# Vulnerabilities published in 2024


- [CVE-2024-38670](https://insights.sbomify.com/CVE-2024-38670/): WordPress Team Members plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-3867](https://insights.sbomify.com/CVE-2024-3867/): Tainacan Interface <= 2.7.2 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2024-38669](https://insights.sbomify.com/CVE-2024-38669/): WordPress Predictive Search for WooCommerce plugin <= 6.0.1 - Reflected Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-38668](https://insights.sbomify.com/CVE-2024-38668/): Privilege escalation in Intel(R) Quartus(R) Prime Standard Edition software for Windows (medium 5.4)
- [CVE-2024-38667](https://insights.sbomify.com/CVE-2024-38667/): riscv: prevent pt_regs corruption for secondary idle threads (high 7.8)
- [CVE-2024-38666](https://insights.sbomify.com/CVE-2024-38666/): Command injection in Wavlink AC3000 (critical 9.1)
- [CVE-2024-38665](https://insights.sbomify.com/CVE-2024-38665/): Memory corruption in Intel(R) Graphics Drivers (medium 6.9)
- [CVE-2024-38664](https://insights.sbomify.com/CVE-2024-38664/): drm: zynqmp_dpsub: Always register bridge (high 7.8)
- [CVE-2024-38663](https://insights.sbomify.com/CVE-2024-38663/): blk-cgroup: fix list corruption from resetting io stat (high 7.8)
- [CVE-2024-38662](https://insights.sbomify.com/CVE-2024-38662/): bpf: Allow delete from sockmap/sockhash only if update is allowed (medium 4.7)
- [CVE-2024-38661](https://insights.sbomify.com/CVE-2024-38661/): s390/ap: Fix crash in AP internal function modify_bitmap() (medium 5.5)
- [CVE-2024-38660](https://insights.sbomify.com/CVE-2024-38660/): Security feature bypass in Intel(R) Xeon(R) processor family (E-Core) (low 2.0)
- [CVE-2024-3866](https://insights.sbomify.com/CVE-2024-3866/): Ninja Forms Contact Form <= 3.8.15 - Reflected Self-Based Cross-Site Scripting via Referer (medium 4.7)
- [CVE-2024-38659](https://insights.sbomify.com/CVE-2024-38659/): enic: Validate length of nl attributes in enic_set_vf_port (high 7.3)
- [CVE-2024-38658](https://insights.sbomify.com/CVE-2024-38658/): Memory corruption in V-Server (high 7.8)
- [CVE-2024-38657](https://insights.sbomify.com/CVE-2024-38657/): Path traversal in Connect Secure (critical 9.1)
- [CVE-2024-38656](https://insights.sbomify.com/CVE-2024-38656/): Command injection in Connect Secure (critical 9.1)
- [CVE-2024-38655](https://insights.sbomify.com/CVE-2024-38655/): Command injection in Connect Secure (critical 9.1)
- [CVE-2024-38654](https://insights.sbomify.com/CVE-2024-38654/): Memory corruption in Secure Access Client (medium 4.4)
- [CVE-2024-38653](https://insights.sbomify.com/CVE-2024-38653/): XML external entity in Avalanche (high 8.2)
- [CVE-2024-38652](https://insights.sbomify.com/CVE-2024-38652/): Path traversal in Avalanche (high 8.2)
- [CVE-2024-38651](https://insights.sbomify.com/CVE-2024-38651/): Code injection in Veeam Service Provider Console (high 8.5)
- [CVE-2024-38650](https://insights.sbomify.com/CVE-2024-38650/): Auth bypass in Veeam Service Provider Console (critical 9.9)
- [CVE-2024-3865](https://insights.sbomify.com/CVE-2024-3865/): Memory corruption in Firefox (high 8.1)
- [CVE-2024-38649](https://insights.sbomify.com/CVE-2024-38649/): Memory corruption in Connect Secure (high 7.5)
- [CVE-2024-38648](https://insights.sbomify.com/CVE-2024-38648/): Hardcoded credentials in DSM (critical 9.0)
- [CVE-2024-38647](https://insights.sbomify.com/CVE-2024-38647/): QNAP AI Core (high 7.9)
- [CVE-2024-38646](https://insights.sbomify.com/CVE-2024-38646/): Notes Station 3 (high 8.4)
- [CVE-2024-38645](https://insights.sbomify.com/CVE-2024-38645/): Notes Station 3 (critical 9.4)
- [CVE-2024-38644](https://insights.sbomify.com/CVE-2024-38644/): Notes Station 3 (high 8.7)
- [CVE-2024-38643](https://insights.sbomify.com/CVE-2024-38643/): Notes Station 3 (critical 9.3)
- [CVE-2024-38642](https://insights.sbomify.com/CVE-2024-38642/): QuMagie (low 1.0)
- [CVE-2024-38641](https://insights.sbomify.com/CVE-2024-38641/): QTS, QuTS hero (high 7.3)
- [CVE-2024-38640](https://insights.sbomify.com/CVE-2024-38640/): Download Station (high 7.0)
- [CVE-2024-3864](https://insights.sbomify.com/CVE-2024-3864/): Memory corruption in Firefox (high 8.1)
