2024 CVEs (page 61)
Page 61 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-56725 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c Add error pointer check aft… |
CVE-2024-56724 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device While design wise the idea of co… |
CVE-2024-56723 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices While design wise the idea of… |
CVE-2024-56722 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix cpu stuck caused by printings during reset During reset, cmd to destroy res… |
CVE-2024-56721 | High | 7.1 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum_1386_microcode array The erratum_1386_microcode array… |
CVE-2024-56720 | High | 7.8 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Several fixes to bpf_msg_pop_data Several fixes to bpf_msg_pop_data, 1. In… |
CVE-2024-13012 | Low | 3.5 | 2024-12-29 | A vulnerability, which was classified as problematic, has been found in code-projects Hostel Management System 1.0. This issue affects some unknown processing… |
CVE-2024-13008 | Medium | 6.3 | 2024-12-29 | A vulnerability has been found in code-projects Responsive Hotel Site 1.0 and classified as critical. Affected by this vulnerability is an unknown functionalit… |
CVE-2024-56719 | Critical | 10.0 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix TSO DMA API usage causing oops Commit 66600fac7a98 ("net: stmmac: TSO: F… |
CVE-2024-56718 | Critical | 9.8 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: net/smc: protect link down work from execute after lgr freed link down work may be schedu… |
CVE-2024-56717 | High | 7.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic() Packets inj… |
CVE-2024-56716 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: netdevsim: prevent bad user input in nsim_dev_health_break_write() If either a zero count… |
CVE-2024-56715 | High | 7.8 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: ionic: Fix netdev notifier unregister on failure If register_netdev() fails, then the dri… |
CVE-2024-56714 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: ionic: no double destroy workqueue There are some FW error handling paths that can cause… |
CVE-2024-56713 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: net: netdevsim: fix nsim_pp_hold_write() nsim_pp_hold_write() has two problems: 1) It ma… |
CVE-2024-56712 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix memory leak on last export_udmabuf() error path In export_udmabuf(), if dma_… |
CVE-2024-56711 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference drm_mode_duplic… |
CVE-2024-56710 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in ceph_direct_read_write() The bvecs array which is allocated in i… |
CVE-2024-56709 | High | 7.8 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: io_uring: check if iowq is killed before queuing task work can be executed after the task… |
CVE-2024-13007 | Medium | 6.3 | 2024-12-29 | A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Affected is an unknown function of the file /contact.php… |
CVE-2024-13006 | High | 7.3 | 2024-12-29 | A vulnerability, which was classified as critical, has been found in 1000 Projects Human Resource Management System 1.0. This issue affects some unknown proces… |
CVE-2024-13005 | Medium | 6.3 | 2024-12-29 | A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the fil… |
CVE-2024-56738 | Medium | 5.3 | 2024-12-29 | GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks. |
CVE-2024-56737 | High | 8.8 | 2024-12-29 | GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem. |
CVE-2024-13004 | High | 7.3 | 2024-12-29 | A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/category.p… |
CVE-2024-12238 | Medium | 6.3 | 2024-12-29 | The The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, a… |
CVE-2024-13003 | Medium | 6.3 | 2024-12-29 | A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been rated as critical. Affected by this issue is some unknown functiona… |
CVE-2024-13002 | High | 7.3 | 2024-12-29 | A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown func… |
CVE-2024-13001 | Medium | 6.3 | 2024-12-29 | A vulnerability was found in PHPGurukul Small CRM 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php. The ma… |
CVE-2024-13000 | Medium | 6.3 | 2024-12-29 | A vulnerability was found in PHPGurukul Small CRM 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/quote-details.p… |
CVE-2024-12999 | Medium | 6.3 | 2024-12-29 | A vulnerability has been found in PHPGurukul Small CRM 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-user.php… |
CVE-2024-12998 | Medium | 4.3 | 2024-12-28 | A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file /index… |
CVE-2024-56512 | Medium | 5.4 | 2024-12-28 | Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Paramet… |
