# Vulnerabilities published in 2024


- [CVE-2024-41131](https://insights.sbomify.com/CVE-2024-41131/): Out-of-bounds Write in SixLabors ImageSharp (high 7.5)
- [CVE-2024-41130](https://insights.sbomify.com/CVE-2024-41130/): llama.cpp null pointer dereference in gguf_init_from_file (medium 5.4)
- [CVE-2024-4113](https://insights.sbomify.com/CVE-2024-4113/): Tenda TX9 SetSysTimeCfg sub_42D4DC stack-based overflow (high 8.8)
- [CVE-2024-41129](https://insights.sbomify.com/CVE-2024-41129/): The ops library leaks secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command (medium 4.4)
- [CVE-2024-41128](https://insights.sbomify.com/CVE-2024-41128/): Action Dispatch has possible ReDoS vulnerability in query parameter filtering (medium 6.6)
- [CVE-2024-41127](https://insights.sbomify.com/CVE-2024-41127/): Code injection in monkeytype (high 8.4)
- [CVE-2024-41126](https://insights.sbomify.com/CVE-2024-41126/): Out-of-bounds read when decoding SNMP messages in Contiki-NG (high 8.4)
- [CVE-2024-41125](https://insights.sbomify.com/CVE-2024-41125/): Out-of-bounds read in SNMP when decoding a string in Contiki-NG (high 8.4)
- [CVE-2024-41124](https://insights.sbomify.com/CVE-2024-41124/): Puncia Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS` (medium 6.3)
- [CVE-2024-41123](https://insights.sbomify.com/CVE-2024-41123/): REXML DoS vulnerability (medium 5.3)
- [CVE-2024-41122](https://insights.sbomify.com/CVE-2024-41122/): Custom environment variables allow to alter execution flow of plugins in Woodpecker (high 7.5)
- [CVE-2024-41121](https://insights.sbomify.com/CVE-2024-41121/): Custom workspace allow to overwrite plugin entrypoint executable in Woodpecker (high 8.8)
- [CVE-2024-41120](https://insights.sbomify.com/CVE-2024-41120/): streamlit-geospatial blind SSRF in pages/9_🔲_Vector_Data_Visualization.py (critical 9.8)
- [CVE-2024-4112](https://insights.sbomify.com/CVE-2024-4112/): Tenda TX9 SetVirtualServerCfg sub_42CB94 stack-based overflow (high 8.8)
- [CVE-2024-41119](https://insights.sbomify.com/CVE-2024-41119/): streamlit-geospatial remote code execution in pages/8_🏜️_Raster_Data_Visualization.py (critical 9.8)
- [CVE-2024-41118](https://insights.sbomify.com/CVE-2024-41118/): streamlit-geospatial blind SSRF in pages/7_📦_Web_Map_Service.py (high 7.5)
- [CVE-2024-41117](https://insights.sbomify.com/CVE-2024-41117/): Remote code execution in streamlit geospatial in pages/10_🌍_Earth_Engine_Datasets.py (critical 9.8)
- [CVE-2024-41116](https://insights.sbomify.com/CVE-2024-41116/): Remote code execution in streamlit geospatial in pages/1_📷_Timelapse.py MODIS Ocean Color SMI option vis_params (critical 9.8)
- [CVE-2024-41115](https://insights.sbomify.com/CVE-2024-41115/): Remote code execution in streamlit geospatial in pages/1_📷_Timelapse.py MODIS Ocean Color SMI option palette (critical 9.8)
- [CVE-2024-41114](https://insights.sbomify.com/CVE-2024-41114/): Code injection in streamlit-geospatial (critical 9.8)
- [CVE-2024-41113](https://insights.sbomify.com/CVE-2024-41113/): Code injection in streamlit-geospatial (critical 9.8)
- [CVE-2024-41112](https://insights.sbomify.com/CVE-2024-41112/): Remote code execution in streamlit geospatial in pages/1_📷_Timelapse.py Any Earth Engine ImageCollection option palette (critical 9.8)
- [CVE-2024-41111](https://insights.sbomify.com/CVE-2024-41111/): BishopFox Sliver Authenticated Remote Code Execution (high 7.2)
