2024 CVEs (page 88)
Page 88 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-53108 | High | 7.3 | 2024-12-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adjust VSDB parser for replay feature At some point, the IEEE ID identif… |
CVE-2024-53107 | High | 7.8 | 2024-12-02 | In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args() The "arg->vec_len"… |
CVE-2024-53106 | High | 7.3 | 2024-12-02 | In the Linux kernel, the following vulnerability has been resolved: ima: fix buffer overrun in ima_eventdigest_init_common Function ima_eventdigest_init() ca… |
CVE-2024-53105 | Medium | 5.5 | 2024-12-02 | In the Linux kernel, the following vulnerability has been resolved: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() Syzbot reported a b… |
CVE-2024-52503 | Medium | 6.5 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tailored Media Tailored Tools tailored-tools allows Store… |
CVE-2024-52502 | Medium | 6.5 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ImbaSynergy ImbaChat imbachat-widget allows DOM-Based XSS… |
CVE-2024-52494 | Medium | 5.9 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt Varone, Tim Berneman Dynamic "To Top" allows Stored… |
CVE-2024-52493 | Medium | 5.9 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh Leuze Meteor Slides meteor-slides allows Stored XSS… |
CVE-2024-52492 | Medium | 5.9 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus Image horizontal reel scroll slideshow image-hor… |
CVE-2024-52491 | Medium | 5.9 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sanil Shakya Sticky Social Icons sticky-social-icons allo… |
CVE-2024-52489 | Medium | 5.9 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in udidol Add Chat App Button add-whatsapp-button allows Sto… |
CVE-2024-52487 | Medium | 6.5 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webcodingplace Ultimate Classified Listings ultimate-clas… |
CVE-2024-52486 | Medium | 6.5 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SolverWp Elementor Portfolio Builder portfolio-builder-el… |
CVE-2024-52484 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in deepintowp Wc Recently viewed products wc-recently-viewed… |
CVE-2024-52483 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Benic LeanPress leanpress allows Reflected XSS.This… |
CVE-2024-52482 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rafalautopilot Ortto autopilot allows Reflected XSS.This… |
CVE-2024-52479 | Medium | 4.3 | 2024-12-02 | Cross-Site Request Forgery (CSRF) vulnerability in Astoundify Jobify jobify allows Cross Site Request Forgery.This issue affects Jobify: from n/a through < 4.3… |
CVE-2024-52478 | Medium | 6.5 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Astoundify Jobify jobify allows Stored XSS.This issue aff… |
CVE-2024-52477 | High | 7.1 | 2024-12-02 | Cross-Site Request Forgery (CSRF) vulnerability in docxpresso Document & Data Automation document-data-automation allows Stored XSS.This issue affects Document… |
CVE-2024-52476 | Critical | 10.0 | 2024-12-02 | Unrestricted Upload of File with Dangerous Type vulnerability in Stefan Bohacek Fediverse Embeds fediverse-embeds allows Upload a Web Shell to a Web Server.Thi… |
CVE-2024-52469 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dhrubok Infotech Services Ltd. WooCommerce Price Alert pr… |
CVE-2024-52468 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeadBoxer LeadBoxer leadboxer allows Reflected XSS.This i… |
CVE-2024-52467 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in August Infotech AI Responsive Gallery Album ai-responsive… |
CVE-2024-52466 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Explara Explara Events explara-events allows Reflected XS… |
CVE-2024-52465 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Risk Mitigation, Inc. LGPD Framework lgpd-framewo… |
CVE-2024-52464 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in anmari amr shortcodes amr-shortcodes allows Reflected XSS… |
CVE-2024-52463 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Peter Westwood Post By Email post-by-email allows Reflect… |
CVE-2024-52462 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jacob Schwartz WP e-Commerce Style Email wp-e-commerce-st… |
CVE-2024-52461 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kinsta Infinite Slider infinite-slider allows Reflected X… |
CVE-2024-52460 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in atarapay AtaraPay WooCommerce Payment Gateway atarapay-wo… |
CVE-2024-52459 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chameleoni Chameleoni Jobs chameleon-jobs allows Reflecte… |
CVE-2024-52458 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zaymund TM Islamic Helper tm-islamic-helper allows Reflec… |
