2024 CVEs (page 327)
Page 327 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-26753 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: crypto: virtio/akcipher - Fix stack overflow on memcpy sizeof(struct virtio_crypto_akciph… |
CVE-2024-26752 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: l2tp: pass correct message length to ip6_append_data l2tp_ip6_sendmsg needs to avoid acco… |
CVE-2024-26751 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: ARM: ep93xx: Add terminator to gpiod_lookup_table Without the terminator, if a con_id is… |
CVE-2024-26749 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() ... cdns3_gadget… |
CVE-2024-26748 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix memory double free when handle zero packet 829 if (request->complete) { … |
CVE-2024-26747 | Medium | 4.4 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: usb: roles: fix NULL pointer issue when put module's reference In current design, usb rol… |
CVE-2024-26744 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Support specifying the srpt_service_guid parameter Make loading ib_srpt with t… |
CVE-2024-26743 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: RDMA/qedr: Fix qedr_create_user_qp error flow Avoid the following warning by making sure… |
CVE-2024-26742 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix disable_managed_interrupts Correct blk-mq registration issue with mod… |
CVE-2024-26741 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished(). syzkalle… |
CVE-2024-26740 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: use the backlog for mirred ingress The test Davide added in commit… |
CVE-2024-26739 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: don't override retval if we already lost the skb If we're redirect… |
CVE-2024-26738 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: DLPAR add doesn't completely initialize pci_controller When a PCI… |
CVE-2024-26737 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel The following race… |
CVE-2024-26736 | High | 8.1 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: afs: Increase buffer size in afs_update_volume_status() The max length of volume->vid val… |
CVE-2024-26735 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure… |
CVE-2024-26734 | High | 7.0 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: devlink: fix possible use-after-free and memory leaks in devlink_init() The pernet operat… |
CVE-2024-26733 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: arp: Prevent overflow in arp_req_get(). syzkaller reported an overflown write in arp_req_… |
CVE-2024-26732 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: net: implement lockless setsockopt(SO_PEEK_OFF) syzbot reported a lockdep violation [1] i… |
CVE-2024-26731 | Medium | 5.3 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready() syzbot report… |
CVE-2024-26730 | High | 7.3 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775) Fix access to temperature configuration registers The number of temperat… |
CVE-2024-26729 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential null pointer dereference in dc_dmub_srv Fixes potential nu… |
CVE-2024-26728 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix null-pointer dereference on edid reading Use i2c adapter when there… |
CVE-2024-23540 | Medium | 5.3 | 2024-04-03 | The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The Big… |
CVE-2024-20368 | Medium | 6.5 | 2024-04-03 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cros… |
CVE-2024-20367 | Medium | 5.4 | 2024-04-03 | A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) at… |
CVE-2024-20362 | Medium | 6.1 | 2024-04-03 | A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthentica… |
CVE-2024-20352 | Medium | 4.9 | 2024-04-03 | A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traversal attack, which could allow the attac… |
CVE-2024-20348 | High | 7.5 | 2024-04-03 | A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote a… |
CVE-2024-20347 | Medium | 4.3 | 2024-04-03 | A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, which could allow the attacker to perfor… |
CVE-2024-20334 | Medium | 5.5 | 2024-04-03 | A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow a low-privileged, remote attacker to conduct a c… |
CVE-2024-20332 | Medium | 5.5 | 2024-04-03 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a server… |
CVE-2024-20310 | Medium | 6.1 | 2024-04-03 | A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remo… |
CVE-2024-20302 | Medium | 5.4 | 2024-04-03 | A vulnerability in the tenant security implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an authenticated, remote attacker to modify or de… |
CVE-2024-20283 | Medium | 4.3 | 2024-04-03 | A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to learn cluster deployment information on an affected device. This v… |
CVE-2024-20282 | Medium | 6.0 | 2024-04-03 | A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an af… |
CVE-2024-20281 | High | 7.5 | 2024-04-03 | A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services could allow an unauthenticated, remote… |
CVE-2024-1180 | High | 8.0 | 2024-04-03 | TP-Link Omada ER605 Access Control Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbit… |
CVE-2024-31393 | Medium | 4.3 | 2024-04-03 | Dragging Javascript URLs to the address bar could cause them to be loaded, bypassing restrictions and security protections This vulnerability affects Firefox f… |
CVE-2024-31392 | High | 7.5 | 2024-04-03 | If an insecure element was added to a page after a delay, Firefox would not replace the secure icon with a mixed content security status This vulnerability aff… |
CVE-2024-28275 | Medium | 6.5 | 2024-04-03 | Puwell Cloud Tech Co, Ltd 360Eyes Pro v3.9.5.16(3090516) was discovered to transmit sensitive information in cleartext. This vulnerability allows attackers to… |
CVE-2024-26727 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not ASSERT() if the newly created subvolume already got read [BUG] There is a s… |
CVE-2024-26726 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't drop extent_map for free space inode on write error While running the CI for… |
CVE-2024-26725 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: dpll: fix possible deadlock during netlink dump operation Recently, I've been hitting fol… |
CVE-2024-26724 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DPLL, Fix possible use after free after delayed work timer triggers I managed t… |
CVE-2024-26723 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: lan966x: Fix crash when adding interface under a lag There is a crash when adding one of… |
CVE-2024-26722 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() There is a path in rt5645_jack_de… |
CVE-2024-26721 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/dsc: Fix the macro that calculates DSCC_/DSCA_ PPS reg address Commit bd077259d0… |
CVE-2024-26719 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: nouveau: offload fence uevents work to workqueue This should break the deadlock between t… |
CVE-2024-26718 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: dm-crypt, dm-verity: disable tasklets Tasklets have an inherent problem with memory corru… |
