2024 CVEs (page 278)
Page 278 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-35811 | High | 8.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach This is the candidate pat… |
CVE-2024-35810 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix the lifetime of the bo cursor memory The cleanup can be dispatched while… |
CVE-2024-35809 | Medium | 4.7 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the… |
CVE-2024-35808 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: md/dm-raid: don't call md_reap_sync_thread() directly Currently md_reap_sync_thread() is… |
CVE-2024-35807 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix corruption during on-line resize We observed a corruption during on-line resize… |
CVE-2024-35806 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: soc: fsl: qbman: Always disable interrupts when taking cgr_lock smp_call_function_single… |
CVE-2024-35805 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: dm snapshot: fix lockup in dm_exception_table_exit There was reported lockup when we exit… |
CVE-2024-35804 | High | 8.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Mark target gfn of emulated atomic instruction as dirty When emulating an atomi… |
CVE-2024-35803 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: x86/efistub: Call mixed mode boot services on the firmware's stack Normally, the EFI stub… |
CVE-2024-35801 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD Commit 672365477ae8 ("x86/fpu: Update X… |
CVE-2024-35800 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: efi: fix panic in kdump kernel Check if get_next_variable() is actually valid pointer bef… |
CVE-2024-35799 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Prevent crash when disable stream [Why] Disabling stream encoder invokes… |
CVE-2024-35798 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race in read_extent_buffer_pages() There are reports from tree-checker that de… |
CVE-2024-35797 | High | 7.1 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: mm: cachestat: fix two shmem bugs When cachestat on shmem races with swapping and invalid… |
CVE-2024-35796 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: net: ll_temac: platform_get_resource replaced by wrong function The function platform_get… |
CVE-2024-35795 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix deadlock while reading mqd from debugfs An errant disk backup on my deskt… |
CVE-2024-34982 | Critical | 9.8 | 2024-05-17 | An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attackers to execute arbitrary code via uploading a craf… |
CVE-2024-34919 | Critical | 9.8 | 2024-05-17 | An arbitrary file upload vulnerability in the component \modstudent\controller.php of Pisay Online E-Learning System using PHP/MySQL v1.0 allows attackers to e… |
CVE-2024-5046 | High | 7.3 | 2024-05-17 | A vulnerability was found in SourceCodester Online Examination System 1.0. It has been rated as critical. This issue affects some unknown processing of the fil… |
CVE-2024-5045 | Medium | 5.3 | 2024-05-17 | A vulnerability was found in SourceCodester Online Birth Certificate Management System 1.0. It has been declared as problematic. This vulnerability affects unk… |
CVE-2024-35794 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: dm-raid: really frozen sync_thread during suspend 1) commit f52f5c71f3d4 ("md: fix stoppi… |
CVE-2024-35793 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: debugfs: fix wait/cancellation handling during remove Ben Greear further reports deadlock… |
CVE-2024-35792 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - Fix use after free in unprepare The unprepare call must be carried out b… |
CVE-2024-35791 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() Do the cach… |
CVE-2024-35790 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute… |
CVE-2024-35789 | High | 8.0 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes When moving a station… |
CVE-2024-35787 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: fix incorrect usage for sb_index Commit d7038f951828 ("md-bitmap: don't use… |
CVE-2024-35786 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf If VM_BIND is enabled on… |
CVE-2024-35785 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix kernel panic caused by incorrect error handling The error path while fail… |
CVE-2024-35784 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock with fiemap and extent locking While working on the patchset to remov… |
CVE-2024-27436 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Stop parsing channels bits when all channels are found. If a usb audio d… |
CVE-2024-27435 | High | 7.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix reconnection fail due to reserved tag allocation We found a issue on production… |
CVE-2024-27434 | High | 7.1 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK The firmware doesn't need the MFP… |
CVE-2024-27433 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe()… |
CVE-2024-27432 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix PPE hanging issue A patch to resolve an issue was found i… |
CVE-2024-5055 | High | 7.5 | 2024-05-17 | Uncontrolled resource consumption vulnerability in XAMPP Windows, versions 7.3.2 and earlier. This vulnerability exists when XAMPP attempts to process many inc… |
