2024 CVEs (page 64)
Page 64 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-53182 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Revert "block, bfq: merge bfq_release_process_ref() into bfq_put_cooperator()" This rever… |
CVE-2024-53181 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: um: vector: Do not use drvdata in release The drvdata is not available in release. Let's… |
CVE-2024-53180 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Add sanity NULL check for the default mmap fault handler A driver might allow… |
CVE-2024-53179 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free of signing key Customers have reported use-after-free in… |
CVE-2024-53178 | High | 7.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: smb: Don't leak cfid when reconnect races with open_cached_dir open_cached_dir() may eith… |
CVE-2024-53177 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due to open_cached_dir error paths If open_cached_dir() encou… |
CVE-2024-53176 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: smb: During unmount, ensure all cached dir instances drop their dentry The unmount proces… |
CVE-2024-53175 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ipc: fix memleak if msg_init_ns failed in create_ipc_ns Percpu memory allocation may fail… |
CVE-2024-53174 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: make sure cache entry active before cache_show The function `c_show` was called w… |
CVE-2024-53173 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: NFSv4.0: Fix a use-after-free problem in the asynchronous open() Yang Erkun reports that… |
CVE-2024-53172 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ubi: fastmap: Fix duplicate slab cache names while attaching Since commit 4c39529663b9 ("… |
CVE-2024-53171 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit After an insertion in T… |
CVE-2024-53170 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: block: fix uaf for flush rq while iterating tags blk_mq_clear_flush_rq_mapping() is not c… |
CVE-2024-53169 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: nvme-fabrics: fix kernel crash while shutting down controller The nvme keep-alive operati… |
CVE-2024-53168 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket BUG: KASAN: slab-use-after-f… |
CVE-2024-53167 | High | 7.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: nfs/blocklayout: Don't attempt unregister for invalid block device Since commit d869da91c… |
CVE-2024-53166 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix bfqq uaf in bfq_limit_depth() Set new allocated bfqq to bic or remove fre… |
CVE-2024-53165 | High | 7.4 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the error handling for… |
CVE-2024-53164 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ordering of qlen adjustment Changes to sch->q.qlen around qdisc_tree_redu… |
CVE-2024-3393 | High | 7.5 | 2024-12-27 | A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious pack… |
CVE-2024-12983 | Low | 2.4 | 2024-12-27 | A vulnerability classified as problematic has been found in code-projects Hospital Management System 1.0. This affects an unknown part of the file /hospital/hm… |
CVE-2024-56527 | High | 7.5 | 2024-12-27 | An issue was discovered in TCPDF before 6.8.0. The Error function lacks an htmlspecialchars call for the error message. |
CVE-2024-12982 | Low | 2.4 | 2024-12-27 | A vulnerability was found in PHPGurukul Blood Bank & Donor Management System 2.4. It has been rated as problematic. Affected by this issue is some unknown func… |
CVE-2024-12981 | Medium | 6.3 | 2024-12-27 | A vulnerability was found in CodeAstro Car Rental System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of t… |
CVE-2024-11921 | Medium | 4.8 | 2024-12-27 | The GiveWP WordPress plugin before 3.19.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Sc… |
CVE-2024-11842 | Medium | 4.3 | 2024-12-27 | The DN Shipping by Weight for WooCommerce WordPress plugin before 1.2 does not have CSRF check in place when updating its settings, which could allow attackers… |
CVE-2024-11645 | Medium | 4.8 | 2024-12-27 | The float block WordPress plugin through 1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |
CVE-2024-11644 | Medium | 5.9 | 2024-12-27 | The WP-SVG WordPress plugin through 0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shor… |
CVE-2024-11605 | Medium | 4.8 | 2024-12-27 | The wp-publications WordPress plugin through 1.2 does not escape filenames before outputting them back in the page, which could allow high privilege users such… |
CVE-2024-56522 | High | 7.5 | 2024-12-27 | An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != (aka loose comparison) and does not use a constant-time function to compare TCPDF ta… |
CVE-2024-56521 | Critical | 9.8 | 2024-12-27 | An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely. |
CVE-2024-56520 | High | 7.3 | 2024-12-27 | An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and… |
