Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 319 of 521.
- CVE-2024-38670 WordPress Team Members plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-3867 Tainacan Interface <= 2.7.2 - Reflected Cross-Site Scripting
- CVE-2024-38669 WordPress Predictive Search for WooCommerce plugin <= 6.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-38668 Privilege escalation in Intel(R) Quartus(R) Prime Standard Edition software for Windows
- CVE-2024-38667 riscv: prevent pt_regs corruption for secondary idle threads
- CVE-2024-38666 Command injection in Wavlink AC3000
- CVE-2024-38665 Memory corruption in Intel(R) Graphics Drivers
- CVE-2024-38664 drm: zynqmp_dpsub: Always register bridge
- CVE-2024-38663 blk-cgroup: fix list corruption from resetting io stat
- CVE-2024-38662 bpf: Allow delete from sockmap/sockhash only if update is allowed
- CVE-2024-38661 s390/ap: Fix crash in AP internal function modify_bitmap()
- CVE-2024-38660 Security feature bypass in Intel(R) Xeon(R) processor family (E-Core)
- CVE-2024-3866 Ninja Forms Contact Form <= 3.8.15 - Reflected Self-Based Cross-Site Scripting via Referer
- CVE-2024-38659 enic: Validate length of nl attributes in enic_set_vf_port
- CVE-2024-38658 Memory corruption in V-Server
- CVE-2024-38657 Path traversal in Connect Secure
- CVE-2024-38656 Command injection in Connect Secure
- CVE-2024-38655 Command injection in Connect Secure
- CVE-2024-38654 Memory corruption in Secure Access Client
- CVE-2024-38653 XML external entity in Avalanche
- CVE-2024-38652 Path traversal in Avalanche
- CVE-2024-38651 Code injection in Veeam Service Provider Console
- CVE-2024-38650 Auth bypass in Veeam Service Provider Console
- CVE-2024-3865 Memory corruption in Firefox
- CVE-2024-38649 Memory corruption in Connect Secure
- CVE-2024-38648 Hardcoded credentials in DSM
- CVE-2024-38647 QNAP AI Core
- CVE-2024-38646 Notes Station 3
- CVE-2024-38645 Notes Station 3
- CVE-2024-38644 Notes Station 3
- CVE-2024-38643 Notes Station 3
- CVE-2024-38642 QuMagie
- CVE-2024-38641 QTS, QuTS hero
- CVE-2024-38640 Download Station
- CVE-2024-3864 Memory corruption in Firefox
- CVE-2024-38639 QTS
- CVE-2024-38638 QTS, QuTS hero
- CVE-2024-38637 greybus: lights: check return of get_channel_from_mode
- CVE-2024-38636 f2fs: multidev: fix to recognize valid zero block address
- CVE-2024-38635 soundwire: cadence: fix invalid PDI offset
- CVE-2024-38634 serial: max3100: Lock port->lock when calling uart_handle_cts_change()
- CVE-2024-38633 serial: max3100: Update uart_driver_registered on driver removal
- CVE-2024-38632 vfio/pci: fix potential memory leak in vfio_intx_enable()
- CVE-2024-38631 iio: adc: PAC1934: fix accessing out of bounds array index
- CVE-2024-38630 watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- CVE-2024-3863 Security feature bypass in Firefox
- CVE-2024-38629 dmaengine: idxd: Avoid unnecessary destruction of file_ida
- CVE-2024-38628 usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind.
- CVE-2024-38627 stm class: Fix a double free in stm_register_device()
- CVE-2024-38626 fuse: clear FR_SENT when re-adding requests into pending list
- CVE-2024-38625 fs/ntfs3: Check 'folio' pointer for NULL
- CVE-2024-38624 fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- CVE-2024-38623 fs/ntfs3: Use variable length array instead of fixed size
- CVE-2024-38622 drm/msm/dpu: Add callback function pointer check before its call
- CVE-2024-38621 media: stk1160: fix bounds checking in stk1160_copy_video()
- CVE-2024-38620 Bluetooth: HCI: Remove HCI_AMP support
- CVE-2024-3862 Memory corruption in Firefox
- CVE-2024-38619 usb-storage: alauda: Check whether the media is initialized
- CVE-2024-38618 ALSA: timer: Set lower bound of start tick time
- CVE-2024-38617 kunit/fortify: Fix mismatched kvalloc()/vfree() usage
- CVE-2024-38616 wifi: carl9170: re-fix fortified-memset warning
- CVE-2024-38615 cpufreq: exit() callback is optional
- CVE-2024-38614 openrisc: traps: Don't send signals to kernel mode threads
- CVE-2024-38613 m68k: Fix spinlock race in kernel thread creation
- CVE-2024-38612 ipv6: sr: fix invalid unregister error path
- CVE-2024-38611 media: i2c: et8ek8: Don't strip remove function when driver is builtin
- CVE-2024-38610 drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map()
- CVE-2024-3861 Use after free in Firefox
- CVE-2024-38609 wifi: mt76: connac: check for null before dereferencing
- CVE-2024-38608 net/mlx5e: Fix netif state handling
- CVE-2024-38607 macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- CVE-2024-38606 crypto: qat - validate slices count returned by FW
- CVE-2024-38605 ALSA: core: Fix NULL module pointer assignment at card init
- CVE-2024-38604 block: refine the EOF check in blkdev_iomap_begin
- CVE-2024-38603 drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- CVE-2024-38602 ax25: Fix reference count leak issues of ax25_dev
- CVE-2024-38601 ring-buffer: Fix a race between readers and resize checks
- CVE-2024-38600 ALSA: Fix deadlocks with kctl removals at disconnection
- CVE-2024-3860 Denial of service in Firefox
- CVE-2024-38599 jffs2: prevent xattr node from overflowing the eraseblock
- CVE-2024-38598 md: fix resync softlockup when bitmap size is less than array size
- CVE-2024-38597 eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- CVE-2024-38596 af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- CVE-2024-38595 net/mlx5: Fix peer devlink set for SF representor devlink port
- CVE-2024-38594 net: stmmac: move the EST lock to struct stmmac_priv
- CVE-2024-38593 net: micrel: Fix receiving the timestamp in the frame for lan8841
- CVE-2024-38592 drm/mediatek: Init `ddp_comp` with devm_kcalloc()
- CVE-2024-38591 RDMA/hns: Fix deadlock on SRQ async events.
- CVE-2024-38590 RDMA/hns: Modify the print level of CQE error
- CVE-2024-3859 Integer overflow in Firefox
- CVE-2024-38589 netrom: fix possible dead-lock in nr_rt_ioctl()
- CVE-2024-38588 ftrace: Fix possible use-after-free issue in ftrace_location()
- CVE-2024-38587 speakup: Fix sizeof() vs ARRAY_SIZE() bug
- CVE-2024-38586 r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- CVE-2024-38585 tools/nolibc/stdlib: fix memory error in realloc()
- CVE-2024-38584 net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe()
- CVE-2024-38583 nilfs2: fix use-after-free of timer for log writer thread
- CVE-2024-38582 nilfs2: fix potential hang in nilfs_detach_log_writer()
- CVE-2024-38581 drm/amdgpu/mes: fix use-after-free issue
- CVE-2024-38580 epoll: be better about file lifetimes