2024 CVEs (page 60)
Page 60 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-12835 | High | 7.8 | 2024-12-30 | Delta Electronics DRASimuCAD ICS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute ar… |
CVE-2024-12834 | High | 7.8 | 2024-12-30 | Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra… |
CVE-2024-12828 | High | 8.8 | 2024-12-30 | Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installation… |
CVE-2024-12754 | Medium | 5.5 | 2024-12-30 | AnyDesk Link Following Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installati… |
CVE-2024-50703 | Medium | 5.4 | 2024-12-30 | TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_id. |
CVE-2024-50702 | Medium | 5.4 | 2024-12-30 | TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager. |
CVE-2024-50701 | Medium | 4.3 | 2024-12-30 | TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders… |
CVE-2024-54181 | High | 7.2 | 2024-12-30 | IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to execute arbitrary code. Using specially cr… |
CVE-2024-10044 | Critical | 9.3 | 2024-12-30 | A Server-Side Request Forgery (SSRF) vulnerability exists in the POST /worker_generate_stream API endpoint of the Controller API Server in lm-sys/fastchat, as… |
CVE-2024-12993 | | 2024-12-30 | Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. An attacker can communicate with the provider… | |
CVE-2024-47926 | Critical | 9.8 | 2024-12-30 | Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
CVE-2024-47925 | High | 7.5 | 2024-12-30 | Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CVE-2024-47924 | High | 7.5 | 2024-12-30 | Boa web server – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CVE-2024-47923 | Medium | 5.3 | 2024-12-30 | Mashov – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
CVE-2024-47922 | High | 7.5 | 2024-12-30 | Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
CVE-2024-47921 | High | 8.4 | 2024-12-30 | Smadar SPS – CWE-327: Use of a Broken or Risky Cryptographic Algorithm |
CVE-2024-47920 | High | 7.5 | 2024-12-30 | Tiki Wiki CMS – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CVE-2024-47919 | Critical | 9.8 | 2024-12-30 | Tiki Wiki CMS – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') |
CVE-2024-47918 | Medium | 6.1 | 2024-12-30 | Tiki Wiki CMS – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) |
CVE-2024-47917 | High | 7.5 | 2024-12-30 | CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CVE-2024-22063 | High | 7.6 | 2024-12-30 | The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with m… |
CVE-2024-13039 | Medium | 6.3 | 2024-12-30 | A vulnerability was found in code-projects Simple Chat System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2024-13038 | High | 7.3 | 2024-12-30 | A vulnerability was found in CodeAstro Simple Loan Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functi… |
CVE-2024-13037 | Medium | 6.3 | 2024-12-30 | A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been classified as critical. Affected is the function attendance_r… |
CVE-2024-13036 | Medium | 6.3 | 2024-12-30 | A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/update_roo… |
CVE-2024-13035 | Medium | 6.3 | 2024-12-30 | A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/update_u… |
CVE-2024-13034 | Low | 3.5 | 2024-12-30 | A vulnerability, which was classified as problematic, was found in code-projects Chat System 1.0. This affects an unknown part of the file /admin/update_user.p… |
CVE-2024-13033 | Low | 3.5 | 2024-12-30 | A vulnerability, which was classified as problematic, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of… |
CVE-2024-13032 | Low | 2.7 | 2024-12-30 | A vulnerability classified as problematic was found in Antabot White-Jotter up to 0.2.2. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2024-13031 | Low | 2.4 | 2024-12-30 | A vulnerability classified as problematic has been found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/editor… |
CVE-2024-13030 | High | 7.3 | 2024-12-30 | A vulnerability was found in D-Link DIR-823G 1.0.2B05_20181207. It has been rated as critical. This issue affects the function SetAutoRebootSettings/SetClientI… |
CVE-2024-13029 | Medium | 4.3 | 2024-12-30 | A vulnerability, which was classified as problematic, was found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content… |
CVE-2024-13028 | Low | 3.7 | 2024-12-29 | A vulnerability, which was classified as problematic, has been found in Antabot White-Jotter up to 0.2.2. This issue affects some unknown processing of the fil… |
CVE-2024-13025 | Medium | 6.3 | 2024-12-29 | A vulnerability was found in Codezips College Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Front-end… |
