Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 179 of 521.
- CVE-2024-57907 iio: adc: rockchip_saradc: fix information leak in triggered buffer
- CVE-2024-57906 iio: adc: ti-ads8688: fix information leak in triggered buffer
- CVE-2024-57905 iio: adc: ti-ads1119: fix information leak in triggered buffer
- CVE-2024-57904 iio: adc: at91: call input_free_device() on allocated iio_dev
- CVE-2024-57903 net: restrict SO_REUSEPORT to inet sockets
- CVE-2024-57902 af_packet: fix vlan_get_tci() vs MSG_PEEK
- CVE-2024-57901 af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
- CVE-2024-57900 ila: serialize calls to nf_register_net_hooks()
- CVE-2024-5790 Cross-site scripting in Happy Addons for Elementor
- CVE-2024-57899 wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
- CVE-2024-57898 wifi: cfg80211: clear link ID from bitmap during link delete after clean up
- CVE-2024-57897 drm/amdkfd: Correct the migration DMA map direction
- CVE-2024-57896 btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- CVE-2024-57895 ksmbd: set ATTR_CTIME flags when setting mtime
- CVE-2024-57893 ALSA: seq: oss: Fix races at processing SysEx messages
- CVE-2024-57892 ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- CVE-2024-57891 sched_ext: Fix invalid irq restore in scx_ops_bypass()
- CVE-2024-57890 RDMA/uverbs: Prevent integer overflow issue
- CVE-2024-5789 Triton Lite <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
- CVE-2024-57889 pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
- CVE-2024-57888 workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker
- CVE-2024-57887 drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- CVE-2024-57886 mm/damon/core: fix new damon_target objects leaks on damon_commit_targets()
- CVE-2024-57885 mm/kmemleak: fix sleeping function called from invalid context at print message
- CVE-2024-57884 mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
- CVE-2024-57883 mm: hugetlb: independent PMD page table shared count
- CVE-2024-57882 mptcp: fix TCP options overflow.
- CVE-2024-57881 mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in split_large_buddy()
- CVE-2024-57880 ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array
- CVE-2024-5788 Silesia <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
- CVE-2024-57879 Bluetooth: iso: Always release hdev at the end of iso_listen_bis
- CVE-2024-57878 arm64: ptrace: fix partial SETREGSET for NT_ARM_FPMR
- CVE-2024-57877 arm64: ptrace: fix partial SETREGSET for NT_ARM_POE
- CVE-2024-57876 drm/dp_mst: Fix resetting msg rx state after topology removal
- CVE-2024-57875 block: RCU protect disk->conv_zones_bitmap
- CVE-2024-57874 arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
- CVE-2024-57872 scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
- CVE-2024-5787 Cross-site scripting in PowerPack Addons for Elementor (Free Widgets, Extensions and Templates)
- CVE-2024-57868 Web::API 2.8 and earlier for Perl uses insecure rand() function for cryptographic functions
- CVE-2024-5786 Cross-Site Request Forgery vulnerability in Comtrend router
- CVE-2024-57857 RDMA/siw: Remove direct link to net_device
- CVE-2024-57854 Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator
- CVE-2024-57852 firmware: qcom: scm: smc: Handle missing SCM device
- CVE-2024-57850 jffs2: Prevent rtime decompress memory corruption
- CVE-2024-5785 Command injection vulnerability in Comtrend router
- CVE-2024-57849 s390/cpum_sf: Handle CPU hotplug remove during sampling
- CVE-2024-57844 drm/xe: Fix fault on fd close after unbind
- CVE-2024-57843 virtio-net: fix overflow inside virtnet_rq_alloc
- CVE-2024-57841 net: fix memory leak in tcp_conn_request()
- CVE-2024-5784 Tutor LMS Pro <= 2.7.2 - Missing Authorization to Authenticated (Subscriber+) Insecure Direct Object Reference
- CVE-2024-57839 Revert "readahead: properly shorten readahead when falling back to do_page_cache_ra()"
- CVE-2024-57838 s390/entry: Mark IRQ entries to fix stack depot warnings
- CVE-2024-57835 Amon2::Auth::Site::LINE versions through 0.04 for Perl uses insecure rand() function for cryptographic functions
- CVE-2024-57834 media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
- CVE-2024-57823 Integer overflow in Raptor RDF Syntax Library
- CVE-2024-57822 Memory corruption in Raptor RDF Syntax Library
- CVE-2024-57811 In Eaton X303 3.5.16 - X303 3.5.17 Build 712, an attacker with network access to a XC-303 PLC can login as root over SSH.
