Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 414 of 521.
- CVE-2024-2666 Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
- CVE-2024-26659 xhci: handle isoc Babble and Buffer Overrun events properly
- CVE-2024-26658 bcachefs: grab s_umount only if snapshotting
- CVE-2024-26657 drm/sched: fix null-ptr-deref in init entity
- CVE-2024-26656 drm/amdgpu: fix use-after-free bug
- CVE-2024-26655 Fix memory leak in posix_clock_open()
- CVE-2024-26654 ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- CVE-2024-26653 usb: misc: ljca: Fix double free in error handling path
- CVE-2024-26652 net: pds_core: Fix possible double free in error handling path
- CVE-2024-26651 sr9800: Add check for usbnet_get_endpoints
- CVE-2024-2665 Premium Addons for Elementor <= 4.10.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button
- CVE-2024-26649 drm/amdgpu: Fix the null pointer when load rlc firmware
- CVE-2024-26648 drm/amd/display: Fix variable deferencing before NULL check in edp_setup_replay()
- CVE-2024-26647 drm/amd/display: Fix late derefrence 'dsc' check in 'link_set_dsc_pps_packet()'
- CVE-2024-26646 thermal: intel: hfi: Add syscore callbacks for system-wide PM
- CVE-2024-26645 tracing: Ensure visibility when inserting an element into tracing_map
- CVE-2024-26644 btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- CVE-2024-26643 netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
- CVE-2024-26642 netfilter: nf_tables: disallow anonymous set with timeout flag
- CVE-2024-26641 ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- CVE-2024-26640 tcp: add sanity checks to rx zerocopy
- CVE-2024-2664 Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-26638 nbd: always initialize struct msghdr completely
- CVE-2024-26637 wifi: ath11k: rely on mac80211 debugfs handling for vif
- CVE-2024-26636 llc: make llc_ui_sendmsg() more robust against bonding changes
- CVE-2024-26635 llc: Drop support for ETH_P_TR_802_2.
- CVE-2024-26634 net: fix removing a namespace with conflicting altnames
- CVE-2024-26633 ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- CVE-2024-26632 block: Fix iterating over an empty bio with bio_for_each_folio_all
- CVE-2024-26631 ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work
- CVE-2024-26630 mm: cachestat: fix folio read-after-free in cache walk
- CVE-2024-2663 ZD YouTube FLV Player <= 1.2.6 - Server-Side Request Forgery
- CVE-2024-26629 nfsd: fix RELEASE_LOCKOWNER
- CVE-2024-26627 scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- CVE-2024-26626 ipmr: fix kernel panic when forwarding mcast packets
- CVE-2024-26625 llc: call sock_orphan() at release time
- CVE-2024-26623 pds_core: Prevent race issues involving the adminq
- CVE-2024-26622 tomoyo: fix UAF write bug in tomoyo_write_control()
- CVE-2024-26621 mm: huge_memory: don't force huge page alignment on 32 bit
- CVE-2024-26620 s390/vfio-ap: always filter entire AP matrix
- CVE-2024-2662 Command injection in Unlimited Elements For Elementor
- CVE-2024-26619 riscv: Fix module loading free order
- CVE-2024-26618 arm64/sme: Always exit sme_alloc() early with existing storage
- CVE-2024-26617 fs/proc/task_mmu: move mmu notification mechanism inside mm lock
- CVE-2024-26616 btrfs: scrub: avoid use-after-free when chunk length is not 64K aligned
- CVE-2024-26615 net/smc: fix illegal rmb_desc access in SMC-D connection dump
- CVE-2024-26614 tcp: make sure init the accept_queue's spinlocks once
- CVE-2024-26612 netfs, fscache: Prevent Oops in fscache_put_cache()
- CVE-2024-26611 xsk: fix usage of multi-buffer BPF helpers for ZC XDP
- CVE-2024-26610 wifi: iwlwifi: fix a memory corruption
- CVE-2024-2661 Barcode Scanner with Inventory & Order Manager <= 1.5.4 - Authenticated (Subscriber+) SQL Injection
- CVE-2024-26608 ksmbd: fix global oob in ksmbd_nl_policy
- CVE-2024-26607 drm/bridge: sii902x: Fix probing race issue
- CVE-2024-26606 binder: signal epoll threads of self-work
- CVE-2024-26605 PCI/ASPM: Fix deadlock when enabling ASPM
- CVE-2024-26604 Revert "kobject: Remove redundant checks for whether ktype is NULL"
- CVE-2024-26603 x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- CVE-2024-26602 sched/membarrier: reduce the ability to hammer on sys_membarrier
- CVE-2024-26601 ext4: regenerate buddy after block freeing failed if under fc replay
- CVE-2024-26600 phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- CVE-2024-2660 Vault TLS Cert Auth Method Did Not Correctly Validate OCSP Responses
- CVE-2024-26599 pwm: Fix out-of-bounds access in of_pwm_single_xlate()
- CVE-2024-26598 KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- CVE-2024-26597 net: qualcomm: rmnet: fix global oob in rmnet_policy
- CVE-2024-26596 net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
- CVE-2024-26595 mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- CVE-2024-26594 ksmbd: validate mech token in session setup
- CVE-2024-26593 i2c: i801: Fix block process call transactions
- CVE-2024-26592 ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- CVE-2024-26591 bpf: Fix re-attachment branch in bpf_tracing_prog_attach
- CVE-2024-26590 erofs: fix inconsistent per-file compression format
- CVE-2024-2659 Command injection in SMM, SMM2, FPC
- CVE-2024-26589 bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- CVE-2024-26588 LoongArch: BPF: Prevent out-of-bounds memory access
- CVE-2024-26587 net: netdevsim: don't try to destroy PHC on VFs
- CVE-2024-26586 mlxsw: spectrum_acl_tcam: Fix stack corruption
- CVE-2024-26585 tls: fix race between tx work scheduling and socket close
- CVE-2024-26584 net: tls: handle backlogging of crypto requests
- CVE-2024-26583 tls: fix race between async notify and socket close
- CVE-2024-26582 net: tls: fix use-after-free with partial reads and async decrypt
- CVE-2024-26581 netfilter: nft_set_rbtree: skip end interval element from gc
- CVE-2024-26580 Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability
- CVE-2024-2658 Local privilege escalation in FlexNet Publisher
- CVE-2024-26579 Apache Inlong JDBC Vulnerability
- CVE-2024-26578 Apache Answer: Repeated submission at registration created duplicate users with the same name
- CVE-2024-26577 VSeeFace through 1.13.38.c2 allows attackers to cause a denial of service (application hang) via a spoofed UDP packet containing at least 10 digits in JSON data.
- CVE-2024-26574 Misconfiguration in wondershare:filmora
- CVE-2024-2657 Font Farsi <= 1.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2024-26566 Auth bypass in iscute:cute http file server
- CVE-2024-2656 Icegram Express <= 5.7.14 - Authenticated (Administrator+) Cross-Site Scripting via CSV import
- CVE-2024-26559 Information disclosure in dagg:uverif
- CVE-2024-26557 Cross-site scripting in codiad:codiad
- CVE-2024-2655 Elementor Addons by Livemesh <= 8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name
- CVE-2024-26548 File upload in vivotek:camera firmware
- CVE-2024-26542 Cross-site scripting in bonitasoft:bonita web
- CVE-2024-26540 Memory corruption in cimg:cimg
- CVE-2024-2654 File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal
- CVE-2024-2653 CVE-2024-2653
- CVE-2024-26529 Denial of service in mz-automation:libiec61850
- CVE-2024-26521 HTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote attacker to execute arbitrary code, escalate privileges, and