CVE-2024-13024 | Medium | 6.3 | 2024-12-29 | A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /camp… |
CVE-2024-13023 | Low | 2.4 | 2024-12-29 | A vulnerability has been found in PHPGurukul Maid Hiring Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the fi… |
CVE-2024-13022 | Medium | 6.3 | 2024-12-29 | A vulnerability, which was classified as critical, was found in taisan tarzan-cms 1.0.0. This affects the function UploadResponse of the file src/main/java/com… |
CVE-2024-13021 | Low | 3.5 | 2024-12-29 | A vulnerability, which was classified as problematic, has been found in SourceCodester Road Accident Map Marker 1.0. Affected by this issue is some unknown fun… |
CVE-2024-13020 | Medium | 6.3 | 2024-12-29 | A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /admi… |
CVE-2024-13019 | Low | 3.5 | 2024-12-29 | A vulnerability classified as problematic has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/update_room.php o… |
CVE-2024-13018 | Low | 2.4 | 2024-12-29 | A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the… |
CVE-2024-13017 | Low | 2.4 | 2024-12-29 | A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the… |
CVE-2024-13016 | Medium | 6.3 | 2024-12-29 | A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/… |
CVE-2024-13015 | Low | 2.4 | 2024-12-29 | A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality o… |
CVE-2024-13014 | Medium | 6.3 | 2024-12-29 | A vulnerability has been found in PHPGurukul Maid Hiring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functio… |
CVE-2024-13013 | Low | 2.4 | 2024-12-29 | A vulnerability, which was classified as problematic, was found in PHPGurukul Maid Hiring Management System 1.0. Affected is an unknown function of the file /a… |
CVE-2024-56756 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix freeing of the HMB descriptor table The HMB descriptor table is sized to th… |
CVE-2024-56755 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING In fscache_create_volume(… |
CVE-2024-56754 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: caam - Fix the pointer passed to caam_qi_shutdown() The type of the last paramete… |
CVE-2024-56753 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9: Add Cleaner Shader Deinitialization in gfx_v9_0 Module This commit addre… |
CVE-2024-56752 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() When the call to gf100_gr… |
CVE-2024-56751 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: ipv6: release nexthop on device removal The CI is hitting some aperiodic hangup at device… |
CVE-2024-56750 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix blksize < PAGE_SIZE for file-backed mounts Adjust sb->s_blocksize{,_bits} dire… |
CVE-2024-56749 | High | 7.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: dlm: fix dlm_recover_members refcount on error If dlm_recover_members() fails we don't dr… |
CVE-2024-56748 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() Hook "qed_ops->common-… |
CVE-2024-56747 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() Hook "qedi_ops->common… |
CVE-2024-56746 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() When information such… |
CVE-2024-56745 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reset_method_store() memory leak In reset_method_store(), a string is allocated… |
CVE-2024-56744 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason() syzbot reports deadloc… |
CVE-2024-56743 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: nfs_common: must not hold RCU while calling nfsd_file_put_local Move holding the RCU from… |
CVE-2024-56742 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() Fix an unwind issue in mlx… |
CVE-2024-56740 | High | 7.8 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: nfs/localio: must clear res.replen in nfs_local_read_done Otherwise memory corruption can… |
CVE-2024-56739 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() If the __rtc_read_tim… |
CVE-2024-56730 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: net/9p/usbg: fix handling of the failed kzalloc() memory allocation On the linux-next, ne… |
CVE-2024-56729 | Medium | 4.7 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: smb: Initialize cfid->tcon before performing network ops Avoid leaking a tcon ref when a… |
CVE-2024-56728 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c Add error pointer check a… |
CVE-2024-56727 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c Adding error pointer check… |
CVE-2024-56726 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c Add error pointer check after ca… |
