# Vulnerabilities published in 2024


- [CVE-2024-42091](https://insights.sbomify.com/CVE-2024-42091/): drm/xe: Check pat.ops before dumping PAT settings (medium 5.5)
- [CVE-2024-42090](https://insights.sbomify.com/CVE-2024-42090/): pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (medium 5.5)
- [CVE-2024-4209](https://insights.sbomify.com/CVE-2024-4209/): Cross-site scripting in Kadence Blocks — Page Builder Toolkit for Gutenberg Editor (medium 6.4)
- [CVE-2024-42089](https://insights.sbomify.com/CVE-2024-42089/): ASoC: fsl-asoc-card: set priv->pdev before using it (medium 5.5)
- [CVE-2024-42088](https://insights.sbomify.com/CVE-2024-42088/): ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link (high 7.3)
- [CVE-2024-42087](https://insights.sbomify.com/CVE-2024-42087/): drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep (medium 5.5)
- [CVE-2024-42086](https://insights.sbomify.com/CVE-2024-42086/): iio: chemical: bme680: Fix overflows in compensate() functions (high 7.8)
- [CVE-2024-42085](https://insights.sbomify.com/CVE-2024-42085/): usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock (medium 5.5)
- [CVE-2024-42084](https://insights.sbomify.com/CVE-2024-42084/): ftruncate: pass a signed offset (medium 5.5)
- [CVE-2024-42083](https://insights.sbomify.com/CVE-2024-42083/): ionic: fix kernel panic due to multi-buffer handling (high 8.8)
- [CVE-2024-42082](https://insights.sbomify.com/CVE-2024-42082/): xdp: Remove WARN() from __xdp_reg_mem_model() (medium 5.5)
- [CVE-2024-42081](https://insights.sbomify.com/CVE-2024-42081/): drm/xe/xe_devcoredump: Check NULL before assignments (medium 5.5)
- [CVE-2024-42080](https://insights.sbomify.com/CVE-2024-42080/): RDMA/restrack: Fix potential invalid address access (medium 5.5)
- [CVE-2024-4208](https://insights.sbomify.com/CVE-2024-4208/): Cross-site scripting in Kadence Blocks — Page Builder Toolkit for Gutenberg Editor (medium 6.4)
- [CVE-2024-42079](https://insights.sbomify.com/CVE-2024-42079/): gfs2: Fix NULL pointer dereference in gfs2_log_flush (medium 5.5)
- [CVE-2024-42078](https://insights.sbomify.com/CVE-2024-42078/): nfsd: initialise nfsd_info.mutex early. (medium 5.5)
- [CVE-2024-42077](https://insights.sbomify.com/CVE-2024-42077/): ocfs2: fix DIO failure due to insufficient transaction credits (medium 5.5)
- [CVE-2024-42076](https://insights.sbomify.com/CVE-2024-42076/): net: can: j1939: Initialize unused data in j1939_send_one() (medium 5.5)
- [CVE-2024-42075](https://insights.sbomify.com/CVE-2024-42075/): bpf: Fix remap of arena. (high 7.8)
- [CVE-2024-42074](https://insights.sbomify.com/CVE-2024-42074/): ASoC: amd: acp: add a null check for chip_pdev structure (medium 5.5)
- [CVE-2024-42073](https://insights.sbomify.com/CVE-2024-42073/): mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems (medium 5.5)
- [CVE-2024-42072](https://insights.sbomify.com/CVE-2024-42072/): bpf: Fix may_goto with negative offset. (high 7.8)
- [CVE-2024-42071](https://insights.sbomify.com/CVE-2024-42071/): ionic: use dev_consume_skb_any outside of napi (high 7.8)
- [CVE-2024-42070](https://insights.sbomify.com/CVE-2024-42070/): netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (medium 5.5)
- [CVE-2024-4207](https://insights.sbomify.com/CVE-2024-4207/): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (medium 4.4)
