# Vulnerabilities published in 2024


- [CVE-2024-3858](https://insights.sbomify.com/CVE-2024-3858/): Null dereference in Firefox (high 7.5)
- [CVE-2024-38579](https://insights.sbomify.com/CVE-2024-38579/): crypto: bcm - Fix pointer arithmetic (medium 5.5)
- [CVE-2024-38578](https://insights.sbomify.com/CVE-2024-38578/): ecryptfs: Fix buffer size for tag 66 packet (high 7.8)
- [CVE-2024-38577](https://insights.sbomify.com/CVE-2024-38577/): rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow (high 7.0)
- [CVE-2024-38576](https://insights.sbomify.com/CVE-2024-38576/): rcu: Fix buffer overflow in print_cpu_stall_info() (high 7.0)
- [CVE-2024-38575](https://insights.sbomify.com/CVE-2024-38575/): wifi: brcmfmac: pcie: handle randbuf allocation failure (medium 5.5)
- [CVE-2024-38574](https://insights.sbomify.com/CVE-2024-38574/): libbpf: Prevent null-pointer dereference when prog to load has no BTF (medium 5.5)
- [CVE-2024-38573](https://insights.sbomify.com/CVE-2024-38573/): cppc_cpufreq: Fix possible null pointer dereference (high 7.5)
- [CVE-2024-38572](https://insights.sbomify.com/CVE-2024-38572/): wifi: ath12k: fix out-of-bound access of qmi_invoke_handler() (high 7.8)
- [CVE-2024-38571](https://insights.sbomify.com/CVE-2024-38571/): thermal/drivers/tsens: Fix null pointer dereference (medium 5.5)
- [CVE-2024-38570](https://insights.sbomify.com/CVE-2024-38570/): gfs2: Fix potential glock use-after-free on unmount (critical 9.8)
- [CVE-2024-3857](https://insights.sbomify.com/CVE-2024-3857/): Use after free in Firefox (high 7.8)
- [CVE-2024-38569](https://insights.sbomify.com/CVE-2024-38569/): drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group (high 7.8)
- [CVE-2024-38568](https://insights.sbomify.com/CVE-2024-38568/): drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group (high 7.8)
- [CVE-2024-38567](https://insights.sbomify.com/CVE-2024-38567/): wifi: carl9170: add a proper sanity check for endpoints (medium 5.5)
- [CVE-2024-38566](https://insights.sbomify.com/CVE-2024-38566/): bpf: Fix verifier assumptions about socket->sk (medium 5.5)
- [CVE-2024-38565](https://insights.sbomify.com/CVE-2024-38565/): wifi: ar5523: enable proper endpoint verification (medium 6.5)
- [CVE-2024-38564](https://insights.sbomify.com/CVE-2024-38564/): bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (high 7.8)
- [CVE-2024-38563](https://insights.sbomify.com/CVE-2024-38563/): wifi: mt76: mt7996: fix potential memory leakage when reading chip temperature (medium 5.5)
- [CVE-2024-38562](https://insights.sbomify.com/CVE-2024-38562/): wifi: nl80211: Avoid address calculations via out of bounds array indexing (high 7.8)
- [CVE-2024-38561](https://insights.sbomify.com/CVE-2024-38561/): kunit: Fix kthread reference (high 7.0)
- [CVE-2024-38560](https://insights.sbomify.com/CVE-2024-38560/): scsi: bfa: Ensure the copied buf is NUL terminated (high 7.1)
- [CVE-2024-3856](https://insights.sbomify.com/CVE-2024-3856/): Use after free in Firefox (high 8.8)
- [CVE-2024-38559](https://insights.sbomify.com/CVE-2024-38559/): scsi: qedf: Ensure the copied buf is NUL terminated (medium 4.4)
- [CVE-2024-38558](https://insights.sbomify.com/CVE-2024-38558/): net: openvswitch: fix overwriting ct original tuple for ICMPv6 (critical 10.0)