CVE-2024-5044 | Low | 3.7 | 2024-05-17 | A vulnerability was found in Emlog Pro 2.3.4. It has been classified as problematic. This affects an unknown part of the component Cookie Handler. The manipula… |
CVE-2024-5043 | Medium | 4.7 | 2024-05-17 | A vulnerability was found in Emlog Pro 2.3.4 and classified as critical. Affected by this issue is some unknown functionality of the file admin/setting.php. Th… |
CVE-2024-27431 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program When running an XD… |
CVE-2024-27419 | Medium | 4.7 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: netrom: Fix data-races around sysctl_net_busy_read We need to protect the reader reading… |
CVE-2024-27418 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: net: mctp: take ownership of skb in mctp_local_output Currently, mctp_local_output only t… |
CVE-2024-27417 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() It seems that if userspace p… |
CVE-2024-27416 | High | 8.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST If we received HCI_EV_IO_CAP… |
CVE-2024-27415 | High | 8.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: confirm multicast packets before passing them up the stack conntrack n… |
CVE-2024-27414 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back In the commit d73ef2d69c0d (… |
CVE-2024-27413 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: efi/capsule-loader: fix incorrect allocation size gcc-14 notices that the allocation with… |
CVE-2024-27412 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: power: supply: bq27xxx-i2c: Do not free non existing IRQ The bq27xxx i2c-client may not h… |
CVE-2024-27411 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: keep DMA buffers required for suspend/resume Nouveau deallocates a few buffe… |
CVE-2024-27410 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject iftype change with mesh ID change It's currently possible to change… |
CVE-2024-27409 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup … |
CVE-2024-27408 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup … |
CVE-2024-27407 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fixed overflow check in mi_enum_attr() |
CVE-2024-27406 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: lib/Kconfig.debug: TEST_IOV_ITER depends on MMU Trying to run the iov_iter unit test on a… |
CVE-2024-27405 | High | 7.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs It is observed sometim… |
CVE-2024-27404 | High | 8.2 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data races on remote_id Similar to the previous patch, address the data race o… |
CVE-2024-27403 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: reset dst in route object after setting up flow dst is trans… |
CVE-2024-27402 | Medium | 5.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skb_queue_empty() use The receive queues are protected by their resp… |
CVE-2024-35174 | Medium | 5.3 | 2024-05-17 | Missing Authorization vulnerability in Flothemes Flo Forms.This issue affects Flo Forms: from n/a through 1.0.42. |
CVE-2024-5052 | High | 7.5 | 2024-05-17 | Denial of Service (DoS) vulnerability for Cerberus Enterprise 8.0.10.3 web administration. The vulnerability exists when the web server, default port 10001, at… |
CVE-2024-34809 | Medium | 4.3 | 2024-05-17 | Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes EmpowerWP.This issue affects EmpowerWP: from n/a through 1.0.21. |
CVE-2024-34807 | Medium | 4.3 | 2024-05-17 | Cross-Site Request Forgery (CSRF) vulnerability in CodeBard Fast Custom Social Share by CodeBard fast-custom-social-share-by-codebard.This issue affects Fast C… |
CVE-2024-34806 | Medium | 4.3 | 2024-05-17 | Cross-Site Request Forgery (CSRF) vulnerability in Creative Motion Clearfy Cache.This issue affects Clearfy Cache: from n/a through 2.2.1. |
CVE-2024-34756 | Medium | 4.3 | 2024-05-17 | Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Contact Form 7 HubSpot.This issue affects Integration for Contact Form 7 HubSpot… |
CVE-2024-34755 | Medium | 4.3 | 2024-05-17 | Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Contact Form 7 and Salesforce.This issue affects Integration for Contact Form 7 an… |
CVE-2024-32960 | High | 8.8 | 2024-05-17 | Improper Privilege Management vulnerability in Booking Ultra Pro allows Privilege Escalation.This issue affects Booking Ultra Pro: from n/a through 1.1.12. |
CVE-2024-32959 | High | 8.8 | 2024-05-17 | Incorrect Privilege Assignment vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <= 7.2.2. |
CVE-2024-32830 | High | 8.6 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeKraft BuddyForms allows Server Side Request Forgery, Relat… |
CVE-2024-32827 | Medium | 5.3 | 2024-05-17 | Authentication Bypass by Spoofing vulnerability in RafflePress Giveaways and Contests allows Functionality Bypass.This issue affects Giveaways and Contests: fr… |
CVE-2024-32809 | Critical | 10.0 | 2024-05-17 | Unrestricted Upload of File with Dangerous Type vulnerability in JumpDEMAND Inc. ActiveDEMAND allows Using Malicious Files.This issue affects ActiveDEMAND: fro… |
CVE-2024-32802 | Medium | 5.3 | 2024-05-17 | Missing Authorization vulnerability in WordPlus BP Better Messages allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BP Better… |
CVE-2024-32786 | Medium | 5.3 | 2024-05-17 | Authentication Bypass by Spoofing vulnerability in WP Royal Royal Elementor Addons allows Functionality Bypass.This issue affects Royal Elementor Addons: from… |
