# Vulnerabilities published in 2024


- [CVE-2024-2744](https://insights.sbomify.com/CVE-2024-2744/): Nextgen Gallery < 3.59.1 - Admin+ Stored XSS (medium 4.3)
- [CVE-2024-27439](https://insights.sbomify.com/CVE-2024-27439/): Apache Wicket: Possible bypass of CSRF protection (medium 6.5)
- [CVE-2024-27438](https://insights.sbomify.com/CVE-2024-27438/): Apache Doris: Downloading arbitrary remote jar files resulting in remote command execution (critical 9.8)
- [CVE-2024-27437](https://insights.sbomify.com/CVE-2024-27437/): vfio/pci: Disable auto-enable of exclusive INTx IRQ (medium 5.5)
- [CVE-2024-27436](https://insights.sbomify.com/CVE-2024-27436/): ALSA: usb-audio: Stop parsing channels bits when all channels are found. (medium 5.3)
- [CVE-2024-27435](https://insights.sbomify.com/CVE-2024-27435/): nvme: fix reconnection fail due to reserved tag allocation (high 7.5)
- [CVE-2024-27434](https://insights.sbomify.com/CVE-2024-27434/): wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (high 7.1)
- [CVE-2024-27433](https://insights.sbomify.com/CVE-2024-27433/): clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe() (high 7.8)
- [CVE-2024-27432](https://insights.sbomify.com/CVE-2024-27432/): net: ethernet: mtk_eth_soc: fix PPE hanging issue (medium 5.5)
- [CVE-2024-27431](https://insights.sbomify.com/CVE-2024-27431/): cpumap: Zero-initialise xdp_rxq_info struct before running XDP program (high 7.8)
- [CVE-2024-2743](https://insights.sbomify.com/CVE-2024-2743/): Incorrect Authorization in GitLab (medium 5.3)
- [CVE-2024-2742](https://insights.sbomify.com/CVE-2024-2742/): OS Command Injection in Planet IGS-4215-16T2S (medium 6.4)
- [CVE-2024-27419](https://insights.sbomify.com/CVE-2024-27419/): netrom: Fix data-races around sysctl_net_busy_read (medium 4.7)
- [CVE-2024-27418](https://insights.sbomify.com/CVE-2024-27418/): net: mctp: take ownership of skb in mctp_local_output (medium 5.5)
- [CVE-2024-27417](https://insights.sbomify.com/CVE-2024-27417/): ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() (medium 5.5)
- [CVE-2024-27416](https://insights.sbomify.com/CVE-2024-27416/): Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST (high 8.8)
- [CVE-2024-27415](https://insights.sbomify.com/CVE-2024-27415/): netfilter: bridge: confirm multicast packets before passing them up the stack (high 8.8)
- [CVE-2024-27414](https://insights.sbomify.com/CVE-2024-27414/): rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back (high 7.8)
- [CVE-2024-27413](https://insights.sbomify.com/CVE-2024-27413/): efi/capsule-loader: fix incorrect allocation size (medium 5.5)
- [CVE-2024-27412](https://insights.sbomify.com/CVE-2024-27412/): power: supply: bq27xxx-i2c: Do not free non existing IRQ (medium 5.5)
- [CVE-2024-27411](https://insights.sbomify.com/CVE-2024-27411/): drm/nouveau: keep DMA buffers required for suspend/resume (high 7.8)
- [CVE-2024-27410](https://insights.sbomify.com/CVE-2024-27410/): wifi: nl80211: reject iftype change with mesh ID change (high 7.8)
- [CVE-2024-2741](https://insights.sbomify.com/CVE-2024-2741/): Cross-Site Request Forgery in Planet IGS-4215-16T2S (high 7.1)
- [CVE-2024-27409](https://insights.sbomify.com/CVE-2024-27409/): dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup (high 7.8)
- [CVE-2024-27408](https://insights.sbomify.com/CVE-2024-27408/): dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup (high 7.8)
- [CVE-2024-27407](https://insights.sbomify.com/CVE-2024-27407/): fs/ntfs3: Fixed overflow check in mi_enum_attr() (high 7.8)
- [CVE-2024-27406](https://insights.sbomify.com/CVE-2024-27406/): lib/Kconfig.debug: TEST_IOV_ITER depends on MMU (medium 5.5)
- [CVE-2024-27405](https://insights.sbomify.com/CVE-2024-27405/): usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs (high 7.5)
- [CVE-2024-27404](https://insights.sbomify.com/CVE-2024-27404/): mptcp: fix data races on remote_id (high 8.2)
- [CVE-2024-27403](https://insights.sbomify.com/CVE-2024-27403/): netfilter: nft_flow_offload: reset dst in route object after setting up flow (high 7.8)
- [CVE-2024-27402](https://insights.sbomify.com/CVE-2024-27402/): phonet/pep: fix racy skb_queue_empty() use (medium 5.8)
- [CVE-2024-27401](https://insights.sbomify.com/CVE-2024-27401/): firewire: nosy: ensure user_length is taken into account when fetching packet contents (high 7.8)
- [CVE-2024-27400](https://insights.sbomify.com/CVE-2024-27400/): drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2 (high 7.8)
