# Vulnerabilities published in 2024


- [CVE-2024-37020](https://insights.sbomify.com/CVE-2024-37020/): Denial of service in Intel(R) Xeon(R) Processors (medium 4.9)
- [CVE-2024-37019](https://insights.sbomify.com/CVE-2024-37019/): Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication. (critical 9.8)
- [CVE-2024-37018](https://insights.sbomify.com/CVE-2024-37018/): The OpenDaylight 0.15.3 controller allows topology poisoning via API requests because an application can manipulate the path that is taken by discovery packets. (critical 9.1)
- [CVE-2024-37017](https://insights.sbomify.com/CVE-2024-37017/): asdcplib (aka AS-DCP Lib) 2.13.1 has a heap-based buffer over-read in ASDCP::TimedText::MXFReader::h__Reader::MD_to_TimedText_TDesc in AS_DC (high 8.1)
- [CVE-2024-37016](https://insights.sbomify.com/CVE-2024-37016/): Mengshen Wireless Door Alarm M70 2024-05-24 allows Authentication Bypass via a Capture-Replay approach. (medium 6.8)
- [CVE-2024-37015](https://insights.sbomify.com/CVE-2024-37015/): An issue was discovered in Ada Web Server 20.0. (high 7.4)
- [CVE-2024-37014](https://insights.sbomify.com/CVE-2024-37014/): Langflow remote code execution vulnerability (high 8.8)
- [CVE-2024-3701](https://insights.sbomify.com/CVE-2024-3701/): Improper Authentication in com.transsion.kolun.aiservice (critical 9.8)
- [CVE-2024-37008](https://insights.sbomify.com/CVE-2024-37008/): Stack-based Overflow Vulnerability in Revit Software (high 7.8)
- [CVE-2024-37007](https://insights.sbomify.com/CVE-2024-37007/): Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products (high 7.8)
- [CVE-2024-37006](https://insights.sbomify.com/CVE-2024-37006/): Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software (high 7.8)
- [CVE-2024-37005](https://insights.sbomify.com/CVE-2024-37005/): Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software (high 7.8)
- [CVE-2024-37004](https://insights.sbomify.com/CVE-2024-37004/): Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software (high 7.8)
- [CVE-2024-37003](https://insights.sbomify.com/CVE-2024-37003/): Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software (high 7.8)
- [CVE-2024-37002](https://insights.sbomify.com/CVE-2024-37002/): Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software (high 7.8)
- [CVE-2024-37001](https://insights.sbomify.com/CVE-2024-37001/): Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software (high 7.8)
- [CVE-2024-37000](https://insights.sbomify.com/CVE-2024-37000/): Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software (high 7.8)
- [CVE-2024-3700](https://insights.sbomify.com/CVE-2024-3700/): Hardcoded password in Estomed Sp. z o.o. Simple Care software (critical 9.3)
- [CVE-2024-36999](https://insights.sbomify.com/CVE-2024-36999/): Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products (high 7.8)
- [CVE-2024-36997](https://insights.sbomify.com/CVE-2024-36997/): Persistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint (medium 4.6)
- [CVE-2024-36996](https://insights.sbomify.com/CVE-2024-36996/): Information Disclosure of user names (medium 5.3)
- [CVE-2024-36995](https://insights.sbomify.com/CVE-2024-36995/): Low-privileged user could create experimental items (medium 4.3)
- [CVE-2024-36994](https://insights.sbomify.com/CVE-2024-36994/): Persistent Cross-site Scripting (XSS) in Dashboard Elements (medium 5.4)
