is set uncondition… |
CVE-2024-35944 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() Syzkaller hit 'WARNING in dg… |
CVE-2024-35943 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: ti: Add a null pointer check to the omap_prm_domain_init devm_kasprintf() retur… |
CVE-2024-35942 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain According to i.MX… |
CVE-2024-35940 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: pstore/zone: Add a null pointer check to the psz_kmsg_read kasprintf() returns a pointer… |
CVE-2024-35939 | Critical | 9.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: dma-direct: Leak pages on dma_set_decrypted() failure On TDX it is possible for the untru… |
CVE-2024-35938 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: decrease MHI channel buffer length to 8KB Currently buf_len field of ath11k… |
CVE-2024-35937 | High | 8.1 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there's another subfr… |
CVE-2024-35936 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() The unhandled case i… |
CVE-2024-35935 | Low | 3.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: btrfs: send: handle path ref underflow in header iterate_inode_ref() Change BUG_ON to pro… |
CVE-2024-35934 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() Many syzbot reports show… |
CVE-2024-35933 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Fix null ptr deref in btintel_read_version If hci_cmd_sync_complete()… |
CVE-2024-35932 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: don't check if plane->state->fb == state->fb Currently, when using non-blocking… |