- [CVE-2024-38557](https://insights.sbomify.com/CVE-2024-38557/): net/mlx5: Reload only IB representors upon lag disable/enable (medium 5.5)
- [CVE-2024-38556](https://insights.sbomify.com/CVE-2024-38556/): net/mlx5: Add a timeout to acquire the command queue semaphore (high 7.8)
- [CVE-2024-38555](https://insights.sbomify.com/CVE-2024-38555/): net/mlx5: Discard command completions in internal error (high 7.0)
- [CVE-2024-38554](https://insights.sbomify.com/CVE-2024-38554/): ax25: Fix reference count leak issue of net_device (medium 5.5)
- [CVE-2024-38553](https://insights.sbomify.com/CVE-2024-38553/): net: fec: remove .ndo_poll_controller to avoid deadlocks (medium 5.5)
- [CVE-2024-38552](https://insights.sbomify.com/CVE-2024-38552/): drm/amd/display: Fix potential index out of bounds in color transformation function (high 7.3)
- [CVE-2024-38551](https://insights.sbomify.com/CVE-2024-38551/): ASoC: mediatek: Assign dummy when codec not specified for a DAI link (medium 5.5)
- [CVE-2024-38550](https://insights.sbomify.com/CVE-2024-38550/): ASoC: kirkwood: Fix potential NULL dereference (medium 4.4)
- [CVE-2024-3855](https://insights.sbomify.com/CVE-2024-3855/): Memory corruption in Firefox (medium 6.5)
- [CVE-2024-38549](https://insights.sbomify.com/CVE-2024-38549/): drm/mediatek: Add 0 size check to mtk_drm_gem_obj (medium 5.5)
- [CVE-2024-38548](https://insights.sbomify.com/CVE-2024-38548/): drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference (medium 5.5)
- [CVE-2024-38547](https://insights.sbomify.com/CVE-2024-38547/): media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries (medium 5.5)
- [CVE-2024-38546](https://insights.sbomify.com/CVE-2024-38546/): drm: vc4: Fix possible null pointer dereference (medium 5.5)
- [CVE-2024-38545](https://insights.sbomify.com/CVE-2024-38545/): RDMA/hns: Fix UAF for cq async event (high 7.8)
- [CVE-2024-38544](https://insights.sbomify.com/CVE-2024-38544/): RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (critical 9.8)
- [CVE-2024-38543](https://insights.sbomify.com/CVE-2024-38543/): lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure (medium 5.5)
- [CVE-2024-38542](https://insights.sbomify.com/CVE-2024-38542/): RDMA/mana_ib: boundary check before installing cq callbacks (high 7.8)
- [CVE-2024-38541](https://insights.sbomify.com/CVE-2024-38541/): of: module: add buffer overflow check in of_modalias() (high 7.8)
- [CVE-2024-38540](https://insights.sbomify.com/CVE-2024-38540/): bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (medium 4.4)
- [CVE-2024-3854](https://insights.sbomify.com/CVE-2024-3854/): Memory corruption in Firefox (high 8.8)
- [CVE-2024-38539](https://insights.sbomify.com/CVE-2024-38539/): RDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use siw (high 7.5)
- [CVE-2024-38538](https://insights.sbomify.com/CVE-2024-38538/): net: bridge: xmit: make sure we have at least eth header len bytes (high 7.3)
- [CVE-2024-38537](https://insights.sbomify.com/CVE-2024-38537/): Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js (not scored)
- [CVE-2024-38536](https://insights.sbomify.com/CVE-2024-38536/): Suricata http/range: NULL-ptr deref when http.memcap is reached (high 7.5)
- [CVE-2024-38535](https://insights.sbomify.com/CVE-2024-38535/): Suricata http2: oom from duplicate headers (high 7.5)