CVE-2024-12995 | Low | 3.5 | 2024-12-28 | A vulnerability classified as problematic has been found in ruifang-tech Rebuild 3.8.6. This affects an unknown part of the file /project/050-9000000000000001/… |
CVE-2024-12994 | Medium | 6.3 | 2024-12-28 | A vulnerability was found in running-elephant Datart 1.0.0-rc3. It has been rated as critical. Affected by this issue is the function extractModel of the file… |
CVE-2024-56708 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Avoid segmentation fault on module unload The segmentation fault happens beca… |
CVE-2024-56707 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c Add error pointer checks… |
CVE-2024-56706 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex Reservation of the PMU… |
CVE-2024-56705 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: media: atomisp: Add check for rgby_data memory allocation failure In ia_css_3a_statistics… |
CVE-2024-56704 | High | 8.4 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct de… |
CVE-2024-56703 | High | 7.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix soft lockups in fib6_select_path under high next hop churn Soft lockups have be… |
CVE-2024-56702 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark raw_tp arguments with PTR_MAYBE_NULL Arguments to a raw tracepoint are tagged a… |
CVE-2024-56701 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore The dtl_access_lock needs to be… |
CVE-2024-56700 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: media: wl128x: Fix atomicity violation in fmc_send_cmd() Atomicity violation occurs when… |
CVE-2024-56699 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix potential double remove of hotplug slot In commit 6ee600bfbe0f ("s390/pci… |
CVE-2024-56698 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix looping of queued SG entries The dwc3_request->num_queued_sgs is d… |
CVE-2024-56697 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix the memory allocation issue in amdgpu_discovery_get_nps_info() Fix two is… |
CVE-2024-56696 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix possible NULL dereference caused by kunit_kzalloc() kunit_kzalloc() may r… |
CVE-2024-56695 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Use dynamic allocation for CU occupancy array in 'kfd_get_cu_occupancy()' The… |
CVE-2024-56694 | High | 7.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix recursive lock when verdict program return SK_PASS When the stream_verdict progr… |
CVE-2024-56693 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: brd: defer automatic disk creation until module initialization succeeds My colleague Wupe… |
CVE-2024-56692 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node blkaddr in truncate_node() syzbot reports a f2fs bug… |
CVE-2024-56691 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device While design wise the ide… |
CVE-2024-56690 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY Since… |
CVE-2024-56689 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio' If platform_get_resourc… |
CVE-2024-56688 | High | 7.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport Since transport->sock has been s… |
CVE-2024-56687 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix hardware lockup on first Rx endpoint request There is a possibility that a… |
CVE-2024-56685 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe Following commit… |
CVE-2024-56684 | High | 8.4 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-cmdq: fix wrong use of sizeof in cmdq_get_clocks() It should be size of the… |
CVE-2024-56683 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Avoid hang with debug registers when suspended Trying to read /sys/kernel/… |
CVE-2024-56682 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: irqchip/riscv-aplic: Prevent crash when MSI domain is missing If the APLIC driver is prob… |
CVE-2024-56681 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - add error check in the ahash_hmac_init function The ahash_init functions ma… |
CVE-2024-56680 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: do not handle interrupts when device is disabled Some IPU6 devices hav… |
CVE-2024-56679 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c Add error pointer check af… |
CVE-2024-56678 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: powerpc/mm/fault: Fix kfence page fault reporting copy_from_kernel_nofault() can be calle… |
CVE-2024-56677 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() During early in… |
CVE-2024-56676 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: thermal: testing: Initialize some variables annoteded with _free() Variables annotated wi… |
CVE-2024-46973 | High | 7.8 | 2024-12-28 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. |
CVE-2024-46972 | High | 7.8 | 2024-12-28 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. |
