2024 CVEs (page 276)
Page 276 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-5105 | Medium | 6.3 | 2024-05-19 | A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /v… |
CVE-2024-4284 | Medium | 4.9 | 2024-05-19 | A vulnerability in mintplex-labs/anything-llm allows for a denial of service (DoS) condition through the modification of a user's `id` attribute to a value of… |
CVE-2024-5104 | Medium | 6.3 | 2024-05-19 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issue is some unknown f… |
CVE-2024-5103 | Medium | 6.3 | 2024-05-19 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. Affected by this vulnerability is an… |
CVE-2024-36081 | Critical | 9.8 | 2024-05-19 | Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a cleartext password. NOTE: this is a ser… |
CVE-2024-36080 | Critical | 9.8 | 2024-05-19 | Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded password that cannot be changed. NOTE: this is a serial-to-Etherne… |
CVE-2024-36078 | Medium | 6.7 | 2024-05-19 | In Zammad before 6.3.1, a Ruby gem bundled by Zammad is installed with world-writable file permissions. This allowed a local attacker on the server to modify t… |
CVE-2024-36076 | High | 8.8 | 2024-05-19 | Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30 causes attackers to escalate privileges and obtain sensitive information wh… |
CVE-2024-36070 | High | 7.5 | 2024-05-19 | tine before 2023.11.8, when an LDAP backend is used, allows anonymous remote attackers to obtain sensitive authentication information via setup.php because of… |
CVE-2024-36053 | Critical | 9.0 | 2024-05-19 | In the mintupload package through 4.2.0 for Linux Mint, service-name mishandling leads to command injection via shell metacharacters in check_connection, drop_… |
CVE-2024-5101 | Medium | 6.3 | 2024-05-19 | A vulnerability was found in SourceCodester Simple Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2024-5100 | Medium | 6.3 | 2024-05-19 | A vulnerability was found in SourceCodester Simple Inventory System 1.0. It has been classified as critical. This affects an unknown part of the file tableedit… |
CVE-2024-35947 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: dyndbg: fix old BUG_ON in >control parser Fix a BUG_ON from 2009. Even if it looks "unre… |
CVE-2024-35946 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix null pointer access when abort scan During cancel scan we might use vif… |
CVE-2024-35945 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net: phy: phy_device: Prevent nullptr exceptions on ISR If phydev->irq is set uncondition… |
CVE-2024-35944 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() Syzkaller hit 'WARNING in dg… |
CVE-2024-35943 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: ti: Add a null pointer check to the omap_prm_domain_init devm_kasprintf() retur… |
CVE-2024-35942 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain According to i.MX… |
CVE-2024-35940 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: pstore/zone: Add a null pointer check to the psz_kmsg_read kasprintf() returns a pointer… |
CVE-2024-35939 | Critical | 9.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: dma-direct: Leak pages on dma_set_decrypted() failure On TDX it is possible for the untru… |
CVE-2024-35938 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: decrease MHI channel buffer length to 8KB Currently buf_len field of ath11k… |
CVE-2024-35937 | High | 8.1 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there's another subfr… |
CVE-2024-35936 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() The unhandled case i… |
CVE-2024-35935 | Low | 3.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: btrfs: send: handle path ref underflow in header iterate_inode_ref() Change BUG_ON to pro… |
CVE-2024-35934 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() Many syzbot reports show… |
CVE-2024-35933 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Fix null ptr deref in btintel_read_version If hci_cmd_sync_complete()… |
CVE-2024-35932 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: don't check if plane->state->fb == state->fb Currently, when using non-blocking… |
CVE-2024-35931 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip do PCI error slot reset during RAS recovery Why: The PCI error slot… |
CVE-2024-35930 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() The call to lpfc_sli4_resume_rp… |
CVE-2024-35929 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock() For the kernels built with CON… |
CVE-2024-35927 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: drm: Check output polling initialized before disabling In drm_kms_helper_poll_disable() c… |
CVE-2024-35926 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix async_disable descriptor leak The disable_async paths of iaa_compress/d… |
CVE-2024-35925 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: block: prevent division by zero in blk_rq_stat_sum() The expression dst->nr_samples + src… |