- [CVE-2024-38534](https://insights.sbomify.com/CVE-2024-38534/): Suricata modbus: txs without responses are never freed (high 7.5)
- [CVE-2024-38533](https://insights.sbomify.com/CVE-2024-38533/): ZKsync Era invalid stack addressing conversion (medium 6.5)
- [CVE-2024-38532](https://insights.sbomify.com/CVE-2024-38532/): TEST_KEY used in example dcp_tool reference implementation (high 7.1)
- [CVE-2024-38531](https://insights.sbomify.com/CVE-2024-38531/): Nix sandbox escape (low 3.6)
- [CVE-2024-38530](https://insights.sbomify.com/CVE-2024-38530/): Open eClass Platform allows Arbitrary File Upload in "modules/h5p/save.php" (critical 9.8)
- [CVE-2024-3853](https://insights.sbomify.com/CVE-2024-3853/): Use after free in Firefox (high 7.5)
- [CVE-2024-38529](https://insights.sbomify.com/CVE-2024-38529/): Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment (critical 9.1)
- [CVE-2024-38528](https://insights.sbomify.com/CVE-2024-38528/): Unlimited number of NTS-KE connections can crash ntpd-rs server (high 7.5)
- [CVE-2024-38527](https://insights.sbomify.com/CVE-2024-38527/): Cross-site Scripting in ZenUML (medium 5.4)
- [CVE-2024-38526](https://insights.sbomify.com/CVE-2024-38526/): pdoc embeds link to malicious CDN if math mode is enabled (not scored)
- [CVE-2024-38525](https://insights.sbomify.com/CVE-2024-38525/): dd-trace-cpp malformed unicode header values may cause crash (high 7.5)
- [CVE-2024-38524](https://insights.sbomify.com/CVE-2024-38524/): GWC Home Page communicate version and revision information (medium 5.3)
- [CVE-2024-38523](https://insights.sbomify.com/CVE-2024-38523/): Hush Line OTP issue (high 7.5)
- [CVE-2024-38522](https://insights.sbomify.com/CVE-2024-38522/): CSP bypass in Hush Line (medium 6.3)
- [CVE-2024-38521](https://insights.sbomify.com/CVE-2024-38521/): Persistent Cross-Site Scripting (XSS) in hushline inbox (high 8.8)
- [CVE-2024-38520](https://insights.sbomify.com/CVE-2024-38520/): SoftEther VPN with L2TP - 2.75x Amplification (medium 5.3)
- [CVE-2024-3852](https://insights.sbomify.com/CVE-2024-3852/): Memory corruption in Firefox (high 7.5)
- [CVE-2024-38519](https://insights.sbomify.com/CVE-2024-38519/): yt-dlp and youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization (high 7.8)
- [CVE-2024-38518](https://insights.sbomify.com/CVE-2024-38518/): bbb-web API additional parameters considered (medium 4.6)
- [CVE-2024-38517](https://insights.sbomify.com/CVE-2024-38517/): Integer overflow in RapidJSON (medium 6.8)
- [CVE-2024-38516](https://insights.sbomify.com/CVE-2024-38516/): Aimeos HTML client may potentially reveal sensitive information in error log (high 8.8)
- [CVE-2024-38514](https://insights.sbomify.com/CVE-2024-38514/): NextChat Server-Side Request Forgery (SSRF) (high 7.4)
- [CVE-2024-38513](https://insights.sbomify.com/CVE-2024-38513/): Fiber Session Middleware Token Injection Vulnerability (critical 10.0)
- [CVE-2024-38512](https://insights.sbomify.com/CVE-2024-38512/): Command injection in XClarity Controller (high 7.2)
- [CVE-2024-38511](https://insights.sbomify.com/CVE-2024-38511/): Command injection in XClarity Controller (high 7.2)
- [CVE-2024-38510](https://insights.sbomify.com/CVE-2024-38510/): Command injection in XClarity Controller (high 7.2)