- [CVE-2024-36993](https://insights.sbomify.com/CVE-2024-36993/): Persistent Cross-site Scripting (XSS) in Web Bulletin (medium 5.4)
- [CVE-2024-36992](https://insights.sbomify.com/CVE-2024-36992/): Persistent Cross-site Scripting (XSS) in Dashboard Elements (medium 5.4)
- [CVE-2024-36991](https://insights.sbomify.com/CVE-2024-36991/): Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows (high 7.5)
- [CVE-2024-36990](https://insights.sbomify.com/CVE-2024-36990/): Denial of Service (DoS) on the datamodel/web REST endpoint (medium 6.5)
- [CVE-2024-3699](https://insights.sbomify.com/CVE-2024-3699/): Hardcoded password in drEryk Gabinet (critical 9.3)
- [CVE-2024-36989](https://insights.sbomify.com/CVE-2024-36989/): Low-privileged user could create notifications in Splunk Web Bulletin Messages (medium 6.5)
- [CVE-2024-36987](https://insights.sbomify.com/CVE-2024-36987/): Insecure File Upload in the indexing/preview REST endpoint (medium 4.3)
- [CVE-2024-36986](https://insights.sbomify.com/CVE-2024-36986/): Risky command safeguards bypass through Search ID query in Analytics Workspace (medium 6.3)
- [CVE-2024-36985](https://insights.sbomify.com/CVE-2024-36985/): Code injection in Splunk Enterprise (high 8.8)
- [CVE-2024-36984](https://insights.sbomify.com/CVE-2024-36984/): Remote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows (high 8.8)
- [CVE-2024-36983](https://insights.sbomify.com/CVE-2024-36983/): Command Injection using External Lookups (high 8.0)
- [CVE-2024-36982](https://insights.sbomify.com/CVE-2024-36982/): Denial of Service through null pointer reference in “cluster/config” REST endpoint (high 7.5)
- [CVE-2024-36981](https://insights.sbomify.com/CVE-2024-36981/): Memory corruption in OpenPLC v3 (high 7.5)
- [CVE-2024-36980](https://insights.sbomify.com/CVE-2024-36980/): Memory corruption in OpenPLC v3 (high 7.5)
- [CVE-2024-3698](https://insights.sbomify.com/CVE-2024-3698/): Campcodes House Rental Management System manage_payment.php sql injection (medium 6.3)
- [CVE-2024-36979](https://insights.sbomify.com/CVE-2024-36979/): net: bridge: mst: fix vlan use-after-free (high 7.8)
- [CVE-2024-36978](https://insights.sbomify.com/CVE-2024-36978/): net: sched: sch_multiq: fix possible OOB write in multiq_tune() (high 7.8)
- [CVE-2024-36977](https://insights.sbomify.com/CVE-2024-36977/): usb: dwc3: Wait unconditionally after issuing EndXfer command (high 7.8)
- [CVE-2024-36976](https://insights.sbomify.com/CVE-2024-36976/): Revert "media: v4l2-ctrls: show all owned controls in log_status" (medium 5.5)
- [CVE-2024-36975](https://insights.sbomify.com/CVE-2024-36975/): KEYS: trusted: Do not use WARN when encode fails (medium 5.5)
- [CVE-2024-36974](https://insights.sbomify.com/CVE-2024-36974/): net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (high 7.8)
- [CVE-2024-36973](https://insights.sbomify.com/CVE-2024-36973/): misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe() (high 8.4)
- [CVE-2024-36972](https://insights.sbomify.com/CVE-2024-36972/): af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock. (high 7.8)
- [CVE-2024-36971](https://insights.sbomify.com/CVE-2024-36971/): Android Kernel Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2024-36970](https://insights.sbomify.com/CVE-2024-36970/): wifi: iwlwifi: Use request_module_nowait (medium 5.5)
- [CVE-2024-3697](https://insights.sbomify.com/CVE-2024-3697/): Campcodes House Rental Management System manage_tenant.php sql injection (medium 6.3)