- [CVE-2024-41110](https://insights.sbomify.com/CVE-2024-41110/): Moby authz zero length regression (critical 10.0)
- [CVE-2024-4111](https://insights.sbomify.com/CVE-2024-4111/): Tenda TX9 SetLEDCfg sub_42BD7C stack-based overflow (high 8.8)
- [CVE-2024-41109](https://insights.sbomify.com/CVE-2024-41109/): Pimcore vulnerable to disclosure of system and database information behind /admin firewall (medium 6.3)
- [CVE-2024-41108](https://insights.sbomify.com/CVE-2024-41108/): FOG Sensitive Information Disclosure (high 7.5)
- [CVE-2024-41107](https://insights.sbomify.com/CVE-2024-41107/): Apache CloudStack: SAML Signature Exclusion (high 8.1)
- [CVE-2024-41098](https://insights.sbomify.com/CVE-2024-41098/): ata: libata-core: Fix null pointer dereference on error (medium 5.5)
- [CVE-2024-41097](https://insights.sbomify.com/CVE-2024-41097/): usb: atm: cxacru: fix endpoint checking in cxacru_bind() (medium 5.5)
- [CVE-2024-41096](https://insights.sbomify.com/CVE-2024-41096/): PCI/MSI: Fix UAF in msi_capability_init (high 7.8)
- [CVE-2024-41095](https://insights.sbomify.com/CVE-2024-41095/): drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (medium 5.5)
- [CVE-2024-41094](https://insights.sbomify.com/CVE-2024-41094/): drm/fbdev-dma: Only set smem_start is enable per module option (medium 5.5)
- [CVE-2024-41093](https://insights.sbomify.com/CVE-2024-41093/): drm/amdgpu: avoid using null object of framebuffer (medium 5.5)
- [CVE-2024-41092](https://insights.sbomify.com/CVE-2024-41092/): drm/i915/gt: Fix potential UAF by revoke of fence registers (high 7.8)
- [CVE-2024-41091](https://insights.sbomify.com/CVE-2024-41091/): tun: add missing verification for short frame (high 8.8)
- [CVE-2024-41090](https://insights.sbomify.com/CVE-2024-41090/): tap: add missing verification for short frame (high 8.8)
- [CVE-2024-41089](https://insights.sbomify.com/CVE-2024-41089/): drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (medium 5.5)
- [CVE-2024-41088](https://insights.sbomify.com/CVE-2024-41088/): can: mcp251xfd: fix infinite loop when xmit fails (medium 5.5)
- [CVE-2024-41087](https://insights.sbomify.com/CVE-2024-41087/): ata: libata-core: Fix double free on error (high 7.8)
- [CVE-2024-41086](https://insights.sbomify.com/CVE-2024-41086/): bcachefs: Fix sb_field_downgrade validation (high 7.8)
- [CVE-2024-41085](https://insights.sbomify.com/CVE-2024-41085/): cxl/mem: Fix no cxl_nvd during pmem region auto-assembling (medium 5.5)
- [CVE-2024-41084](https://insights.sbomify.com/CVE-2024-41084/): cxl/region: Avoid null pointer dereference in region lookup (medium 5.5)
- [CVE-2024-41083](https://insights.sbomify.com/CVE-2024-41083/): netfs: Fix netfs_page_mkwrite() to check folio->mapping is valid (medium 5.5)
- [CVE-2024-41082](https://insights.sbomify.com/CVE-2024-41082/): nvme-fabrics: use reserved tag for reg read/write command (medium 5.5)
- [CVE-2024-41081](https://insights.sbomify.com/CVE-2024-41081/): ila: block BH in ila_output() (critical 9.8)
- [CVE-2024-41080](https://insights.sbomify.com/CVE-2024-41080/): io_uring: fix possible deadlock in io_register_iowq_max_workers() (medium 5.5)
- [CVE-2024-41079](https://insights.sbomify.com/CVE-2024-41079/): nvmet: always initialize cqe.result (high 7.5)
- [CVE-2024-41078](https://insights.sbomify.com/CVE-2024-41078/): btrfs: qgroup: fix quota root leak after quota disable failure (medium 5.5)
