2024 CVEs (page 61)
Page 61 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-56512 | Medium | 5.4 | 2024-12-28 | Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Paramet… |
CVE-2024-12995 | Low | 3.5 | 2024-12-28 | A vulnerability classified as problematic has been found in ruifang-tech Rebuild 3.8.6. This affects an unknown part of the file /project/050-9000000000000001/… |
CVE-2024-12994 | Medium | 6.3 | 2024-12-28 | A vulnerability was found in running-elephant Datart 1.0.0-rc3. It has been rated as critical. Affected by this issue is the function extractModel of the file… |
CVE-2024-56708 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Avoid segmentation fault on module unload The segmentation fault happens beca… |
CVE-2024-56707 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c Add error pointer checks… |
CVE-2024-56706 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex Reservation of the PMU… |
CVE-2024-56705 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: media: atomisp: Add check for rgby_data memory allocation failure In ia_css_3a_statistics… |
CVE-2024-56704 | High | 8.4 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct de… |
CVE-2024-56703 | High | 7.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix soft lockups in fib6_select_path under high next hop churn Soft lockups have be… |
CVE-2024-56702 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark raw_tp arguments with PTR_MAYBE_NULL Arguments to a raw tracepoint are tagged a… |
CVE-2024-56701 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore The dtl_access_lock needs to be… |
CVE-2024-56700 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: media: wl128x: Fix atomicity violation in fmc_send_cmd() Atomicity violation occurs when… |
CVE-2024-56699 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix potential double remove of hotplug slot In commit 6ee600bfbe0f ("s390/pci… |
CVE-2024-56698 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix looping of queued SG entries The dwc3_request->num_queued_sgs is d… |
CVE-2024-56697 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix the memory allocation issue in amdgpu_discovery_get_nps_info() Fix two is… |
CVE-2024-56696 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix possible NULL dereference caused by kunit_kzalloc() kunit_kzalloc() may r… |
CVE-2024-56695 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Use dynamic allocation for CU occupancy array in 'kfd_get_cu_occupancy()' The… |
CVE-2024-56694 | High | 7.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix recursive lock when verdict program return SK_PASS When the stream_verdict progr… |
CVE-2024-56693 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: brd: defer automatic disk creation until module initialization succeeds My colleague Wupe… |
CVE-2024-56692 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node blkaddr in truncate_node() syzbot reports a f2fs bug… |
CVE-2024-56691 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device While design wise the ide… |
CVE-2024-56690 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY Since… |
CVE-2024-56689 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio' If platform_get_resourc… |
CVE-2024-56688 | High | 7.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport Since transport->sock has been s… |
CVE-2024-56687 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix hardware lockup on first Rx endpoint request There is a possibility that a… |
CVE-2024-56685 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe Following commit… |
CVE-2024-56684 | High | 8.4 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-cmdq: fix wrong use of sizeof in cmdq_get_clocks() It should be size of the… |
CVE-2024-56683 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Avoid hang with debug registers when suspended Trying to read /sys/kernel/… |
CVE-2024-56682 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: irqchip/riscv-aplic: Prevent crash when MSI domain is missing If the APLIC driver is prob… |
CVE-2024-56681 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - add error check in the ahash_hmac_init function The ahash_init functions ma… |
CVE-2024-56680 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: do not handle interrupts when device is disabled Some IPU6 devices hav… |
CVE-2024-56679 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c Add error pointer check af… |
CVE-2024-56678 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: powerpc/mm/fault: Fix kfence page fault reporting copy_from_kernel_nofault() can be calle… |
CVE-2024-56677 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() During early in… |
CVE-2024-56676 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: thermal: testing: Initialize some variables annoteded with _free() Variables annotated wi… |
