Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 342 of 521.
- CVE-2024-3600 Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting
- CVE-2024-35999 smb3: missing lock when picking channel
- CVE-2024-35998 smb3: fix lock ordering potential deadlock in cifs_sync_mid_result
- CVE-2024-35997 HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- CVE-2024-35996 cpu: Re-enable CPU mitigations by default for !X86 architectures
- CVE-2024-35995 ACPI: CPPC: Use access_width over bit_width for system memory accesses
- CVE-2024-35994 firmware: qcom: uefisecapp: Fix memory related IO errors and crashes
- CVE-2024-35993 mm: turn folio_test_hugetlb into a PageType
- CVE-2024-35992 phy: marvell: a3700-comphy: Fix out of bounds read
- CVE-2024-35991 dmaengine: idxd: Convert spinlock to mutex to lock evl workqueue
- CVE-2024-35990 dma: xilinx_dpdma: Fix locking
- CVE-2024-3599 Missing authorization in Cookie Banner for GDPR / CCPA – WPLP Cookie Consent
- CVE-2024-35989 dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- CVE-2024-35988 riscv: Fix TASK_SIZE on 64-bit NOMMU
- CVE-2024-35987 riscv: Fix loading 64-bit NOMMU kernels past the start of RAM
- CVE-2024-35986 phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered
- CVE-2024-35985 sched/eevdf: Prevent vlag from going out of bounds in reweight_eevdf()
- CVE-2024-35984 i2c: smbus: fix NULL function pointer dereference
- CVE-2024-35983 bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS
- CVE-2024-35982 batman-adv: Avoid infinite loop trying to resize local TT
- CVE-2024-35981 virtio_net: Do not send RSS key if it is not supported
- CVE-2024-35980 arm64: tlb: Fix TLBI RANGE operand
- CVE-2024-3598 ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ekit_btn_id'
- CVE-2024-35979 raid1: fix use-after-free for original bio in raid1_write_request()
- CVE-2024-35978 Bluetooth: Fix memory leak in hci_req_sync_complete()
- CVE-2024-35977 platform/chrome: cros_ec_uart: properly fix race condition
- CVE-2024-35976 xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- CVE-2024-35975 octeontx2-pf: Fix transmit scheduler resource leak
- CVE-2024-35974 block: fix q->blkg_list corruption during disk rebind
- CVE-2024-35973 geneve: fix header validation in geneve[6]_xmit_skb
- CVE-2024-35972 bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init()
- CVE-2024-35971 net: ks8851: Handle softirqs at the end of IRQ thread to fix hang
- CVE-2024-35970 af_unix: Clear stale u->oob_skb.
- CVE-2024-3597 Export WP Page to Static HTML/CSS <= 2.2.2 - Open Redirect
- CVE-2024-35969 ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- CVE-2024-35968 pds_core: Fix pdsc_check_pci_health function to use work thread
- CVE-2024-35967 Bluetooth: SCO: Fix not validating setsockopt user input
- CVE-2024-35966 Bluetooth: RFCOMM: Fix not validating setsockopt user input
- CVE-2024-35965 Bluetooth: L2CAP: Fix not validating setsockopt user input
- CVE-2024-35964 Bluetooth: ISO: Fix not validating setsockopt user input
- CVE-2024-35963 Bluetooth: hci_sock: Fix not validating setsockopt user input
- CVE-2024-35962 netfilter: complete validation of user input
- CVE-2024-35961 net/mlx5: Register devlink first under devlink lock
- CVE-2024-35960 net/mlx5: Properly link new fs rules into the tree
- CVE-2024-3596 RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
- CVE-2024-35959 net/mlx5e: Fix mlx5e_priv_init() cleanup flow
- CVE-2024-35958 net: ena: Fix incorrect descriptor free behavior
- CVE-2024-35957 iommu/vt-d: Fix WARN_ON in iommu probe path
- CVE-2024-35956 btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- CVE-2024-35955 kprobes: Fix possible use-after-free issue on kprobe registration
- CVE-2024-35954 scsi: sg: Avoid sg device teardown race
- CVE-2024-35953 accel/ivpu: Fix deadlock in context_xa
- CVE-2024-35952 drm/ast: Fix soft lockup
- CVE-2024-35951 drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- CVE-2024-35950 drm/client: Fully protect modes[] with dev->mode_config.mutex
- CVE-2024-3595 Pure Chat – Live Chat Plugin & More! <= 2.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting
- CVE-2024-35949 btrfs: make sure that WRITTEN is set on all metadata blocks
- CVE-2024-35948 bcachefs: Check for journal entries overruning end of sb clean section
- CVE-2024-35947 dyndbg: fix old BUG_ON in >control parser
- CVE-2024-35946 wifi: rtw89: fix null pointer access when abort scan
- CVE-2024-35945 net: phy: phy_device: Prevent nullptr exceptions on ISR
- CVE-2024-35944 VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- CVE-2024-35943 pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- CVE-2024-35942 pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain
- CVE-2024-35940 pstore/zone: Add a null pointer check to the psz_kmsg_read
- CVE-2024-3594 IDonate <= 1.9.0 - Admin+ Stored XSS
- CVE-2024-35939 dma-direct: Leak pages on dma_set_decrypted() failure
- CVE-2024-35938 wifi: ath11k: decrease MHI channel buffer length to 8KB
- CVE-2024-35937 wifi: cfg80211: check A-MSDU format more carefully
- CVE-2024-35936 btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- CVE-2024-35935 btrfs: send: handle path ref underflow in header iterate_inode_ref()
- CVE-2024-35934 net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- CVE-2024-35933 Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- CVE-2024-35932 drm/vc4: don't check if plane->state->fb == state->fb
- CVE-2024-35931 drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- CVE-2024-35930 scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- CVE-2024-3593 UberMenu <= 3.8.3 - Cross-Site Request Forgery to Settings Reset
- CVE-2024-35929 rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock()
- CVE-2024-35927 drm: Check output polling initialized before disabling
- CVE-2024-35926 crypto: iaa - Fix async_disable descriptor leak
- CVE-2024-35925 block: prevent division by zero in blk_rq_stat_sum()
- CVE-2024-35924 usb: typec: ucsi: Limit read size on v1.2
- CVE-2024-35922 fbmon: prevent division by zero in fb_videomode_from_videomode()
- CVE-2024-35921 media: mediatek: vcodec: Fix oops when HEVC init fails
- CVE-2024-35920 media: mediatek: vcodec: adding lock to protect decoder context list
- CVE-2024-3592 SQL injection in Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker
- CVE-2024-35919 media: mediatek: vcodec: adding lock to protect encoder context list
- CVE-2024-35917 s390/bpf: Fix bpf_plt pointer arithmetic
- CVE-2024-35916 dma-buf: Fix NULL pointer dereference in sanitycheck()
- CVE-2024-35915 nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- CVE-2024-35914 nfsd: Fix error cleanup path in nfsd_rename()
- CVE-2024-35913 wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF
- CVE-2024-35912 wifi: iwlwifi: mvm: rfi: fix potential response leaks
- CVE-2024-35911 ice: fix memory corruption bug with suspend and rebuild
- CVE-2024-35910 tcp: properly terminate timers for kernel sockets
- CVE-2024-3591 WordPress Geo Controller < 8.6.5 - PHP Object Injection
- CVE-2024-35909 net: wwan: t7xx: Split 64bit accesses to fix alignment issues
- CVE-2024-35908 tls: get psock ref after taking rxlock to avoid leak
- CVE-2024-35907 mlxbf_gige: call request_irq() after NAPI initialized
- CVE-2024-35905 bpf: Protect against int overflow for stack access size