CVE-2024-56519 | High | 7.5 | 2024-12-27 | An issue was discovered in TCPDF before 6.8.0. setSVGStyles does not sanitize the SVG font-family attribute. |
CVE-2024-12980 | Medium | 4.3 | 2024-12-27 | A vulnerability was found in code-projects Job Recruitment 1.0. It has been classified as problematic. Affected is the function fln_update of the file /_parse/… |
CVE-2024-12979 | Medium | 4.3 | 2024-12-27 | A vulnerability was found in code-projects Job Recruitment 1.0 and classified as problematic. This issue affects the function cn_update of the file /_parse/_al… |
CVE-2024-12978 | High | 7.3 | 2024-12-27 | A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. This vulnerability affects the function add_req of the file /_p… |
CVE-2024-9774 | Medium | 6.5 | 2024-12-27 | A vulnerability was found in python-sql where unary operators do not escape non-Expression. |
CVE-2024-12977 | Medium | 6.3 | 2024-12-27 | A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/sta… |
CVE-2024-12976 | High | 7.3 | 2024-12-27 | A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. Affected by this issue is some unknown functional… |
CVE-2024-12969 | High | 7.3 | 2024-12-26 | A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. Affected by this issue is some unknown funct… |
CVE-2024-56361 | | 2024-12-26 | LGSL (Live Game Server List) provides online status for games. Before 7.0.0, a stored cross-site scripting (XSS) vulnerability was identified in lgsl. The func… | |
CVE-2024-55950 | | 2024-12-26 | Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.216, Tabby terminal emulator contains overly permissive entitlements that ar… | |
CVE-2024-53850 | High | 8.2 | 2024-12-26 | The Addressing GLPI plugin enables you to create IP reports for visualize IP addresses used and free on a given network.. Starting with 3.0.0 and before 3.0.3… |
CVE-2024-45805 | Medium | 4.3 | 2024-12-26 | OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access… |
CVE-2024-45600 | High | 7.7 | 2024-12-26 | Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to 1.21.13, an authenticated user can perform a SQL injection when th… |
CVE-2024-12968 | High | 7.3 | 2024-12-26 | A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. Affected by this vulnerability is the function edit_jobpost of the file… |
CVE-2024-12967 | High | 7.3 | 2024-12-26 | A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. Affected is the function fln_update of the file /_parse/_all_edits… |
CVE-2024-56510 | Medium | 5.3 | 2024-12-26 | @marp-team/marp-core is the core for Marp, which is the ecosystem to write your presentation with plain Markdown. Marp Core from v3.0.2 to v3.9.0 and v4.0.0, a… |
CVE-2024-12966 | High | 7.3 | 2024-12-26 | A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as critical. This issue affects the function cn_update of the file /_parse/_a… |
CVE-2024-12965 | High | 7.3 | 2024-12-26 | A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been declared as critical. This vulnerability affects unknown code of th… |
CVE-2024-12964 | High | 7.3 | 2024-12-26 | A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. It has been classified as critical. This affects an unknown part of the fi… |
CVE-2024-12963 | High | 7.3 | 2024-12-26 | A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. Affected by this issue is the function add_xp of the file /_parse/_a… |
CVE-2024-54907 | High | 8.8 | 2024-12-26 | TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc. |
CVE-2024-12962 | High | 7.3 | 2024-12-26 | A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of t… |
CVE-2024-12961 | High | 7.3 | 2024-12-26 | A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file… |
CVE-2024-12960 | High | 7.3 | 2024-12-26 | A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. This issue affects some unknown process… |
CVE-2024-51540 | High | 8.1 | 2024-12-26 | Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket… |
CVE-2024-12959 | High | 7.3 | 2024-12-26 | A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /upd… |
CVE-2024-12958 | High | 7.3 | 2024-12-26 | A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. This affects an unknown part of the file /update_pr… |
CVE-2024-12908 | Medium | 6.9 | 2024-12-26 | Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler function, URI's were compare… |
CVE-2024-12956 | Medium | 6.3 | 2024-12-26 | A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the fi… |
CVE-2024-12955 | Medium | 4.3 | 2024-12-26 | A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as problematic. This vulnerability affects unknown code of… |
CVE-2024-12954 | Medium | 6.3 | 2024-12-26 | A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. This affects an unknown part of the file /up… |
CVE-2024-12953 | Medium | 6.3 | 2024-12-26 | A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected by this issue is some unknown… |
CVE-2024-47150 | Low | 3.3 | 2024-12-26 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2024-47149 | Low | 3.3 | 2024-12-26 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. |
CVE-2024-12952 | Medium | 6.3 | 2024-12-26 | A vulnerability classified as critical was found in melMass comfy_mtb up to 0.1.4. Affected by this vulnerability is the function run_command of the file comfy… |
CVE-2024-12951 | Medium | 6.3 | 2024-12-26 | A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /add_pe… |
CVE-2024-8994 | Medium | 6.2 | 2024-12-26 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2024-8993 | Medium | 6.2 | 2024-12-26 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2024-8992 | Medium | 4.0 | 2024-12-26 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2024-47157 | Low | 2.9 | 2024-12-26 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. |
CVE-2024-47155 | Medium | 5.5 | 2024-12-26 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2024-47154 | Medium | 5.5 | 2024-12-26 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2024-47153 | Medium | 6.2 | 2024-12-26 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2024-47148 | Medium | 4.0 | 2024-12-26 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. |
CVE-2024-12950 | Medium | 6.3 | 2024-12-26 | A vulnerability was found in code-projects/projectworlds Travel Management System 1.0. It has been rated as critical. This issue affects some unknown processin… |
CVE-2024-12949 | Medium | 6.3 | 2024-12-26 | A vulnerability was found in code-projects Travel Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2024-47156 | Low | 3.3 | 2024-12-26 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2024-47151 | Medium | 6.3 | 2024-12-26 | Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution |
CVE-2024-12948 | Medium | 6.3 | 2024-12-26 | A vulnerability was found in code-projects Travel Management System 1.0. It has been classified as critical. This affects an unknown part of the file /detail.p… |
CVE-2024-12947 | Medium | 6.3 | 2024-12-26 | A vulnerability was found in Codezips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the fi… |
CVE-2024-12946 | High | 7.3 | 2024-12-26 | A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. This issue affects some unknown p… |
CVE-2024-12945 | High | 7.3 | 2024-12-26 | A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. This vulnerability affects unknown code of the file /account.ph… |
CVE-2024-56433 | Low | 3.6 | 2024-12-26 | shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can r… |
CVE-2024-12944 | High | 7.3 | 2024-12-26 | A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2024-12943 | High | 7.3 | 2024-12-26 | A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown funct… |
CVE-2024-12942 | High | 7.3 | 2024-12-26 | A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been classified as critical. Affected is an unknown function of the file… |
CVE-2024-12941 | Medium | 6.3 | 2024-12-26 | A vulnerability was found in CodeAstro Blood Donor Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /pa… |
CVE-2024-12940 | High | 7.3 | 2024-12-26 | A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. This vulnerability affects unknown code o… |
CVE-2024-12939 | Medium | 6.3 | 2024-12-26 | A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as critical. This issue affects the function add_edu of the file /_parse/_all… |
CVE-2024-12938 | Medium | 6.3 | 2024-12-26 | A vulnerability has been found in code-projects Simple Admin Panel 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality o… |
CVE-2024-12937 | Medium | 6.3 | 2024-12-26 | A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. Affected is an unknown function of the file addVariationC… |
CVE-2024-11223 | Medium | 4.7 | 2024-12-26 | The WPForms WordPress plugin before 1.9.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |
CVE-2024-10903 | Medium | 4.7 | 2024-12-26 | The Broken Link Checker WordPress plugin before 2.4.2 does not validate a the link URLs before making a request to them, which could allow admin users to perfo… |
CVE-2024-12936 | Medium | 6.3 | 2024-12-26 | A vulnerability, which was classified as critical, has been found in code-projects Simple Admin Panel 1.0. This issue affects some unknown processing of the fi… |
CVE-2024-12935 | Medium | 6.3 | 2024-12-26 | A vulnerability classified as critical was found in code-projects Simple Admin Panel 1.0. This vulnerability affects unknown code of the file editItemForm.php… |
CVE-2024-12934 | Medium | 6.3 | 2024-12-26 | A vulnerability classified as critical has been found in code-projects Simple Admin Panel 1.0. This affects an unknown part of the file updateItemController.ph… |
CVE-2024-12933 | Low | 3.5 | 2024-12-26 | A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of th… |
CVE-2024-12652 | High | 8.8 | 2024-12-26 | A Improper Control of Generation of Code ('Code Injection') vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 al… |