CVE-2024-52457 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in youneeq Youneeq Recommendations youneeq-panel allows Refl… |
CVE-2024-52456 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpoets Awesome Studio awesome-studio allows Reflected XSS… |
CVE-2024-52455 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in goqsystem GoQSmile goqsmile allows Reflected XSS.This iss… |
CVE-2024-52454 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in goqsystem GoQMieruca goqmieruca allows Reflected XSS.This… |
CVE-2024-52453 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in photonicgnostic Library Bookshelves library-bookshelves a… |
CVE-2024-52452 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eduNEXT Open edX LMS allows Reflected XSS.This issue affe… |
CVE-2024-51900 | Medium | 5.9 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in James Hunt What Would Seth Godin Do what-would-seth-godin… |
CVE-2024-12015 | High | 7.7 | 2024-12-02 | The 'Project Manager' WordPress Plugin is affected by an authenticated SQL injection vulnerability in the 'orderby' parameter in the '/pm/v2/activites' route. |
CVE-2024-43053 | High | 7.8 | 2024-12-02 | Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information. |
CVE-2024-43052 | High | 7.8 | 2024-12-02 | Memory corruption while processing API calls to NPU with invalid input. |
CVE-2024-43050 | High | 7.8 | 2024-12-02 | Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver. |
CVE-2024-43049 | High | 7.8 | 2024-12-02 | Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver. |
CVE-2024-43048 | High | 7.8 | 2024-12-02 | Memory corruption when invalid input is passed to invoke GPU Headroom API call. |
CVE-2024-33063 | High | 7.5 | 2024-12-02 | Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present. |
CVE-2024-33056 | High | 8.4 | 2024-12-02 | Memory corruption when allocating and accessing an entry in an SMEM partition continuously. |
CVE-2024-33053 | Medium | 6.7 | 2024-12-02 | Memory corruption when multiple threads try to unregister the CVP buffer at the same time. |
CVE-2024-33044 | High | 8.4 | 2024-12-02 | Memory corruption while Configuring the SMR/S2CR register in Bypass mode. |
CVE-2024-33040 | Medium | 6.7 | 2024-12-02 | Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer rel… |
CVE-2024-33039 | Medium | 6.7 | 2024-12-02 | Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service. |
CVE-2024-33037 | Medium | 6.1 | 2024-12-02 | Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware. |
CVE-2024-33036 | Medium | 6.7 | 2024-12-02 | Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to hu… |
CVE-2024-10490 | | 2024-12-02 | An “Authentication Bypass Using an Alternate Path or Channel” vulnerability in the OPC UA Server configuration required for B&R mapp Cockpit before 6.0, B&R ma… | |
CVE-2024-53104 | High | 7.8 | 2024-12-02 | In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This ca… |
CVE-2024-53103 | High | 7.8 | 2024-12-02 | In the Linux kernel, the following vulnerability has been resolved: hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer When hvs is releas… |
CVE-2024-20139 | Medium | 6.5 | 2024-12-02 | In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This could lead to local denial of service with… |
CVE-2024-20138 | High | 7.5 | 2024-12-02 | In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional exe… |
CVE-2024-20137 | High | 7.5 | 2024-12-02 | In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions. This could lead to remote denial of service with n… |
CVE-2024-20136 | Medium | 6.2 | 2024-12-02 | In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privi… |
CVE-2024-20135 | Medium | 6.7 | 2024-12-02 | In soundtrigger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2024-20134 | Medium | 6.7 | 2024-12-02 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20133 | Medium | 6.7 | 2024-12-02 | In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2024-20132 | Medium | 6.7 | 2024-12-02 | In Modem, there is a possible out of bonds write due to a mission bounds check. This could lead to local escalation of privilege with no additional execution p… |
CVE-2024-20131 | Medium | 6.7 | 2024-12-02 | In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2024-20130 | Medium | 6.7 | 2024-12-02 | In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2024-20129 | High | 7.5 | 2024-12-02 | In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2024-20128 | High | 7.5 | 2024-12-02 | In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2024-20127 | High | 7.5 | 2024-12-02 | In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2024-20125 | Medium | 6.7 | 2024-12-02 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alrea… |