- [CVE-2024-36969](https://insights.sbomify.com/CVE-2024-36969/): drm/amd/display: Fix division by zero in setup_dsc_config (medium 5.5)
- [CVE-2024-36968](https://insights.sbomify.com/CVE-2024-36968/): Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (high 7.6)
- [CVE-2024-36967](https://insights.sbomify.com/CVE-2024-36967/): KEYS: trusted: Fix memory leak in tpm2_key_encode() (medium 5.5)
- [CVE-2024-36966](https://insights.sbomify.com/CVE-2024-36966/): erofs: reliably distinguish block based and fscache mode (medium 5.5)
- [CVE-2024-36965](https://insights.sbomify.com/CVE-2024-36965/): remoteproc: mediatek: Make sure IPI buffer fits in L2TCM (high 7.8)
- [CVE-2024-36964](https://insights.sbomify.com/CVE-2024-36964/): fs/9p: only translate RWX permissions for plain 9P2000 (high 8.8)
- [CVE-2024-36963](https://insights.sbomify.com/CVE-2024-36963/): tracefs: Reset permissions on remount if permissions are options (high 7.8)
- [CVE-2024-36962](https://insights.sbomify.com/CVE-2024-36962/): net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs (high 7.5)
- [CVE-2024-36961](https://insights.sbomify.com/CVE-2024-36961/): thermal/debugfs: Fix two locking issues with thermal zone debug (high 7.8)
- [CVE-2024-36960](https://insights.sbomify.com/CVE-2024-36960/): drm/vmwgfx: Fix invalid reads in fence signaled events (high 7.1)
- [CVE-2024-3696](https://insights.sbomify.com/CVE-2024-3696/): Campcodes House Rental Management System view_payment.php sql injection (medium 6.3)
- [CVE-2024-36959](https://insights.sbomify.com/CVE-2024-36959/): pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (medium 5.5)
- [CVE-2024-36958](https://insights.sbomify.com/CVE-2024-36958/): NFSD: Fix nfsd4_encode_fattr4() crasher (critical 9.8)
- [CVE-2024-36957](https://insights.sbomify.com/CVE-2024-36957/): octeontx2-af: avoid off-by-one read from userspace (medium 5.5)
- [CVE-2024-36956](https://insights.sbomify.com/CVE-2024-36956/): thermal/debugfs: Free all thermal zone debug memory on zone removal (medium 5.5)
- [CVE-2024-36955](https://insights.sbomify.com/CVE-2024-36955/): ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node() (high 7.7)
- [CVE-2024-36954](https://insights.sbomify.com/CVE-2024-36954/): tipc: fix a possible memleak in tipc_buf_append (medium 5.5)
- [CVE-2024-36953](https://insights.sbomify.com/CVE-2024-36953/): KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (medium 4.4)
- [CVE-2024-36952](https://insights.sbomify.com/CVE-2024-36952/): scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (medium 4.7)
- [CVE-2024-36951](https://insights.sbomify.com/CVE-2024-36951/): drm/amdkfd: range check cp bad op exception interrupts (medium 5.5)
- [CVE-2024-36950](https://insights.sbomify.com/CVE-2024-36950/): firewire: ohci: mask bus reset interrupts between ISR and bottom half (medium 4.4)
- [CVE-2024-3695](https://insights.sbomify.com/CVE-2024-3695/): SourceCodester Computer Laboratory Management System Users.php cross site scripting (low 3.5)
- [CVE-2024-36949](https://insights.sbomify.com/CVE-2024-36949/): amd/amdkfd: sync all devices to wait all processes being evicted (medium 4.7)
- [CVE-2024-36948](https://insights.sbomify.com/CVE-2024-36948/): drm/xe/xe_migrate: Cast to output precision before multiplying operands (medium 5.5)
- [CVE-2024-36947](https://insights.sbomify.com/CVE-2024-36947/): qibfs: fix dentry leak (medium 5.3)
