2024 CVEs (page 351)
Page 351 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-25854 | Medium | 6.1 | 2024-03-11 | Cross Site Scripting (XSS) vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbitrary code via the Subject and Descripti… |
CVE-2024-25114 | Low | 2.6 | 2024-03-11 | Collabora Online is a collaborative online office suite based on LibreOffice technology. Each document in Collabora Online is opened by a separate "Kit" instan… |
CVE-2024-1645 | Medium | 4.3 | 2024-03-11 | The Mollie Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportRegistrations function in all… |
CVE-2024-1400 | Medium | 4.3 | 2024-03-11 | The Mollie Forms plugin for WordPress is vulnerable to unauthorized post or page duplication due to a missing capability check on the duplicateForm function in… |
CVE-2024-2357 | Medium | 6.5 | 2024-03-11 | The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSha… |
CVE-2024-28198 | Medium | 4.6 | 2024-03-11 | OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication. By manually manipulating http requests when usin… |
CVE-2024-28197 | High | 7.5 | 2024-03-11 | Zitadel is an open source identity management system. Zitadel uses a cookie to identify the user agent (browser) and its user sessions. Although the cookie wa… |
CVE-2024-28187 | High | 7.2 | 2024-03-11 | SOY CMS is an open source CMS (content management system) that allows you to build blogs and online shops. SOY CMS versions prior to 3.14.2 are vulnerable to a… |
CVE-2024-27237 | Medium | 5.5 | 2024-03-11 | In wipe_ns_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic error in the code. This could lead to local information disclos… |
CVE-2024-27236 | High | 8.4 | 2024-03-11 | In aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additiona… |
CVE-2024-27235 | Medium | 5.5 | 2024-03-11 | In plugin_extern_func of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additi… |
CVE-2024-27234 | Medium | 5.9 | 2024-03-11 | In fvp_set_target of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no addit… |
CVE-2024-27233 | High | 7.8 | 2024-03-11 | In ppcfw_init_secpolicy of ppcfw.c, there is a possible permission bypass due to uninitialized data. This could lead to local escalation of privilege with no a… |
CVE-2024-27230 | Medium | 5.1 | 2024-03-11 | In ProtocolPsKeepAliveStatusAdapter::getCode() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2024-27229 | High | 7.5 | 2024-03-11 | In ss_SendCallBarringPwdRequiredIndMsg of ss_CallBarring.c, there is a possible null pointer deref due to a missing null check. This could lead to remote denia… |
CVE-2024-27228 | Critical | 9.8 | 2024-03-11 | there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed… |
CVE-2024-27227 | Critical | 9.8 | 2024-03-11 | A malicious DNS response can trigger a number of OOB reads, writes, and other memory issues |
CVE-2024-27226 | High | 8.4 | 2024-03-11 | In tmu_config_gov_params of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no a… |
CVE-2024-27225 | Medium | 4.4 | 2024-03-11 | In sendHciCommand of bluetooth_hci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure wi… |
CVE-2024-27224 | High | 7.8 | 2024-03-11 | In strncpy of strncpy.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additi… |
CVE-2024-27223 | Medium | 5.1 | 2024-03-11 | In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to… |
CVE-2024-27222 | High | 7.8 | 2024-03-11 | In onSkipButtonClick of FaceEnrollFoldPage.java, there is a possible way to access the file the app cannot access due to Intent Redirect GRANT_URI_PERMISSIONS… |
CVE-2024-27221 | High | 7.8 | 2024-03-11 | In update_policy_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addi… |
CVE-2024-27220 | High | 8.4 | 2024-03-11 | In lpm_req_handler of , there is a possible out of bounds memory access due to a missing bounds check. This could lead to local escalation of privilege with no… |
CVE-2024-27219 | High | 8.4 | 2024-03-11 | In tmu_set_pi of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additio… |
CVE-2024-27218 | Medium | 5.5 | 2024-03-11 | In update_freq_data of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no addition… |
CVE-2024-27213 | High | 8.4 | 2024-03-11 | In BroadcastSystemMessage of servicemgr.cpp, there is a possible Remote Code Execution due to a use after free. This could lead to local escalation of privileg… |
CVE-2024-27212 | High | 7.8 | 2024-03-11 | In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… |
CVE-2024-27211 | High | 7.7 | 2024-03-11 | In AtiHandleAPOMsgType of ati_Main.c, there is a possible OOB write due to a missing null check. This could lead to local escalation of privilege with no addit… |
CVE-2024-27210 | High | 7.8 | 2024-03-11 | In policy_check of fvp.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addit… |
CVE-2024-27209 | High | 8.4 | 2024-03-11 | there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges… |
CVE-2024-27208 | High | 8.4 | 2024-03-11 | there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges… |