- [CVE-2024-42069](https://insights.sbomify.com/CVE-2024-42069/): net: mana: Fix possible double free in error handling path (high 7.8)
- [CVE-2024-42068](https://insights.sbomify.com/CVE-2024-42068/): bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro() (high 7.8)
- [CVE-2024-42067](https://insights.sbomify.com/CVE-2024-42067/): bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro() (high 7.8)
- [CVE-2024-42066](https://insights.sbomify.com/CVE-2024-42066/): drm/xe: Fix potential integer overflow in page size calculation (high 7.8)
- [CVE-2024-42065](https://insights.sbomify.com/CVE-2024-42065/): drm/xe: Add a NULL check in xe_ttm_stolen_mgr_init (medium 5.5)
- [CVE-2024-42064](https://insights.sbomify.com/CVE-2024-42064/): drm/amd/display: Skip pipe if the pipe idx not set properly (high 7.8)
- [CVE-2024-42063](https://insights.sbomify.com/CVE-2024-42063/): bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode (medium 5.5)
- [CVE-2024-42062](https://insights.sbomify.com/CVE-2024-42062/): Apache CloudStack: User Key Exposure to Domain Admins (high 7.2)
- [CVE-2024-42061](https://insights.sbomify.com/CVE-2024-42061/): Cross-site scripting in ATP series firmware (medium 6.1)
- [CVE-2024-42060](https://insights.sbomify.com/CVE-2024-42060/): Command injection in ATP series firmware (high 7.2)
- [CVE-2024-42059](https://insights.sbomify.com/CVE-2024-42059/): Command injection in ATP series firmware (high 7.2)
- [CVE-2024-42058](https://insights.sbomify.com/CVE-2024-42058/): Null dereference in ATP series firmware (high 7.5)
- [CVE-2024-42057](https://insights.sbomify.com/CVE-2024-42057/): Command injection in ATP series firmware (high 8.1)
- [CVE-2024-42056](https://insights.sbomify.com/CVE-2024-42056/): Information disclosure in retool:retool (medium 6.5)
- [CVE-2024-42055](https://insights.sbomify.com/CVE-2024-42055/): Cross-site scripting in cervantessec:cervantes (medium 6.1)
- [CVE-2024-42054](https://insights.sbomify.com/CVE-2024-42054/): File upload in cervantessec:cervantes (medium 5.4)
- [CVE-2024-42053](https://insights.sbomify.com/CVE-2024-42053/): Privilege escalation in splashtop:streamer (high 7.8)
- [CVE-2024-42052](https://insights.sbomify.com/CVE-2024-42052/): Privilege escalation in splashtop:streamer (high 7.8)
- [CVE-2024-42051](https://insights.sbomify.com/CVE-2024-42051/): Privilege escalation in splashtop:streamer (high 7.8)
- [CVE-2024-42050](https://insights.sbomify.com/CVE-2024-42050/): Privilege escalation in splashtop:streamer (high 7.0)
- [CVE-2024-4205](https://insights.sbomify.com/CVE-2024-4205/): Premium Addons for Elementor <= 4.10.31 - Missing Authorization to Information Disclosure (medium 4.3)
- [CVE-2024-42049](https://insights.sbomify.com/CVE-2024-42049/): TightVNC (Server for Windows) before 2.8.84 allows attackers to connect to the control pipe via a network connection. (critical 9.1)
- [CVE-2024-42048](https://insights.sbomify.com/CVE-2024-42048/): OpenOrange Business Framework version 1.15.5 installs to a directory with overly permissive access control, allowing all authenticated users (medium 6.5)
- [CVE-2024-42041](https://insights.sbomify.com/CVE-2024-42041/): The com.videodownload.browser.videodownloader (aka AppTool-Browser-Video All Video Downloader) application 20-30.05.24 for Android allows an (high 8.1)
- [CVE-2024-42040](https://insights.sbomify.com/CVE-2024-42040/): Memory corruption in denx:u-boot (high 8.1)
