Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 313 of 521.
- CVE-2024-39491 ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance
- CVE-2024-39490 ipv6: sr: fix missing sk_buff release in seg6_input_core
- CVE-2024-39489 ipv6: sr: fix memleak in seg6_hmac_init_algo
- CVE-2024-39488 arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- CVE-2024-39487 bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- CVE-2024-39486 drm/drm_file: Fix pid refcounting race
- CVE-2024-39485 media: v4l: async: Properly re-initialise notifier entry in unregister
- CVE-2024-39484 mmc: davinci: Don't strip remove function when driver is builtin
- CVE-2024-39483 KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked
- CVE-2024-39482 bcache: fix variable length array abuse in btree_iter
- CVE-2024-39481 media: mc: Fix graph walk in media_pipeline_start
- CVE-2024-39480 kdb: Fix buffer overflow during tab-complete
- CVE-2024-3948 SourceCodester Home Clean Service System Photo student.add.php unrestricted upload
- CVE-2024-39479 drm/i915/hwmon: Get rid of devm
- CVE-2024-39478 crypto: starfive - Do not free stack buffer
- CVE-2024-39477 mm/hugetlb: do not call vma_add_reservation upon ENOMEM
- CVE-2024-39476 md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- CVE-2024-39475 fbdev: savage: Handle err return when savagefb_check_var failed
- CVE-2024-39474 mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL
- CVE-2024-39473 ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension
- CVE-2024-39472 xfs: fix log recovery buffer allocation for the legacy h_size fixup
- CVE-2024-39471 drm/amdgpu: add error handle to avoid out-of-bounds
- CVE-2024-39470 eventfs: Fix a possible null pointer dereference in eventfs_find_events()
- CVE-2024-3947 WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_settings
- CVE-2024-39469 nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- CVE-2024-39468 smb: client: fix deadlock in smb2_find_smb_tcon()
- CVE-2024-39467 f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- CVE-2024-39466 thermal/drivers/qcom/lmh: Check for SCM availability at probe
- CVE-2024-39465 media: mgb4: Fix double debugfs remove
- CVE-2024-39464 media: v4l: async: Fix notifier list entry init
- CVE-2024-39463 9p: add missing locking around taking dentry fid list
- CVE-2024-39462 clk: bcm: dvp: Assign ->num before accessing ->hws
- CVE-2024-39461 clk: bcm: rpi: Assign ->num before accessing ->hws
- CVE-2024-39460 Bitbucket OAuth access token exposed in the build log by Bitbucket Branch Source Plugin
- CVE-2024-3946 WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Settings
- CVE-2024-39459 Secret file credentials stored unencrypted in rare cases by Plain Credentials Plugin
- CVE-2024-39458 Exposure of secrets through system log in Jenkins Structs Plugin
- CVE-2024-39457 Cross-site scripting in Cybozu Garoon
- CVE-2024-3945 WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_manage()
- CVE-2024-39442 Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T750/T765/T760/T770/T820/S8000/T8300/T9300
- CVE-2024-39441 Missing authorization in T310/T606/T612/T616/T610/T618/T750/T765/T760/T770/T820/S8000
- CVE-2024-39440 Null dereference in T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2024-3944 WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Task Comments
- CVE-2024-39439 Memory corruption in T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2024-39438 Command injection in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2024-39437 Command injection in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2024-39436 Command injection in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2024-39435 Privilege escalation in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2024-39434 Memory corruption in T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2024-39433 Memory corruption in T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2024-39432 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2024-39431 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2024-39430 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618
- CVE-2024-3943 WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_addcomment
- CVE-2024-39429 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618
- CVE-2024-39428 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2024-39427 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2024-39426 ZDI-CAN-24312: Adobe Acrobat Reader DC Annotation Memory Corruption Remote Code Execution Vulnerability
- CVE-2024-39425 Security vulnerability in AdobeARMHelper
- CVE-2024-39424 ZDI-CAN-24309: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-39423 Memory corruption in Acrobat Reader
- CVE-2024-39422 ZDI-CAN-24090: New Vulnerability Report - Use-after-free remote code execution vulnerability in Adobe Acrobat Reader DC
- CVE-2024-39420 Acrobat Reader | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
- CVE-2024-3942 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.8 - Missing Authorization
- CVE-2024-39419 A user without ship permissions can ship the orders
- CVE-2024-39418 Adobe Commerce | Improper Authorization (CWE-285)
- CVE-2024-39417 An unauthorized user can export the Shipping Report
- CVE-2024-39416 Unauthorized user can export Orders Sale Report
- CVE-2024-39415 An unauthorized user can export the Tax Sales Report
- CVE-2024-39414 Being able to import/export tax rates without proper privileges
- CVE-2024-39413 An unauthorized user can export the Invoiced Sales Report
- CVE-2024-39412 Adobe Commerce | Improper Authorization (CWE-285)
- CVE-2024-39411 Adobe Commerce | Improper Authorization (CWE-285)
- CVE-2024-39410 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
- CVE-2024-3941 reCAPTCHA Jetpack <= 0.2.2 - Stored XSS via CSRF
- CVE-2024-39409 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
- CVE-2024-39408 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
- CVE-2024-39407 Adobe Commerce | Improper Authorization (CWE-285)
- CVE-2024-39406 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2024-39405 Adobe Commerce | Improper Authorization (CWE-285)
- CVE-2024-39404 A user without Shop Policy Parameters section privilege can alter the shop policy parameters section
- CVE-2024-39403 Stored XSS through Webhook module public key configuration
- CVE-2024-39402 Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
- CVE-2024-39401 Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
- CVE-2024-39400 DOM XSS through integrations can impact other admins
- CVE-2024-3940 reCAPTCHA Jetpack <= 0.2.2 - Settings Update via CSRF
- CVE-2024-39399 [Paris] Path Traversal lead to local file read
- CVE-2024-39398 OTP 2FA can be bruteforced
- CVE-2024-39397 Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)
- CVE-2024-39396 Adobe Indesign 2024 PCX File Parsing Out Of Bound Read
- CVE-2024-39395 Adobe Indesign 2024 DOC File Parsing Null Pointer Dereference
- CVE-2024-39394 Adobe Indesign 2024 PDF File Parsing Out Of Bound Write Remote Code Execution Vulnerability
- CVE-2024-39393 Adobe Indesign 2024 PCT File Parsing Memory Corruption Remote Code Execution Vulnerability
- CVE-2024-39392 Adobe Indesign 2024 EPS File Parsing Heap Memory Corruption Remote Code Execution Vulnerability
- CVE-2024-39391 Adobe Indesign XLS File Parsing Out Of Bound Write Remote Code execution vulnerability
- CVE-2024-39390 Adobe Indesign 2024 DOC File Parsing Memory Corruption
- CVE-2024-3939 Ditty < 3.1.36 - Author+ Stored XSS
- CVE-2024-39389 Adobe Indesign PDF File Parsing Stack Based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-39388 ZDI-CAN-24055: Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-39387 ZDI-CAN-24047: Adobe Bridge AVI FIle Parsing Out-Of-Bounds Read Information Disclosure Vulnerability