- [CVE-2024-3851](https://insights.sbomify.com/CVE-2024-3851/): Unrestricted File Upload Leading to XSS in imartinez/privategpt (medium 6.8)
- [CVE-2024-38509](https://insights.sbomify.com/CVE-2024-38509/): Memory corruption in XClarity Controller (high 7.2)
- [CVE-2024-38508](https://insights.sbomify.com/CVE-2024-38508/): Command injection in XClarity Controller (high 7.2)
- [CVE-2024-38507](https://insights.sbomify.com/CVE-2024-38507/): Cross-site scripting in Hub (low 3.5)
- [CVE-2024-38506](https://insights.sbomify.com/CVE-2024-38506/): Missing authorization in YouTrack (medium 6.3)
- [CVE-2024-38505](https://insights.sbomify.com/CVE-2024-38505/): Information disclosure in YouTrack (medium 5.3)
- [CVE-2024-38504](https://insights.sbomify.com/CVE-2024-38504/): Missing authorization in YouTrack (medium 4.3)
- [CVE-2024-38503](https://insights.sbomify.com/CVE-2024-38503/): Apache Syncope: HTML tags can be injected into Console or Enduser text fields (low 3.9)
- [CVE-2024-38502](https://insights.sbomify.com/CVE-2024-38502/): Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows stored XSS (high 7.1)
- [CVE-2024-38501](https://insights.sbomify.com/CVE-2024-38501/): Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows HTML injection (medium 6.1)
- [CVE-2024-3850](https://insights.sbomify.com/CVE-2024-3850/): Uniview NVR301-04S2-P4 Cross-site Scripting (medium 4.8)
- [CVE-2024-38499](https://insights.sbomify.com/CVE-2024-38499/): Improper Privilege Management Vulnerability in CA Client Automation 14.5 (high 7.3)
- [CVE-2024-38496](https://insights.sbomify.com/CVE-2024-38496/): Symantec Privileged Access Manager Insecure Direct Object Reference vulnerability (medium 5.1)
- [CVE-2024-38495](https://insights.sbomify.com/CVE-2024-38495/): Symantec Privileged Access Manager User Enumeration vulnerability (medium 5.3)
- [CVE-2024-38494](https://insights.sbomify.com/CVE-2024-38494/): Symantec Privileged Access Manager Remote Command Execution vulnerability (high 8.6)
- [CVE-2024-38493](https://insights.sbomify.com/CVE-2024-38493/): Symantec Privileged Access Manager Reflected Cross Site Scripting vulnerability (medium 6.8)
- [CVE-2024-38492](https://insights.sbomify.com/CVE-2024-38492/): Symantec Privileged Access Manager Remote Command Execution vulnerability (critical 9.4)
- [CVE-2024-38491](https://insights.sbomify.com/CVE-2024-38491/): Symantec Privileged Access Manager SQL Injection vulnerability (high 8.4)
- [CVE-2024-38490](https://insights.sbomify.com/CVE-2024-38490/): Memory corruption in iDRAC Service Module (iSM) (medium 5.8)
- [CVE-2024-3849](https://insights.sbomify.com/CVE-2024-3849/): Click to Chat – HoliThemes <= 3.35 - Authenticated (Contributor+) Local File Inclusion (high 8.8)
- [CVE-2024-38489](https://insights.sbomify.com/CVE-2024-38489/): Memory corruption in iDRAC Service Module (iSM) (low 3.1)
- [CVE-2024-38488](https://insights.sbomify.com/CVE-2024-38488/): Auth bypass in RecoverPoint for Virtual Machines (medium 6.5)
- [CVE-2024-38487](https://insights.sbomify.com/CVE-2024-38487/): Privilege escalation in EMC VxRail Appliance (high 7.0)
- [CVE-2024-38486](https://insights.sbomify.com/CVE-2024-38486/): Command injection in SmartFabric OS10 Software (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/320/