- [CVE-2024-38639](https://insights.sbomify.com/CVE-2024-38639/): QTS (medium 4.8)
- [CVE-2024-38638](https://insights.sbomify.com/CVE-2024-38638/): QTS, QuTS hero (low 2.1)
- [CVE-2024-38637](https://insights.sbomify.com/CVE-2024-38637/): greybus: lights: check return of get_channel_from_mode (medium 5.5)
- [CVE-2024-38636](https://insights.sbomify.com/CVE-2024-38636/): f2fs: multidev: fix to recognize valid zero block address (medium 5.5)
- [CVE-2024-38635](https://insights.sbomify.com/CVE-2024-38635/): soundwire: cadence: fix invalid PDI offset (high 7.8)
- [CVE-2024-38634](https://insights.sbomify.com/CVE-2024-38634/): serial: max3100: Lock port->lock when calling uart_handle_cts_change() (medium 5.5)
- [CVE-2024-38633](https://insights.sbomify.com/CVE-2024-38633/): serial: max3100: Update uart_driver_registered on driver removal (medium 5.5)
- [CVE-2024-38632](https://insights.sbomify.com/CVE-2024-38632/): vfio/pci: fix potential memory leak in vfio_intx_enable() (medium 5.5)
- [CVE-2024-38631](https://insights.sbomify.com/CVE-2024-38631/): iio: adc: PAC1934: fix accessing out of bounds array index (high 7.8)
- [CVE-2024-38630](https://insights.sbomify.com/CVE-2024-38630/): watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger (high 7.8)
- [CVE-2024-3863](https://insights.sbomify.com/CVE-2024-3863/): Security feature bypass in Firefox (critical 9.8)
- [CVE-2024-38629](https://insights.sbomify.com/CVE-2024-38629/): dmaengine: idxd: Avoid unnecessary destruction of file_ida (high 7.8)
- [CVE-2024-38628](https://insights.sbomify.com/CVE-2024-38628/): usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind. (high 7.8)
- [CVE-2024-38627](https://insights.sbomify.com/CVE-2024-38627/): stm class: Fix a double free in stm_register_device() (high 7.8)
- [CVE-2024-38626](https://insights.sbomify.com/CVE-2024-38626/): fuse: clear FR_SENT when re-adding requests into pending list (high 7.8)
- [CVE-2024-38625](https://insights.sbomify.com/CVE-2024-38625/): fs/ntfs3: Check 'folio' pointer for NULL (medium 5.5)
- [CVE-2024-38624](https://insights.sbomify.com/CVE-2024-38624/): fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow (medium 5.5)
- [CVE-2024-38623](https://insights.sbomify.com/CVE-2024-38623/): fs/ntfs3: Use variable length array instead of fixed size (high 7.8)
- [CVE-2024-38622](https://insights.sbomify.com/CVE-2024-38622/): drm/msm/dpu: Add callback function pointer check before its call (medium 5.5)
- [CVE-2024-38621](https://insights.sbomify.com/CVE-2024-38621/): media: stk1160: fix bounds checking in stk1160_copy_video() (high 7.1)
- [CVE-2024-38620](https://insights.sbomify.com/CVE-2024-38620/): Bluetooth: HCI: Remove HCI_AMP support (high 8.8)
- [CVE-2024-3862](https://insights.sbomify.com/CVE-2024-3862/): Memory corruption in Firefox (medium 5.3)
- [CVE-2024-38619](https://insights.sbomify.com/CVE-2024-38619/): usb-storage: alauda: Check whether the media is initialized (medium 5.5)
- [CVE-2024-38618](https://insights.sbomify.com/CVE-2024-38618/): ALSA: timer: Set lower bound of start tick time (medium 5.3)
- [CVE-2024-38617](https://insights.sbomify.com/CVE-2024-38617/): kunit/fortify: Fix mismatched kvalloc()/vfree() usage (medium 5.5)
- [CVE-2024-38616](https://insights.sbomify.com/CVE-2024-38616/): wifi: carl9170: re-fix fortified-memset warning (high 8.2)
- [CVE-2024-38615](https://insights.sbomify.com/CVE-2024-38615/): cpufreq: exit() callback is optional (medium 5.5)
- [CVE-2024-38614](https://insights.sbomify.com/CVE-2024-38614/): openrisc: traps: Don't send signals to kernel mode threads (high 7.8)
- [CVE-2024-38613](https://insights.sbomify.com/CVE-2024-38613/): m68k: Fix spinlock race in kernel thread creation (medium 4.7)
- [CVE-2024-38612](https://insights.sbomify.com/CVE-2024-38612/): ipv6: sr: fix invalid unregister error path (high 7.0)
- [CVE-2024-38611](https://insights.sbomify.com/CVE-2024-38611/): media: i2c: et8ek8: Don't strip remove function when driver is builtin (high 7.3)
- [CVE-2024-38610](https://insights.sbomify.com/CVE-2024-38610/): drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() (high 7.8)
- [CVE-2024-3861](https://insights.sbomify.com/CVE-2024-3861/): Use after free in Firefox (medium 4.0)
- [CVE-2024-38609](https://insights.sbomify.com/CVE-2024-38609/): wifi: mt76: connac: check for null before dereferencing (medium 5.5)
- [CVE-2024-38608](https://insights.sbomify.com/CVE-2024-38608/): net/mlx5e: Fix netif state handling (medium 5.5)
- [CVE-2024-38607](https://insights.sbomify.com/CVE-2024-38607/): macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" (medium 5.5)
- [CVE-2024-38606](https://insights.sbomify.com/CVE-2024-38606/): crypto: qat - validate slices count returned by FW (high 7.1)
- [CVE-2024-38605](https://insights.sbomify.com/CVE-2024-38605/): ALSA: core: Fix NULL module pointer assignment at card init (high 7.8)
- [CVE-2024-38604](https://insights.sbomify.com/CVE-2024-38604/): block: refine the EOF check in blkdev_iomap_begin (medium 5.5)
- [CVE-2024-38603](https://insights.sbomify.com/CVE-2024-38603/): drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (medium 5.5)
- [CVE-2024-38602](https://insights.sbomify.com/CVE-2024-38602/): ax25: Fix reference count leak issues of ax25_dev (medium 5.5)
- [CVE-2024-38601](https://insights.sbomify.com/CVE-2024-38601/): ring-buffer: Fix a race between readers and resize checks (medium 4.7)
- [CVE-2024-38600](https://insights.sbomify.com/CVE-2024-38600/): ALSA: Fix deadlocks with kctl removals at disconnection (medium 5.5)
- [CVE-2024-3860](https://insights.sbomify.com/CVE-2024-3860/): Denial of service in Firefox (medium 6.2)
- [CVE-2024-38599](https://insights.sbomify.com/CVE-2024-38599/): jffs2: prevent xattr node from overflowing the eraseblock (high 7.8)
- [CVE-2024-38598](https://insights.sbomify.com/CVE-2024-38598/): md: fix resync softlockup when bitmap size is less than array size (medium 5.5)
- [CVE-2024-38597](https://insights.sbomify.com/CVE-2024-38597/): eth: sungem: remove .ndo_poll_controller to avoid deadlocks (medium 5.5)
- [CVE-2024-38596](https://insights.sbomify.com/CVE-2024-38596/): af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (medium 4.7)
- [CVE-2024-38595](https://insights.sbomify.com/CVE-2024-38595/): net/mlx5: Fix peer devlink set for SF representor devlink port (medium 5.5)
- [CVE-2024-38594](https://insights.sbomify.com/CVE-2024-38594/): net: stmmac: move the EST lock to struct stmmac_priv (medium 5.5)
- [CVE-2024-38593](https://insights.sbomify.com/CVE-2024-38593/): net: micrel: Fix receiving the timestamp in the frame for lan8841 (medium 5.5)
- [CVE-2024-38592](https://insights.sbomify.com/CVE-2024-38592/): drm/mediatek: Init `ddp_comp` with devm_kcalloc() (high 7.8)
- [CVE-2024-38591](https://insights.sbomify.com/CVE-2024-38591/): RDMA/hns: Fix deadlock on SRQ async events. (medium 5.5)
- [CVE-2024-38590](https://insights.sbomify.com/CVE-2024-38590/): RDMA/hns: Modify the print level of CQE error (high 7.1)
- [CVE-2024-3859](https://insights.sbomify.com/CVE-2024-3859/): Integer overflow in Firefox (medium 5.9)
- [CVE-2024-38589](https://insights.sbomify.com/CVE-2024-38589/): netrom: fix possible dead-lock in nr_rt_ioctl() (medium 5.5)
- [CVE-2024-38588](https://insights.sbomify.com/CVE-2024-38588/): ftrace: Fix possible use-after-free issue in ftrace_location() (high 7.8)
- [CVE-2024-38587](https://insights.sbomify.com/CVE-2024-38587/): speakup: Fix sizeof() vs ARRAY_SIZE() bug (high 7.8)
- [CVE-2024-38586](https://insights.sbomify.com/CVE-2024-38586/): r8169: Fix possible ring buffer corruption on fragmented Tx packets. (high 7.8)
- [CVE-2024-38585](https://insights.sbomify.com/CVE-2024-38585/): tools/nolibc/stdlib: fix memory error in realloc() (high 7.1)
- [CVE-2024-38584](https://insights.sbomify.com/CVE-2024-38584/): net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe() (medium 5.5)
- [CVE-2024-38583](https://insights.sbomify.com/CVE-2024-38583/): nilfs2: fix use-after-free of timer for log writer thread (high 7.8)
- [CVE-2024-38582](https://insights.sbomify.com/CVE-2024-38582/): nilfs2: fix potential hang in nilfs_detach_log_writer() (medium 5.3)
- [CVE-2024-38581](https://insights.sbomify.com/CVE-2024-38581/): drm/amdgpu/mes: fix use-after-free issue (high 7.8)
- [CVE-2024-38580](https://insights.sbomify.com/CVE-2024-38580/): epoll: be better about file lifetimes (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/319/