CVE-2024-46973 | High | 7.8 | 2024-12-28 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. |
CVE-2024-46972 | High | 7.8 | 2024-12-28 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. |
CVE-2024-43705 | High | 7.8 | 2024-12-28 | Software installed and run as a non-privileged user can trigger the GPU kernel driver to write to arbitrary read-only system files that have been mapped into a… |
CVE-2024-54775 | Medium | 4.8 | 2024-12-27 | Dcat-Admin v2.2.0-beta and v2.2.2-beta contains a Cross-Site Scripting (XSS) vulnerability via /admin/auth/menu and /admin/auth/extensions. |
CVE-2024-54774 | Medium | 4.8 | 2024-12-27 | Dcat Admin v2.2.0-beta contains a cross-site scripting (XSS) vulnerability in /admin/articles/create. |
CVE-2024-50714 | High | 7.5 | 2024-12-27 | A Server-Side Request Forgery (SSRF) in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via a crafted script to the… |
CVE-2024-50717 | Critical | 9.8 | 2024-12-27 | SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the client parameter in the /recuperaLog.php componen… |
CVE-2024-50716 | Critical | 9.8 | 2024-12-27 | SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the id parameter in the /sendPushManually.php compone… |
CVE-2024-50715 | High | 7.5 | 2024-12-27 | An issue in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via command injection through a vulnerable unsanitized… |
CVE-2024-50713 | Critical | 9.8 | 2024-12-27 | SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php. |
CVE-2024-56732 | High | 8.8 | 2024-12-27 | HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hb_cairo_glyphs_from_buffer function. |
CVE-2024-54454 | Medium | 5.3 | 2024-12-27 | An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15. An Observable Response Discrepancy… |
CVE-2024-54453 | High | 7.5 | 2024-12-27 | An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15. A path traversal vulnerability in… |
CVE-2024-54452 | Medium | 4.9 | 2024-12-27 | An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35 and 7.10.x through 7.10.0.18. A Directory Traversal and Local File Inclusion vulnerability… |
CVE-2024-54451 | Medium | 4.8 | 2024-12-27 | A cross-site scripting (XSS) vulnerability in the graphicCustomization.do page in Kurmi Provisioning Suite before 7.9.0.38, 7.10.x through 7.10.0.18, and 7.11… |
CVE-2024-54450 | Critical | 9.4 | 2024-12-27 | An issue was discovered in Kurmi Provisioning Suite 7.9.0.33. If an X-Forwarded-For header is received during authentication, the Kurmi application will record… |
CVE-2024-39025 | High | 7.5 | 2024-12-27 | Incorrect access control in the /users endpoint of Cpacker MemGPT v0.3.17 allows attackers to access sensitive data. |
CVE-2024-12991 | Low | 3.5 | 2024-12-27 | A vulnerability was found in Beijing Longda Jushang Technology DBShop商城系统 3.3 Release 231225. It has been declared as problematic. This vulnerability affects u… |
CVE-2024-53476 | Medium | 5.9 | 2024-12-27 | A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simulta… |
CVE-2024-50945 | High | 7.5 | 2024-12-27 | An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without v… |
CVE-2024-50944 | Critical | 9.8 | 2024-12-27 | Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functionality. The issue lies in… |
CVE-2024-12990 | Medium | 4.3 | 2024-12-27 | A vulnerability was found in ruifang-tech Rebuild 3.8.6. It has been classified as problematic. This affects an unknown part of the file /user/admin-verify of… |
CVE-2024-12989 | Medium | 5.3 | 2024-12-27 | A vulnerability was found in WISI Tangram GT31 up to 20241214 and classified as problematic. Affected by this issue is some unknown functionality of the compon… |
CVE-2024-12988 | High | 7.3 | 2024-12-27 | A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of t… |
CVE-2024-56509 | High | 8.6 | 2024-12-27 | changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Improper input validation in the… |
CVE-2024-56508 | High | 7.6 | 2024-12-27 | LinkAce is a self-hosted archive to collect links of your favorite websites. Prior to 1.15.6, a file upload vulnerability exists in the LinkAce. This issue occ… |
CVE-2024-56507 | Medium | 4.6 | 2024-12-27 | LinkAce is a self-hosted archive to collect links of your favorite websites. Prior to 1.15.6, a reflected cross-site scripting (XSS) vulnerability exists in th… |
CVE-2024-12987 | High | 7.3 | 2024-12-27 | A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/m… |
CVE-2024-12986 | High | 7.3 | 2024-12-27 | A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1.5.1.4. This issue affects some unknown processin… |
CVE-2024-12856 | High | 7.2 | 2024-12-27 | The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command injection vulnerability. At least firmware version 2.0 allows aut… |
CVE-2024-56675 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors Uprobes always use bpf_prog_… |