- [CVE-2024-4204](https://insights.sbomify.com/CVE-2024-4204/): Bulk Posts Editing For WordPress <= 4.2.3 - Cross-Site Request Forgery (medium 4.3)
- [CVE-2024-42039](https://insights.sbomify.com/CVE-2024-42039/): Missing authorization in EMUI (medium 4.3)
- [CVE-2024-42038](https://insights.sbomify.com/CVE-2024-42038/): Auth bypass in EMUI (high 8.8)
- [CVE-2024-42037](https://insights.sbomify.com/CVE-2024-42037/): Other in EMUI (critical 9.3)
- [CVE-2024-42036](https://insights.sbomify.com/CVE-2024-42036/): Missing authorization in EMUI (low 2.5)
- [CVE-2024-42035](https://insights.sbomify.com/CVE-2024-42035/): Missing authorization in EMUI (high 8.4)
- [CVE-2024-42034](https://insights.sbomify.com/CVE-2024-42034/): Other in EMUI (medium 6.6)
- [CVE-2024-42033](https://insights.sbomify.com/CVE-2024-42033/): Missing authorization in EMUI (medium 6.9)
- [CVE-2024-42032](https://insights.sbomify.com/CVE-2024-42032/): Missing authorization in EMUI (medium 4.4)
- [CVE-2024-42031](https://insights.sbomify.com/CVE-2024-42031/): Missing authorization in EMUI (high 7.5)
- [CVE-2024-42030](https://insights.sbomify.com/CVE-2024-42030/): Missing authorization in EMUI (medium 6.2)
- [CVE-2024-4203](https://insights.sbomify.com/CVE-2024-4203/): Premium Addons for Elementor <= 4.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting (medium 5.4)
- [CVE-2024-42029](https://insights.sbomify.com/CVE-2024-42029/): xdg-desktop-portal-hyprland (aka an XDG Desktop Portal backend for Hyprland) before 1.3.3 allows OS command execution, e.g., because single (medium 6.3)
- [CVE-2024-42028](https://insights.sbomify.com/CVE-2024-42028/): Privilege escalation in UniFi Network Application (high 8.8)
- [CVE-2024-42027](https://insights.sbomify.com/CVE-2024-42027/): Weak cryptography in Mobile (medium 6.7)
- [CVE-2024-42025](https://insights.sbomify.com/CVE-2024-42025/): Command injection in UniFi Network Application (high 7.8)
- [CVE-2024-42024](https://insights.sbomify.com/CVE-2024-42024/): Code injection in One (critical 9.1)
- [CVE-2024-42023](https://insights.sbomify.com/CVE-2024-42023/): Privilege escalation in One (high 7.8)
- [CVE-2024-42022](https://insights.sbomify.com/CVE-2024-42022/): Misconfiguration in One (high 7.5)
- [CVE-2024-42021](https://insights.sbomify.com/CVE-2024-42021/): Missing authorization in One (high 7.5)
- [CVE-2024-42020](https://insights.sbomify.com/CVE-2024-42020/): Cross-site scripting in One (high 7.3)
- [CVE-2024-4202](https://insights.sbomify.com/CVE-2024-4202/): Progress Telerik Reporting Local Instantiation Vulnerability (high 7.7)
- [CVE-2024-42019](https://insights.sbomify.com/CVE-2024-42019/): Information disclosure in One (critical 9.0)
- [CVE-2024-42018](https://insights.sbomify.com/CVE-2024-42018/): An issue was discovered in Atos Eviden SMC xScale before 1.6.6. (high 7.7)
- [CVE-2024-42017](https://insights.sbomify.com/CVE-2024-42017/): An issue was discovered in Atos Eviden iCare 2.7.1 through 2.7.11. (critical 10.0)
- [CVE-2024-42013](https://insights.sbomify.com/CVE-2024-42013/): In GRAU DATA Blocky before 3.1, Blocky-Gui has a Client-Side Enforcement of Server-Side Security vulnerability. (medium 6.4)
- [CVE-2024-42012](https://insights.sbomify.com/CVE-2024-42012/): GRAU DATA Blocky before 3.1 stores passwords encrypted rather than hashed. (medium 5.7)