- [CVE-2024-36946](https://insights.sbomify.com/CVE-2024-36946/): phonet: fix rtm_phonet_notify() skb allocation (medium 5.5)
- [CVE-2024-36945](https://insights.sbomify.com/CVE-2024-36945/): net/smc: fix neighbour and rtable leak in smc_ib_find_route() (high 7.5)
- [CVE-2024-36944](https://insights.sbomify.com/CVE-2024-36944/): Reapply "drm/qxl: simplify qxl_fence_wait" (medium 5.5)
- [CVE-2024-36943](https://insights.sbomify.com/CVE-2024-36943/): fs/proc/task_mmu: fix loss of young/dirty bits during pagemap scan (high 7.3)
- [CVE-2024-36941](https://insights.sbomify.com/CVE-2024-36941/): wifi: nl80211: don't free NULL coalescing rule (medium 5.5)
- [CVE-2024-36940](https://insights.sbomify.com/CVE-2024-36940/): pinctrl: core: delete incorrect free in pinctrl_enable() (high 7.8)
- [CVE-2024-36939](https://insights.sbomify.com/CVE-2024-36939/): nfs: Handle error of rpc_proc_register() in nfs_net_init(). (medium 5.5)
- [CVE-2024-36938](https://insights.sbomify.com/CVE-2024-36938/): bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue (medium 5.5)
- [CVE-2024-36937](https://insights.sbomify.com/CVE-2024-36937/): xdp: use flags field to disambiguate broadcast redirect (medium 5.5)
- [CVE-2024-36936](https://insights.sbomify.com/CVE-2024-36936/): efi/unaccepted: touch soft lockup during memory accept (medium 5.5)
- [CVE-2024-36935](https://insights.sbomify.com/CVE-2024-36935/): ice: ensure the copied buf is NUL terminated (high 7.1)
- [CVE-2024-36934](https://insights.sbomify.com/CVE-2024-36934/): bna: ensure the copied buf is NUL terminated (high 7.8)
- [CVE-2024-36933](https://insights.sbomify.com/CVE-2024-36933/): nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (high 7.8)
- [CVE-2024-36932](https://insights.sbomify.com/CVE-2024-36932/): thermal/debugfs: Prevent use-after-free from occurring after cdev removal (medium 5.5)
- [CVE-2024-36931](https://insights.sbomify.com/CVE-2024-36931/): s390/cio: Ensure the copied buf is NUL terminated (high 7.1)
- [CVE-2024-36930](https://insights.sbomify.com/CVE-2024-36930/): spi: fix null pointer dereference within spi_sync (medium 5.5)
- [CVE-2024-36929](https://insights.sbomify.com/CVE-2024-36929/): net: core: reject skb_copy(_expand) for fraglist GSO skbs (high 7.5)
- [CVE-2024-36928](https://insights.sbomify.com/CVE-2024-36928/): s390/qeth: Fix kernel panic after setting hsuid (high 7.8)
- [CVE-2024-36927](https://insights.sbomify.com/CVE-2024-36927/): ipv4: Fix uninit-value access in __ip_make_skb() (medium 4.7)
- [CVE-2024-36926](https://insights.sbomify.com/CVE-2024-36926/): powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE (medium 6.2)
- [CVE-2024-36925](https://insights.sbomify.com/CVE-2024-36925/): swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y (medium 5.5)
- [CVE-2024-36924](https://insights.sbomify.com/CVE-2024-36924/): scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (medium 5.5)
- [CVE-2024-36922](https://insights.sbomify.com/CVE-2024-36922/): wifi: iwlwifi: read txq->read_ptr under lock (high 8.8)
- [CVE-2024-36921](https://insights.sbomify.com/CVE-2024-36921/): wifi: iwlwifi: mvm: guard against invalid STA ID on removal (high 8.8)
- [CVE-2024-36920](https://insights.sbomify.com/CVE-2024-36920/): scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (medium 5.5)
- [CVE-2024-3692](https://insights.sbomify.com/CVE-2024-3692/): Gutenverse < 1.9.1 - Contributor+ Stored XSS (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/334/