Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 234 of 521.
- CVE-2024-49922 drm/amd/display: Check null pointers before using them
- CVE-2024-49921 drm/amd/display: Check null pointers before used
- CVE-2024-49920 drm/amd/display: Check null pointers before multiple uses
- CVE-2024-4992 SQL injection vulnerability in SiAdmin
- CVE-2024-49919 drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- CVE-2024-49918 drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- CVE-2024-49917 drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw
- CVE-2024-49916 drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn401_init_hw
- CVE-2024-49915 drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw
- CVE-2024-49914 drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe
- CVE-2024-49913 drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- CVE-2024-49912 drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- CVE-2024-49911 drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- CVE-2024-49910 drm/amd/display: Add NULL check for function pointer in dcn401_set_output_transfer_func
- CVE-2024-4991 SQL injection vulnerability in SiAdmin
- CVE-2024-49909 drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- CVE-2024-49908 drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)
- CVE-2024-49907 drm/amd/display: Check null pointers before using dc->clk_mgr
- CVE-2024-49906 drm/amd/display: Check null pointer before try to access it
- CVE-2024-49905 drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
- CVE-2024-49904 drm/amdgpu: add list empty check to avoid null pointer issue
- CVE-2024-49903 jfs: Fix uaf in dbFreeBits
- CVE-2024-49902 jfs: check if leafidx greater than num leaves per dmap tree
- CVE-2024-49901 drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs
- CVE-2024-49900 jfs: Fix uninit-value access of new_ea in ea_buffer
- CVE-2024-4990 Unsafe Reflection in base Component class in yiisoft/yii2
- CVE-2024-49899 drm/amd/display: Initialize denominators' default to 1
- CVE-2024-49898 drm/amd/display: Check null-initialized variables
- CVE-2024-49897 drm/amd/display: Check phantom_stream before it is used
- CVE-2024-49896 drm/amd/display: Check stream before comparing them
- CVE-2024-49895 drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- CVE-2024-49894 drm/amd/display: Fix index out of bounds in degamma hardware format translation
- CVE-2024-49893 drm/amd/display: Check stream_status before it is used
- CVE-2024-49892 drm/amd/display: Initialize get_bytes_per_element's default to 1
- CVE-2024-49891 scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- CVE-2024-49890 drm/amd/pm: ensure the fw_info is not null before using it
- CVE-2024-4989 Open Redirection via Callback URL in WSO2 API Manager Allows Phishing Attacks
- CVE-2024-49889 ext4: avoid use-after-free in ext4_ext_show_leaf()
- CVE-2024-49888 bpf: Fix a sdiv overflow issue
- CVE-2024-49887 f2fs: fix to don't panic system for no free segment fault injection
- CVE-2024-49886 platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- CVE-2024-49885 mm, slub: avoid zeroing kmalloc redzone
- CVE-2024-49884 ext4: fix slab-use-after-free in ext4_split_extent_at()
- CVE-2024-49883 ext4: aovid use-after-free in ext4_ext_insert_extent()
- CVE-2024-49882 ext4: fix double brelse() the buffer of the extents path
- CVE-2024-49881 ext4: update orig_path in ext4_find_extent()
- CVE-2024-49880 ext4: fix off by one issue in alloc_flex_gd()
- CVE-2024-4988 Improper permission control in com.transsion.videocallenhancer
- CVE-2024-49879 drm: omapdrm: Add missing check for alloc_ordered_workqueue
- CVE-2024-49878 resource: fix region_intersects() vs add_memory_driver_managed()
- CVE-2024-49877 ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- CVE-2024-49876 drm/xe: fix UAF around queue destruction
- CVE-2024-49875 nfsd: map the EBADMSG to nfserr_io to avoid warning
- CVE-2024-49874 i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- CVE-2024-49873 mm/filemap: fix filemap_get_folios_contig THP panic
- CVE-2024-49872 mm/gup: fix memfd_pin_folios alloc race panic
- CVE-2024-49871 Input: adp5589-keys - fix NULL pointer dereference
- CVE-2024-49870 cachefiles: fix dentry leak in cachefiles_open_file()
- CVE-2024-49869 btrfs: send: fix buffer overflow detection when copying path to cache entry
- CVE-2024-49868 btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- CVE-2024-49867 btrfs: wait for fixup workers before stopping cleaner kthread during umount
- CVE-2024-49866 tracing/timerlat: Fix a race during cpuhp processing
- CVE-2024-49865 drm/xe/vm: move xa_alloc to prevent UAF
- CVE-2024-49864 rxrpc: Fix a race between socket set up and I/O thread creation
- CVE-2024-49863 vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- CVE-2024-49862 powercap: intel_rapl: Fix off by one in get_rpi()
- CVE-2024-49861 bpf: Fix helper writes to read-only maps
- CVE-2024-49860 ACPI: sysfs: validate return type of _STR method
- CVE-2024-49859 f2fs: fix to check atomic_file in f2fs ioctl interfaces
- CVE-2024-49858 efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- CVE-2024-49857 wifi: iwlwifi: mvm: set the cipher for secured NDP ranging
- CVE-2024-49856 x86/sgx: Fix deadlock in SGX NUMA node search
- CVE-2024-49855 nbd: fix race between timeout and normal completion
- CVE-2024-49854 block, bfq: fix uaf for accessing waker_bfqq after splitting
- CVE-2024-49853 firmware: arm_scmi: Fix double free in OPTEE transport
- CVE-2024-49852 scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- CVE-2024-49851 tpm: Clean up TPM space after command failure
- CVE-2024-49850 bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- CVE-2024-4985 Auth bypass in Enterprise Server
- CVE-2024-49849 Deserialization in SIMATIC S7-PLCSIM V16
- CVE-2024-49848 Use After Free in DSP Service
- CVE-2024-49847 Buffer Over-read in Multi-Mode Call Processor
- CVE-2024-49846 Buffer Over-read in Multi-Mode Call Processor
- CVE-2024-49845 Improper Input Validation in HLOS
- CVE-2024-49844 Improper Input Validation in Automotive
- CVE-2024-49843 Improper Validation of Array Index in Graphics_Linux
- CVE-2024-49842 Improper Access Control in Hypervisor
- CVE-2024-49841 Detection of Error Condition Without Action in Hypervisor
- CVE-2024-49840 Use of Out-of-range Pointer Offset in WLAN Windows Host
- CVE-2024-4984 Yoast SEO <= 22.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-49839 Buffer Over-read in WLAN Host Cmn
- CVE-2024-49838 Buffer Over-read in WLAN HOST
- CVE-2024-49837 Improper Validation of Array Index in Automotive OS Platform
- CVE-2024-49836 Improper Validation of Array Index in Camera
- CVE-2024-49835 Out-of-bounds Write in SPS Applications
- CVE-2024-49834 Improper Validation of Array Index in Camera
- CVE-2024-49833 Improper Validation of Array Index in Camera
- CVE-2024-49832 Improper Validation of Array Index in Camera
- CVE-2024-49830 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
- CVE-2024-4983 Cross-site scripting in The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce