# Vulnerabilities published in 2024


- [CVE-2024-39491](https://insights.sbomify.com/CVE-2024-39491/): ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance (medium 5.5)
- [CVE-2024-39490](https://insights.sbomify.com/CVE-2024-39490/): ipv6: sr: fix missing sk_buff release in seg6_input_core (medium 6.2)
- [CVE-2024-39489](https://insights.sbomify.com/CVE-2024-39489/): ipv6: sr: fix memleak in seg6_hmac_init_algo (medium 5.5)
- [CVE-2024-39488](https://insights.sbomify.com/CVE-2024-39488/): arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (medium 5.5)
- [CVE-2024-39487](https://insights.sbomify.com/CVE-2024-39487/): bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (high 7.1)
- [CVE-2024-39486](https://insights.sbomify.com/CVE-2024-39486/): drm/drm_file: Fix pid refcounting race (high 7.8)
- [CVE-2024-39485](https://insights.sbomify.com/CVE-2024-39485/): media: v4l: async: Properly re-initialise notifier entry in unregister (medium 5.5)
- [CVE-2024-39484](https://insights.sbomify.com/CVE-2024-39484/): mmc: davinci: Don't strip remove function when driver is builtin (medium 5.5)
- [CVE-2024-39483](https://insights.sbomify.com/CVE-2024-39483/): KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (high 7.1)
- [CVE-2024-39482](https://insights.sbomify.com/CVE-2024-39482/): bcache: fix variable length array abuse in btree_iter (high 7.8)
- [CVE-2024-39481](https://insights.sbomify.com/CVE-2024-39481/): media: mc: Fix graph walk in media_pipeline_start (high 7.8)
- [CVE-2024-39480](https://insights.sbomify.com/CVE-2024-39480/): kdb: Fix buffer overflow during tab-complete (high 8.4)
- [CVE-2024-3948](https://insights.sbomify.com/CVE-2024-3948/): SourceCodester Home Clean Service System Photo student.add.php unrestricted upload (medium 6.3)
- [CVE-2024-39479](https://insights.sbomify.com/CVE-2024-39479/): drm/i915/hwmon: Get rid of devm (high 7.8)
- [CVE-2024-39478](https://insights.sbomify.com/CVE-2024-39478/): crypto: starfive - Do not free stack buffer (high 7.8)
- [CVE-2024-39477](https://insights.sbomify.com/CVE-2024-39477/): mm/hugetlb: do not call vma_add_reservation upon ENOMEM (high 7.8)
- [CVE-2024-39476](https://insights.sbomify.com/CVE-2024-39476/): md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (medium 5.5)
- [CVE-2024-39475](https://insights.sbomify.com/CVE-2024-39475/): fbdev: savage: Handle err return when savagefb_check_var failed (medium 5.5)
- [CVE-2024-39474](https://insights.sbomify.com/CVE-2024-39474/): mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL (medium 5.5)
- [CVE-2024-39473](https://insights.sbomify.com/CVE-2024-39473/): ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension (medium 5.5)
- [CVE-2024-39472](https://insights.sbomify.com/CVE-2024-39472/): xfs: fix log recovery buffer allocation for the legacy h_size fixup (high 7.3)
- [CVE-2024-39471](https://insights.sbomify.com/CVE-2024-39471/): drm/amdgpu: add error handle to avoid out-of-bounds (high 7.8)
- [CVE-2024-39470](https://insights.sbomify.com/CVE-2024-39470/): eventfs: Fix a possible null pointer dereference in eventfs_find_events() (medium 5.5)
- [CVE-2024-3947](https://insights.sbomify.com/CVE-2024-3947/): WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_settings (medium 4.3)
- [CVE-2024-39469](https://insights.sbomify.com/CVE-2024-39469/): nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (high 7.1)
- [CVE-2024-39468](https://insights.sbomify.com/CVE-2024-39468/): smb: client: fix deadlock in smb2_find_smb_tcon() (high 7.5)
- [CVE-2024-39467](https://insights.sbomify.com/CVE-2024-39467/): f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() (high 7.8)
- [CVE-2024-39466](https://insights.sbomify.com/CVE-2024-39466/): thermal/drivers/qcom/lmh: Check for SCM availability at probe (medium 5.5)
- [CVE-2024-39465](https://insights.sbomify.com/CVE-2024-39465/): media: mgb4: Fix double debugfs remove (medium 5.5)
- [CVE-2024-39464](https://insights.sbomify.com/CVE-2024-39464/): media: v4l: async: Fix notifier list entry init (medium 5.5)
- [CVE-2024-39463](https://insights.sbomify.com/CVE-2024-39463/): 9p: add missing locking around taking dentry fid list (high 7.8)
- [CVE-2024-39462](https://insights.sbomify.com/CVE-2024-39462/): clk: bcm: dvp: Assign ->num before accessing ->hws (critical 9.8)
- [CVE-2024-39461](https://insights.sbomify.com/CVE-2024-39461/): clk: bcm: rpi: Assign ->num before accessing ->hws (medium 5.5)
- [CVE-2024-39460](https://insights.sbomify.com/CVE-2024-39460/): Bitbucket OAuth access token exposed in the build log by Bitbucket Branch Source Plugin (medium 4.3)