CVE-2024-32774 | Medium | 4.3 | 2024-05-17 | Improper Restriction of Excessive Authentication Attempts vulnerability in Metagauss ProfileGrid allows Removing Important Client Functionality.This issue affe… |
CVE-2024-32720 | Medium | 5.3 | 2024-05-17 | Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Appointment Hour Booking allows Removing Important Client Functionality.T… |
CVE-2024-32708 | Low | 3.7 | 2024-05-17 | Authentication Bypass by Spoofing vulnerability in helderk Maintenance Mode allows Functionality Bypass.This issue affects Maintenance Mode: from n/a through 3… |
CVE-2024-32692 | High | 8.2 | 2024-05-17 | Missing Authorization vulnerability in QuanticaLabs Chauffeur Taxi Booking System for WordPress allows Accessing Functionality Not Properly Constrained by ACLs… |
CVE-2024-22120 | Critical | 9.1 | 2024-05-17 | Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is… |
CVE-2024-4789 | Medium | 6.4 | 2024-05-17 | Cost Calculator Builder Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to 3.1.72, via the send_demo_webhook() functio… |
CVE-2024-4214 | Low | 2.7 | 2024-05-17 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS vulnerability in Bill Minozzi Car Dealer allows Code Injection.This issue affects… |
CVE-2024-34434 | Medium | 6.5 | 2024-05-17 | Incorrect Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Code Inclusion, Functionality Misuse.This issue aff… |
CVE-2024-34370 | High | 7.2 | 2024-05-17 | Improper Privilege Management vulnerability in WPFactory EAN for WooCommerce allows Privilege Escalation.This issue affects EAN for WooCommerce: from n/a throu… |
CVE-2024-33917 | Medium | 5.3 | 2024-05-17 | Authentication Bypass by Spoofing vulnerability in webtechideas WTI Like Post allows Functionality Bypass.This issue affects WTI Like Post: from n/a through 1… |
CVE-2024-33644 | Critical | 9.9 | 2024-05-17 | Improper Control of Generation of Code ('Code Injection') vulnerability in WPCustomify Customify Site Library allows Code Injection.This issue affects Customif… |
CVE-2024-33569 | High | 7.2 | 2024-05-17 | Improper Privilege Management vulnerability in Darren Cooney Instant Images allows Privilege Escalation.This issue affects Instant Images: from n/a through 6.1… |
CVE-2024-33567 | Critical | 9.8 | 2024-05-17 | Improper Privilege Management vulnerability in UkrSolution Barcode Scanner with Inventory & Order Manager allows Privilege Escalation.This issue affects Barcod… |
CVE-2024-33552 | Critical | 9.8 | 2024-05-17 | Improper Privilege Management vulnerability in 8theme XStore Core allows Privilege Escalation.This issue affects XStore Core: from n/a through 5.3.8. |
CVE-2024-33550 | High | 8.8 | 2024-05-17 | Improper Privilege Management vulnerability in JR King/Eran Schoellhorn WP Masquerade allows Privilege Escalation.This issue affects WP Masquerade: from n/a th… |
CVE-2024-33549 | High | 8.8 | 2024-05-17 | Improper Privilege Management vulnerability in AA-Team WZone allows Privilege Escalation.This issue affects WZone: from n/a through 14.0.10. |
CVE-2024-32790 | Medium | 4.3 | 2024-05-17 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Supsystic Pricing Table by Supsystic allows Code Injection.This… |
CVE-2024-32685 | Medium | 5.3 | 2024-05-17 | Client-Side Enforcement of Server-Side Security vulnerability in Wpmet Wp Ultimate Review allows Functionality Bypass.This issue affects Wp Ultimate Review: fr… |
CVE-2024-32680 | High | 8.8 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Control of Generation of Code ('Code Injection') vulnerability in Plug… |
CVE-2024-32523 | High | 8.1 | 2024-05-17 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in EverPress Mailster mailster.This issue… |
CVE-2024-32521 | Medium | 5.3 | 2024-05-17 | Client-Side Enforcement of Server-Side Security vulnerability in Highfivery LLC Zero Spam allows Removing Important Client Functionality.This issue affects Zer… |
CVE-2024-32512 | Medium | 5.3 | 2024-05-17 | Client-Side Enforcement of Server-Side Security vulnerability in weForms allows Removing Important Client Functionality.This issue affects weForms: from n/a th… |
CVE-2024-32511 | Critical | 9.8 | 2024-05-17 | Improper Privilege Management vulnerability in Astoundify Simple Registration for WooCommerce allows Privilege Escalation.This issue affects Simple Registratio… |
CVE-2024-32507 | High | 8.8 | 2024-05-17 | Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n… |
CVE-2024-32131 | Medium | 5.3 | 2024-05-17 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in W3 Eden Inc. Download Manager allows Functionality Bypass.This issue affects Downlo… |
CVE-2024-31341 | Medium | 5.3 | 2024-05-17 | Insufficient Verification of Data Authenticity vulnerability in Cozmoslabs Profile Builder allows Functionality Bypass.This issue affects Profile Builder: from… |
CVE-2024-31300 | High | 8.5 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in appscreo Easy Social Share Buttons allows PHP Local File Inclus… |
CVE-2024-31295 | Medium | 5.3 | 2024-05-17 | Guessable CAPTCHA vulnerability in BestWebSoft Captcha by BestWebSoft allows Functionality Bypass.This issue affects Captcha by BestWebSoft: from n/a through 5… |
CVE-2024-31290 | Critical | 9.8 | 2024-05-17 | Improper Privilege Management vulnerability in CodeRevolution Demo My WordPress allows Privilege Escalation.This issue affects Demo My WordPress: from n/a thro… |