2024 CVEs (page 351)
Page 351 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-27209 | High | 8.4 | 2024-03-11 | there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges… |
CVE-2024-27208 | High | 8.4 | 2024-03-11 | there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges… |
CVE-2024-27207 | Critical | 9.1 | 2024-03-11 | Exported broadcast receivers allowing malicious apps to bypass broadcast protection. |
CVE-2024-27206 | High | 7.5 | 2024-03-11 | there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges… |
CVE-2024-27205 | High | 8.4 | 2024-03-11 | there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed… |
CVE-2024-27204 | High | 8.4 | 2024-03-11 | In tmu_set_gov_active of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no… |
CVE-2024-25993 | High | 8.4 | 2024-03-11 | In tmu_reset_tmu_trip_counter of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with… |
CVE-2024-25992 | High | 7.8 | 2024-03-11 | In tmu_tz_control of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no addi… |
CVE-2024-25991 | Low | 3.3 | 2024-03-11 | In acpm_tmu_ipc_handler of tmu_plugin.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2024-25990 | Medium | 6.4 | 2024-03-11 | In pktproc_perftest_gen_rx_packet_sktbuf_mode of link_rx_pktproc.c, there is a possible out of bounds write due to a race condition. This could lead to local e… |
CVE-2024-25989 | Medium | 5.9 | 2024-03-11 | In gpu_slc_liveness_update of pixel_gpu_slc.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl… |
CVE-2024-25988 | High | 8.4 | 2024-03-11 | In SAEMM_DiscloseGuti of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information… |
CVE-2024-25987 | Medium | 6.7 | 2024-03-11 | In pt_sysctl_command of pt.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with S… |
CVE-2024-25986 | High | 7.8 | 2024-03-11 | In ppmp_unprotect_buf of drm_fw.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of… |
CVE-2024-25985 | High | 8.4 | 2024-03-11 | In bigo_unlocked_ioctl of bigo.c, there is a possible UAF due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… |
CVE-2024-25984 | Medium | 6.2 | 2024-03-11 | In dumpBatteryDefend of dump_power.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure w… |
CVE-2024-22011 | High | 7.5 | 2024-03-11 | In ss_ProcessRejectComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati… |
CVE-2024-22010 | Medium | 5.5 | 2024-03-11 | In dvfs_plugin_caller of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no a… |
CVE-2024-22009 | High | 7.1 | 2024-03-11 | In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… |
CVE-2024-22008 | High | 7.8 | 2024-03-11 | In config_gov_time_windows of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wi… |
CVE-2024-22007 | Medium | 6.2 | 2024-03-11 | In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no add… |
CVE-2024-22006 | Medium | 5.3 | 2024-03-11 | OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device. |
CVE-2024-22005 | High | 8.4 | 2024-03-11 | there is a possible Authentication Bypass due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileg… |
CVE-2024-26620 | High | 8.2 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: always filter entire AP matrix The vfio_ap_mdev_filter_matrix function is c… |
CVE-2024-26619 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: riscv: Fix module loading free order Reverse order of kfree calls to resolve use-after-fr… |
CVE-2024-26618 | Medium | 5.5 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: arm64/sme: Always exit sme_alloc() early with existing storage When sme_alloc() is called… |
CVE-2024-26617 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: move mmu notification mechanism inside mm lock Move mmu notification me… |
CVE-2024-26616 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: avoid use-after-free when chunk length is not 64K aligned [BUG] There is a… |
CVE-2024-26615 | Medium | 5.5 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix illegal rmb_desc access in SMC-D connection dump A crash was found when dump… |
CVE-2024-26614 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: tcp: make sure init the accept_queue's spinlocks once When I run syz's reproduction C pro… |
CVE-2024-26612 | Medium | 5.5 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: netfs, fscache: Prevent Oops in fscache_put_cache() This function dereferences "cache" an… |
CVE-2024-26611 | High | 7.5 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: xsk: fix usage of multi-buffer BPF helpers for ZC XDP Currently when packet is shrunk via… |
CVE-2024-26610 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix a memory corruption iwl_fw_ini_trigger_tlv::data is a pointer to a __l… |
CVE-2024-26608 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix global oob in ksmbd_nl_policy Similar to a reported issue (check the commit b3… |