CVE-2024-27207 | Critical | 9.1 | 2024-03-11 | Exported broadcast receivers allowing malicious apps to bypass broadcast protection. |
CVE-2024-27206 | High | 7.5 | 2024-03-11 | there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges… |
CVE-2024-27205 | High | 8.4 | 2024-03-11 | there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed… |
CVE-2024-27204 | High | 8.4 | 2024-03-11 | In tmu_set_gov_active of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no… |
CVE-2024-25993 | High | 8.4 | 2024-03-11 | In tmu_reset_tmu_trip_counter of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with… |
CVE-2024-25992 | High | 7.8 | 2024-03-11 | In tmu_tz_control of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no addi… |
CVE-2024-25991 | Low | 3.3 | 2024-03-11 | In acpm_tmu_ipc_handler of tmu_plugin.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2024-25990 | Medium | 6.4 | 2024-03-11 | In pktproc_perftest_gen_rx_packet_sktbuf_mode of link_rx_pktproc.c, there is a possible out of bounds write due to a race condition. This could lead to local e… |
CVE-2024-25989 | Medium | 5.9 | 2024-03-11 | In gpu_slc_liveness_update of pixel_gpu_slc.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl… |
CVE-2024-25988 | High | 8.4 | 2024-03-11 | In SAEMM_DiscloseGuti of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information… |
CVE-2024-25987 | Medium | 6.7 | 2024-03-11 | In pt_sysctl_command of pt.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with S… |
CVE-2024-25986 | High | 7.8 | 2024-03-11 | In ppmp_unprotect_buf of drm_fw.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of… |
CVE-2024-25985 | High | 8.4 | 2024-03-11 | In bigo_unlocked_ioctl of bigo.c, there is a possible UAF due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… |
CVE-2024-25984 | Medium | 6.2 | 2024-03-11 | In dumpBatteryDefend of dump_power.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure w… |
CVE-2024-22011 | High | 7.5 | 2024-03-11 | In ss_ProcessRejectComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati… |
CVE-2024-22010 | Medium | 5.5 | 2024-03-11 | In dvfs_plugin_caller of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no a… |
CVE-2024-22009 | High | 7.1 | 2024-03-11 | In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… |
CVE-2024-22008 | High | 7.8 | 2024-03-11 | In config_gov_time_windows of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wi… |
CVE-2024-22007 | Medium | 6.2 | 2024-03-11 | In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no add… |
CVE-2024-22006 | Medium | 5.3 | 2024-03-11 | OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device. |
CVE-2024-22005 | High | 8.4 | 2024-03-11 | there is a possible Authentication Bypass due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileg… |
CVE-2024-26620 | High | 8.2 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: always filter entire AP matrix The vfio_ap_mdev_filter_matrix function is c… |
CVE-2024-26619 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: riscv: Fix module loading free order Reverse order of kfree calls to resolve use-after-fr… |
CVE-2024-26618 | Medium | 5.5 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: arm64/sme: Always exit sme_alloc() early with existing storage When sme_alloc() is called… |
CVE-2024-26617 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: move mmu notification mechanism inside mm lock Move mmu notification me… |
CVE-2024-26616 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: avoid use-after-free when chunk length is not 64K aligned [BUG] There is a… |
CVE-2024-26615 | Medium | 5.5 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix illegal rmb_desc access in SMC-D connection dump A crash was found when dump… |
CVE-2024-26614 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: tcp: make sure init the accept_queue's spinlocks once When I run syz's reproduction C pro… |
CVE-2024-26612 | Medium | 5.5 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: netfs, fscache: Prevent Oops in fscache_put_cache() This function dereferences "cache" an… |
CVE-2024-26611 | High | 7.5 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: xsk: fix usage of multi-buffer BPF helpers for ZC XDP Currently when packet is shrunk via… |
CVE-2024-26610 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix a memory corruption iwl_fw_ini_trigger_tlv::data is a pointer to a __l… |
CVE-2024-26608 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix global oob in ksmbd_nl_policy Similar to a reported issue (check the commit b3… |
CVE-2024-1487 | Medium | 5.4 | 2024-03-11 | The Photos and Files Contest Gallery WordPress plugin before 21.3.1 does not sanitize and escape some parameters, which could allow users with a role as low as… |
CVE-2024-1290 | Medium | 6.5 | 2024-03-11 | The User Registration WordPress plugin before 2.12 does not prevent users with at least the contributor role from rendering sensitive shortcodes, allowing them… |
