Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 177 of 521.
- CVE-2024-58106 Memory corruption in HarmonyOS
- CVE-2024-58105 Security feature bypass in Trend Micro Apex One
- CVE-2024-58104 Privilege escalation in Trend Micro Apex One
- CVE-2024-58103 Wire has Uncontrolled Recursion on Nested Groups
- CVE-2024-58102 Denial of service in Seq
- CVE-2024-58101 Samsung Galaxy Buds and Galaxy Buds 2 audio devices are Bluetooth pairable by default without user input nor a way to stop this mode.
- CVE-2024-58100 bpf: check changes_pkt_data property for extension programs
- CVE-2024-5810 Hardcoded credentials in WP2Speed Faster – Optimize PageSpeed Insights Score 90-100
- CVE-2024-58099 vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- CVE-2024-58098 bpf: track changes_pkt_data property for global functions
- CVE-2024-58097 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- CVE-2024-58096 wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode
- CVE-2024-58095 jfs: add check read-only before txBeginAnon() call
- CVE-2024-58094 jfs: add check read-only before truncation in jfs_truncate_nolock()
- CVE-2024-58093 PCI/ASPM: Fix link state exit during switch upstream function removal
- CVE-2024-58092 nfsd: fix legacy client tracking initialization
- CVE-2024-58091 drm/fbdev-dma: Add shadow buffering for deferred I/O
- CVE-2024-58090 sched/core: Prevent rescheduling when interrupts are disabled
- CVE-2024-5809 WP Ajax Contact Form <= 2.2.2 - Reflected Cross-Site Scripting
- CVE-2024-58089 btrfs: fix double accounting race when btrfs_run_delalloc_range() failed
- CVE-2024-58088 bpf: Fix deadlock when freeing cgroup storage
- CVE-2024-58087 ksmbd: fix racy issue from session lookup and expire
- CVE-2024-58086 drm/v3d: Stop active perfmon if it is being destroyed
- CVE-2024-58085 tomoyo: don't emit warning in tomoyo_write_control()
- CVE-2024-58084 firmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool()
- CVE-2024-58083 KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- CVE-2024-58082 media: nuvoton: Fix an error check in npcm_video_ece_init()
- CVE-2024-58081 clk: mmp2: call pm_genpd_init() only after genpd.name is set
- CVE-2024-58080 clk: qcom: dispcc-sm6350: Add missing parent_map for a clock
- CVE-2024-5808 WP Ajax Contact Form <= 2.2.2 - Arbitrary Email Deletion via CSRF
- CVE-2024-58079 media: uvcvideo: Fix crash during unbind if gpio unit is in use
- CVE-2024-58078 misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors
- CVE-2024-58077 ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
- CVE-2024-58076 clk: qcom: gcc-sm6350: Add missing parent_map for two clocks
- CVE-2024-58075 crypto: tegra - do not transfer req when tegra init fails
- CVE-2024-58074 drm/i915: Grab intel_display from the encoder to avoid potential oopsies
- CVE-2024-58073 drm/msm/dpu: check dpu_plane_atomic_print_state() for valid sspp
- CVE-2024-58072 wifi: rtlwifi: remove unused check_buddy_priv
- CVE-2024-58071 team: prevent adding a device which is already a team device lower
- CVE-2024-58070 bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
- CVE-2024-5807 Business Card <= 1.0.0 - Admin+ File Upload
- CVE-2024-58069 rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
- CVE-2024-58068 OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
- CVE-2024-58067 clk: mmp: pxa1908-mpmu: Fix a NULL vs IS_ERR() check
- CVE-2024-58066 clk: mmp: pxa1908-apbcp: Fix a NULL vs IS_ERR() check
- CVE-2024-58065 clk: mmp: pxa1908-apbc: Fix NULL vs IS_ERR() check
- CVE-2024-58064 wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap()
- CVE-2024-58063 wifi: rtlwifi: fix memory leaks and invalid access at probe error path
