Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 303 of 521.
- CVE-2024-40935 cachefiles: flush all requests after setting CACHEFILES_DEAD
- CVE-2024-40934 HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- CVE-2024-40933 iio: temperature: mlx90635: Fix ERR_PTR dereference in mlx90635_probe()
- CVE-2024-40932 drm/exynos/vidi: fix memory leak in .get_modes()
- CVE-2024-40931 mptcp: ensure snd_una is properly initialized on connect
- CVE-2024-40930 wifi: cfg80211: validate HE operation element parsing
- CVE-2024-4093 SourceCodester Simple Subscription Website view_application.php sql injection
- CVE-2024-40929 wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- CVE-2024-40928 net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()
- CVE-2024-40927 xhci: Handle TD clearing for multiple streams case
- CVE-2024-40926 drm/nouveau: don't attempt to schedule hpd_work on headless cards
- CVE-2024-40925 block: fix request.queuelist usage in flush
- CVE-2024-40924 drm/i915/dpt: Make DPT object unshrinkable
- CVE-2024-40923 vmxnet3: disable rx data ring on dma allocation failure
- CVE-2024-40922 io_uring/rsrc: don't lock while !TASK_RUNNING
- CVE-2024-40921 net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state
- CVE-2024-40920 net: bridge: mst: fix suspicious rcu usage in br_mst_set_state
- CVE-2024-4092 Slider Revolution <= 6.7.7 - Authenticated (Author+) Stored Cross-Site Scripting via htmltag Parameter
- CVE-2024-40919 bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send()
- CVE-2024-40918 parisc: Try to fix random segmentation faults in package builds
- CVE-2024-40917 memblock: make memblock_set_node() also warn about use of MAX_NUMNODES
- CVE-2024-40916 drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
- CVE-2024-40915 riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- CVE-2024-40914 mm/huge_memory: don't unpoison huge_zero_folio
- CVE-2024-40913 cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- CVE-2024-40912 wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- CVE-2024-40911 wifi: cfg80211: Lock wiphy in cfg80211_get_station
- CVE-2024-40910 ax25: Fix refcount imbalance on inbound connections
- CVE-2024-4091 Responsive Gallery Grid < 2.3.15 - Admin+ Stored XSS
- CVE-2024-40909 bpf: Fix a potential use-after-free in bpf_link_free()
- CVE-2024-40908 bpf: Set run context for rawtp test_run callback
- CVE-2024-40907 ionic: fix kernel panic in XDP_TX action
- CVE-2024-40906 net/mlx5: Always stop health timer during driver removal
- CVE-2024-40905 ipv6: fix possible race in __fib6_drop_pcpu_from()
- CVE-2024-40904 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- CVE-2024-40903 usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps
- CVE-2024-40902 jfs: xattr: fix buffer overflow for invalid xattr
- CVE-2024-40901 scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- CVE-2024-40900 cachefiles: remove requests from xarray during flushing requests
- CVE-2024-4090 My Sticky Bar < 2.7.2 - Admin+ Stored XSS
- CVE-2024-40899 cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- CVE-2024-40898 Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows
- CVE-2024-40897 Memory corruption in ORC
- CVE-2024-40896 XML external entity in libxml2
- CVE-2024-40895 Command injection in EDR Plus Pack
- CVE-2024-40893 Firewalla BTLE Authenticated Command Injection
- CVE-2024-40892 Firewalla BTLE Weak Credentials
- CVE-2024-40891 Zyxel DSL CPE OS Command Injection
- CVE-2024-40890 Zyxel DSL CPE OS Command Injection
- CVE-2024-4089 Privilege escalation in SuperFile
- CVE-2024-40887 Race condition in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software for Windows
- CVE-2024-40886 One-click Client-Side Path Traversal Leading to CSRF in User Management admin page
- CVE-2024-40885 Use after free in Intel(R) Server M20NTP BIOS
- CVE-2024-40884 Unauthorized disabling of invite URL
- CVE-2024-40883 Cross-site request forgery in WRC-X1500GS-B
- CVE-2024-4088 Gutenberg Blocks and Page Layouts – Attire Blocks <= 1.9.2 - Missing Authorization
- CVE-2024-40875 Cross-site scripting vulnerability in the Secure Access administrative console prior to 13.52
- CVE-2024-40873 XSS in Secure Access administrative console
- CVE-2024-40872 Elevation of privilege in Absolute Secure Access clients and servers
- CVE-2024-4087 Cross-site scripting in Royal Addons for Elementor – Addons and Templates Kit for Elementor
- CVE-2024-40867 Security feature bypass in iOS and iPadOS
- CVE-2024-40866 Other in Safari
- CVE-2024-40865 Information disclosure in visionOS
- CVE-2024-40864 Information disclosure in iOS and iPadOS
- CVE-2024-40863 Information disclosure in iOS and iPadOS
- CVE-2024-40862 Information disclosure in Xcode
- CVE-2024-40861 Privilege escalation in macOS
- CVE-2024-40860 Business logic in macOS
- CVE-2024-4086 CM Tooltip Glossary – Powerful Glossary Plugin <= 4.2.11 - Cross-Site Request Forgery
- CVE-2024-40859 Security feature bypass in macOS
- CVE-2024-40858 Missing authorization in macOS
- CVE-2024-40857 Cross-site scripting in Safari
- CVE-2024-40856 Security feature bypass in iOS and iPadOS
- CVE-2024-40855 Security feature bypass in macOS
- CVE-2024-40854 Memory corruption in iOS and iPadOS
- CVE-2024-40853 Security feature bypass in iOS and iPadOS
- CVE-2024-40852 Missing authorization in iOS and iPadOS
- CVE-2024-40851 Security feature bypass in iOS and iPadOS
- CVE-2024-40850 Information disclosure in iOS and iPadOS
- CVE-2024-4085 Tabellen von faustball.com <= 2.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2024-40849 Race condition in macOS
- CVE-2024-40848 Security feature bypass in macOS
- CVE-2024-40847 Security feature bypass in macOS
- CVE-2024-40846 Memory corruption in macOS
- CVE-2024-40845 Memory corruption in macOS
- CVE-2024-40844 Information disclosure in iOS and iPadOS
- CVE-2024-40843 Security feature bypass in macOS
- CVE-2024-40842 Information disclosure in macOS
- CVE-2024-40841 Memory corruption in macOS
- CVE-2024-40840 Information disclosure in iOS and iPadOS
- CVE-2024-4084 SSRF vulnerability in mintplex-labs/anything-llm
- CVE-2024-40839 Missing authorization in iOS and iPadOS
- CVE-2024-40838 Information disclosure in macOS
- CVE-2024-40837 Security feature bypass in macOS
- CVE-2024-40836 Security feature bypass in iOS and iPadOS
- CVE-2024-40835 Security feature bypass in iOS and iPadOS
- CVE-2024-40834 Security feature bypass in macOS
- CVE-2024-40833 Security feature bypass in iOS and iPadOS
- CVE-2024-40832 Information disclosure in macOS
- CVE-2024-40831 Missing authorization in macOS