CVE-2024-1279 | Medium | 4.3 | 2024-03-11 | The Paid Memberships Pro WordPress plugin before 2.12.9 does not prevent user with at least the contributor role from leaking other users' sensitive metadata. |
CVE-2024-1273 | Medium | 6.1 | 2024-03-11 | The Starbox WordPress plugin before 3.5.0 does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Cr… |
CVE-2024-1068 | High | 7.2 | 2024-03-11 | The 404 Solution WordPress plugin before 2.35.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injectio… |
CVE-2024-0561 | Medium | 5.4 | 2024-03-11 | The Ultimate Posts Widget WordPress plugin before 2.3.1 does not validate and escape some of its Widget options before outputting them back in attributes, whic… |
CVE-2024-0559 | Medium | 6.5 | 2024-03-11 | The Enhanced Text Widget WordPress plugin before 1.6.6 does not validate and escape some of its Widget options before outputting them back in attributes, which… |
CVE-2024-23717 | High | 8.8 | 2024-03-11 | In access_secure_service_from_temp_bond of btm_sec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead… |
CVE-2024-1696 | High | 7.8 | 2024-03-11 | In Santesoft Sante FFT Imaging versions 1.4.1 and prior once a user opens a malicious DCM file on affected FFT Imaging installations, a local attacker could pe… |
CVE-2024-0053 | Low | 3.3 | 2024-03-11 | In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local inf… |
CVE-2024-0052 | Low | 3.3 | 2024-03-11 | In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a missing permission check. This could lead to local informat… |
CVE-2024-0051 | High | 7.8 | 2024-03-11 | In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with… |
CVE-2024-0050 | High | 7.8 | 2024-03-11 | In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. This could lead to a local non-sec… |
CVE-2024-0049 | High | 7.8 | 2024-03-11 | In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no addition… |
CVE-2024-0048 | High | 7.8 | 2024-03-11 | In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This… |
CVE-2024-0047 | Medium | 5.5 | 2024-03-11 | In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag due to a logic error in the code. This could lead to local deni… |
CVE-2024-0046 | High | 7.8 | 2024-03-11 | In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the code. This could lead… |
CVE-2024-0045 | Medium | 6.5 | 2024-03-11 | In smp_proc_sec_req of smp_act.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote (proximal/adjacent) infor… |
CVE-2024-0044 | Medium | 6.7 | 2024-03-11 | In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalat… |
CVE-2024-0039 | Critical | 9.8 | 2024-03-11 | In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution wit… |
CVE-2024-23612 | High | 7.8 | 2024-03-11 | An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a… |
CVE-2024-23611 | High | 7.8 | 2024-03-11 | An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a… |
CVE-2024-23610 | High | 7.8 | 2024-03-11 | An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a… |
CVE-2024-23609 | High | 7.8 | 2024-03-11 | An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a… |
CVE-2024-23608 | High | 7.8 | 2024-03-11 | An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a… |
CVE-2024-0670 | High | 8.8 | 2024-03-11 | Privilege escalation in windows agent plugin in Checkmk before 2.2.0p23, 2.1.0p40 and 2.0.0 (EOL) allows local user to escalate privileges |
CVE-2024-1441 | Medium | 5.5 | 2024-03-11 | An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array… |
CVE-2024-28823 | Medium | 6.1 | 2024-03-11 | Amazon AWS aws-js-s3-explorer (aka AWS JavaScript S3 Explorer) 1.0.0 allows XSS via a crafted S3 bucket name to index.html. |
CVE-2024-28816 | High | 7.1 | 2024-03-11 | Student Information Chatbot a0196ab allows SQL injection via the username to the login function in index.php. |
CVE-2024-2184 | Critical | 9.8 | 2024-03-11 | Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on th… |
CVE-2024-2365 | Low | 1.6 | 2024-03-11 | A vulnerability classified as problematic was found in Musicshelf 1.0/1.1 on Android. Affected by this vulnerability is an unknown functionality of the file io… |
CVE-2024-2364 | Low | 1.8 | 2024-03-10 | A vulnerability classified as problematic has been found in Musicshelf 1.0/1.1 on Android. Affected is an unknown function of the file androidmanifest.xml of t… |
CVE-2024-2363 | Medium | 5.3 | 2024-03-10 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in AOL AIM Triton 1.0.4. It has been declared as problematic. This vulnerability affects unknown code… |
CVE-2024-2314 | Low | 2.8 | 2024-03-10 | If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load… |
CVE-2024-2313 | Low | 2.8 | 2024-03-10 | If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to… |
CVE-2024-2355 | Low | 3.7 | 2024-03-10 | A vulnerability has been found in keerti1924 Secret-Coder-PHP-Project 1.0 and classified as problematic. Affected by this vulnerability is an unknown functiona… |