- [CVE-2024-2740](https://insights.sbomify.com/CVE-2024-2740/): Exposure of Sensitive Information to an Unauthorized Actor in Planet IGS-4215-16T2S (high 7.7)
- [CVE-2024-27399](https://insights.sbomify.com/CVE-2024-27399/): Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (medium 5.5)
- [CVE-2024-27398](https://insights.sbomify.com/CVE-2024-27398/): Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (high 8.0)
- [CVE-2024-27397](https://insights.sbomify.com/CVE-2024-27397/): netfilter: nf_tables: use timestamp to check for set element timeout (high 7.8)
- [CVE-2024-27396](https://insights.sbomify.com/CVE-2024-27396/): net: gtp: Fix Use-After-Free in gtp_dellink (high 7.8)
- [CVE-2024-27395](https://insights.sbomify.com/CVE-2024-27395/): net: openvswitch: Fix Use-After-Free in ovs_ct_exit (high 7.8)
- [CVE-2024-27394](https://insights.sbomify.com/CVE-2024-27394/): tcp: Fix Use-After-Free in tcp_ao_connect_init (high 7.8)
- [CVE-2024-27393](https://insights.sbomify.com/CVE-2024-27393/): xen-netfront: Add missing skb_mark_for_recycle (high 7.5)
- [CVE-2024-27392](https://insights.sbomify.com/CVE-2024-27392/): nvme: host: fix double-free of struct nvme_id_ns in ns_update_nuse() (high 7.8)
- [CVE-2024-27391](https://insights.sbomify.com/CVE-2024-27391/): wifi: wilc1000: do not realloc workqueue everytime an interface is added (medium 5.5)
- [CVE-2024-27390](https://insights.sbomify.com/CVE-2024-27390/): ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down() (medium 5.5)
- [CVE-2024-2739](https://insights.sbomify.com/CVE-2024-2739/): Advance Search <= 1.1.6 - Shortcode Deletion via CSRF (high 8.7)
- [CVE-2024-27389](https://insights.sbomify.com/CVE-2024-27389/): pstore: inode: Only d_invalidate() is needed (high 7.8)
- [CVE-2024-27388](https://insights.sbomify.com/CVE-2024-27388/): SUNRPC: fix some memleaks in gssx_dec_option_array (critical 9.8)
- [CVE-2024-27387](https://insights.sbomify.com/CVE-2024-27387/): Memory corruption in samsung:exynos 1080 firmware (medium 6.7)
- [CVE-2024-27386](https://insights.sbomify.com/CVE-2024-27386/): Memory corruption in samsung:exynos 1380 firmware (medium 6.7)
- [CVE-2024-27385](https://insights.sbomify.com/CVE-2024-27385/): Memory corruption in samsung:exynos 1380 firmware (medium 6.7)
- [CVE-2024-27383](https://insights.sbomify.com/CVE-2024-27383/): Memory corruption in samsung:exynos 1080 firmware (medium 6.7)
- [CVE-2024-27382](https://insights.sbomify.com/CVE-2024-27382/): Memory corruption in samsung:exynos 1280 firmware (medium 6.0)
- [CVE-2024-27381](https://insights.sbomify.com/CVE-2024-27381/): Memory corruption in samsung:exynos 1280 firmware (medium 6.0)
- [CVE-2024-27380](https://insights.sbomify.com/CVE-2024-27380/): Memory corruption in samsung:exynos 1280 firmware (medium 6.0)
- [CVE-2024-2738](https://insights.sbomify.com/CVE-2024-2738/): Permalink Manager Lite and Permalink Manager Pro <= 2.4.3.1 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2024-27379](https://insights.sbomify.com/CVE-2024-27379/): Memory corruption in samsung:exynos 1280 firmware (medium 6.7)
- [CVE-2024-27378](https://insights.sbomify.com/CVE-2024-27378/): Memory corruption in samsung:exynos 1280 firmware (medium 6.0)
- [CVE-2024-27377](https://insights.sbomify.com/CVE-2024-27377/): Memory corruption in samsung:exynos 1280 firmware (medium 6.7)
- [CVE-2024-27376](https://insights.sbomify.com/CVE-2024-27376/): Memory corruption in samsung:exynos 1280 firmware (medium 6.7)
- [CVE-2024-27375](https://insights.sbomify.com/CVE-2024-27375/): Memory corruption in samsung:exynos 1280 firmware (medium 6.7)
- [CVE-2024-27374](https://insights.sbomify.com/CVE-2024-27374/): Memory corruption in samsung:exynos 1280 firmware (medium 6.7)
- [CVE-2024-27373](https://insights.sbomify.com/CVE-2024-27373/): Memory corruption in samsung:exynos 1280 firmware (medium 6.7)
- [CVE-2024-27372](https://insights.sbomify.com/CVE-2024-27372/): Memory corruption in samsung:exynos 1280 firmware (medium 6.7)
- [CVE-2024-27371](https://insights.sbomify.com/CVE-2024-27371/): Memory corruption in samsung:exynos 1280 firmware (medium 6.7)
- [CVE-2024-27370](https://insights.sbomify.com/CVE-2024-27370/): Memory corruption in samsung:exynos 1280 firmware (medium 6.7)
- [CVE-2024-27368](https://insights.sbomify.com/CVE-2024-27368/): Memory corruption in samsung:exynos 1080 firmware (medium 4.4)
- [CVE-2024-27367](https://insights.sbomify.com/CVE-2024-27367/): Integer overflow in samsung:exynos 1080 firmware (medium 4.4)