CVE-2024-1487 | Medium | 5.4 | 2024-03-11 | The Photos and Files Contest Gallery WordPress plugin before 21.3.1 does not sanitize and escape some parameters, which could allow users with a role as low as… |
CVE-2024-1290 | Medium | 6.5 | 2024-03-11 | The User Registration WordPress plugin before 2.12 does not prevent users with at least the contributor role from rendering sensitive shortcodes, allowing them… |
CVE-2024-1279 | Medium | 4.3 | 2024-03-11 | The Paid Memberships Pro WordPress plugin before 2.12.9 does not prevent user with at least the contributor role from leaking other users' sensitive metadata. |
CVE-2024-1273 | Medium | 6.1 | 2024-03-11 | The Starbox WordPress plugin before 3.5.0 does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Cr… |
CVE-2024-1068 | High | 7.2 | 2024-03-11 | The 404 Solution WordPress plugin before 2.35.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injectio… |
CVE-2024-0561 | Medium | 5.4 | 2024-03-11 | The Ultimate Posts Widget WordPress plugin before 2.3.1 does not validate and escape some of its Widget options before outputting them back in attributes, whic… |
CVE-2024-0559 | Medium | 6.5 | 2024-03-11 | The Enhanced Text Widget WordPress plugin before 1.6.6 does not validate and escape some of its Widget options before outputting them back in attributes, which… |
CVE-2024-23717 | High | 8.8 | 2024-03-11 | In access_secure_service_from_temp_bond of btm_sec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead… |
CVE-2024-1696 | High | 7.8 | 2024-03-11 | In Santesoft Sante FFT Imaging versions 1.4.1 and prior once a user opens a malicious DCM file on affected FFT Imaging installations, a local attacker could pe… |
CVE-2024-0053 | Low | 3.3 | 2024-03-11 | In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local inf… |
CVE-2024-0052 | Low | 3.3 | 2024-03-11 | In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a missing permission check. This could lead to local informat… |
CVE-2024-0051 | High | 7.8 | 2024-03-11 | In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with… |
CVE-2024-0050 | High | 7.8 | 2024-03-11 | In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. This could lead to a local non-sec… |
CVE-2024-0049 | High | 7.8 | 2024-03-11 | In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no addition… |
CVE-2024-0048 | High | 7.8 | 2024-03-11 | In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This… |
CVE-2024-0047 | Medium | 5.5 | 2024-03-11 | In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag due to a logic error in the code. This could lead to local deni… |
CVE-2024-0046 | High | 7.8 | 2024-03-11 | In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the code. This could lead… |
CVE-2024-0045 | Medium | 6.5 | 2024-03-11 | In smp_proc_sec_req of smp_act.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote (proximal/adjacent) infor… |
CVE-2024-0044 | Medium | 6.7 | 2024-03-11 | In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalat… |
CVE-2024-0039 | Critical | 9.8 | 2024-03-11 | In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution wit… |
CVE-2024-23612 | High | 7.8 | 2024-03-11 | An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a… |
CVE-2024-23611 | High | 7.8 | 2024-03-11 | An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a… |
CVE-2024-23610 | High | 7.8 | 2024-03-11 | An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a… |
CVE-2024-23609 | High | 7.8 | 2024-03-11 | An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a… |
CVE-2024-23608 | High | 7.8 | 2024-03-11 | An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a… |
CVE-2024-0670 | High | 8.8 | 2024-03-11 | Privilege escalation in windows agent plugin in Checkmk before 2.2.0p23, 2.1.0p40 and 2.0.0 (EOL) allows local user to escalate privileges |
CVE-2024-1441 | Medium | 5.5 | 2024-03-11 | An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array… |
CVE-2024-28823 | Medium | 6.1 | 2024-03-11 | Amazon AWS aws-js-s3-explorer (aka AWS JavaScript S3 Explorer) 1.0.0 allows XSS via a crafted S3 bucket name to index.html. |
CVE-2024-28816 | High | 7.1 | 2024-03-11 | Student Information Chatbot a0196ab allows SQL injection via the username to the login function in index.php. |
CVE-2024-2184 | Critical | 9.8 | 2024-03-11 | Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on th… |
CVE-2024-2365 | Low | 1.6 | 2024-03-11 | A vulnerability classified as problematic was found in Musicshelf 1.0/1.1 on Android. Affected by this vulnerability is an unknown functionality of the file io… |
CVE-2024-2364 | Low | 1.8 | 2024-03-10 | A vulnerability classified as problematic has been found in Musicshelf 1.0/1.1 on Android. Affected is an unknown function of the file androidmanifest.xml of t… |
CVE-2024-2363 | Medium | 5.3 | 2024-03-10 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in AOL AIM Triton 1.0.4. It has been declared as problematic. This vulnerability affects unknown code… |
CVE-2024-2314 | Low | 2.8 | 2024-03-10 | If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load… |
