Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 278 of 521.
- CVE-2024-43930 WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.3 - Broken Access Control vulnerability
- CVE-2024-4393 Social Connect <= 1.2 - Authentication Bypass
- CVE-2024-43929 WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.4 - Broken Access Control vulnerability
- CVE-2024-43928 WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.4 - Broken Access Control vulnerability
- CVE-2024-43927 WordPress Email Address Encoder plugin <= 1.0.23 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-43926 WordPress Beaver Builder plugin <= 2.8.3.2 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-43925 WordPress Envira Gallery Lite plugin <= 1.8.14 - Broken Access Control vulnerability
- CVE-2024-43924 WordPress Responsive Lightbox & Gallery plugin <= 2.4.7 - Broken Access Control vulnerability
- CVE-2024-43923 WordPress Timetics plugin <= 1.0.23 - Broken Access Control vulnerability
- CVE-2024-43922 WordPress NitroPack plugin <= 1.16.7 - Unauthenticated Arbitrary Shortcode Execution vulnerability
- CVE-2024-43921 WordPress Generate Images – Magic Post Thumbnail plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43920 Cross-site scripting in Gutenverse
- CVE-2024-4392 Cross-site scripting in Jetpack – WP Security, Backup, Speed, & Growth
- CVE-2024-43919 WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.10 - Broken Access Control vulnerability
- CVE-2024-43918 WordPress WBW Product Table PRO plugin <= 1.9.4 - Unauthenticated Arbitrary SQL Query Execution vulnerability
- CVE-2024-43917 WordPress TI WooCommerce Wishlist plugin <= 2.8.2 - SQL Injection vulnerability
- CVE-2024-43916 WordPress Zephyr Project Manager plugin <= 3.3.102 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2024-43915 WordPress Zephyr Project Manager plugin <=3.3.102 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43914 md/raid5: avoid BUG_ON() while continue reshape after reassembling
- CVE-2024-43913 nvme: apple: fix device reference counting
- CVE-2024-43912 wifi: nl80211: disallow setting special AP channel widths
- CVE-2024-43911 wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- CVE-2024-43910 bpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory accesses
- CVE-2024-4391 Cross-site scripting in Happy Addons for Elementor
- CVE-2024-43909 drm/amdgpu/pm: Fix the null pointer dereference for smu7
- CVE-2024-43908 drm/amdgpu: Fix the null pointer dereference to ras_manager
- CVE-2024-43907 drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- CVE-2024-43906 drm/admgpu: fix dereferencing null pointer context
- CVE-2024-43905 drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- CVE-2024-43904 drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
- CVE-2024-43902 drm/amd/display: Add null checker before passing variables
- CVE-2024-43901 drm/amd/display: Fix NULL pointer dereference for DTN log in DCN401
- CVE-2024-43900 media: xc2028: avoid use-after-free in load_firmware_cb()
- CVE-2024-4390 Depicter <= 3.0.2 - Authenticated (Contributor+) Arbitrary Nonce Generation
- CVE-2024-43899 drm/amd/display: Fix null pointer deref in dcn20_resource.c
- CVE-2024-43897 net: drop bad gso csum_start and offset in virtio_net_hdr
- CVE-2024-43896 ASoC: cs-amp-lib: Fix NULL pointer crash if efi.get_variable is NULL
- CVE-2024-43894 drm/client: fix null pointer dereference in drm_client_modeset_probe
- CVE-2024-43893 serial: core: check uartclk for zero to avoid divide by zero
- CVE-2024-43892 memcg: protect concurrent access to mem_cgroup_idr
- CVE-2024-43891 tracing: Have format file honor EVENT_FILE_FL_FREED
- CVE-2024-43890 tracing: Fix overflow in get_free_elt()
- CVE-2024-4389 File upload in Depicter — Popup & Slider Builder
- CVE-2024-43889 padata: Fix possible divide-by-0 panic in padata_mt_helper()
- CVE-2024-43888 mm: list_lru: fix UAF for memory cgroup
- CVE-2024-43887 net/tcp: Disable TCP-AO static key after RCU grace period