- [CVE-2024-27366](https://insights.sbomify.com/CVE-2024-27366/): Memory corruption in samsung:exynos 1080 firmware (medium 4.4)
- [CVE-2024-27365](https://insights.sbomify.com/CVE-2024-27365/): Memory corruption in samsung:exynos 1080 firmware (medium 4.4)
- [CVE-2024-27364](https://insights.sbomify.com/CVE-2024-27364/): Memory corruption in samsung:exynos 1080 firmware (medium 4.4)
- [CVE-2024-27363](https://insights.sbomify.com/CVE-2024-27363/): A vulnerability was discovered in Samsung Mobile Processor Exynos 850, Exynos 9610, Exynos 980, Exynos 1280, Exynos 1380, Exynos 1330, Exyno (medium 6.0)
- [CVE-2024-27362](https://insights.sbomify.com/CVE-2024-27362/): Information disclosure in samsung:exynos 1280 firmware (medium 4.4)
- [CVE-2024-27361](https://insights.sbomify.com/CVE-2024-27361/): Race condition in samsung:exynos 1080 firmware (medium 5.1)
- [CVE-2024-27360](https://insights.sbomify.com/CVE-2024-27360/): Denial of service in samsung:exynos 1080 firmware (medium 6.0)
- [CVE-2024-2736](https://insights.sbomify.com/CVE-2024-2736/): Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags (medium 6.4)
- [CVE-2024-27359](https://insights.sbomify.com/CVE-2024-27359/): Certain WithSecure products allow a Denial of Service because the engine scanner can go into an infinite loop when processing an archive file. (high 7.5)
- [CVE-2024-27358](https://insights.sbomify.com/CVE-2024-27358/): An issue was discovered in WithSecure Elements Agent through 23.x for macOS and WithSecure Elements Client Security through 23.x for macOS. (low 3.3)
- [CVE-2024-27357](https://insights.sbomify.com/CVE-2024-27357/): An issue was discovered in WithSecure Elements Agent through 23.x for macOS, WithSecure Elements Client Security through 23.x for macOS, and (medium 5.8)
- [CVE-2024-27356](https://insights.sbomify.com/CVE-2024-27356/): Information disclosure in gl-inet:a1300 firmware (high 7.5)
- [CVE-2024-27355](https://insights.sbomify.com/CVE-2024-27355/): phpseclib guardrails needed on OID length (high 7.5)
- [CVE-2024-27354](https://insights.sbomify.com/CVE-2024-27354/): phpseclib: guardrails needed on isPrime and randomPrime (high 7.5)
- [CVE-2024-27353](https://insights.sbomify.com/CVE-2024-27353/): A memory corruption vulnerability in SdHost and SdMmcDevice in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kern (high 7.4)
- [CVE-2024-27351](https://insights.sbomify.com/CVE-2024-27351/): Regular expression denial-of-service in Django (medium 5.3)
- [CVE-2024-27350](https://insights.sbomify.com/CVE-2024-27350/): Security feature bypass in amazon:fire os (medium 5.9)
- [CVE-2024-2735](https://insights.sbomify.com/CVE-2024-2735/): Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element (medium 6.4)
- [CVE-2024-27349](https://insights.sbomify.com/CVE-2024-27349/): Apache HugeGraph-Server: Bypass whitelist in Auth mode (critical 9.1)
- [CVE-2024-27348](https://insights.sbomify.com/CVE-2024-27348/): Apache HugeGraph-Server Improper Access Control (critical 9.8, exploited in the wild)
- [CVE-2024-27347](https://insights.sbomify.com/CVE-2024-27347/): Apache HugeGraph-Hubble: SSRF in Hubble connection page (medium 5.3)
- [CVE-2024-27346](https://insights.sbomify.com/CVE-2024-27346/): Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2024-27345](https://insights.sbomify.com/CVE-2024-27345/): Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2024-27344](https://insights.sbomify.com/CVE-2024-27344/): Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-27343](https://insights.sbomify.com/CVE-2024-27343/): Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2024-27342](https://insights.sbomify.com/CVE-2024-27342/): Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-27341](https://insights.sbomify.com/CVE-2024-27341/): Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-27340](https://insights.sbomify.com/CVE-2024-27340/): Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-2734](https://insights.sbomify.com/CVE-2024-2734/): Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features (medium 6.4)
- [CVE-2024-27339](https://insights.sbomify.com/CVE-2024-27339/): Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-27338](https://insights.sbomify.com/CVE-2024-27338/): Kofax Power PDF app response Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-27337](https://insights.sbomify.com/CVE-2024-27337/): Kofax Power PDF TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-27336](https://insights.sbomify.com/CVE-2024-27336/): Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/406/