2024 CVEs (page 327)
Page 327 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-20347 | Medium | 4.3 | 2024-04-03 | A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, which could allow the attacker to perfor… |
CVE-2024-20334 | Medium | 5.5 | 2024-04-03 | A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow a low-privileged, remote attacker to conduct a c… |
CVE-2024-20332 | Medium | 5.5 | 2024-04-03 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a server… |
CVE-2024-20310 | Medium | 6.1 | 2024-04-03 | A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remo… |
CVE-2024-20302 | Medium | 5.4 | 2024-04-03 | A vulnerability in the tenant security implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an authenticated, remote attacker to modify or de… |
CVE-2024-20283 | Medium | 4.3 | 2024-04-03 | A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to learn cluster deployment information on an affected device. This v… |
CVE-2024-20282 | Medium | 6.0 | 2024-04-03 | A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an af… |
CVE-2024-20281 | High | 7.5 | 2024-04-03 | A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services could allow an unauthenticated, remote… |
CVE-2024-1180 | High | 8.0 | 2024-04-03 | TP-Link Omada ER605 Access Control Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbit… |
CVE-2024-31393 | Medium | 4.3 | 2024-04-03 | Dragging Javascript URLs to the address bar could cause them to be loaded, bypassing restrictions and security protections This vulnerability affects Firefox f… |
CVE-2024-31392 | High | 7.5 | 2024-04-03 | If an insecure element was added to a page after a delay, Firefox would not replace the secure icon with a mixed content security status This vulnerability aff… |
CVE-2024-28275 | Medium | 6.5 | 2024-04-03 | Puwell Cloud Tech Co, Ltd 360Eyes Pro v3.9.5.16(3090516) was discovered to transmit sensitive information in cleartext. This vulnerability allows attackers to… |
CVE-2024-26727 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not ASSERT() if the newly created subvolume already got read [BUG] There is a s… |
CVE-2024-26726 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't drop extent_map for free space inode on write error While running the CI for… |
CVE-2024-26725 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: dpll: fix possible deadlock during netlink dump operation Recently, I've been hitting fol… |
CVE-2024-26724 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DPLL, Fix possible use after free after delayed work timer triggers I managed t… |
CVE-2024-26723 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: lan966x: Fix crash when adding interface under a lag There is a crash when adding one of… |
CVE-2024-26722 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() There is a path in rt5645_jack_de… |
CVE-2024-26721 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/dsc: Fix the macro that calculates DSCC_/DSCA_ PPS reg address Commit bd077259d0… |
CVE-2024-26719 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: nouveau: offload fence uevents work to workqueue This should break the deadlock between t… |
CVE-2024-26718 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: dm-crypt, dm-verity: disable tasklets Tasklets have an inherent problem with memory corru… |
CVE-2024-26717 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid-of: fix NULL-deref on failed power up A while back the I2C HID implementatio… |
CVE-2024-26716 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: usb: core: Prevent null pointer dereference in update_port_device_state Currently, the fu… |
CVE-2024-26715 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend In current scenari… |
CVE-2024-26714 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: sc8180x: Mark CO0 BCM keepalive The CO0 BCM needs to be up at all tim… |
CVE-2024-26712 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: powerpc/kasan: Fix addr error caused by page alignment In kasan_init_region, when k_start… |
CVE-2024-26711 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4130: zero-initialize clock init data The clk_init_data struct does not have… |
CVE-2024-26710 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: powerpc/kasan: Limit KASAN thread size increase to 32KB KASAN is seen to increase stack u… |
CVE-2024-26709 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix the missing iommu_group_put() during platform domain attach The functi… |
CVE-2024-26708 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: mptcp: really cope with fastopen race Fastopen and PM-trigger subflow shutdown can race… |
CVE-2024-26707 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() Syzkaller reported [1] hitti… |
CVE-2024-26706 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: parisc: Fix random data corruption from exception handler The current exception handler i… |
CVE-2024-26705 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup When using hotplug and bringi… |
CVE-2024-26704 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix double-free of blocks due to wrong extents moved_len In ext4_move_extents(), mo… |