CVE-2024-35924 | High | 7.1 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Limit read size on v1.2 Between UCSI 1.2 and UCSI 2.0, the size of the… |
CVE-2024-35922 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: fbmon: prevent division by zero in fb_videomode_from_videomode() The expression htotal *… |
CVE-2024-35921 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix oops when HEVC init fails The stateless HEVC decoder saves t… |
CVE-2024-35920 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: adding lock to protect decoder context list Add a lock for the c… |
CVE-2024-35919 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: adding lock to protect encoder context list Add a lock for the c… |
CVE-2024-35917 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Fix bpf_plt pointer arithmetic Kui-Feng Lee reported a crash on s390x triggered… |
CVE-2024-35916 | Medium | 5.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: dma-buf: Fix NULL pointer dereference in sanitycheck() If due to a memory allocation fail… |
CVE-2024-35915 | High | 8.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet syzbot reported the following… |
CVE-2024-35914 | High | 7.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix error cleanup path in nfsd_rename() Commit a8b0026847b8 ("rename(): avoid a dea… |
CVE-2024-35913 | High | 7.1 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF When we want to know whe… |
CVE-2024-35912 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: rfi: fix potential response leaks If the rx payload length check fail… |
CVE-2024-35911 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: ice: fix memory corruption bug with suspend and rebuild The ice driver would previously p… |
CVE-2024-35910 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: tcp: properly terminate timers for kernel sockets We had various syzbot reports about tcp… |
CVE-2024-35909 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Split 64bit accesses to fix alignment issues Some of the registers are a… |
CVE-2024-35908 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: tls: get psock ref after taking rxlock to avoid leak At the start of tls_sw_recvmsg, we t… |
CVE-2024-35907 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: mlxbf_gige: call request_irq() after NAPI initialized The mlxbf_gige driver encounters a… |
CVE-2024-35905 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protecti… |
CVE-2024-35904 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: selinux: avoid dereference of garbage after mount failure In case kern_mount() fails and… |
CVE-2024-35903 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: x86/bpf: Fix IP after emitting call depth accounting Adjust the IP passed to `emit_patch`… |
CVE-2024-35902 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net/rds: fix possible cp null dereference cp might be null, calling cp->cp_conn would pro… |
CVE-2024-35901 | High | 7.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix Rx DMA datasize and skb_over_panic mana_get_rxbuf_cfg() aligns the RX buff… |
CVE-2024-35900 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject new basechain after table flag update When dormant flag is t… |
CVE-2024-35899 | High | 7.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: flush pending destroy work before exit_net release Similar to 2c9f0… |
CVE-2024-35898 | High | 7.0 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() nft_unregiste… |
CVE-2024-35897 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: discard table flag update with pending basechain deletion Hook unre… |
CVE-2024-35896 | High | 7.1 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: validate user input for expected length I got multiple syzbot reports showing… |
CVE-2024-35895 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Prevent lock inversion deadlock in map delete elem syzkaller started using… |
CVE-2024-35894 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: mptcp: prevent BPF accessing lowat from a subflow socket. Alexei reported the following s… |
CVE-2024-35893 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_skbmod: prevent kernel-infoleak syzbot found that tcf_skbmod_dump() was co… |
CVE-2024-35892 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fix lockdep splat in qdisc_tree_reduce_backlog() qdisc_tree_reduce_backlog() i… |
CVE-2024-35891 | High | 7.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net: phy: micrel: Fix potential null pointer dereference In lan8814_get_sig_rx() and lan8… |
CVE-2024-35890 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: gro: fix ownership transfer If packets are GROed with fraglist they might be segmented la… |
CVE-2024-35889 | High | 8.6 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix kernel panic on unknown packet types In the very rare case where a packet type… |
CVE-2024-35888 | High | 7.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: erspan: make sure erspan_base_hdr is present in skb->head syzbot reported a problem in ip… |
CVE-2024-35887 | High | 8.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: ax25: fix use-after-free bugs caused by ax25_ds_del_timer When the ax25 device is detachi… |
CVE-2024-35886 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix infinite recursion in fib6_dump_done(). syzkaller reported infinite recursive c… |
CVE-2024-35885 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: mlxbf_gige: stop interface during shutdown The mlxbf_gige driver intermittantly encounter… |
CVE-2024-35884 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: udp: do not accept non-tunnel GSO skbs landing in a tunnel When rx-udp-gro-forwarding is… |
CVE-2024-35883 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: spi: mchp-pci1xxx: Fix a possible null pointer dereference in pci1xxx_spi_probe In functi… |
CVE-2024-35882 | High | 7.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP Jan Schunk reports that his… |
CVE-2024-35880 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: hold io_buffer_list reference over mmap If we look up the kbuf, ensure tha… |
CVE-2024-35879 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: of: dynamic: Synchronize of_changeset_destroy() with the devlink removals In the followin… |
CVE-2024-35878 | Medium | 5.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: of: module: prevent NULL pointer dereference in vsnprintf() In of_modalias(), we can get… |
CVE-2024-35877 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: fix VM_PAT handling in COW mappings PAT handling won't do the right thing in… |
CVE-2024-35875 | High | 8.4 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: x86/coco: Require seeding RNG with RDRAND on CoCo systems There are few uses of CoCo that… |
CVE-2024-35874 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: aio: Fix null ptr deref in aio_complete() wakeup list_del_init_careful() needs to be the… |
CVE-2024-35873 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: riscv: Fix vector state restore in rt_sigreturn() The RISC-V Vector specification states… |
CVE-2024-35872 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix GUP-fast succeeding on secretmem folios folio_is_secretmem() currently… |
CVE-2024-35871 | High | 7.1 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: riscv: process: Fix kernel gp leakage childregs represents the registers which are active… |
CVE-2024-35870 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in smb2_reconnect_server() The UAF bug is due to smb2_reconnect_serv… |
CVE-2024-35869 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: guarantee refcounted children from parent session Avoid potential use-after-… |
CVE-2024-35868 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_write() Skip sessions that are being te… |
CVE-2024-35867 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_show() Skip sessions that are being tea… |
CVE-2024-35866 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_dump_full_key() Skip sessions that are being teare… |
CVE-2024-35865 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_oplock_break() Skip sessions that are bei… |
CVE-2024-35864 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_lease_break() Skip sessions that are bein… |
CVE-2024-35863 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in is_valid_oplock_break() Skip sessions that are being te… |
CVE-2024-35862 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_network_name_deleted() Skip sessions that are b… |
CVE-2024-35861 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() Skip sessions that ar… |
CVE-2024-35860 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: bpf: support deferring bpf_link dealloc to after RCU grace period BPF link for some progr… |
CVE-2024-5099 | Medium | 6.3 | 2024-05-19 | A vulnerability was found in SourceCodester Simple Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2024-5098 | Medium | 5.5 | 2024-05-19 | A vulnerability has been found in SourceCodester Simple Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functiona… |
CVE-2024-5097 | Medium | 4.3 | 2024-05-19 | A vulnerability, which was classified as problematic, was found in SourceCodester Simple Inventory System 1.0. Affected is an unknown function of the file /tab… |
CVE-2024-5096 | Medium | 5.3 | 2024-05-19 | A vulnerability classified as problematic was found in Hipcam Device up to 20240511. This vulnerability affects unknown code of the file /log/wifi.mac of the c… |
CVE-2024-5095 | Medium | 6.5 | 2024-05-19 | A vulnerability classified as problematic has been found in Victor Zsviot Camera 8.26.31. This affects an unknown part of the component MQTT Packet Handler. Th… |
CVE-2024-36050 | Medium | 4.3 | 2024-05-18 | Nix through 2.22.1 mishandles certain usage of hash caches, which makes it easier for attackers to replace current source code with attacker-controlled source… |
CVE-2024-28064 | Critical | 9.8 | 2024-05-18 | Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete o… |