Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 292 of 521.
- CVE-2024-42289 scsi: qla2xxx: During vport delete send async logout explicitly
- CVE-2024-42288 scsi: qla2xxx: Fix for possible memory corruption
- CVE-2024-42287 scsi: qla2xxx: Complete command early within lock
- CVE-2024-42286 scsi: qla2xxx: validate nvme_local_port correctly
- CVE-2024-42285 RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- CVE-2024-42284 tipc: Return non-zero value from tipc_udp_addr2str() on error
- CVE-2024-42283 net: nexthop: Initialize all fields in dumped nexthops
- CVE-2024-42282 net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling
- CVE-2024-42281 bpf: Fix a segment issue when downgrading gso_size
- CVE-2024-42280 mISDN: Fix a use after free in hfcmulti_tx()
- CVE-2024-4228 SQLi in Magarsus Consultancy's SSO
- CVE-2024-42279 spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer
- CVE-2024-42278 ASoC: TAS2781: Fix tasdev_load_calibrated_data()
- CVE-2024-42277 iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en
- CVE-2024-42276 nvme-pci: add missing condition check for existence of mapped data
- CVE-2024-42275 drm/client: Fix error code in drm_client_buffer_vmap_local()
- CVE-2024-42274 Revert "ALSA: firewire-lib: operate for period elapse event in process context"
- CVE-2024-42273 f2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid
- CVE-2024-42272 sched: act_ct: take care of padding in struct zones_ht_key
- CVE-2024-42271 net/iucv: fix use after free in iucv_sock_close()
- CVE-2024-42270 netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init().
- CVE-2024-4227 gSOAP: Vulnerable to specially crafted unencrypted SDC messages
- CVE-2024-42269 netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().
- CVE-2024-42268 net/mlx5: Fix missing lock on sync reset reload
- CVE-2024-42267 riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- CVE-2024-42266 btrfs: make cow_file_range_inline() honor locked_page on error
- CVE-2024-42265 protect the fetch of ->fd[fd] in do_dup2() from mispredictions
- CVE-2024-42264 drm/v3d: Prevent out of bounds access in performance query extensions
- CVE-2024-42263 drm/v3d: Fix potential memory leak in the timestamp extension
- CVE-2024-42262 drm/v3d: Fix potential memory leak in the performance extension
- CVE-2024-42261 drm/v3d: Validate passed in drm syncobj handles in the timestamp extension
- CVE-2024-42260 drm/v3d: Validate passed in drm syncobj handles in the performance extension
- CVE-2024-4226 Missing authorization in Octopus Server
- CVE-2024-42259 drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- CVE-2024-42258 mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines
- CVE-2024-42257 ext4: use memtostr_pad() for s_volume_name
- CVE-2024-42256 cifs: Fix server re-repick on subrequest retry
- CVE-2024-42255 tpm: Use auth only after NULL check in tpm_buf_check_hmac_response()
- CVE-2024-42254 io_uring: fix error pbuf checking
- CVE-2024-42253 gpio: pca953x: fix pca953x_irq_bus_sync_unlock race
- CVE-2024-42252 closures: Change BUG_ON() to WARN_ON()
- CVE-2024-42251 mm: page_ref: remove folio_try_get_rcu()
- CVE-2024-42250 cachefiles: add missing lock protection when polling
- CVE-2024-4225 NGDIN_ST v2.0D.0062 - Multiple Vulnerabilities
- CVE-2024-42249 spi: don't unoptimize message in spi_async()
- CVE-2024-42248 tty: serial: ma35d1: Add a NULL check for of_node
- CVE-2024-42247 wireguard: allowedips: avoid unaligned 64-bit memory accesses
- CVE-2024-42246 net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- CVE-2024-42245 Revert "sched/fair: Make sure to try to detach at least one movable task"
- CVE-2024-42244 USB: serial: mos7840: fix crash on resume
- CVE-2024-42243 mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray
- CVE-2024-42242 mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE
- CVE-2024-42241 mm/shmem: disable PMD-sized page cache if needed
- CVE-2024-42240 x86/bhi: Avoid warning in #DB handler due to BHI mitigation
- CVE-2024-4224 TP-Link TL-SG1016DE XSS
- CVE-2024-42239 bpf: Fail bpf_timer_cancel when callback is being cancelled
- CVE-2024-42238 firmware: cs_dsp: Return error if block header overflows file
- CVE-2024-42237 firmware: cs_dsp: Validate payload length before processing block
- CVE-2024-42236 usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- CVE-2024-42235 s390/mm: Add NULL pointer check to crst_table_free() base_crst_free()
- CVE-2024-42234 mm: fix crashes from deferred split racing folio migration
- CVE-2024-42233 filemap: replace pte_offset_map() with pte_offset_map_nolock()
- CVE-2024-42232 libceph: fix race between delayed_work() and ceph_monc_stop()
- CVE-2024-42231 btrfs: zoned: fix calc_available_free_space() for zoned mode
- CVE-2024-42230 powerpc/pseries: Fix scv instruction crash with kexec
- CVE-2024-4223 Tutor LMS <= 2.7.0 - Missing Authorization
- CVE-2024-42229 crypto: aead,cipher - zeroize key buffer after use
- CVE-2024-42228 drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- CVE-2024-42227 drm/amd/display: Fix overlapping copy within dml_core_mode_programming
- CVE-2024-42225 wifi: mt76: replace skb_put with skb_put_zero
- CVE-2024-42224 net: dsa: mv88e6xxx: Correct check for empty list
- CVE-2024-42223 media: dvb-frontends: tda10048: Fix integer overflow
- CVE-2024-42222 Apache CloudStack: Unauthorised Network List Access
- CVE-2024-42220 Security feature bypass in Outlook
- CVE-2024-4222 Tutor LMS Pro <= 2.7.0 - Missing Authorization
- CVE-2024-42219 Security feature bypass in 1password:1password
- CVE-2024-42218 Security feature bypass in 1password:1password
- CVE-2024-42214 Information disclosure in Aftermarket EPC
- CVE-2024-42213 HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment
- CVE-2024-42212 HCL BigFix Compliance is affected by an improper or missing SameSite attribute
- CVE-2024-42210 HCL Unica Marketing Operations v12.1.8 and lower is affected by a Stored cross-site scripting (XSS) vulnerability
- CVE-2024-42209 HCL Connections is vulnerable to an information disclosure vulnerability
- CVE-2024-42208 HCL Connections is vulnerable to an information disclosure vulnerability
- CVE-2024-42207 HCL iAutomate is affected by a session fixation vulnerability
- CVE-2024-42206 HCL iReflection Use of Third party vulnerable and outdated components issue was detected in the web application.
- CVE-2024-42200 HCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attack
- CVE-2024-4220 Information Disclosure in BeyondInsight
- CVE-2024-42197 HCL Workload Scheduler is vulnerable to plain text storage of a password
- CVE-2024-42196 HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability
- CVE-2024-42195 HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection
- CVE-2024-42194 HCL BigFix Inventory is affected by an access control vulnerability
- CVE-2024-42193 HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack
- CVE-2024-42192 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a credential leakage
- CVE-2024-42191 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to COM hijacking
- CVE-2024-42190 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijacking
- CVE-2024-4219 SSRF In BeyondInsight
- CVE-2024-42189 HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack
- CVE-2024-42188 HCL Connections is vulnerable to a broken access control vulnerability
- CVE-2024-42187 HCL BigFix Patch Download Plug-ins are affected by path traversal vulnerability
- CVE-2024-42186 HCL BigFix Patch Download Plug-ins are affected by an insecure protocol support