CVE-2024-2313 | Low | 2.8 | 2024-03-10 | If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to… |
CVE-2024-2355 | Low | 3.7 | 2024-03-10 | A vulnerability has been found in keerti1924 Secret-Coder-PHP-Project 1.0 and classified as problematic. Affected by this vulnerability is an unknown functiona… |
CVE-2024-2354 | Medium | 4.3 | 2024-03-10 | A vulnerability, which was classified as problematic, was found in Dreamer CMS 4.1.3. Affected is an unknown function of the file /admin/menu/toEdit. The manip… |
CVE-2024-2353 | High | 8.8 | 2024-03-10 | A vulnerability, which was classified as critical, has been found in Totolink X6000R 9.4.0cu.852_20230719. This issue affects the function setDiagnosisCfg of t… |
CVE-2024-28757 | High | 7.5 | 2024-03-10 | libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate). |
CVE-2024-2352 | Medium | 6.3 | 2024-03-10 | A vulnerability, which was classified as critical, has been found in 1Panel up to 1.10.1-lts. Affected by this issue is the function baseApi.UpdateDeviceSwap o… |
CVE-2024-2351 | Medium | 6.3 | 2024-03-09 | A vulnerability classified as critical was found in CodeAstro Ecommerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file action… |
CVE-2024-2333 | Medium | 6.3 | 2024-03-09 | A vulnerability classified as critical has been found in CodeAstro Membership Management System 1.0. Affected is an unknown function of the file /add_members.p… |
CVE-2024-2332 | Medium | 6.3 | 2024-03-09 | A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. This issue affects some unknown processing of th… |
CVE-2024-2331 | Medium | 6.3 | 2024-03-09 | A vulnerability was found in SourceCodester Tourist Reservation System 1.0. It has been declared as critical. This vulnerability affects the function ad_writed… |
CVE-2024-1870 | Medium | 4.3 | 2024-03-09 | The Colibri Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the callActivateLicenseEn… |
CVE-2024-2330 | Medium | 6.3 | 2024-03-09 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /p… |
CVE-2024-2329 | Medium | 6.3 | 2024-03-09 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality… |
CVE-2024-25501 | High | 8.8 | 2024-03-09 | An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter. |
CVE-2024-28089 | Medium | 5.2 | 2024-03-09 | Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity (who has access to the router admin panel) to conduct a DOM-… |
CVE-2024-1767 | Medium | 6.4 | 2024-03-09 | The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocks in all versions up to, and including, 2.0.26 due to insuff… |
CVE-2024-1320 | Medium | 6.5 | 2024-03-09 | The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'offline_status' parameter in… |
CVE-2024-1125 | Medium | 5.4 | 2024-03-09 | The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the… |
CVE-2024-1124 | Medium | 4.3 | 2024-03-09 | The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized email sending due to a missing capability check on th… |
CVE-2024-1123 | Medium | 6.5 | 2024-03-09 | The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability chec… |
CVE-2024-25951 | High | 8.0 | 2024-03-09 | A command injection vulnerability exists in local RACADM. A malicious authenticated user could gain control of the underlying operating system. |
CVE-2024-28184 | High | 7.4 | 2024-03-09 | WeasyPrint helps web developers to create PDF documents. Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs… |
CVE-2024-28180 | Medium | 4.3 | 2024-03-09 | Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compre… |
CVE-2024-28176 | Medium | 4.9 | 2024-03-09 | jose is JavaScript module for JSON Object Signing and Encryption, providing support for JSON Web Tokens (JWT), JSON Web Signature (JWS), JSON Web Encryption (J… |
CVE-2024-28122 | Medium | 6.8 | 2024-03-09 | JWX is Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. This vulnerability allows an attacker with a trusted pu… |
CVE-2024-28754 | High | 7.5 | 2024-03-09 | RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to cause a persistent denial of service (bricking) via a crafted request. |
CVE-2024-28753 | Medium | 6.5 | 2024-03-09 | RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request. |
CVE-2024-2339 | High | 8.0 | 2024-03-08 | PostgreSQL Anonymizer v1.2 contains a vulnerability that allows a user who owns a table to elevate to superuser. A user can define a masking function for a co… |
CVE-2024-2338 | High | 8.0 | 2024-03-08 | PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled… |
CVE-2024-21901 | Medium | 4.7 | 2024-03-08 | A SQL injection vulnerability has been reported to affect myQNAPcloud. If exploited, the vulnerability could allow authenticated administrators to inject malic… |
CVE-2024-21900 | Medium | 4.3 | 2024-03-08 | An injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users… |
CVE-2024-21899 | Critical | 9.8 | 2024-03-08 | An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users… |