- CVE-2024-43886 drm/amd/display: Add null check in resource_log_pipe_topology_update
- CVE-2024-43884 Bluetooth: MGMT: Add error handling to pair_device()
- CVE-2024-43883 usb: vhci-hcd: Do not drop references before new references are gained
- CVE-2024-43882 exec: Fix ToCToU between perm check and set-uid/gid usage
- CVE-2024-43881 wifi: ath12k: change DMA direction while mapping reinjected packets
- CVE-2024-43880 mlxsw: spectrum_acl_erp: Fix object nesting warning
- CVE-2024-4388 CAS <= 1.0.0 - Unauthenticated Arbitrary File Access
- CVE-2024-43879 wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- CVE-2024-43878 xfrm: Fix input error path memory access
- CVE-2024-43877 media: pci: ivtv: Add check for DMA map result
- CVE-2024-43876 PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup()
- CVE-2024-43875 PCI: endpoint: Clean up error handling in vpci_scan_bus()
- CVE-2024-43874 crypto: ccp - Fix null pointer dereference in __sev_snp_shutdown_locked
- CVE-2024-43873 vhost/vsock: always initialize seqpacket_allow
- CVE-2024-43872 RDMA/hns: Fix soft lockup under heavy CEQE load
- CVE-2024-43871 devres: Fix memory leakage caused by driver API devm_free_percpu()
- CVE-2024-43870 perf: Fix event leak upon exit
- CVE-2024-43869 perf: Fix event leak upon exec and file release
- CVE-2024-43868 riscv/purgatory: align riscv_kernel_entry
- CVE-2024-43867 drm/nouveau: prime: fix refcount underflow
- CVE-2024-43866 net/mlx5: Always drain health in shutdown callback
- CVE-2024-43865 s390/fpu: Re-add exception handling in load_fpu_state()
- CVE-2024-43864 net/mlx5e: Fix CT entry update leaks of modify header context
- CVE-2024-43863 drm/vmwgfx: Fix a deadlock in dma buf fence polling
- CVE-2024-43862 net: wan: fsl_qmc_hdlc: Convert carrier_lock spinlock to a mutex
- CVE-2024-43861 net: usb: qmi_wwan: fix memory leak for not ip packets
- CVE-2024-43860 remoteproc: imx_rproc: Skip over memory region when node value is NULL
- CVE-2024-4386 Gallery Block (Meow Gallery) <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-43859 f2fs: fix to truncate preallocated blocks in f2fs_file_open()
- CVE-2024-43858 jfs: Fix array-index-out-of-bounds in diFree
- CVE-2024-43857 f2fs: fix null reference error when checking end of zone
- CVE-2024-43856 dma: fix call order in dmam_free_coherent
- CVE-2024-43855 md: fix deadlock between mddev_suspend and flush bio
- CVE-2024-43854 block: initialize integrity buffer to zero before writing it to media
- CVE-2024-43853 cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- CVE-2024-43852 hwmon: (ltc2991) re-order conditions to fix off by one bug
- CVE-2024-43851 soc: xilinx: rename cpu_number1 to dummy_cpu_number
- CVE-2024-43850 soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove
- CVE-2024-4385 Envo Extra <= 1.8.16 - Authenticated (Contributor+) Cross-Site Scripting
- CVE-2024-43849 soc: qcom: pdr: protect locator_addr with the main mutex
- CVE-2024-43848 wifi: mac80211: fix TTLM teardown work
- CVE-2024-43847 wifi: ath12k: fix invalid memory access while processing fragmented packets
- CVE-2024-43846 lib: objagg: Fix general protection fault
- CVE-2024-43845 udf: Fix bogus checksum computation in udf_rename()
- CVE-2024-43844 wifi: rtw89: wow: fix GTK offload H2C skbuff issue
- CVE-2024-43843 riscv, bpf: Fix out-of-bounds issue when preparing trampoline image
- CVE-2024-43842 wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()
- CVE-2024-43841 wifi: virt_wifi: avoid reporting connection success with wrong SSID
- CVE-2024-43840 bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- CVE-2024-4384 CSSable Countdown <= 1.5 - Admin+ Stored XSS
- CVE-2024-43839 bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- CVE-2024-43838 bpf: fix overflow check in adjust_jmp_off()
- CVE-2024-43837 bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT
- CVE-2024-43836 net: ethtool: pse-pd: Fix possible null-deref