CVE-2024-26717 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid-of: fix NULL-deref on failed power up A while back the I2C HID implementatio… |
CVE-2024-26716 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: usb: core: Prevent null pointer dereference in update_port_device_state Currently, the fu… |
CVE-2024-26715 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend In current scenari… |
CVE-2024-26714 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: sc8180x: Mark CO0 BCM keepalive The CO0 BCM needs to be up at all tim… |
CVE-2024-26712 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: powerpc/kasan: Fix addr error caused by page alignment In kasan_init_region, when k_start… |
CVE-2024-26711 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4130: zero-initialize clock init data The clk_init_data struct does not have… |
CVE-2024-26710 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: powerpc/kasan: Limit KASAN thread size increase to 32KB KASAN is seen to increase stack u… |
CVE-2024-26709 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix the missing iommu_group_put() during platform domain attach The functi… |
CVE-2024-26708 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: mptcp: really cope with fastopen race Fastopen and PM-trigger subflow shutdown can race… |
CVE-2024-26707 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() Syzkaller reported [1] hitti… |
CVE-2024-26706 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: parisc: Fix random data corruption from exception handler The current exception handler i… |
CVE-2024-26705 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup When using hotplug and bringi… |
CVE-2024-26704 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix double-free of blocks due to wrong extents moved_len In ext4_move_extents(), mo… |
CVE-2024-26703 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Move hrtimer_init to timerlat_fd open() Currently, the timerlat's hrtim… |
CVE-2024-26702 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC Rec… |
CVE-2024-26700 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix MST Null Ptr for RV The change try to fix below error specific to RV… |
CVE-2024-26699 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgr [Why] There is a potential… |
CVE-2024-26698 | Medium | 4.7 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove In commit ac50476717… |
CVE-2024-26697 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix data corruption in dsync block recovery for small block sizes The helper func… |
CVE-2024-26696 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() Syzbot reported a hang issue in mig… |
CVE-2024-26695 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked The SEV plat… |
CVE-2024-26694 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix double-free bug The storage for the TLV PC register data wasn't done l… |
CVE-2024-26693 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix a crash when we run out of stations A DoS tool that injects loads… |
CVE-2024-26692 | High | 8.3 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: smb: Fix regression in writes when non-standard maximum write size negotiated The convers… |
CVE-2024-26691 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix circular locking dependency The rule inside kvm enforces that the vcpu->m… |
CVE-2024-26690 | High | 7.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: protect updates of 64-bit statistics counters As explained by a comment in <… |
CVE-2024-26689 | High | 8.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: ceph: prevent use-after-free in encode_cap_msg() In fs/ceph/caps.c, in encode_cap_msg()… |
CVE-2024-26688 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super When configuring a hugetl… |
CVE-2024-26687 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: xen/events: close evtchn after mapping cleanup shutdown_pirq and startup_pirq are not tak… |
CVE-2024-26686 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats lock_task… |
CVE-2024-26685 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential bug in end_buffer_async_write According to a syzbot report, end_buf… |
CVE-2024-3259 | Medium | 6.3 | 2024-04-03 | A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been declared as critical. This vulnerability affects unknown code… |
CVE-2024-31420 | Medium | 6.5 | 2024-04-03 | A NULL pointer dereference flaw was found in KubeVirt. This flaw allows an attacker who has access to a virtual machine guest on a node with DownwardMetrics en… |
CVE-2024-31419 | Medium | 4.3 | 2024-04-03 | An information disclosure flaw was found in OpenShift Virtualization. The DownwardMetrics feature was introduced to expose host metrics to virtual machine gues… |
CVE-2024-27201 | Medium | 4.9 | 2024-04-03 | An improper input validation vulnerability exists in the OAS Engine User Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A sp… |
CVE-2024-24976 | Medium | 4.9 | 2024-04-03 | A denial of service vulnerability exists in the OAS Engine File Data Source Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A… |
CVE-2024-22178 | Medium | 4.9 | 2024-04-03 | A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially… |
CVE-2024-21870 | Medium | 4.9 | 2024-04-03 | A file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted… |
CVE-2024-0394 | High | 7.8 | 2024-04-03 | Rapid7 Minerva Armor versions below 4.5.5 suffer from a privilege escalation vulnerability whereby an authenticated attacker can elevate privileges and execute… |
CVE-2024-3258 | Medium | 6.3 | 2024-04-03 | A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been classified as critical. This affects an unknown part of the fi… |
CVE-2024-3257 | Medium | 6.3 | 2024-04-03 | A vulnerability was found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this issue is some unknown function… |
CVE-2024-3256 | Medium | 6.3 | 2024-04-03 | A vulnerability has been found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this vulnerability is an unkno… |
CVE-2024-30572 | High | 8.0 | 2024-04-03 | Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntp_server parameter. |
CVE-2024-30571 | High | 7.5 | 2024-04-03 | An information leak in the BRS_top.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication requir… |
CVE-2024-30570 | Medium | 5.3 | 2024-04-03 | An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required. |
CVE-2024-30569 | High | 7.5 | 2024-04-03 | An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required. |
CVE-2024-30568 | Critical | 9.8 | 2024-04-03 | Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter. |
CVE-2024-27254 | Medium | 5.3 | 2024-04-03 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 federated server is vulnerable to denial of service with a specially cra… |
CVE-2024-25096 | Critical | 10.0 | 2024-04-03 | Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc. Canto allows Code Injection.This issue affects Canto: from n/a through 3… |
CVE-2024-25046 | Medium | 5.3 | 2024-04-03 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service by an authenticated user using a specially… |