CVE-2024-20116 | Medium | 4.4 | 2024-12-02 | In cmdq, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2024-11856 | Low | 3.7 | 2024-12-02 | A security vulnerability in HPE IceWall products could be exploited remotely to cause Unauthorized Data Modification. |
CVE-2024-53605 | High | 7.5 | 2024-12-02 | Incorrect access control in the component content://com.handcent.messaging.provider.MessageProvider/ of Handcent NextSMS v10.9.9.7 allows attackers to access s… |
CVE-2024-12007 | Medium | 6.3 | 2024-12-01 | A vulnerability, which was classified as critical, was found in code-projects Farmacia 1.0. This affects an unknown part of the file /visualizar-produto.php. T… |
CVE-2024-53752 | Medium | 6.5 | 2024-12-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Berg Informatik Stripe Donation bin-stripe-donation allow… |
CVE-2024-53750 | High | 7.1 | 2024-12-01 | Cross-Site Request Forgery (CSRF) vulnerability in Maeve Lander PayPal Responder allows Stored XSS.This issue affects PayPal Responder: from n/a through 1.2. |
CVE-2024-53749 | Medium | 6.5 | 2024-12-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carou… |
CVE-2024-53748 | Medium | 6.5 | 2024-12-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Terry L. WP Mermaid wp-mermaid allows Stored XSS.This iss… |
CVE-2024-53747 | Medium | 6.5 | 2024-12-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nutttaro Video Player for WPBakery video-player-for-wpbak… |
CVE-2024-53746 | Medium | 6.5 | 2024-12-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FlickDevs Elementor Button Plus fd-elementor-button-plus… |
CVE-2024-53745 | Medium | 6.5 | 2024-12-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 코스모스팜 – Cosmosfarm 소셜 공유 버튼 By 코스모스팜 cosmosfarm-share-but… |
CVE-2024-53744 | Medium | 6.5 | 2024-12-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SkyBootstrap Elementor Image Gallery Plugin skyboot-portf… |
CVE-2024-53743 | Medium | 6.5 | 2024-12-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aezaz Shaikh Countdown Timer for Elementor countdown-time… |
CVE-2024-53742 | High | 7.1 | 2024-12-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Prism I.T. Systems Multilevel Referral Affiliate Plugin f… |
CVE-2024-45520 | High | 7.5 | 2024-12-01 | WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a remote Denial of Service because of memory corruption during scanning of a PE32 file. |
CVE-2024-53786 | Medium | 6.5 | 2024-11-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codeless Cowidgets – Elementor Addons cowidgets-elementor… |
CVE-2024-53778 | High | 7.1 | 2024-11-30 | Cross-Site Request Forgery (CSRF) vulnerability in Essential Marketer Essential Breadcrumbs essential-breadcrumbs allows Stored XSS.This issue affects Essentia… |
CVE-2024-53774 | Medium | 6.5 | 2024-11-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jakub Glos Sparkle Elementor Kit sparkle-elementor-kit al… |
CVE-2024-53773 | Medium | 6.5 | 2024-11-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pracapl Znajdź Pracę z Praca.pl znajdz-prace-z-pracapl al… |
CVE-2024-53772 | Medium | 6.5 | 2024-11-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Mail Picker mail-picker allows DOM-Based XSS… |
CVE-2024-53771 | Medium | 6.5 | 2024-11-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sergiomico SimpleSchema simpleschema-free allows DOM-Base… |
CVE-2024-53767 | Medium | 6.5 | 2024-11-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixobe Pixobe Cartography pixobe-cartography allows DOM-B… |
CVE-2024-53766 | Medium | 6.5 | 2024-11-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devnex Devnex Addons For Elementor devnex-addons-for-elem… |
CVE-2024-53764 | Medium | 6.5 | 2024-11-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SoftHopper Softtemplates For Elementor softtemplates-for-… |
CVE-2024-53763 | Medium | 6.5 | 2024-11-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rejuan Ahamed Best Addons for Elementor allows Stored XSS… |
CVE-2024-53760 | Medium | 6.5 | 2024-11-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Capitalize My Title Capitalize My Title capitalize-my-tit… |
CVE-2024-53758 | Medium | 6.5 | 2024-11-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Terry L. WP MathJax wp-mathjax-plus allows Stored XSS.Thi… |
CVE-2024-53757 | Medium | 6.5 | 2024-11-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SocialEvolution WP Find Your Nearest wp-find-your-nearest… |
CVE-2024-53756 | Medium | 6.5 | 2024-11-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aftab Husain Vertical Carousel vertical-carousel-slider a… |
CVE-2024-53788 | Medium | 5.9 | 2024-11-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in portfoliohub WordPress Portfolio Builder – Portfolio Gall… |