- [CVE-2024-41077](https://insights.sbomify.com/CVE-2024-41077/): null_blk: fix validation of block size (medium 5.5)
- [CVE-2024-41076](https://insights.sbomify.com/CVE-2024-41076/): NFSv4: Fix memory leak in nfs4_set_security_label (medium 5.5)
- [CVE-2024-41075](https://insights.sbomify.com/CVE-2024-41075/): cachefiles: add consistency check for copen/cread (high 7.8)
- [CVE-2024-41074](https://insights.sbomify.com/CVE-2024-41074/): cachefiles: Set object to close if ondemand_id < 0 in copen (high 7.8)
- [CVE-2024-41073](https://insights.sbomify.com/CVE-2024-41073/): nvme: avoid double free special payload (critical 9.8)
- [CVE-2024-41072](https://insights.sbomify.com/CVE-2024-41072/): wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (medium 5.5)
- [CVE-2024-41070](https://insights.sbomify.com/CVE-2024-41070/): KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (high 7.8)
- [CVE-2024-4107](https://insights.sbomify.com/CVE-2024-4107/): Elementor Website Builder Pro <= 3.21.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (medium 6.4)
- [CVE-2024-41069](https://insights.sbomify.com/CVE-2024-41069/): ASoC: topology: Fix references to freed memory (high 7.8)
- [CVE-2024-41068](https://insights.sbomify.com/CVE-2024-41068/): s390/sclp: Fix sclp_init() cleanup on failure (medium 5.5)
- [CVE-2024-41067](https://insights.sbomify.com/CVE-2024-41067/): btrfs: scrub: handle RST lookup error correctly (medium 5.5)
- [CVE-2024-41066](https://insights.sbomify.com/CVE-2024-41066/): ibmvnic: Add tx check to prevent skb leak (high 7.5)
- [CVE-2024-41065](https://insights.sbomify.com/CVE-2024-41065/): powerpc/pseries: Whitelist dtl slub object for copying to userspace (medium 5.5)
- [CVE-2024-41064](https://insights.sbomify.com/CVE-2024-41064/): powerpc/eeh: avoid possible crash when edev->pdev changes (high 7.8)
- [CVE-2024-41063](https://insights.sbomify.com/CVE-2024-41063/): Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (medium 5.5)
- [CVE-2024-41062](https://insights.sbomify.com/CVE-2024-41062/): bluetooth/l2cap: sync sock recv cb and release (high 8.8)
- [CVE-2024-41061](https://insights.sbomify.com/CVE-2024-41061/): drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport (high 7.8)
- [CVE-2024-41060](https://insights.sbomify.com/CVE-2024-41060/): drm/radeon: check bo_va->bo is non-NULL before using it (high 7.8)
- [CVE-2024-4106](https://insights.sbomify.com/CVE-2024-4106/): Hardcoded credentials in CI Server (medium 5.3)
- [CVE-2024-41059](https://insights.sbomify.com/CVE-2024-41059/): hfsplus: fix uninit-value in copy_name (high 7.8)
- [CVE-2024-41058](https://insights.sbomify.com/CVE-2024-41058/): cachefiles: fix slab-use-after-free in fscache_withdraw_volume() (high 7.8)
- [CVE-2024-41057](https://insights.sbomify.com/CVE-2024-41057/): cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (high 7.8)
- [CVE-2024-41056](https://insights.sbomify.com/CVE-2024-41056/): firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (high 7.3)
- [CVE-2024-41055](https://insights.sbomify.com/CVE-2024-41055/): mm: prevent derefencing NULL ptr in pfn_section_valid() (medium 5.5)
- [CVE-2024-41054](https://insights.sbomify.com/CVE-2024-41054/): scsi: ufs: core: Fix ufshcd_clear_cmd racing issue (medium 5.5)
- [CVE-2024-41053](https://insights.sbomify.com/CVE-2024-41053/): scsi: ufs: core: Fix ufshcd_abort_one racing issue (medium 5.5)