- [CVE-2024-42011](https://insights.sbomify.com/CVE-2024-42011/): The Spotify app 8.9.58 for iOS has a buffer overflow in its use of strcat. (high 7.5)
- [CVE-2024-42010](https://insights.sbomify.com/CVE-2024-42010/): mod_css_styles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 insufficiently filters Cascading Style Sheets (CSS) token sequences in ren (high 7.5)
- [CVE-2024-4201](https://insights.sbomify.com/CVE-2024-4201/): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (medium 4.4)
- [CVE-2024-42009](https://insights.sbomify.com/CVE-2024-42009/): RoundCube Webmail Cross-Site Scripting (critical 9.3, exploited in the wild)
- [CVE-2024-42008](https://insights.sbomify.com/CVE-2024-42008/): Cross-site scripting in roundcube:webmail (critical 9.3)
- [CVE-2024-42007](https://insights.sbomify.com/CVE-2024-42007/): SPX (aka php-spx) through 0.4.15 allows SPX_UI_URI Directory Traversal to read arbitrary files. (medium 5.8)
- [CVE-2024-42006](https://insights.sbomify.com/CVE-2024-42006/): Information disclosure in keyfactor:aws orchestrator (high 7.5)
- [CVE-2024-42005](https://insights.sbomify.com/CVE-2024-42005/): Django SQL injection vulnerability (critical 9.8)
- [CVE-2024-42004](https://insights.sbomify.com/CVE-2024-42004/): Security feature bypass in Teams (work or school) (high 7.1)
- [CVE-2024-42002](https://insights.sbomify.com/CVE-2024-42002/): Unsafe use of eval() method in ros2 topic hz tool (high 8.6)
- [CVE-2024-42001](https://insights.sbomify.com/CVE-2024-42001/): Vonets WiFi Bridges Forced Browsing (medium 6.1)
- [CVE-2024-42000](https://insights.sbomify.com/CVE-2024-42000/): Unauthorized Access to view channels' details (low 2.7)
- [CVE-2024-4200](https://insights.sbomify.com/CVE-2024-4200/): Progress Telerik Reporting Local Deserialization Vulnerability (high 7.7)
- [CVE-2024-41999](https://insights.sbomify.com/CVE-2024-41999/): Misconfiguration in Smart-tab Android app (medium 6.8)
- [CVE-2024-41997](https://insights.sbomify.com/CVE-2024-41997/): An issue was discovered in version of Warp Terminal prior to 2024.07.18 (v0.2024.07.16.08.02). (medium 6.6)
- [CVE-2024-41996](https://insights.sbomify.com/CVE-2024-41996/): Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote att (high 7.5)
- [CVE-2024-41995](https://insights.sbomify.com/CVE-2024-41995/): Misconfiguration in JavaTM Platform (high 7.5)
- [CVE-2024-41992](https://insights.sbomify.com/CVE-2024-41992/): Wi-Fi Alliance wfa_dut (in Wi-Fi Test Suite) through 9.0.0 allows OS command injection via 802.11x frames because the system() library function is used. (high 8.8)
- [CVE-2024-41991](https://insights.sbomify.com/CVE-2024-41991/): Django vulnerable to denial-of-service attack (high 7.5)
- [CVE-2024-41990](https://insights.sbomify.com/CVE-2024-41990/): Django vulnerable to a denial-of-service attack (high 7.5)
- [CVE-2024-4199](https://insights.sbomify.com/CVE-2024-4199/): Bulk Posts Editing For WordPress <= 4.2.3 - Authenticated (Subscriber+) Missing Authorization (medium 4.3)
- [CVE-2024-41989](https://insights.sbomify.com/CVE-2024-41989/): Django memory consumption vulnerability (high 7.5)
- [CVE-2024-41988](https://insights.sbomify.com/CVE-2024-41988/): Missing Authentication for Critical Function vulnerability in TEM Opera Plus FM Family Transmitter (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/294/