CVE-2024-56674 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: virtio_net: correct netdev_tx_reset_queue() invocation point When virtnet_close is follow… |
CVE-2024-56673 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Do not call pmd dtor on vmemmap page table teardown The vmemmap's, which is us… |
CVE-2024-56672 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix UAF in blkcg_unpin_online() blkcg_unpin_online() walks up the blkcg hiera… |
CVE-2024-56671 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: gpio: graniterapids: Fix vGPIO driver crash Move setting irq_chip.name from probe() funct… |
CVE-2024-56670 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointe… |
CVE-2024-56669 | High | 8.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove cache tags before disabling ATS The current implementation removes cac… |
CVE-2024-56668 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix qi_batch NULL pointer with nested parent domain The qi_batch is allocated… |
CVE-2024-56667 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix NULL pointer dereference in capture_engine When the intel_context structure… |
CVE-2024-56666 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Dereference null return value In the function pqm_uninit there is a call-assi… |
CVE-2024-56665 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog Syzbot reported [1]… |
CVE-2024-56664 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close() Element replace (with a socket… |
CVE-2024-56663 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one Since the netlink attribute range… |
CVE-2024-56662 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl Fix an issue detected by syzbot w… |
CVE-2024-56661 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in cleanup_bearer() syzbot found [1] that after blamed commit, ub->u… |
CVE-2024-56660 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, prevent potential error pointer dereference The dr_domain_add_vport_cap() f… |
CVE-2024-56659 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: lapb: increase LAPB_HEADER_LEN It is unclear if net/lapb code is supposed to be read… |
CVE-2024-56658 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: defer final 'struct net' free in netns dismantle Ilya reported a slab-use-after-free… |
CVE-2024-56657 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Avoid WARN() for symlink errors Using WARN() for showing the error of syml… |
CVE-2024-56656 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips The 5760X (P7) chip's HW… |
CVE-2024-56655 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not defer rule destruction via call_rcu nf_tables_chain_destroy… |
CVE-2024-56654 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating The usage of rcu_read_(… |
CVE-2024-56653 | High | 8.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: avoid UAF in btmtk_process_coredump hci_devcd_append may lead to the re… |
CVE-2024-56652 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/reg_sr: Remove register pool That pool implementation doesn't really work: if the… |
CVE-2024-56651 | High | 8.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: can: hi311x: hi3110_can_ist(): fix potential use-after-free The commit a22bd630cfff ("can… |
CVE-2024-56650 | High | 7.1 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: fix LED ID check in led_tg_check() Syzbot has reported the following… |
CVE-2024-56649 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: enetc: Do not configure preemptible TCs if SIs do not support Both ENETC PF and VF d… |
CVE-2024-56648 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid potential out-of-bound access in fill_frame_info() syzbot is able to feed… |
CVE-2024-56647 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: Fix icmp host relookup triggering ip_rt_bug arp link failure may trigger ip_rt_bug w… |
CVE-2024-56646 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid possible NULL deref in modify_prefix_route() syzbot found a NULL deref [1] in… |
CVE-2024-56645 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_session_new(): fix skb reference counting Since j1939_session_skb_queue… |
CVE-2024-56644 | High | 7.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net/ipv6: release expired exception dst cached in socket Dst objects get leaked in ip6_ne… |
CVE-2024-56643 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: dccp: Fix memory leak in dccp_feat_change_recv If dccp_feat_push_confirm() fails after ne… |
CVE-2024-56642 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free of kernel socket in cleanup_bearer(). syzkaller reported a use-a… |
CVE-2024-56641 | High | 7.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net/smc: initialize close_work early to avoid warning We encountered a warning that close… |