- [CVE-2024-41052](https://insights.sbomify.com/CVE-2024-41052/): vfio/pci: Init the count variable in collecting hot-reset devices (medium 5.5)
- [CVE-2024-41051](https://insights.sbomify.com/CVE-2024-41051/): cachefiles: wait for ondemand_object_worker to finish when dropping object (high 7.8)
- [CVE-2024-41050](https://insights.sbomify.com/CVE-2024-41050/): cachefiles: cyclic allocation of msg_id to avoid reuse (high 7.8)
- [CVE-2024-4105](https://insights.sbomify.com/CVE-2024-4105/): Cross-site scripting in CI Server (medium 5.8)
- [CVE-2024-41049](https://insights.sbomify.com/CVE-2024-41049/): filelock: fix potential use-after-free in posix_lock_inode (high 7.8)
- [CVE-2024-41048](https://insights.sbomify.com/CVE-2024-41048/): skmsg: Skip zero length skb in sk_msg_recvmsg (high 7.5)
- [CVE-2024-41047](https://insights.sbomify.com/CVE-2024-41047/): i40e: Fix XDP program unloading while removing the driver (medium 5.5)
- [CVE-2024-41046](https://insights.sbomify.com/CVE-2024-41046/): net: ethernet: lantiq_etop: fix double free in detach (high 8.8)
- [CVE-2024-41045](https://insights.sbomify.com/CVE-2024-41045/): bpf: Defer work in bpf_timer_cancel_and_free (high 7.8)
- [CVE-2024-41044](https://insights.sbomify.com/CVE-2024-41044/): ppp: reject claimed-as-LCP but actually malformed packets (medium 5.5)
- [CVE-2024-41043](https://insights.sbomify.com/CVE-2024-41043/): netfilter: nfnetlink_queue: drop bogus WARN_ON (medium 5.5)
- [CVE-2024-41042](https://insights.sbomify.com/CVE-2024-41042/): netfilter: nf_tables: prefer nft_chain_validate (high 7.8)
- [CVE-2024-41041](https://insights.sbomify.com/CVE-2024-41041/): udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (high 7.8)
- [CVE-2024-41040](https://insights.sbomify.com/CVE-2024-41040/): net/sched: Fix UAF when resolving a clash (critical 9.8)
- [CVE-2024-4104](https://insights.sbomify.com/CVE-2024-4104/): ADFO – Custom data in admin dashboard <= 1.9.0 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2024-41039](https://insights.sbomify.com/CVE-2024-41039/): firmware: cs_dsp: Fix overflow checking of wmfw header (high 7.8)
- [CVE-2024-41038](https://insights.sbomify.com/CVE-2024-41038/): firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (high 7.8)
- [CVE-2024-41037](https://insights.sbomify.com/CVE-2024-41037/): ASoC: SOF: Intel: hda: fix null deref on system suspend entry (medium 5.5)
- [CVE-2024-41036](https://insights.sbomify.com/CVE-2024-41036/): net: ks8851: Fix deadlock with the SPI chip variant (high 7.5)
- [CVE-2024-41035](https://insights.sbomify.com/CVE-2024-41035/): USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (medium 5.5)
- [CVE-2024-41034](https://insights.sbomify.com/CVE-2024-41034/): nilfs2: fix kernel bug on rename operation of broken directory (high 7.8)
- [CVE-2024-41033](https://insights.sbomify.com/CVE-2024-41033/): cachestat: do not flush stats in recency check (medium 5.5)
- [CVE-2024-41032](https://insights.sbomify.com/CVE-2024-41032/): mm: vmalloc: check if a hash-index is in cpu_possible_mask (high 7.8)
- [CVE-2024-41031](https://insights.sbomify.com/CVE-2024-41031/): mm/filemap: skip to create PMD-sized page cache if needed (medium 5.5)
- [CVE-2024-41030](https://insights.sbomify.com/CVE-2024-41030/): ksmbd: discard write access to the directory open (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/301/