CVE-2024-56725 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c Add error pointer check aft… |
CVE-2024-56724 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device While design wise the idea of co… |
CVE-2024-56723 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices While design wise the idea of… |
CVE-2024-56722 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix cpu stuck caused by printings during reset During reset, cmd to destroy res… |
CVE-2024-56721 | High | 7.1 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum_1386_microcode array The erratum_1386_microcode array… |
CVE-2024-56720 | High | 7.8 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Several fixes to bpf_msg_pop_data Several fixes to bpf_msg_pop_data, 1. In… |
CVE-2024-13012 | Low | 3.5 | 2024-12-29 | A vulnerability, which was classified as problematic, has been found in code-projects Hostel Management System 1.0. This issue affects some unknown processing… |
CVE-2024-13008 | Medium | 6.3 | 2024-12-29 | A vulnerability has been found in code-projects Responsive Hotel Site 1.0 and classified as critical. Affected by this vulnerability is an unknown functionalit… |
CVE-2024-56719 | Critical | 10.0 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix TSO DMA API usage causing oops Commit 66600fac7a98 ("net: stmmac: TSO: F… |
CVE-2024-56718 | Critical | 9.8 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: net/smc: protect link down work from execute after lgr freed link down work may be schedu… |
CVE-2024-56717 | High | 7.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic() Packets inj… |
CVE-2024-56716 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: netdevsim: prevent bad user input in nsim_dev_health_break_write() If either a zero count… |
CVE-2024-56715 | High | 7.8 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: ionic: Fix netdev notifier unregister on failure If register_netdev() fails, then the dri… |
CVE-2024-56714 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: ionic: no double destroy workqueue There are some FW error handling paths that can cause… |
CVE-2024-56713 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: net: netdevsim: fix nsim_pp_hold_write() nsim_pp_hold_write() has two problems: 1) It ma… |
CVE-2024-56712 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix memory leak on last export_udmabuf() error path In export_udmabuf(), if dma_… |
CVE-2024-56711 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference drm_mode_duplic… |
CVE-2024-56710 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in ceph_direct_read_write() The bvecs array which is allocated in i… |
CVE-2024-56709 | High | 7.8 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: io_uring: check if iowq is killed before queuing task work can be executed after the task… |
CVE-2024-13007 | Medium | 6.3 | 2024-12-29 | A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Affected is an unknown function of the file /contact.php… |
CVE-2024-13006 | High | 7.3 | 2024-12-29 | A vulnerability, which was classified as critical, has been found in 1000 Projects Human Resource Management System 1.0. This issue affects some unknown proces… |
CVE-2024-13005 | Medium | 6.3 | 2024-12-29 | A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the fil… |
CVE-2024-56738 | Medium | 5.3 | 2024-12-29 | GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks. |
CVE-2024-56737 | High | 8.8 | 2024-12-29 | GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem. |
CVE-2024-13004 | High | 7.3 | 2024-12-29 | A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/category.p… |
CVE-2024-12238 | Medium | 6.3 | 2024-12-29 | The The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, a… |
CVE-2024-13003 | Medium | 6.3 | 2024-12-29 | A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been rated as critical. Affected by this issue is some unknown functiona… |
CVE-2024-13002 | High | 7.3 | 2024-12-29 | A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown func… |
CVE-2024-13001 | Medium | 6.3 | 2024-12-29 | A vulnerability was found in PHPGurukul Small CRM 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php. The ma… |
CVE-2024-13000 | Medium | 6.3 | 2024-12-29 | A vulnerability was found in PHPGurukul Small CRM 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/quote-details.p… |
CVE-2024-12999 | Medium | 6.3 | 2024-12-29 | A vulnerability has been found in PHPGurukul Small CRM 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-user.php… |
CVE-2024-12998 | Medium | 4.3 | 2024-12-28 | A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file /index… |