2024 CVEs (page 276)
Page 276 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-35931 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip do PCI error slot reset during RAS recovery Why: The PCI error slot… |
CVE-2024-35930 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() The call to lpfc_sli4_resume_rp… |
CVE-2024-35929 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock() For the kernels built with CON… |
CVE-2024-35927 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: drm: Check output polling initialized before disabling In drm_kms_helper_poll_disable() c… |
CVE-2024-35926 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix async_disable descriptor leak The disable_async paths of iaa_compress/d… |
CVE-2024-35925 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: block: prevent division by zero in blk_rq_stat_sum() The expression dst->nr_samples + src… |
CVE-2024-35924 | High | 7.1 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Limit read size on v1.2 Between UCSI 1.2 and UCSI 2.0, the size of the… |
CVE-2024-35922 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: fbmon: prevent division by zero in fb_videomode_from_videomode() The expression htotal *… |
CVE-2024-35921 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix oops when HEVC init fails The stateless HEVC decoder saves t… |
CVE-2024-35920 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: adding lock to protect decoder context list Add a lock for the c… |
CVE-2024-35919 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: adding lock to protect encoder context list Add a lock for the c… |
CVE-2024-35917 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Fix bpf_plt pointer arithmetic Kui-Feng Lee reported a crash on s390x triggered… |
CVE-2024-35916 | Medium | 5.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: dma-buf: Fix NULL pointer dereference in sanitycheck() If due to a memory allocation fail… |
CVE-2024-35915 | High | 8.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet syzbot reported the following… |
CVE-2024-35914 | High | 7.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix error cleanup path in nfsd_rename() Commit a8b0026847b8 ("rename(): avoid a dea… |
CVE-2024-35913 | High | 7.1 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF When we want to know whe… |
CVE-2024-35912 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: rfi: fix potential response leaks If the rx payload length check fail… |
CVE-2024-35911 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: ice: fix memory corruption bug with suspend and rebuild The ice driver would previously p… |
CVE-2024-35910 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: tcp: properly terminate timers for kernel sockets We had various syzbot reports about tcp… |
CVE-2024-35909 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Split 64bit accesses to fix alignment issues Some of the registers are a… |
CVE-2024-35908 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: tls: get psock ref after taking rxlock to avoid leak At the start of tls_sw_recvmsg, we t… |
CVE-2024-35907 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: mlxbf_gige: call request_irq() after NAPI initialized The mlxbf_gige driver encounters a… |
CVE-2024-35905 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protecti… |
CVE-2024-35904 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: selinux: avoid dereference of garbage after mount failure In case kern_mount() fails and… |
CVE-2024-35903 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: x86/bpf: Fix IP after emitting call depth accounting Adjust the IP passed to `emit_patch`… |
CVE-2024-35902 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net/rds: fix possible cp null dereference cp might be null, calling cp->cp_conn would pro… |
CVE-2024-35901 | High | 7.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix Rx DMA datasize and skb_over_panic mana_get_rxbuf_cfg() aligns the RX buff… |
CVE-2024-35900 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject new basechain after table flag update When dormant flag is t… |
CVE-2024-35899 | High | 7.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: flush pending destroy work before exit_net release Similar to 2c9f0… |
CVE-2024-35898 | High | 7.0 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() nft_unregiste… |
CVE-2024-35897 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: discard table flag update with pending basechain deletion Hook unre… |
CVE-2024-35896 | High | 7.1 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: validate user input for expected length I got multiple syzbot reports showing… |
CVE-2024-35895 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Prevent lock inversion deadlock in map delete elem syzkaller started using… |
CVE-2024-35894 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: mptcp: prevent BPF accessing lowat from a subflow socket. Alexei reported the following s… |
CVE-2024-35893 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_skbmod: prevent kernel-infoleak syzbot found that tcf_skbmod_dump() was co… |
CVE-2024-35892 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fix lockdep splat in qdisc_tree_reduce_backlog() qdisc_tree_reduce_backlog() i… |
CVE-2024-35891 | High | 7.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net: phy: micrel: Fix potential null pointer dereference In lan8814_get_sig_rx() and lan8… |
CVE-2024-35890 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: gro: fix ownership transfer If packets are GROed with fraglist they might be segmented la… |
CVE-2024-35889 | High | 8.6 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix kernel panic on unknown packet types In the very rare case where a packet type… |
CVE-2024-35888 | High | 7.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: erspan: make sure erspan_base_hdr is present in skb->head syzbot reported a problem in ip… |
CVE-2024-35887 | High | 8.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: ax25: fix use-after-free bugs caused by ax25_ds_del_timer When the ax25 device is detachi… |
CVE-2024-35886 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix infinite recursion in fib6_dump_done(). syzkaller reported infinite recursive c… |
CVE-2024-35885 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: mlxbf_gige: stop interface during shutdown The mlxbf_gige driver intermittantly encounter… |
CVE-2024-35884 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: udp: do not accept non-tunnel GSO skbs landing in a tunnel When rx-udp-gro-forwarding is… |
CVE-2024-35883 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: spi: mchp-pci1xxx: Fix a possible null pointer dereference in pci1xxx_spi_probe In functi… |
CVE-2024-35882 | High | 7.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP Jan Schunk reports that his… |
CVE-2024-35880 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: hold io_buffer_list reference over mmap If we look up the kbuf, ensure tha… |
CVE-2024-35879 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: of: dynamic: Synchronize of_changeset_destroy() with the devlink removals In the followin… |
CVE-2024-35878 | Medium | 5.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: of: module: prevent NULL pointer dereference in vsnprintf() In of_modalias(), we can get… |
CVE-2024-35877 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: fix VM_PAT handling in COW mappings PAT handling won't do the right thing in… |
CVE-2024-35875 | High | 8.4 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: x86/coco: Require seeding RNG with RDRAND on CoCo systems There are few uses of CoCo that… |
CVE-2024-35874 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: aio: Fix null ptr deref in aio_complete() wakeup list_del_init_careful() needs to be the… |
CVE-2024-35873 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: riscv: Fix vector state restore in rt_sigreturn() The RISC-V Vector specification states… |
CVE-2024-35872 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix GUP-fast succeeding on secretmem folios folio_is_secretmem() currently… |
CVE-2024-35871 | High | 7.1 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: riscv: process: Fix kernel gp leakage childregs represents the registers which are active… |
CVE-2024-35870 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in smb2_reconnect_server() The UAF bug is due to smb2_reconnect_serv… |
CVE-2024-35869 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: guarantee refcounted children from parent session Avoid potential use-after-… |
CVE-2024-35868 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_write() Skip sessions that are being te… |
CVE-2024-35867 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_show() Skip sessions that are being tea… |
CVE-2024-35866 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_dump_full_key() Skip sessions that are being teare… |
CVE-2024-35865 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_oplock_break() Skip sessions that are bei… |
CVE-2024-35864 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_lease_break() Skip sessions that are bein… |
CVE-2024-35863 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in is_valid_oplock_break() Skip sessions that are being te… |
CVE-2024-35862 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_network_name_deleted() Skip sessions that are b… |
CVE-2024-35861 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() Skip sessions that ar… |
CVE-2024-35860 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: bpf: support deferring bpf_link dealloc to after RCU grace period BPF link for some progr… |
CVE-2024-5099 | Medium | 6.3 | 2024-05-19 | A vulnerability was found in SourceCodester Simple Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2024-5098 | Medium | 5.5 | 2024-05-19 | A vulnerability has been found in SourceCodester Simple Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functiona… |
CVE-2024-5097 | Medium | 4.3 | 2024-05-19 | A vulnerability, which was classified as problematic, was found in SourceCodester Simple Inventory System 1.0. Affected is an unknown function of the file /tab… |
CVE-2024-5096 | Medium | 5.3 | 2024-05-19 | A vulnerability classified as problematic was found in Hipcam Device up to 20240511. This vulnerability affects unknown code of the file /log/wifi.mac of the c… |
CVE-2024-5095 | Medium | 6.5 | 2024-05-19 | A vulnerability classified as problematic has been found in Victor Zsviot Camera 8.26.31. This affects an unknown part of the component MQTT Packet Handler. Th… |
CVE-2024-36050 | Medium | 4.3 | 2024-05-18 | Nix through 2.22.1 mishandles certain usage of hash caches, which makes it easier for attackers to replace current source code with attacker-controlled source… |
CVE-2024-28064 | Critical | 9.8 | 2024-05-18 | Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete o… |
CVE-2024-28063 | Medium | 6.1 | 2024-05-18 | Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS. |
CVE-2024-36048 | Critical | 9.8 | 2024-05-18 | QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses… |
CVE-2024-5094 | High | 7.3 | 2024-05-18 | A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This issue affects some unknown processing of t… |
CVE-2024-36043 | Medium | 6.1 | 2024-05-18 | question_image.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property. |
CVE-2024-5093 | High | 7.3 | 2024-05-18 | A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affects unknown code of… |
CVE-2024-34083 | Medium | 5.4 | 2024-05-18 | aiosmptd is a reimplementation of the Python stdlib smtpd.py based on asyncio. Prior to version 1.4.6, servers based on aiosmtpd accept extra unencrypted comm… |
CVE-2024-31879 | High | 7.5 | 2024-05-18 | IBM i 7.2, 7.3, and 7.4 could allow a remote attacker to execute arbitrary code leading to a denial of service of network ports on the system, caused by the de… |
CVE-2024-3745 | High | 7.8 | 2024-05-18 | MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64.sys driver, which leads to triggering vulnerabilities like CVE… |
CVE-2024-5088 | Medium | 6.4 | 2024-05-18 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ parameter in all versions up to, and including… |
CVE-2024-4432 | Medium | 6.4 | 2024-05-18 | The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and includin… |
CVE-2024-4709 | Medium | 6.4 | 2024-05-18 | The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… |
CVE-2024-4698 | Medium | 6.4 | 2024-05-18 | The Testimonial Carousel For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'show_line_text ' and 'slide_button_hover_anim… |
CVE-2024-2782 | High | 7.5 | 2024-05-18 | The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to unauthorized modification of da… |
CVE-2024-2772 | Medium | 6.4 | 2024-05-18 | The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… |
CVE-2024-2771 | Critical | 9.8 | 2024-05-18 | The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to privilege escalation due to a m… |
CVE-2024-4849 | Medium | 6.4 | 2024-05-18 | The WordPress Automatic Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘autoplay’ parameter in all versions up to, and includ… |
CVE-2024-3812 | High | 7.5 | 2024-05-18 | The Salient Core plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.7 via the 'nectar_icon' shortcode 'icon_l… |
CVE-2024-3811 | Medium | 6.4 | 2024-05-18 | The Salient Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'icon' shortcode in all versions up to, and including… |
CVE-2024-3810 | High | 8.8 | 2024-05-18 | The Salient Shortcodes plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.5.3 via the 'icon' shortcode 'image'… |
CVE-2024-4891 | Medium | 6.4 | 2024-05-18 | The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tagName’… |
CVE-2024-4374 | Medium | 6.4 | 2024-05-18 | The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 2… |
CVE-2024-3714 | Medium | 6.4 | 2024-05-18 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'give_form' shortcode… |
CVE-2024-4865 | Medium | 6.4 | 2024-05-18 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ parameter in all versions up to, and including… |
CVE-2024-4264 | Critical | 9.8 | 2024-05-18 | A remote code execution (RCE) vulnerability exists in the berriai/litellm project due to improper control of the generation of code when using the `eval` funct… |
CVE-2024-23556 | Medium | 5.9 | 2024-05-18 | SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability. |
CVE-2024-23554 | Medium | 5.7 | 2024-05-18 | Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution (RCE). |
CVE-2024-23583 | Medium | 6.7 | 2024-05-17 | An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems. |