- CVE-2024-57809 PCI: imx6: Fix suspend/resume support on i.MX6QDL
- CVE-2024-57807 scsi: megaraid_sas: Fix for a potential deadlock
- CVE-2024-57806 btrfs: fix transaction atomicity bug when enabling simple quotas
- CVE-2024-57805 ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP
- CVE-2024-57804 scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
- CVE-2024-57802 netrom: check buffer length before accessing it
- CVE-2024-57801 net/mlx5e: Skip restore TC rules for vport rep without loaded flag
- CVE-2024-57800 ALSA: memalloc: prefer dma_mapping_error() over explicit address checking
- CVE-2024-57799 phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM
- CVE-2024-57798 drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- CVE-2024-57795 RDMA/rxe: Remove the direct link to net_device
- CVE-2024-57793 virt: tdx-guest: Just leak decrypted memory on unrecoverable errors
- CVE-2024-57792 power: supply: gpio-charger: Fix set charge current limits
- CVE-2024-57791 net/smc: check return value of sock_recvmsg when draining clc data
- CVE-2024-57790 IXON B.V. IXrouter IX2400 (Industrial Edge Gateway) v3.0 was discovered to contain hardcoded root credentials stored in the non-volatile flash memory.
- CVE-2024-57785 Zenitel AlphaWeb XE v11.2.3.10 was discovered to contain a local file inclusion vulnerability via the component amc_uploads.php.
- CVE-2024-57784 An issue in the component /php/script_uploads.php of Zenitel AlphaWeb XE v11.2.3.10 allows attackers to execute a directory traversal.
- CVE-2024-57783 Cross-site scripting in Dot
- CVE-2024-57782 An issue in Docker-proxy v18.09.0 allows attackers to cause a denial of service.
- CVE-2024-57778 An issue in Orbe ONetView Roeador Onet-1200 Orbe 1680210096 allows a remote attacker to escalate privileges via the servers response from st
- CVE-2024-57777 Path traversal in lanproxy project:lanproxy
- CVE-2024-57776 Cross-site scripting in jfinaloa project:jfinaloa
- CVE-2024-57775 SQL injection in jfinaloa project:jfinaloa
- CVE-2024-57774 Cross-site scripting in jfinaloa project:jfinaloa
- CVE-2024-57773 Cross-site scripting in jfinaloa project:jfinaloa
- CVE-2024-57772 Cross-site scripting in jfinaloa project:jfinaloa
- CVE-2024-57771 Cross-site scripting in jfinaloa project:jfinaloa
- CVE-2024-57770 SQL injection in jfinaloa project:jfinaloa
- CVE-2024-57769 SQL injection in jfinaloa project:jfinaloa
- CVE-2024-57768 SQL injection in jfinaloa project:jfinaloa
- CVE-2024-57767 Server-side request forgery in wangl1989:mysiteforme
- CVE-2024-57766 Deserialization in wangl1989:mysiteforme
- CVE-2024-57765 SQL injection in wangl1989:mysiteforme
- CVE-2024-57764 Deserialization in wangl1989:mysiteforme
- CVE-2024-57763 Deserialization in wangl1989:mysiteforme
- CVE-2024-57762 Deserialization in wangl1989:mysiteforme
- CVE-2024-57761 File upload in huayi-tec:jeewms
- CVE-2024-57760 SQL injection in jeewms:jeewms
- CVE-2024-57757 Auth bypass in jeewms:jeewms
- CVE-2024-5775 SourceCodester Vehicle Management System updatebill.php sql injection
- CVE-2024-5774 SourceCodester Stock Management System Login index.php sql injection
- CVE-2024-5773 Netentsec NS-ASG Application Security Gateway deletemacbind.php sql injection
- CVE-2024-57728 SimpleHelp Path Traversal