Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 186 of 521.
- CVE-2024-56661 tipc: fix NULL deref in cleanup_bearer()
- CVE-2024-56660 net/mlx5: DR, prevent potential error pointer dereference
- CVE-2024-5666 Extensions for Elementor <= 2.0.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter
- CVE-2024-56659 net: lapb: increase LAPB_HEADER_LEN
- CVE-2024-56658 net: defer final 'struct net' free in netns dismantle
- CVE-2024-56657 ALSA: control: Avoid WARN() for symlink errors
- CVE-2024-56656 bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips
- CVE-2024-56655 netfilter: nf_tables: do not defer rule destruction via call_rcu
- CVE-2024-56654 Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
- CVE-2024-56653 Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
- CVE-2024-56652 drm/xe/reg_sr: Remove register pool
- CVE-2024-56651 can: hi311x: hi3110_can_ist(): fix potential use-after-free
- CVE-2024-56650 netfilter: x_tables: fix LED ID check in led_tg_check()
- CVE-2024-5665 Login/Signup Popup ( Inline Form + Woocommerce ) 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options Exposure
- CVE-2024-56649 net: enetc: Do not configure preemptible TCs if SIs do not support
- CVE-2024-56648 net: hsr: avoid potential out-of-bound access in fill_frame_info()
- CVE-2024-56647 net: Fix icmp host relookup triggering ip_rt_bug
- CVE-2024-56646 ipv6: avoid possible NULL deref in modify_prefix_route()
- CVE-2024-56645 can: j1939: j1939_session_new(): fix skb reference counting
- CVE-2024-56644 net/ipv6: release expired exception dst cached in socket
- CVE-2024-56643 dccp: Fix memory leak in dccp_feat_change_recv
- CVE-2024-56642 tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- CVE-2024-56641 net/smc: initialize close_work early to avoid warning
- CVE-2024-56640 net/smc: fix LGR and link use-after-free issue
- CVE-2024-5664 Cross-site scripting in MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
- CVE-2024-56639 net: hsr: must allocate more bytes for RedBox support
- CVE-2024-56638 netfilter: nft_inner: incorrect percpu area handling under softirq
- CVE-2024-56637 netfilter: ipset: Hold module reference while requesting a module
- CVE-2024-56636 geneve: do not assume mac header is set in geneve_xmit_skb()
- CVE-2024-56635 net: avoid potential UAF in default_operstate()
- CVE-2024-56634 gpio: grgpio: Add NULL check in grgpio_probe
- CVE-2024-56633 tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- CVE-2024-56632 nvme-tcp: fix the memleak while create new ctrl failed
- CVE-2024-56631 scsi: sg: Fix slab-use-after-free read in sg_release()
- CVE-2024-56630 ocfs2: free inode when ocfs2_get_init_inode() fails
- CVE-2024-5663 Cards for Beaver Builder <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Cards Widget
- CVE-2024-56629 HID: wacom: fix when get product name maybe null pointer
- CVE-2024-56628 LoongArch: Add architecture specific huge_pte_clear()
- CVE-2024-56627 ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- CVE-2024-56626 ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- CVE-2024-56625 can: dev: can_set_termination(): allow sleeping GPIOs
- CVE-2024-56624 iommufd: Fix out_fput in iommufd_fault_alloc()
- CVE-2024-56623 scsi: qla2xxx: Fix use after free on unload
- CVE-2024-56622 scsi: ufs: core: sysfs: Prevent div by zero
- CVE-2024-56621 scsi: ufs: core: Cancel RTC work during ufshcd_remove()
- CVE-2024-56620 scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
- CVE-2024-5662 Cross-site scripting in Ultimate Post Kit Addons for Elementor
- CVE-2024-56619 nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- CVE-2024-56618 pmdomain: imx: gpcv2: Adjust delay after power up handshake
- CVE-2024-56617 cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU
- CVE-2024-56616 drm/dp_mst: Fix MST sideband message body length check
- CVE-2024-56615 bpf: fix OOB devmap writes when deleting elements
- CVE-2024-56614 xsk: fix OOB map writes when deleting elements
- CVE-2024-56613 sched/numa: fix memory leak due to the overwritten vma->numab_state
- CVE-2024-56612 mm/gup: handle NULL pages in unpin_user_pages()
- CVE-2024-56611 mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- CVE-2024-56610 kcsan: Turn report_filterlist_lock into a raw_spinlock
- CVE-2024-5661 Potential Denial of Service affecting XenServer and Citrix Hypervisor
- CVE-2024-56609 wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb
- CVE-2024-56608 drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- CVE-2024-56607 wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()
- CVE-2024-56606 af_packet: avoid erroring out after sock_init_data() in packet_create()
- CVE-2024-56605 Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- CVE-2024-56604 Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- CVE-2024-56603 net: af_can: do not leave a dangling sk pointer in can_create()
- CVE-2024-56602 net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- CVE-2024-56601 net: inet: do not leave a dangling sk pointer in inet_create()
- CVE-2024-56600 net: inet6: do not leave a dangling sk pointer in inet6_create()
- CVE-2024-5660 Security feature bypass in Cortex-78C
- CVE-2024-56599 wifi: ath10k: avoid NULL pointer error during sdio remove
- CVE-2024-56598 jfs: array-index-out-of-bounds fix in dtReadFirst
- CVE-2024-56597 jfs: fix shift-out-of-bounds in dbSplit
- CVE-2024-56596 jfs: fix array-index-out-of-bounds in jfs_readdir
- CVE-2024-56595 jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- CVE-2024-56594 drm/amdgpu: set the right AMDGPU sg segment limitation
- CVE-2024-56593 wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()
- CVE-2024-56592 bpf: Call free_htab_elem() after htab_unlock_bucket()
- CVE-2024-56591 Bluetooth: hci_conn: Use disable_delayed_work_sync
- CVE-2024-56590 Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
- CVE-2024-5659 Rockwell Automation Multicast Request Causes major nonrecoverable fault on Select Controllers
- CVE-2024-56589 scsi: hisi_sas: Add cond_resched() for no forced preemption model
- CVE-2024-56588 scsi: hisi_sas: Create all dump files during debugfs initialization
- CVE-2024-56587 leds: class: Protect brightness_show() with led_cdev->led_access mutex
- CVE-2024-56586 f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- CVE-2024-56585 LoongArch: Fix sleeping in atomic context for PREEMPT_RT
- CVE-2024-56584 io_uring/tctx: work around xa_store() allocation error issue
- CVE-2024-56583 sched/deadline: Fix warning in migrate_enable for boosted tasks
- CVE-2024-56582 btrfs: fix use-after-free in btrfs_encoded_read_endio()
- CVE-2024-56581 btrfs: ref-verify: fix use-after-free after invalid ref action
- CVE-2024-56580 media: qcom: camss: fix error path on configuration of power domains
- CVE-2024-5658 CraftCMS Plugin - Two-Factor Authentication - TOTP Token Stays Valid After Use
- CVE-2024-56579 media: amphion: Set video drvdata before register video device
- CVE-2024-56578 media: imx-jpeg: Set video drvdata before register video device
- CVE-2024-56577 media: mtk-jpeg: Fix null-ptr-deref during unload module
- CVE-2024-56576 media: i2c: tc358743: Fix crash in the probe error path when using polling
- CVE-2024-56575 media: imx-jpeg: Ensure power suppliers be suspended before detach them
- CVE-2024-56574 media: ts2020: fix null-ptr-deref in ts2020_probe()
- CVE-2024-56573 efi/libstub: Free correct pointer on failure
- CVE-2024-56572 media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- CVE-2024-56570 ovl: Filter invalid inodes with missing lookup function