- CVE-2024-58062 wifi: iwlwifi: mvm: avoid NULL pointer dereference
- CVE-2024-58061 wifi: mac80211: prohibit deactivating all links
- CVE-2024-58060 bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing
- CVE-2024-5806 MOVEit Transfer Authentication Bypass Vulnerability
- CVE-2024-58059 media: uvcvideo: Fix deadlock during uvc_probe
- CVE-2024-58058 ubifs: skip dumping tnc tree when zroot is null
- CVE-2024-58057 idpf: convert workqueues to unbound
- CVE-2024-58056 remoteproc: core: Fix ida_free call while not allocated
- CVE-2024-58055 usb: gadget: f_tcm: Don't free command immediately
- CVE-2024-58054 staging: media: max96712: fix kernel oops when removing module
- CVE-2024-58053 rxrpc: Fix handling of received connection abort
- CVE-2024-58052 drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
- CVE-2024-58051 ipmi: ipmb: Add check devm_kasprintf() returned value
- CVE-2024-58050 Missing authorization in HarmonyOS
- CVE-2024-5805 MOVEit Gateway Authentication Bypass Vulnerability
- CVE-2024-58049 Missing authorization in HarmonyOS
- CVE-2024-58048 Race condition in HarmonyOS
- CVE-2024-58047 Missing authorization in HarmonyOS
- CVE-2024-58046 Missing authorization in HarmonyOS
- CVE-2024-58045 Race condition in HarmonyOS
- CVE-2024-58044 Missing authorization in EMUI
- CVE-2024-58043 Security feature bypass in EMUI
- CVE-2024-58042 rhashtable: Fix potential deadlock by moving schedule_work outside lock
- CVE-2024-58041 Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions
- CVE-2024-58040 Crypt::RandomEncryption for Perl uses insecure rand() function during encryption
- CVE-2024-5804 Conditional Fields for Contact Form 7 <= 2.4.13 - Cross-Site Request Forgery to Plugin Setting Reset
- CVE-2024-58036 Net::Dropbox::API 1.9 and earlier for Perl uses insecure rand() function for cryptographic functions
- CVE-2024-58034 memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- CVE-2024-5803 Local privelage escalation via COM hijacking
- CVE-2024-58023 Information disclosure in Bosch Configuration Manager
- CVE-2024-58022 mailbox: th1520: Fix a NULL vs IS_ERR() bug
- CVE-2024-58021 HID: winwing: Add NULL check in winwing_init_led()
- CVE-2024-58020 HID: multitouch: Add NULL check in mt_input_configured
- CVE-2024-5802 URL Shortener by MyThemeShop <= 1.0.17 - Admin+ Stored XSS
- CVE-2024-58019 nvkm/gsp: correctly advance the read pointer of GSP message queue
- CVE-2024-58018 nvkm: correctly calculate the available space of the GSP cmdq buffer
- CVE-2024-58017 printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
- CVE-2024-58016 safesetid: check size of policy writes
- CVE-2024-58015 wifi: ath12k: Fix for out-of bound access error
- CVE-2024-58014 wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
- CVE-2024-58013 Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
- CVE-2024-58012 ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params
- CVE-2024-58011 platform/x86: int3472: Check for adev == NULL
- CVE-2024-58010 binfmt_flat: Fix integer overflow bug on 32 bit systems
- CVE-2024-5801 IP Forwarding enabled in B&R Automation Runtime
- CVE-2024-58009 Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- CVE-2024-58008 KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y
- CVE-2024-58007 soc: qcom: socinfo: Avoid out of bounds read of serial number
- CVE-2024-58006 PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()
- CVE-2024-58005 tpm: Change to kvalloc() in eventlog/acpi.c
- CVE-2024-58004 media: intel/ipu6: remove cpu latency qos request on error
- CVE-2024-58003 media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()