Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 406 of 521.
- CVE-2024-2744 Nextgen Gallery < 3.59.1 - Admin+ Stored XSS
- CVE-2024-27439 Apache Wicket: Possible bypass of CSRF protection
- CVE-2024-27438 Apache Doris: Downloading arbitrary remote jar files resulting in remote command execution
- CVE-2024-27437 vfio/pci: Disable auto-enable of exclusive INTx IRQ
- CVE-2024-27436 ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- CVE-2024-27435 nvme: fix reconnection fail due to reserved tag allocation
- CVE-2024-27434 wifi: iwlwifi: mvm: don't set the MFP flag for the GTK
- CVE-2024-27433 clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe()
- CVE-2024-27432 net: ethernet: mtk_eth_soc: fix PPE hanging issue
- CVE-2024-27431 cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- CVE-2024-2743 Incorrect Authorization in GitLab
- CVE-2024-2742 OS Command Injection in Planet IGS-4215-16T2S
- CVE-2024-27419 netrom: Fix data-races around sysctl_net_busy_read
- CVE-2024-27418 net: mctp: take ownership of skb in mctp_local_output
- CVE-2024-27417 ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- CVE-2024-27416 Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST
- CVE-2024-27415 netfilter: bridge: confirm multicast packets before passing them up the stack
- CVE-2024-27414 rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back
- CVE-2024-27413 efi/capsule-loader: fix incorrect allocation size
- CVE-2024-27412 power: supply: bq27xxx-i2c: Do not free non existing IRQ
- CVE-2024-27411 drm/nouveau: keep DMA buffers required for suspend/resume
- CVE-2024-27410 wifi: nl80211: reject iftype change with mesh ID change
- CVE-2024-2741 Cross-Site Request Forgery in Planet IGS-4215-16T2S
- CVE-2024-27409 dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup
- CVE-2024-27408 dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup
- CVE-2024-27407 fs/ntfs3: Fixed overflow check in mi_enum_attr()
- CVE-2024-27406 lib/Kconfig.debug: TEST_IOV_ITER depends on MMU
- CVE-2024-27405 usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- CVE-2024-27404 mptcp: fix data races on remote_id
- CVE-2024-27403 netfilter: nft_flow_offload: reset dst in route object after setting up flow
- CVE-2024-27402 phonet/pep: fix racy skb_queue_empty() use
- CVE-2024-27401 firewire: nosy: ensure user_length is taken into account when fetching packet contents
- CVE-2024-27400 drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2
- CVE-2024-2740 Exposure of Sensitive Information to an Unauthorized Actor in Planet IGS-4215-16T2S
- CVE-2024-27399 Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- CVE-2024-27398 Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- CVE-2024-27397 netfilter: nf_tables: use timestamp to check for set element timeout
- CVE-2024-27396 net: gtp: Fix Use-After-Free in gtp_dellink
- CVE-2024-27395 net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- CVE-2024-27394 tcp: Fix Use-After-Free in tcp_ao_connect_init
- CVE-2024-27393 xen-netfront: Add missing skb_mark_for_recycle
- CVE-2024-27392 nvme: host: fix double-free of struct nvme_id_ns in ns_update_nuse()
- CVE-2024-27391 wifi: wilc1000: do not realloc workqueue everytime an interface is added
- CVE-2024-27390 ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()
- CVE-2024-2739 Advance Search <= 1.1.6 - Shortcode Deletion via CSRF
- CVE-2024-27389 pstore: inode: Only d_invalidate() is needed
- CVE-2024-27388 SUNRPC: fix some memleaks in gssx_dec_option_array
- CVE-2024-27387 Memory corruption in samsung:exynos 1080 firmware
- CVE-2024-27386 Memory corruption in samsung:exynos 1380 firmware
- CVE-2024-27385 Memory corruption in samsung:exynos 1380 firmware
- CVE-2024-27383 Memory corruption in samsung:exynos 1080 firmware
- CVE-2024-27382 Memory corruption in samsung:exynos 1280 firmware
- CVE-2024-27381 Memory corruption in samsung:exynos 1280 firmware
- CVE-2024-27380 Memory corruption in samsung:exynos 1280 firmware
- CVE-2024-2738 Permalink Manager Lite and Permalink Manager Pro <= 2.4.3.1 - Reflected Cross-Site Scripting
- CVE-2024-27379 Memory corruption in samsung:exynos 1280 firmware
- CVE-2024-27378 Memory corruption in samsung:exynos 1280 firmware
- CVE-2024-27377 Memory corruption in samsung:exynos 1280 firmware
- CVE-2024-27376 Memory corruption in samsung:exynos 1280 firmware
- CVE-2024-27375 Memory corruption in samsung:exynos 1280 firmware
- CVE-2024-27374 Memory corruption in samsung:exynos 1280 firmware
- CVE-2024-27373 Memory corruption in samsung:exynos 1280 firmware
- CVE-2024-27372 Memory corruption in samsung:exynos 1280 firmware
- CVE-2024-27371 Memory corruption in samsung:exynos 1280 firmware
- CVE-2024-27370 Memory corruption in samsung:exynos 1280 firmware
- CVE-2024-27368 Memory corruption in samsung:exynos 1080 firmware
- CVE-2024-27367 Integer overflow in samsung:exynos 1080 firmware
- CVE-2024-27366 Memory corruption in samsung:exynos 1080 firmware
- CVE-2024-27365 Memory corruption in samsung:exynos 1080 firmware
- CVE-2024-27364 Memory corruption in samsung:exynos 1080 firmware
- CVE-2024-27363 A vulnerability was discovered in Samsung Mobile Processor Exynos 850, Exynos 9610, Exynos 980, Exynos 1280, Exynos 1380, Exynos 1330, Exyno
- CVE-2024-27362 Information disclosure in samsung:exynos 1280 firmware
- CVE-2024-27361 Race condition in samsung:exynos 1080 firmware
- CVE-2024-27360 Denial of service in samsung:exynos 1080 firmware
- CVE-2024-2736 Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
- CVE-2024-27359 Certain WithSecure products allow a Denial of Service because the engine scanner can go into an infinite loop when processing an archive file.
- CVE-2024-27358 An issue was discovered in WithSecure Elements Agent through 23.x for macOS and WithSecure Elements Client Security through 23.x for macOS.
- CVE-2024-27357 An issue was discovered in WithSecure Elements Agent through 23.x for macOS, WithSecure Elements Client Security through 23.x for macOS, and
- CVE-2024-27356 Information disclosure in gl-inet:a1300 firmware
- CVE-2024-27355 phpseclib guardrails needed on OID length
- CVE-2024-27354 phpseclib: guardrails needed on isPrime and randomPrime
- CVE-2024-27353 A memory corruption vulnerability in SdHost and SdMmcDevice in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kern
- CVE-2024-27351 Regular expression denial-of-service in Django
- CVE-2024-27350 Security feature bypass in amazon:fire os
- CVE-2024-2735 Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element
- CVE-2024-27349 Apache HugeGraph-Server: Bypass whitelist in Auth mode
- CVE-2024-27348 Apache HugeGraph-Server Improper Access Control
- CVE-2024-27347 Apache HugeGraph-Hubble: SSRF in Hubble connection page
- CVE-2024-27346 Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-27345 Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-27344 Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability
- CVE-2024-27343 Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-27342 Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-27341 Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-27340 Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-2734 Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features
- CVE-2024-27339 Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-27338 Kofax Power PDF app response Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-27337 Kofax Power PDF TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-27336 Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability