# Vulnerabilities published in 2024


- [CVE-2024-47784](https://insights.sbomify.com/CVE-2024-47784/): Unverified Password Change (low 2.1)
- [CVE-2024-47783](https://insights.sbomify.com/CVE-2024-47783/): Misconfiguration in SIPORT (high 8.5)
- [CVE-2024-47782](https://insights.sbomify.com/CVE-2024-47782/): Cross-site Scripting (XSS) in Special:WikiDiscover when displaying wiki information in WikiDiscover (high 7.6)
- [CVE-2024-47781](https://insights.sbomify.com/CVE-2024-47781/): Cross-site Scripting (XSS) in Special:RequestWikiQueue when displaying sitename in CreateWiki (medium 5.3)
- [CVE-2024-47780](https://insights.sbomify.com/CVE-2024-47780/): Information Disclosure in TYPO3 Page Tree (low 3.1)
- [CVE-2024-4778](https://insights.sbomify.com/CVE-2024-4778/): Memory corruption in Firefox (critical 9.8)
- [CVE-2024-47779](https://insights.sbomify.com/CVE-2024-47779/): Element Web vulnerable to potential exposure of access token via authenticated media (high 7.0)
- [CVE-2024-47778](https://insights.sbomify.com/CVE-2024-47778/): GHSL-2024-258: GStreamer has an OOB-read in gst_wavparse_adtl_chunk (medium 5.1)
- [CVE-2024-47777](https://insights.sbomify.com/CVE-2024-47777/): GHSL-2024-259: GStreamer has an OOB-read in gst_wavparse_smpl_chunk (medium 5.1)
- [CVE-2024-47776](https://insights.sbomify.com/CVE-2024-47776/): GHSL-2024-260: GStreamer has a OOB-read in gst_wavparse_cue_chunk (medium 5.1)
- [CVE-2024-47775](https://insights.sbomify.com/CVE-2024-47775/): GHSL-2024-261: GStreamer has an OOB-read in parse_ds64 (medium 5.1)
- [CVE-2024-47774](https://insights.sbomify.com/CVE-2024-47774/): GHSL-2024-262: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk (medium 5.1)
- [CVE-2024-47773](https://insights.sbomify.com/CVE-2024-47773/): Anonymous cache poisoning via XHR requests in Discourse (high 8.2)
- [CVE-2024-47772](https://insights.sbomify.com/CVE-2024-47772/): Cross-site Scripting (XSS) via chat excerpts when content security policy (CSP) disabled in Discourse (medium 6.5)
- [CVE-2024-47771](https://insights.sbomify.com/CVE-2024-47771/): Element Desktop vulnerable to potential exposure of access token via authenticated media (high 7.0)
- [CVE-2024-47770](https://insights.sbomify.com/CVE-2024-47770/): Ability to view Agent list with no privilege access in wazuh-dashboard (medium 4.6)
- [CVE-2024-4777](https://insights.sbomify.com/CVE-2024-4777/): Memory corruption in Firefox (high 7.5)
- [CVE-2024-47769](https://insights.sbomify.com/CVE-2024-47769/): IDURAR has a Path Traversal (unauthenticated user can read sensitive data) (high 7.5)
- [CVE-2024-47768](https://insights.sbomify.com/CVE-2024-47768/): Lif Authentication Server Has No Auth Check When Updating Password In Account Recovery (medium 6.9)
- [CVE-2024-47767](https://insights.sbomify.com/CVE-2024-47767/): Tuleap lists trackers in the quick add actions of the backlog without any permissions check (medium 4.3)
- [CVE-2024-47766](https://insights.sbomify.com/CVE-2024-47766/): Permissions are incorrectly verified for project administrators in the cross tracker search widget (medium 4.9)
- [CVE-2024-47765](https://insights.sbomify.com/CVE-2024-47765/): Minecraft MOTD Parser's HtmlGenerator vulnerable to XSS (medium 6.9)
- [CVE-2024-47764](https://insights.sbomify.com/CVE-2024-47764/): cookie accepts cookie name, path, and domain with out of bounds characters (medium 6.9)
- [CVE-2024-47763](https://insights.sbomify.com/CVE-2024-47763/): Wasmtime runtime crash when combining tail calls with trapping imports (medium 5.5)
- [CVE-2024-47762](https://insights.sbomify.com/CVE-2024-47762/): Unexpected visibility of environment variable configurations in @backstage/plugin-app-backend (medium 5.8)
- [CVE-2024-47761](https://insights.sbomify.com/CVE-2024-47761/): GLPI vulnerable to account takeover via the password reset feature (high 7.5)
- [CVE-2024-47760](https://insights.sbomify.com/CVE-2024-47760/): GLPI vulnerable to account takeover via API (high 7.5)
- [CVE-2024-4776](https://insights.sbomify.com/CVE-2024-4776/): Other in Firefox (high 8.2)
- [CVE-2024-47759](https://insights.sbomify.com/CVE-2024-47759/): GLPI has a stored XSS via document upload (medium 6.7)
- [CVE-2024-47758](https://insights.sbomify.com/CVE-2024-47758/): GLPI vulnerable to account takeover without privilege escalation through the API (high 7.6)
- [CVE-2024-47757](https://insights.sbomify.com/CVE-2024-47757/): nilfs2: fix potential oob read in nilfs_btree_check_delete() (high 7.1)
- [CVE-2024-47756](https://insights.sbomify.com/CVE-2024-47756/): PCI: keystone: Fix if-statement expression in ks_pcie_quirk() (medium 5.5)
- [CVE-2024-47754](https://insights.sbomify.com/CVE-2024-47754/): media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning (medium 5.5)
- [CVE-2024-47753](https://insights.sbomify.com/CVE-2024-47753/): media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning (medium 5.5)
- [CVE-2024-47752](https://insights.sbomify.com/CVE-2024-47752/): media: mediatek: vcodec: Fix H264 stateless decoder smatch warning (medium 5.5)
- [CVE-2024-47751](https://insights.sbomify.com/CVE-2024-47751/): PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port() (high 7.8)
- [CVE-2024-47750](https://insights.sbomify.com/CVE-2024-47750/): RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08 (high 7.8)
- [CVE-2024-4775](https://insights.sbomify.com/CVE-2024-4775/): Memory corruption in Firefox (medium 5.9)
- [CVE-2024-47749](https://insights.sbomify.com/CVE-2024-47749/): RDMA/cxgb4: Added NULL check for lookup_atid (high 7.5)
- [CVE-2024-47748](https://insights.sbomify.com/CVE-2024-47748/): vhost_vdpa: assign irq bypass producer token correctly (high 7.8)
- [CVE-2024-47747](https://insights.sbomify.com/CVE-2024-47747/): net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (high 7.8)
- [CVE-2024-47746](https://insights.sbomify.com/CVE-2024-47746/): fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set (medium 5.5)
- [CVE-2024-47745](https://insights.sbomify.com/CVE-2024-47745/): mm: call the security_mmap_file() LSM hook in remap_file_pages() (high 7.8)
- [CVE-2024-47744](https://insights.sbomify.com/CVE-2024-47744/): KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock (medium 5.5)
- [CVE-2024-47743](https://insights.sbomify.com/CVE-2024-47743/): KEYS: prevent NULL pointer dereference in find_asymmetric_key() (medium 5.5)
- [CVE-2024-47742](https://insights.sbomify.com/CVE-2024-47742/): firmware_loader: Block path traversal (high 7.8)
- [CVE-2024-47741](https://insights.sbomify.com/CVE-2024-47741/): btrfs: fix race setting file private on concurrent lseek using same fd (high 7.8)
- [CVE-2024-47740](https://insights.sbomify.com/CVE-2024-47740/): f2fs: Require FMODE_WRITE for atomic write ioctls (high 7.1)
- [CVE-2024-4774](https://insights.sbomify.com/CVE-2024-4774/): Memory corruption in Firefox (medium 6.5)
- [CVE-2024-47739](https://insights.sbomify.com/CVE-2024-47739/): padata: use integer wrap around to prevent deadlock on seq_nr overflow (high 7.5)
- [CVE-2024-47738](https://insights.sbomify.com/CVE-2024-47738/): wifi: mac80211: don't use rate mask for offchannel TX either (low 3.3)
- [CVE-2024-47737](https://insights.sbomify.com/CVE-2024-47737/): nfsd: call cache_put if xdr_reserve_space returns NULL (medium 5.5)
- [CVE-2024-47736](https://insights.sbomify.com/CVE-2024-47736/): erofs: handle overlapped pclusters out of crafted images properly (medium 5.5)
- [CVE-2024-47735](https://insights.sbomify.com/CVE-2024-47735/): RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled (medium 5.5)
- [CVE-2024-47734](https://insights.sbomify.com/CVE-2024-47734/): bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave() (medium 5.5)
- [CVE-2024-47733](https://insights.sbomify.com/CVE-2024-47733/): netfs: Delete subtree of 'fs/netfs' when netfs module exits (medium 5.5)
- [CVE-2024-47732](https://insights.sbomify.com/CVE-2024-47732/): crypto: iaa - Fix potential use after free bug (high 7.0)
- [CVE-2024-47731](https://insights.sbomify.com/CVE-2024-47731/): drivers/perf: Fix ali_drw_pmu driver interrupt status clearing (medium 5.5)
- [CVE-2024-47730](https://insights.sbomify.com/CVE-2024-47730/): crypto: hisilicon/qm - inject error before stopping queue (high 7.0)
- [CVE-2024-4773](https://insights.sbomify.com/CVE-2024-4773/): Other in Firefox (high 7.5)
- [CVE-2024-47729](https://insights.sbomify.com/CVE-2024-47729/): drm/xe: Use reserved copy engine for user binds on faulting devices (medium 5.5)
- [CVE-2024-47728](https://insights.sbomify.com/CVE-2024-47728/): bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error (medium 5.5)
- [CVE-2024-47727](https://insights.sbomify.com/CVE-2024-47727/): x86/tdx: Fix "in-kernel MMIO" check (high 7.8)
- [CVE-2024-47726](https://insights.sbomify.com/CVE-2024-47726/): f2fs: fix to wait dio completion (high 7.8)
- [CVE-2024-47724](https://insights.sbomify.com/CVE-2024-47724/): wifi: ath11k: use work queue to process beacon tx event (high 8.8)
- [CVE-2024-47723](https://insights.sbomify.com/CVE-2024-47723/): jfs: fix out-of-bounds in dbNextAG() and diAlloc() (high 7.8)
- [CVE-2024-47721](https://insights.sbomify.com/CVE-2024-47721/): wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-bounds reading (high 8.8)
- [CVE-2024-47720](https://insights.sbomify.com/CVE-2024-47720/): drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func (medium 5.5)
- [CVE-2024-4772](https://insights.sbomify.com/CVE-2024-4772/): Weak cryptography in Firefox (medium 5.9)
- [CVE-2024-47719](https://insights.sbomify.com/CVE-2024-47719/): iommufd: Protect against overflow of ALIGN() during iova allocation (high 7.8)
- [CVE-2024-47718](https://insights.sbomify.com/CVE-2024-47718/): wifi: rtw88: always wait for both firmware loading attempts (high 7.8)
- [CVE-2024-47717](https://insights.sbomify.com/CVE-2024-47717/): RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data (medium 5.5)
- [CVE-2024-47716](https://insights.sbomify.com/CVE-2024-47716/): ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros (medium 5.5)
- [CVE-2024-47715](https://insights.sbomify.com/CVE-2024-47715/): wifi: mt76: mt7915: fix oops on non-dbdc mt7986 (medium 5.5)
- [CVE-2024-47714](https://insights.sbomify.com/CVE-2024-47714/): wifi: mt76: mt7996: use hweight16 to get correct tx antenna (high 7.6)
- [CVE-2024-47713](https://insights.sbomify.com/CVE-2024-47713/): wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() (medium 5.5)
- [CVE-2024-47712](https://insights.sbomify.com/CVE-2024-47712/): wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param (high 8.3)
- [CVE-2024-47711](https://insights.sbomify.com/CVE-2024-47711/): af_unix: Don't return OOB skb in manage_oob(). (high 7.8)
- [CVE-2024-47710](https://insights.sbomify.com/CVE-2024-47710/): sock_map: Add a cond_resched() in sock_hash_free() (medium 5.5)
- [CVE-2024-4771](https://insights.sbomify.com/CVE-2024-4771/): Use after free in Firefox (high 8.6)
- [CVE-2024-47709](https://insights.sbomify.com/CVE-2024-47709/): can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). (medium 5.5)
- [CVE-2024-47708](https://insights.sbomify.com/CVE-2024-47708/): netkit: Assign missing bpf_net_context (medium 5.5)
- [CVE-2024-47707](https://insights.sbomify.com/CVE-2024-47707/): ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (medium 5.5)
- [CVE-2024-47706](https://insights.sbomify.com/CVE-2024-47706/): block, bfq: fix possible UAF for bfqq->bic with merge chain (high 7.8)
- [CVE-2024-47705](https://insights.sbomify.com/CVE-2024-47705/): block: fix potential invalid pointer dereference in blk_add_partition (medium 5.5)
- [CVE-2024-47704](https://insights.sbomify.com/CVE-2024-47704/): drm/amd/display: Check link_res->hpo_dp_link_enc before using it (medium 5.5)
- [CVE-2024-47703](https://insights.sbomify.com/CVE-2024-47703/): bpf, lsm: Add check for BPF LSM return value (high 7.8)
- [CVE-2024-47702](https://insights.sbomify.com/CVE-2024-47702/): bpf: Fail verification for sign-extension of packet data/data_end/data_meta (high 7.8)
- [CVE-2024-47701](https://insights.sbomify.com/CVE-2024-47701/): ext4: avoid OOB when system.data xattr changes underneath the filesystem (high 7.8)
- [CVE-2024-47700](https://insights.sbomify.com/CVE-2024-47700/): ext4: check stripe size compatibility on remount as well (medium 5.5)
- [CVE-2024-4770](https://insights.sbomify.com/CVE-2024-4770/): Use after free in Firefox (high 8.8)
- [CVE-2024-47699](https://insights.sbomify.com/CVE-2024-47699/): nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() (medium 5.5)
- [CVE-2024-47698](https://insights.sbomify.com/CVE-2024-47698/): drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error (high 7.8)
- [CVE-2024-47697](https://insights.sbomify.com/CVE-2024-47697/): drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error (high 7.8)
- [CVE-2024-47696](https://insights.sbomify.com/CVE-2024-47696/): RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (high 7.5)
- [CVE-2024-47695](https://insights.sbomify.com/CVE-2024-47695/): RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds (critical 9.8)
- [CVE-2024-47694](https://insights.sbomify.com/CVE-2024-47694/): IB/mlx5: Fix UMR pd cleanup on error flow of driver init (medium 5.5)
- [CVE-2024-47693](https://insights.sbomify.com/CVE-2024-47693/): IB/core: Fix ib_cache_setup_one error flow cleanup (medium 6.5)
- [CVE-2024-47692](https://insights.sbomify.com/CVE-2024-47692/): nfsd: return -EINVAL when namelen is 0 (medium 6.5)
- [CVE-2024-47691](https://insights.sbomify.com/CVE-2024-47691/): f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread() (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/249/