CVE-2024-26703 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Move hrtimer_init to timerlat_fd open() Currently, the timerlat's hrtim… |
CVE-2024-26702 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC Rec… |
CVE-2024-26700 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix MST Null Ptr for RV The change try to fix below error specific to RV… |
CVE-2024-26699 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgr [Why] There is a potential… |
CVE-2024-26698 | Medium | 4.7 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove In commit ac50476717… |
CVE-2024-26697 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix data corruption in dsync block recovery for small block sizes The helper func… |
CVE-2024-26696 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() Syzbot reported a hang issue in mig… |
CVE-2024-26695 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked The SEV plat… |
CVE-2024-26694 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix double-free bug The storage for the TLV PC register data wasn't done l… |
CVE-2024-26693 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix a crash when we run out of stations A DoS tool that injects loads… |
CVE-2024-26692 | High | 8.3 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: smb: Fix regression in writes when non-standard maximum write size negotiated The convers… |
CVE-2024-26691 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix circular locking dependency The rule inside kvm enforces that the vcpu->m… |
CVE-2024-26690 | High | 7.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: protect updates of 64-bit statistics counters As explained by a comment in <… |
CVE-2024-26689 | High | 8.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: ceph: prevent use-after-free in encode_cap_msg() In fs/ceph/caps.c, in encode_cap_msg()… |
CVE-2024-26688 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super When configuring a hugetl… |
CVE-2024-26687 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: xen/events: close evtchn after mapping cleanup shutdown_pirq and startup_pirq are not tak… |
CVE-2024-26686 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats lock_task… |
CVE-2024-26685 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential bug in end_buffer_async_write According to a syzbot report, end_buf… |
CVE-2024-3259 | Medium | 6.3 | 2024-04-03 | A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been declared as critical. This vulnerability affects unknown code… |
CVE-2024-31420 | Medium | 6.5 | 2024-04-03 | A NULL pointer dereference flaw was found in KubeVirt. This flaw allows an attacker who has access to a virtual machine guest on a node with DownwardMetrics en… |
CVE-2024-31419 | Medium | 4.3 | 2024-04-03 | An information disclosure flaw was found in OpenShift Virtualization. The DownwardMetrics feature was introduced to expose host metrics to virtual machine gues… |
CVE-2024-27201 | Medium | 4.9 | 2024-04-03 | An improper input validation vulnerability exists in the OAS Engine User Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A sp… |
CVE-2024-24976 | Medium | 4.9 | 2024-04-03 | A denial of service vulnerability exists in the OAS Engine File Data Source Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A… |
CVE-2024-22178 | Medium | 4.9 | 2024-04-03 | A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially… |
CVE-2024-21870 | Medium | 4.9 | 2024-04-03 | A file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted… |
CVE-2024-0394 | High | 7.8 | 2024-04-03 | Rapid7 Minerva Armor versions below 4.5.5 suffer from a privilege escalation vulnerability whereby an authenticated attacker can elevate privileges and execute… |
CVE-2024-3258 | Medium | 6.3 | 2024-04-03 | A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been classified as critical. This affects an unknown part of the fi… |
CVE-2024-3257 | Medium | 6.3 | 2024-04-03 | A vulnerability was found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this issue is some unknown function… |
CVE-2024-3256 | Medium | 6.3 | 2024-04-03 | A vulnerability has been found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this vulnerability is an unkno… |
CVE-2024-30572 | High | 8.0 | 2024-04-03 | Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntp_server parameter. |
CVE-2024-30571 | High | 7.5 | 2024-04-03 | An information leak in the BRS_top.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication requir… |
CVE-2024-30570 | Medium | 5.3 | 2024-04-03 | An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required. |
CVE-2024-30569 | High | 7.5 | 2024-04-03 | An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required. |
CVE-2024-30568 | Critical | 9.8 | 2024-04-03 | Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter. |
CVE-2024-27254 | Medium | 5.3 | 2024-04-03 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 federated server is vulnerable to denial of service with a specially cra… |
CVE-2024-25096 | Critical | 10.0 | 2024-04-03 | Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc. Canto allows Code Injection.This issue affects Canto: from n/a through 3… |
CVE-2024-25046 | Medium | 5.3 | 2024-04-03 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service by an authenticated user using a specially… |
CVE-2024-25030 | Medium | 6.2 | 2024-04-03 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 stores potentially sensitive information in log files that could be read by a local user… |
CVE-2024-24707 | Critical | 9.9 | 2024-04-03 | Improper Control of Generation of Code ('Code Injection') vulnerability in Cwicly Builder, SL. Cwicly allows Code Injection.This issue affects Cwicly: from n/a… |
CVE-2024-22360 | Medium | 5.3 | 2024-04-03 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial of service with a specially crafted query on certain columnar… |
CVE-2024-3255 | Medium | 6.3 | 2024-04-03 | A vulnerability, which was classified as critical, was found in SourceCodester Internship Portal Management System 1.0. Affected is an unknown function of the… |
CVE-2024-3254 | Medium | 6.3 | 2024-04-03 | A vulnerability, which was classified as critical, has been found in SourceCodester Internship Portal Management System 1.0. This issue affects some unknown pr… |
CVE-2024-31390 | Critical | 9.9 | 2024-04-03 | : Improper Control of Generation of Code ('Code Injection') vulnerability in Soflyy Breakdance allows : Code Injection.This issue affects Breakdance: from n/a… |
CVE-2024-31380 | Critical | 9.9 | 2024-04-03 | Improper Control of Generation of Code ('Code Injection') vulnerability in Soflyy Oxygen Builder allows Code Injection. Vendor is ignoring report, refuses to p… |
CVE-2024-29477 | High | 8.8 | 2024-04-03 | Lack of sanitization during Installation Process in Dolibarr ERP CRM up to version 19.0.0 allows an attacker with adjacent access to the network to execute arb… |
CVE-2024-28782 | Medium | 6.3 | 2024-04-03 | IBM QRadar Suite Software 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text whi… |
CVE-2024-27972 | Critical | 9.9 | 2024-04-03 | Improper Control of Generation of Code ('Code Injection') vulnerability in Jack Arturo WP Fusion Lite wp-fusion-lite.This issue affects WP Fusion Lite: from n/… |
CVE-2024-27951 | Critical | 9.1 | 2024-04-03 | Unrestricted Upload of File with Dangerous Type vulnerability in Themeisle Multiple Page Generator Plugin – MPG allows Upload a Web Shell to a Web Server.This… |
CVE-2024-27191 | High | 8.5 | 2024-04-03 | Improper Control of Generation of Code ('Code Injection') vulnerability in inpersttion Slivery Extender slivery-extender allows Remote Code Inclusion.This issu… |
CVE-2024-25918 | Critical | 9.9 | 2024-04-03 | Improper Control of Generation of Code ('Code Injection') vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a… |
CVE-2024-3253 | Medium | 6.3 | 2024-04-03 | A vulnerability classified as critical was found in SourceCodester Internship Portal Management System 1.0. This vulnerability affects unknown code of the file… |
CVE-2024-3252 | Medium | 6.3 | 2024-04-03 | A vulnerability classified as critical has been found in SourceCodester Internship Portal Management System 1.0. This affects an unknown part of the file admin… |
CVE-2024-3251 | Medium | 6.3 | 2024-04-03 | A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been rated as critical. Affected by this issue is some unknown fu… |
CVE-2024-0172 | High | 7.9 | 2024-04-03 | Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker coul… |
CVE-2024-29734 | High | 7.8 | 2024-04-03 | Uncontrolled search path element issue exists in SonicDICOM Media Viewer 2.3.2 and earlier, which may lead to insecurely loading Dynamic Link Libraries. As a r… |
CVE-2024-28589 | Medium | 6.7 | 2024-04-03 | An issue was discovered in Axigen Mail Server for Windows versions 10.5.18 and before, allows local low-privileged attackers to execute arbitrary code and esca… |
CVE-2024-28515 | Critical | 9.8 | 2024-04-03 | Buffer Overflow vulnerability in CSAPP_Lab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker to execute arbitrary code via the lab3 of csapp,lab3/buflab-upd… |
CVE-2024-24506 | Medium | 6.1 | 2024-04-03 | Cross Site Scripting (XSS) vulnerability in Lime Survey Community Edition Version v.5.3.32+220817, allows remote attackers to execute arbitrary code via the Ad… |
CVE-2024-31008 | Medium | 6.5 | 2024-04-03 | An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code and obtain sensitive information via the index.php file. |
CVE-2024-30998 | Critical | 9.8 | 2024-04-03 | SQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information… |
CVE-2024-31011 | Critical | 9.8 | 2024-04-03 | Arbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute arbitrary code via a file path that was not isolated and the suffix wa… |
CVE-2024-2322 | Medium | 6.8 | 2024-04-03 | The WooCommerce Cart Abandonment Recovery WordPress plugin before 1.2.27 does not have CSRF check in its bulk actions, which could allow attackers to make logg… |
CVE-2024-31013 | Medium | 6.1 | 2024-04-03 | Cross Site Scripting (XSS) vulnerability in emlog version Pro 2.3, allow remote attackers to execute arbitrary code via a crafted payload to the bottom of the… |
CVE-2024-31012 | Critical | 9.8 | 2024-04-03 | An issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the uploa… |
CVE-2024-31010 | High | 7.5 | 2024-04-03 | SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php. |
CVE-2024-31009 | Medium | 6.5 | 2024-04-03 | SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php. |