Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 178 of 521.
- CVE-2024-58002 media: uvcvideo: Remove dangling pointers
- CVE-2024-58001 ocfs2: handle a symlink read error correctly
- CVE-2024-58000 io_uring: prevent reg-wait speculations
- CVE-2024-5800 Diffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtime
- CVE-2024-57999 powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
- CVE-2024-57998 OPP: add index check to assert to avoid buffer overflow in _read_freq()
- CVE-2024-57997 wifi: wcn36xx: fix channel survey memory allocation size
- CVE-2024-57996 net_sched: sch_sfq: don't allow 1 packet limit
- CVE-2024-57995 wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev()
- CVE-2024-57994 ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
- CVE-2024-57993 HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
- CVE-2024-57992 wifi: wilc1000: unregister wiphy only if it has been registered
- CVE-2024-57991 wifi: rtw89: chan: fix soft lockup in rtw89_entity_recalc_mgnt_roles()
- CVE-2024-57990 wifi: mt76: mt7925: fix off by one in mt7925_load_clc()
- CVE-2024-5799 CM Pop-Up Banners for WordPress < 1.7.3 - Contributor+ Stored XSS
- CVE-2024-57989 wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links
- CVE-2024-57988 Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name()
- CVE-2024-57987 Bluetooth: btrtl: check for NULL in btrtl_setup_realtek()
- CVE-2024-57986 HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
- CVE-2024-57985 firmware: qcom: scm: Cleanup global '__scm' on probe failures
- CVE-2024-57984 i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition
- CVE-2024-57983 mailbox: th1520: Fix memory corruption due to incorrect array size
- CVE-2024-57982 xfrm: state: fix out-of-bounds read during lookup
- CVE-2024-57981 usb: xhci: Fix NULL pointer dereference on certain command aborts
- CVE-2024-57980 media: uvcvideo: Fix double free in error path
- CVE-2024-5798 Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims
- CVE-2024-57979 pps: Fix a use-after-free
- CVE-2024-57978 media: imx-jpeg: Fix potential error pointer dereference in detach_pm()
- CVE-2024-57977 memcg: fix soft lockup in the OOM process
- CVE-2024-57976 btrfs: do proper folio cleanup when cow_file_range() failed
- CVE-2024-57975 btrfs: do proper folio cleanup when run_delalloc_nocow() failed
- CVE-2024-57974 udp: Deal with race between UDP socket address change and rehash
- CVE-2024-57973 rdma/cxgb4: Prevent potential integer overflow on 32bit
- CVE-2024-57972 Denial of service in HoloLens
- CVE-2024-57971 Code injection in KNOWAGE
- CVE-2024-57970 Memory corruption in libarchive
- CVE-2024-57969 Missing authorization in MISP
- CVE-2024-57968 Advantive VeraCore Unrestricted File Upload
- CVE-2024-57967 Privilege escalation in Privileged Access Manager
- CVE-2024-57966 Path traversal in ark
- CVE-2024-57965 Security feature bypass in axios
- CVE-2024-57964 Insecure Loading of Dynamic Link Libraries in HVAC Energy Saving Program
- CVE-2024-57963 Insecure Loading of Dynamic Link Libraries in USB-CONVERTERCABLE DRIVER
- CVE-2024-57962 Other in HarmonyOS
- CVE-2024-57961 Memory corruption in EMUI
- CVE-2024-57960 Other in EMUI
- CVE-2024-5796 Infinite <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via project_url Parameter
- CVE-2024-57959 Use after free in EMUI
- CVE-2024-57958 Memory corruption in EMUI
- CVE-2024-57957 Information disclosure in HarmonyOS
- CVE-2024-57956 Memory corruption in HarmonyOS
- CVE-2024-57955 Memory corruption in HarmonyOS
- CVE-2024-57954 Missing authorization in HarmonyOS
- CVE-2024-57953 rtc: tps6594: Fix integer overflow on 32bit systems
- CVE-2024-57952 Revert "libfs: fix infinite directory reads for offset dir"
- CVE-2024-57951 hrtimers: Handle CPU state correctly on hotplug
- CVE-2024-57950 drm/amd/display: Initialize denominator defaults to 1
- CVE-2024-5795 Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed resource exhaustion
- CVE-2024-57949 irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()
- CVE-2024-57948 mac802154: check local interfaces before deleting sdata list
- CVE-2024-57947 netfilter: nf_set_pipapo: fix initial map fill
- CVE-2024-57946 virtio-blk: don't keep queue frozen during system suspend
- CVE-2024-57945 riscv: mm: Fix the out of bound issue of vmemmap address
- CVE-2024-57944 iio: adc: ti-ads1298: Add NULL check in ads1298_init
- CVE-2024-57943 exfat: fix the new buffer was not zeroed before writing
- CVE-2024-57942 netfs: Fix ceph copy to cache on write-begin
- CVE-2024-57941 netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled
- CVE-2024-57940 exfat: fix the infinite loop in exfat_readdir()
- CVE-2024-57939 riscv: Fix sleeping in invalid context in die()
- CVE-2024-57938 net/sctp: Prevent autoclose integer overflow in sctp_association_init()
- CVE-2024-57936 RDMA/bnxt_re: Fix max SGEs for the Work Request
- CVE-2024-57935 RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- CVE-2024-57934 fgraph: Add READ_ONCE() when accessing fgraph_array[]
- CVE-2024-57933 gve: guard XSK operations on the existence of queues
- CVE-2024-57932 gve: guard XDP xmit NDO on existence of xdp queues
- CVE-2024-57931 selinux: ignore unknown extended permissions
- CVE-2024-57930 tracing: Have process_string() also allow arrays
- CVE-2024-5793 Houzez Theme - Functionality <= 3.2.2 - Authenticated (Seller+) SQL Injection
- CVE-2024-57929 dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- CVE-2024-57928 netfs: Fix enomem handling in buffered reads
- CVE-2024-57927 nfs: Fix oops in nfs_netfs_init_request() when copying to cache
- CVE-2024-57926 drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err
- CVE-2024-57925 ksmbd: fix a missing return value check bug
- CVE-2024-57924 fs: relax assertions on failure to encode file handles
- CVE-2024-57923 btrfs: zlib: fix avail_in bytes for s390 zlib HW compression path
- CVE-2024-57922 drm/amd/display: Add check for granularity in dml ceil/floor helpers
- CVE-2024-57921 drm/amdgpu: Add a lock when accessing the buddy trim function
- CVE-2024-5792 Houzez CRM <= 1.4.2 - Authenticated (Seller+) SQL Injection
- CVE-2024-57919 drm/amd/display: fix divide error in DM plane scale calcs
- CVE-2024-57918 drm/amd/display: fix page fault due to max surface definition mismatch
- CVE-2024-57917 topology: Keep the cpumask unchanged when printing cpumap
- CVE-2024-57916 misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
- CVE-2024-57914 usb: typec: tcpci: fix NULL pointer issue on shared irq case
- CVE-2024-57913 usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
- CVE-2024-57912 iio: pressure: zpa2326: fix information leak in triggered buffer
- CVE-2024-57911 iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
- CVE-2024-57910 iio: light: vcnl4035: fix information leak in triggered buffer
- CVE-2024-5791 Cross-site scripting in Online Booking & Scheduling Calendar for WordPress by vcita
- CVE-2024-57909 iio: light: bh1745: fix information leak in triggered buffer
- CVE-2024-57908 iio: imu: kmx61: fix information leak in triggered buffer