CVE-2024-43705 | High | 7.8 | 2024-12-28 | Software installed and run as a non-privileged user can trigger the GPU kernel driver to write to arbitrary read-only system files that have been mapped into a… |
CVE-2024-54775 | Medium | 4.8 | 2024-12-27 | Dcat-Admin v2.2.0-beta and v2.2.2-beta contains a Cross-Site Scripting (XSS) vulnerability via /admin/auth/menu and /admin/auth/extensions. |
CVE-2024-54774 | Medium | 4.8 | 2024-12-27 | Dcat Admin v2.2.0-beta contains a cross-site scripting (XSS) vulnerability in /admin/articles/create. |
CVE-2024-50714 | High | 7.5 | 2024-12-27 | A Server-Side Request Forgery (SSRF) in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via a crafted script to the… |
CVE-2024-50717 | Critical | 9.8 | 2024-12-27 | SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the client parameter in the /recuperaLog.php componen… |
CVE-2024-50716 | Critical | 9.8 | 2024-12-27 | SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the id parameter in the /sendPushManually.php compone… |
CVE-2024-50715 | High | 7.5 | 2024-12-27 | An issue in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via command injection through a vulnerable unsanitized… |
CVE-2024-50713 | Critical | 9.8 | 2024-12-27 | SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php. |
CVE-2024-56732 | High | 8.8 | 2024-12-27 | HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hb_cairo_glyphs_from_buffer function. |
CVE-2024-54454 | Medium | 5.3 | 2024-12-27 | An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15. An Observable Response Discrepancy… |
CVE-2024-54453 | High | 7.5 | 2024-12-27 | An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15. A path traversal vulnerability in… |
CVE-2024-54452 | Medium | 4.9 | 2024-12-27 | An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35 and 7.10.x through 7.10.0.18. A Directory Traversal and Local File Inclusion vulnerability… |
CVE-2024-54451 | Medium | 4.8 | 2024-12-27 | A cross-site scripting (XSS) vulnerability in the graphicCustomization.do page in Kurmi Provisioning Suite before 7.9.0.38, 7.10.x through 7.10.0.18, and 7.11… |
CVE-2024-54450 | Critical | 9.4 | 2024-12-27 | An issue was discovered in Kurmi Provisioning Suite 7.9.0.33. If an X-Forwarded-For header is received during authentication, the Kurmi application will record… |
CVE-2024-39025 | High | 7.5 | 2024-12-27 | Incorrect access control in the /users endpoint of Cpacker MemGPT v0.3.17 allows attackers to access sensitive data. |
CVE-2024-12991 | Low | 3.5 | 2024-12-27 | A vulnerability was found in Beijing Longda Jushang Technology DBShop商城系统 3.3 Release 231225. It has been declared as problematic. This vulnerability affects u… |
CVE-2024-53476 | Medium | 5.9 | 2024-12-27 | A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simulta… |
CVE-2024-50945 | High | 7.5 | 2024-12-27 | An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without v… |
CVE-2024-50944 | Critical | 9.8 | 2024-12-27 | Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functionality. The issue lies in… |
CVE-2024-12990 | Medium | 4.3 | 2024-12-27 | A vulnerability was found in ruifang-tech Rebuild 3.8.6. It has been classified as problematic. This affects an unknown part of the file /user/admin-verify of… |
CVE-2024-12989 | Medium | 5.3 | 2024-12-27 | A vulnerability was found in WISI Tangram GT31 up to 20241214 and classified as problematic. Affected by this issue is some unknown functionality of the compon… |
CVE-2024-12988 | High | 7.3 | 2024-12-27 | A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of t… |
CVE-2024-56509 | High | 8.6 | 2024-12-27 | changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Improper input validation in the… |
CVE-2024-56508 | High | 7.6 | 2024-12-27 | LinkAce is a self-hosted archive to collect links of your favorite websites. Prior to 1.15.6, a file upload vulnerability exists in the LinkAce. This issue occ… |
CVE-2024-56507 | Medium | 4.6 | 2024-12-27 | LinkAce is a self-hosted archive to collect links of your favorite websites. Prior to 1.15.6, a reflected cross-site scripting (XSS) vulnerability exists in th… |
CVE-2024-12987 | High | 7.3 | 2024-12-27 | A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/m… |
CVE-2024-12986 | High | 7.3 | 2024-12-27 | A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1.5.1.4. This issue affects some unknown processin… |
CVE-2024-12856 | High | 7.2 | 2024-12-27 | The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command injection vulnerability. At least firmware version 2.0 allows aut… |
CVE-2024-56675 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors Uprobes always use bpf_prog_… |
CVE-2024-56674 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: virtio_net: correct netdev_tx_reset_queue() invocation point When virtnet_close is follow… |
CVE-2024-56673 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Do not call pmd dtor on vmemmap page table teardown The vmemmap's, which is us… |