- [CVE-2024-3946](https://insights.sbomify.com/CVE-2024-3946/): WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Settings (medium 4.4)
- [CVE-2024-39459](https://insights.sbomify.com/CVE-2024-39459/): Secret file credentials stored unencrypted in rare cases by Plain Credentials Plugin (medium 4.3)
- [CVE-2024-39458](https://insights.sbomify.com/CVE-2024-39458/): Exposure of secrets through system log in Jenkins Structs Plugin (low 3.1)
- [CVE-2024-39457](https://insights.sbomify.com/CVE-2024-39457/): Cross-site scripting in Cybozu Garoon (medium 5.4)
- [CVE-2024-3945](https://insights.sbomify.com/CVE-2024-3945/): WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_manage() (medium 4.3)
- [CVE-2024-39442](https://insights.sbomify.com/CVE-2024-39442/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T750/T765/T760/T770/T820/S8000/T8300/T9300 (medium 6.2)
- [CVE-2024-39441](https://insights.sbomify.com/CVE-2024-39441/): Missing authorization in T310/T606/T612/T616/T610/T618/T750/T765/T760/T770/T820/S8000 (high 7.1)
- [CVE-2024-39440](https://insights.sbomify.com/CVE-2024-39440/): Null dereference in T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 6.2)
- [CVE-2024-3944](https://insights.sbomify.com/CVE-2024-3944/): WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Task Comments (medium 4.4)
- [CVE-2024-39439](https://insights.sbomify.com/CVE-2024-39439/): Memory corruption in T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 6.2)
- [CVE-2024-39438](https://insights.sbomify.com/CVE-2024-39438/): Command injection in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 6.5)
- [CVE-2024-39437](https://insights.sbomify.com/CVE-2024-39437/): Command injection in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 6.5)
- [CVE-2024-39436](https://insights.sbomify.com/CVE-2024-39436/): Command injection in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 6.5)
- [CVE-2024-39435](https://insights.sbomify.com/CVE-2024-39435/): Privilege escalation in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 6.5)
- [CVE-2024-39434](https://insights.sbomify.com/CVE-2024-39434/): Memory corruption in T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 6.2)
- [CVE-2024-39433](https://insights.sbomify.com/CVE-2024-39433/): Memory corruption in T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 6.2)
- [CVE-2024-39432](https://insights.sbomify.com/CVE-2024-39432/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (high 8.3)
- [CVE-2024-39431](https://insights.sbomify.com/CVE-2024-39431/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (high 8.3)
- [CVE-2024-39430](https://insights.sbomify.com/CVE-2024-39430/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618 (medium 5.1)
- [CVE-2024-3943](https://insights.sbomify.com/CVE-2024-3943/): WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_addcomment (medium 4.3)
- [CVE-2024-39429](https://insights.sbomify.com/CVE-2024-39429/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618 (medium 5.1)
- [CVE-2024-39428](https://insights.sbomify.com/CVE-2024-39428/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 6.8)
- [CVE-2024-39427](https://insights.sbomify.com/CVE-2024-39427/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.1)
- [CVE-2024-39426](https://insights.sbomify.com/CVE-2024-39426/): ZDI-CAN-24312: Adobe Acrobat Reader DC Annotation Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-39425](https://insights.sbomify.com/CVE-2024-39425/): Security vulnerability in AdobeARMHelper (high 7.0)
- [CVE-2024-39424](https://insights.sbomify.com/CVE-2024-39424/): ZDI-CAN-24309: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-39423](https://insights.sbomify.com/CVE-2024-39423/): Memory corruption in Acrobat Reader (high 7.8)
- [CVE-2024-39422](https://insights.sbomify.com/CVE-2024-39422/): ZDI-CAN-24090: New Vulnerability Report - Use-after-free remote code execution vulnerability in Adobe Acrobat Reader DC (high 7.8)
- [CVE-2024-39420](https://insights.sbomify.com/CVE-2024-39420/): Acrobat Reader | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) (high 7.0)
- [CVE-2024-3942](https://insights.sbomify.com/CVE-2024-3942/): MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.8 - Missing Authorization (medium 6.3)
- [CVE-2024-39419](https://insights.sbomify.com/CVE-2024-39419/): A user without ship permissions can ship the orders (medium 4.3)
- [CVE-2024-39418](https://insights.sbomify.com/CVE-2024-39418/): Adobe Commerce | Improper Authorization (CWE-285) (medium 5.4)
- [CVE-2024-39417](https://insights.sbomify.com/CVE-2024-39417/): An unauthorized user can export the Shipping Report (medium 4.3)
- [CVE-2024-39416](https://insights.sbomify.com/CVE-2024-39416/): Unauthorized user can export Orders Sale Report (medium 4.3)
- [CVE-2024-39415](https://insights.sbomify.com/CVE-2024-39415/): An unauthorized user can export the Tax Sales Report (medium 4.3)
- [CVE-2024-39414](https://insights.sbomify.com/CVE-2024-39414/): Being able to import/export tax rates without proper privileges (medium 4.3)
- [CVE-2024-39413](https://insights.sbomify.com/CVE-2024-39413/): An unauthorized user can export the Invoiced Sales Report (medium 4.3)
- [CVE-2024-39412](https://insights.sbomify.com/CVE-2024-39412/): Adobe Commerce | Improper Authorization (CWE-285) (medium 4.3)
- [CVE-2024-39411](https://insights.sbomify.com/CVE-2024-39411/): Adobe Commerce | Improper Authorization (CWE-285) (medium 4.3)
- [CVE-2024-39410](https://insights.sbomify.com/CVE-2024-39410/): Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) (medium 4.3)
- [CVE-2024-3941](https://insights.sbomify.com/CVE-2024-3941/): reCAPTCHA Jetpack <= 0.2.2 - Stored XSS via CSRF (medium 4.7)
- [CVE-2024-39409](https://insights.sbomify.com/CVE-2024-39409/): Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) (medium 4.3)
- [CVE-2024-39408](https://insights.sbomify.com/CVE-2024-39408/): Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) (medium 4.3)
- [CVE-2024-39407](https://insights.sbomify.com/CVE-2024-39407/): Adobe Commerce | Improper Authorization (CWE-285) (medium 4.3)
- [CVE-2024-39406](https://insights.sbomify.com/CVE-2024-39406/): Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (medium 6.8)
- [CVE-2024-39405](https://insights.sbomify.com/CVE-2024-39405/): Adobe Commerce | Improper Authorization (CWE-285) (medium 4.3)
- [CVE-2024-39404](https://insights.sbomify.com/CVE-2024-39404/): A user without Shop Policy Parameters section privilege can alter the shop policy parameters section (medium 4.3)
- [CVE-2024-39403](https://insights.sbomify.com/CVE-2024-39403/): Stored XSS through Webhook module public key configuration (high 7.6)
- [CVE-2024-39402](https://insights.sbomify.com/CVE-2024-39402/): Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) (high 8.4)
- [CVE-2024-39401](https://insights.sbomify.com/CVE-2024-39401/): Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) (high 8.4)
- [CVE-2024-39400](https://insights.sbomify.com/CVE-2024-39400/): DOM XSS through integrations can impact other admins (high 8.1)
- [CVE-2024-3940](https://insights.sbomify.com/CVE-2024-3940/): reCAPTCHA Jetpack <= 0.2.2 - Settings Update via CSRF (high 8.8)
- [CVE-2024-39399](https://insights.sbomify.com/CVE-2024-39399/): [Paris] Path Traversal lead to local file read (high 7.7)
- [CVE-2024-39398](https://insights.sbomify.com/CVE-2024-39398/): OTP 2FA can be bruteforced (high 7.4)
- [CVE-2024-39397](https://insights.sbomify.com/CVE-2024-39397/): Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) (critical 9.0)
- [CVE-2024-39396](https://insights.sbomify.com/CVE-2024-39396/): Adobe Indesign 2024 PCX File Parsing Out Of Bound Read (medium 5.5)
- [CVE-2024-39395](https://insights.sbomify.com/CVE-2024-39395/): Adobe Indesign 2024 DOC File Parsing Null Pointer Dereference (medium 5.5)
- [CVE-2024-39394](https://insights.sbomify.com/CVE-2024-39394/): Adobe Indesign 2024 PDF File Parsing Out Of Bound Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-39393](https://insights.sbomify.com/CVE-2024-39393/): Adobe Indesign 2024 PCT File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-39392](https://insights.sbomify.com/CVE-2024-39392/): Adobe Indesign 2024 EPS File Parsing Heap Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-39391](https://insights.sbomify.com/CVE-2024-39391/): Adobe Indesign XLS File Parsing Out Of Bound Write Remote Code execution vulnerability (high 7.8)
- [CVE-2024-39390](https://insights.sbomify.com/CVE-2024-39390/): Adobe Indesign 2024 DOC File Parsing Memory Corruption (high 7.8)
- [CVE-2024-3939](https://insights.sbomify.com/CVE-2024-3939/): Ditty < 3.1.36 - Author+ Stored XSS (medium 5.4)
- [CVE-2024-39389](https://insights.sbomify.com/CVE-2024-39389/): Adobe Indesign PDF File Parsing Stack Based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-39388](https://insights.sbomify.com/CVE-2024-39388/): ZDI-CAN-24055: Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-39387](https://insights.sbomify.com/CVE-2024-39387/): ZDI-CAN-24047: Adobe Bridge AVI FIle Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/313/