Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 249 of 521.
- CVE-2024-47784 Unverified Password Change
- CVE-2024-47783 Misconfiguration in SIPORT
- CVE-2024-47782 Cross-site Scripting (XSS) in Special:WikiDiscover when displaying wiki information in WikiDiscover
- CVE-2024-47781 Cross-site Scripting (XSS) in Special:RequestWikiQueue when displaying sitename in CreateWiki
- CVE-2024-47780 Information Disclosure in TYPO3 Page Tree
- CVE-2024-4778 Memory corruption in Firefox
- CVE-2024-47779 Element Web vulnerable to potential exposure of access token via authenticated media
- CVE-2024-47778 GHSL-2024-258: GStreamer has an OOB-read in gst_wavparse_adtl_chunk
- CVE-2024-47777 GHSL-2024-259: GStreamer has an OOB-read in gst_wavparse_smpl_chunk
- CVE-2024-47776 GHSL-2024-260: GStreamer has a OOB-read in gst_wavparse_cue_chunk
- CVE-2024-47775 GHSL-2024-261: GStreamer has an OOB-read in parse_ds64
- CVE-2024-47774 GHSL-2024-262: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk
- CVE-2024-47773 Anonymous cache poisoning via XHR requests in Discourse
- CVE-2024-47772 Cross-site Scripting (XSS) via chat excerpts when content security policy (CSP) disabled in Discourse
- CVE-2024-47771 Element Desktop vulnerable to potential exposure of access token via authenticated media
- CVE-2024-47770 Ability to view Agent list with no privilege access in wazuh-dashboard
- CVE-2024-4777 Memory corruption in Firefox
- CVE-2024-47769 IDURAR has a Path Traversal (unauthenticated user can read sensitive data)
- CVE-2024-47768 Lif Authentication Server Has No Auth Check When Updating Password In Account Recovery
- CVE-2024-47767 Tuleap lists trackers in the quick add actions of the backlog without any permissions check
- CVE-2024-47766 Permissions are incorrectly verified for project administrators in the cross tracker search widget
- CVE-2024-47765 Minecraft MOTD Parser's HtmlGenerator vulnerable to XSS
- CVE-2024-47764 cookie accepts cookie name, path, and domain with out of bounds characters
- CVE-2024-47763 Wasmtime runtime crash when combining tail calls with trapping imports
- CVE-2024-47762 Unexpected visibility of environment variable configurations in @backstage/plugin-app-backend
- CVE-2024-47761 GLPI vulnerable to account takeover via the password reset feature
- CVE-2024-47760 GLPI vulnerable to account takeover via API
- CVE-2024-4776 Other in Firefox
- CVE-2024-47759 GLPI has a stored XSS via document upload
- CVE-2024-47758 GLPI vulnerable to account takeover without privilege escalation through the API
- CVE-2024-47757 nilfs2: fix potential oob read in nilfs_btree_check_delete()
- CVE-2024-47756 PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- CVE-2024-47754 media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- CVE-2024-47753 media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- CVE-2024-47752 media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- CVE-2024-47751 PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- CVE-2024-47750 RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- CVE-2024-4775 Memory corruption in Firefox
- CVE-2024-47749 RDMA/cxgb4: Added NULL check for lookup_atid
- CVE-2024-47748 vhost_vdpa: assign irq bypass producer token correctly
- CVE-2024-47747 net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- CVE-2024-47746 fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set
- CVE-2024-47745 mm: call the security_mmap_file() LSM hook in remap_file_pages()
- CVE-2024-47744 KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- CVE-2024-47743 KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- CVE-2024-47742 firmware_loader: Block path traversal
- CVE-2024-47741 btrfs: fix race setting file private on concurrent lseek using same fd
- CVE-2024-47740 f2fs: Require FMODE_WRITE for atomic write ioctls
- CVE-2024-4774 Memory corruption in Firefox
- CVE-2024-47739 padata: use integer wrap around to prevent deadlock on seq_nr overflow
- CVE-2024-47738 wifi: mac80211: don't use rate mask for offchannel TX either
- CVE-2024-47737 nfsd: call cache_put if xdr_reserve_space returns NULL
- CVE-2024-47736 erofs: handle overlapped pclusters out of crafted images properly
- CVE-2024-47735 RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- CVE-2024-47734 bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- CVE-2024-47733 netfs: Delete subtree of 'fs/netfs' when netfs module exits
- CVE-2024-47732 crypto: iaa - Fix potential use after free bug
- CVE-2024-47731 drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- CVE-2024-47730 crypto: hisilicon/qm - inject error before stopping queue
- CVE-2024-4773 Other in Firefox
- CVE-2024-47729 drm/xe: Use reserved copy engine for user binds on faulting devices
- CVE-2024-47728 bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- CVE-2024-47727 x86/tdx: Fix "in-kernel MMIO" check
- CVE-2024-47726 f2fs: fix to wait dio completion
- CVE-2024-47724 wifi: ath11k: use work queue to process beacon tx event
- CVE-2024-47723 jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- CVE-2024-47721 wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-bounds reading
- CVE-2024-47720 drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- CVE-2024-4772 Weak cryptography in Firefox
- CVE-2024-47719 iommufd: Protect against overflow of ALIGN() during iova allocation
- CVE-2024-47718 wifi: rtw88: always wait for both firmware loading attempts
- CVE-2024-47717 RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data
- CVE-2024-47716 ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- CVE-2024-47715 wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- CVE-2024-47714 wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- CVE-2024-47713 wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- CVE-2024-47712 wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- CVE-2024-47711 af_unix: Don't return OOB skb in manage_oob().
- CVE-2024-47710 sock_map: Add a cond_resched() in sock_hash_free()
- CVE-2024-4771 Use after free in Firefox
- CVE-2024-47709 can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
- CVE-2024-47708 netkit: Assign missing bpf_net_context
- CVE-2024-47707 ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- CVE-2024-47706 block, bfq: fix possible UAF for bfqq->bic with merge chain
- CVE-2024-47705 block: fix potential invalid pointer dereference in blk_add_partition
- CVE-2024-47704 drm/amd/display: Check link_res->hpo_dp_link_enc before using it
- CVE-2024-47703 bpf, lsm: Add check for BPF LSM return value
- CVE-2024-47702 bpf: Fail verification for sign-extension of packet data/data_end/data_meta
- CVE-2024-47701 ext4: avoid OOB when system.data xattr changes underneath the filesystem
- CVE-2024-47700 ext4: check stripe size compatibility on remount as well
- CVE-2024-4770 Use after free in Firefox
- CVE-2024-47699 nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- CVE-2024-47698 drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- CVE-2024-47697 drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- CVE-2024-47696 RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- CVE-2024-47695 RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- CVE-2024-47694 IB/mlx5: Fix UMR pd cleanup on error flow of driver init
- CVE-2024-47693 IB/core: Fix ib_cache_setup_one error flow cleanup
- CVE-2024-47692 nfsd: return -EINVAL when namelen is 0
- CVE-2024-47691 f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()