CVEs published July 12, 2024
200 CVEs were published on July 12, 2024: 14 critical, 73 high.
- Published
- 200
- Critical
- 14
- High
- 73
- Medium
- 36
- Low
- 1
- Unrated
- 76
- Now in CISA KEV
- 0
- Fix available
- 57
Most affected products
- Linux
- 122
- ContentLock
- 3
- anhvnit Woocommerce OpenPos
- 2
- fogproject
- 2
- NooTheme Jobmonster
- 2
- aimhubio/aim
- 1
- Apache Software Foundation Apache Wicket · org.apache.wicke…
- 1
- bastho Event post
- 1
- Bastien Ho Event post
- 1
- BinaryCarpenter Ultimate Custom Add To Cart Button (Ajax) F…
- 1
Critical 14
- CVE-2024-38736WordPress Realtyna Organic IDX plugin <= 4.14.13 - Arbitrary File Upload vulnerabilityRealtyna Organic IDX plugin
- CVE-2024-38734WordPress Import Spreadsheets from Microsoft Excel plugin <= 10.1.4 - Arbitrary File Upload vulnerabilitySpreadsheetConverter Import Spreadsheets from Microsoft Exc…
- CVE-2024-39914 FOG has a command injection in /fog/management/export.php?filename=fogproject
- CVE-2024-37927WordPress Jobmonster theme <= 4.7.5 - Unauthenticated Privilege Escalation vulnerabilityNooTheme Jobmonster
- CVE-2024-37933WordPress Woocommerce OpenPos plugin <= 6.4.4 - Unauthenticated SQL Injection vulnerabilityanhvnit Woocommerce OpenPos
- CVE-2024-40999net: ena: Add validation for completion descriptors consistencyLinux
- CVE-2024-40983tipc: force a dst refcount before doing decryptionLinux
- CVE-2024-40937gve: Clear napi->skb before dev_kfree_skb_any()Linux
- CVE-2024-40923vmxnet3: disable rx data ring on dma allocation failureLinux
- CVE-2024-40907ionic: fix kernel panic in XDP_TX actionLinux
- CVE-2024-36522Apache Wicket: Remote code execution via XSLT injectionApache Software Foundation Apache Wicket · org.apache.wicke…
- CVE-2024-6328MStore API – Create Native Android & iOS Apps On The Cloud <= 4.14.7 - Authentication Bypassinspireui MStore API – Create Native Android & iOS Apps On…
- CVE-2024-6396Arbitrary File Overwrite and Data Exfiltration in aimhubio/aimaimhubio/aim
- CVE-2024-40110Sourcecodester Poultry Farm Management System v1.0 contains an Unauthenticated Remote Code Execution (RCE) vulnerability via the productimag
High 73
- CVE-2024-5902UserFeedback Lite <= 1.0.15 - Unauthenticated Stored Cross-Site Scripting via Name Parametersmub UserFeedback – Create Interactive Feedback Form, User…
- CVE-2024-39917xrdp allows an ininite number of login attemptsneutrinolabs xrdp
- CVE-2024-38735WordPress Event post plugin <= 5.9.5 - Local File Inclusion vulnerabilityBastien Ho Event post
- CVE-2024-38717WordPress Booking Ultra Pro Appointments Booking Calendar plugin <= 1.1.13 - Local File Inclusion vulnerabilityBooking Ultra Pro
- CVE-2024-39903Local File Inclusion in Solarawidgetti solara · solara
- CVE-2024-37932WordPress Woocommerce OpenPos plugin <= 6.4.4 - Unauthenticated Arbitrary File Deletion vulnerabilityanhvnit Woocommerce OpenPos
- CVE-2024-37928WordPress Jobmonster theme <= 4.7.0 - Unauthenticated Arbitrary File Deletion vulnerabilityNooTheme Jobmonster
- CVE-2024-37560WordPress WP User Switch plugin <= 1.1.0 - Privilege Escalation vulnerabilityIqbalRony WP User Switch
- CVE-2024-37940WordPress Seraphinite Accelerator (Full, premium) plugin <= 2.21.13 - CSRF Leading to Arbitrary File Deletion vulnerabilitySeraphinite Solutions Seraphinite Accelerator
- CVE-2024-35773WordPress Comment Reply Email plugin <= 1.3 - CSRF to Stored XSS vulnerabilityWPJohnny, zerOneIT Comment Reply Email
- CVE-2024-37213WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.4.6 - CSRF to XSS vulnerabilityguru-aliexpress AliNext
- CVE-2024-37564WordPress PayPlus Payment Gateway plugin <= 7.0.7 - SQL Injection vulnerabilityPayPlus Payment Gateway
- CVE-2024-5325Form Vibes <= 1.4.10 - Authenticated (Subscriber+) SQL Injection via fv_export_datawpvibes Form Vibes – Database Manager for Forms
- CVE-2024-41003bpf: Fix reg_set_min_max corruption of fake_regLinux
- CVE-2024-40992RDMA/rxe: Fix responder length checking for UD request packetsLinux
- CVE-2024-40991dmaengine: ti: k3-udma-glue: Fix of_k3_udma_glue_parse_chn_by_id()Linux
- CVE-2024-40990RDMA/mlx5: Add check for srq max_sge attributeLinux
- CVE-2024-40989KVM: arm64: Disassociate vcpus from redistributor region on teardownLinux
- CVE-2024-40986dmaengine: xilinx: xdma: Fix data synchronisation in xdma_channel_isr()Linux
- CVE-2024-40984ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."Linux
- CVE-2024-40980drop_monitor: replace spin_lock by raw_spin_lockLinux
- CVE-2024-40979wifi: ath12k: fix kernel crash during resumeLinux
- CVE-2024-40974powerpc/pseries: Enforce hcall result buffer validity and sizeLinux
- CVE-2024-40971f2fs: remove clear SB_INLINECRYPT flag in default_optionsLinux
- CVE-2024-40970Avoid hw_desc array overrun in dw-axi-dmacLinux
- CVE-2024-40958netns: Make get_net_ns() handle zero refcount netLinux
- CVE-2024-40957seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviorsLinux
- CVE-2024-40956dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_listLinux
- CVE-2024-40954net: do not leave a dangling sk pointer, when socket creation failsLinux
- CVE-2024-40953KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()Linux
- CVE-2024-40949mm: shmem: fix getting incorrect lruvec when replacing a shmem folioLinux
- CVE-2024-40947ima: Avoid blocking in RCU read-side critical sectionLinux
- CVE-2024-40943ocfs2: fix races between hole punching and AIO+DIOLinux
- CVE-2024-40941wifi: iwlwifi: mvm: don't read past the mfuart notifcationLinux
- CVE-2024-40930wifi: cfg80211: validate HE operation element parsingLinux
- CVE-2024-40929wifi: iwlwifi: mvm: check n_ssids before accessing the ssidsLinux
- CVE-2024-40925block: fix request.queuelist usage in flushLinux
- CVE-2024-40924drm/i915/dpt: Make DPT object unshrinkableLinux
- CVE-2024-40920net: bridge: mst: fix suspicious rcu usage in br_mst_set_stateLinux
- CVE-2024-40918parisc: Try to fix random segmentation faults in package buildsLinux
- CVE-2024-40911wifi: cfg80211: Lock wiphy in cfg80211_get_stationLinux
- CVE-2024-40910ax25: Fix refcount imbalance on inbound connectionsLinux
- CVE-2024-40909bpf: Fix a potential use-after-free in bpf_link_free()Linux
- CVE-2024-40902jfs: xattr: fix buffer overflow for invalid xattrLinux
- CVE-2024-40901scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memoryLinux
- CVE-2024-40900cachefiles: remove requests from xarray during flushing requestsLinux
- CVE-2024-39508io_uring/io-wq: Use set_bit() and test_bit() at worker->flagsLinux
- CVE-2024-39507net: hns3: fix kernel crash problem in concurrent scenarioLinux
- CVE-2024-39503netfilter: ipset: Fix race between namespace cleanup and gc in the list:set typeLinux
- CVE-2024-39502ionic: fix use after netif_napi_del()Linux
- CVE-2024-39500sock_map: avoid race between sock_map_close and sk_psock_putLinux
- CVE-2024-39496btrfs: zoned: fix use-after-free due to race with dev replaceLinux
- CVE-2024-39495greybus: Fix use-after-free bug in gb_interface_release due to race condition.Linux
- CVE-2024-39494ima: Fix use-after-free on a dentry's dname.nameLinux
- CVE-2024-6353Wallet for WooCommerce <= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'search[value]'subratamal Wallet for WooCommerce
- CVE-2024-6024ContentLock <= 1.0.3 - Groups/Emails Deletion via CSRFContentLock
- CVE-2024-6023ContentLock <= 1.0.3 - Email Adding via CSRFContentLock
- CVE-2024-6022ContentLock <= 1.0.3 - Settings Update via CSRFContentLock
- CVE-2024-6677Privilege escalation in uberAgentCitrix uberAgent
- CVE-2024-30213StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows remote authenticated users to achieve Command Injection via a Ping URL, l
- CVE-2024-39340The authentication system of Securepoint UTM mishandles OTP keys.
- CVE-2024-40518SeaCMS 12.9 has a remote code execution vulnerability.
- CVE-2024-40519SeaCMS 12.9 has a remote code execution vulnerability.
- CVE-2024-40520SeaCMS 12.9 has a remote code execution vulnerability.
- CVE-2024-40521SeaCMS 12.9 has a remote code execution vulnerability.
- CVE-2024-40522There is a remote code execution vulnerability in SeaCMS 12.9.
- CVE-2024-40544PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery (SSRF) via the component /admin/#maintenance_sysTask/edit.
- CVE-2024-40545An arbitrary file upload vulnerability in the component /admin/cmsWebFile/doUpload of PublicCMS v4.0.202302.e allows attackers to execute ar
- CVE-2024-40546An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attackers to execute arbitr
- CVE-2024-40548An arbitrary file upload vulnerability in the component /admin/cmsTemplate/save of PublicCMS v4.0.202302.e allows attackers to execute arbit
- CVE-2024-40549An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS v4.0.202302.e allows attackers to execute
- CVE-2024-40550An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlaceMetaData of Public CMS v.4.0.202302.e allows attackers t
- CVE-2024-40552PublicCMS v4.0.202302.e was discovered to contain a remote commande execution (RCE) vulnerability via the cmdarray parameter at /site/Script
Medium, low and unrated 113
- CVE-2023-41093Loss of confidentiality due to potential race condition in Bluetooth controller Connection_Handle reuseSilicon Labs Simplicity SDK
- CVE-2024-40690IBM InfoSphere Server cross-site scriptingIBM InfoSphere Server
- CVE-2024-37405Livechat messages can be leaked by combining two NoSQL injections affecting livechat:loginByToken (pre-authentication) and livechat:loadHistRocket.Chat
- CVE-2024-38716WordPress Events Calendar for Google plugin <= 2.1.0 - Local File Inclusion vulnerabilityBlue Plugins Events Calendar for Google
- CVE-2024-39916NFS server misconfiguration allows file access outside the exported directoryfogproject
- CVE-2024-39909SQL Injection in the KubeClarity REST APIopenclarity kubeclarity · github.com/openclarity/kubeclarit…
- CVE-2024-38715WordPress ExS Widgets plugin <= 0.3.1 - Local File Inclusion vulnerabilityExS Widgets
- CVE-2024-38709WordPress GD Rating System plugin <= 3.6 - Local File Inclusion vulnerabilityMilan Petrovic GD Rating System
- CVE-2024-38706WordPress HT Mega plugin <= 2.5.7 - JSON Path Traversal vulnerabilityDevItems HT Mega
- CVE-2024-38704WordPress Team Manager plugin <= 2.1.12 - Local File Inclusion vulnerabilityDynamicWebLab WordPress Team Manager
- CVE-2024-38700WordPress WPCS – WordPress Currency Switcher Professional plugin <= 1.2.0.3 - Arbitrary Shortcode Execution vulnerabilityrealmag777 WPCS
- CVE-2024-37938WordPress SociallyViral theme <= 1.0.10 - Cross Site Request Forgery (CSRF) vulnerabilityMyThemeShop SociallyViral
- CVE-2024-37939WordPress Patricia Lite theme <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerabilityVolThemes Patricia Lite
- CVE-2024-37941WordPress Internal Link Juicer: SEO Auto Linker for WordPress plugin <= 2.24.3 - Cross Site Request Forgery (CSRF) vulnerabilityInternal Link Juicer: SEO Auto Linker for WordPress
- CVE-2024-37202WordPress Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter plugin <= 1.222.17 - Broken Access Control to XSS vulnerabilityBinaryCarpenter Ultimate Custom Add To Cart Button (Ajax) F…
- CVE-2024-37544WordPress Get Better Reviews for WooCommerce plugin <= 4.0.6 - Broken Access Control vulnerabilitySaleswonder Team: Tobias Get Better Reviews for WooCommerce
- CVE-2024-6495Premium Addons for Elementor <= 4.10.36 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Animated Text Widgetleap13 Premium Addons for Elementor – Powerful Elementor Te…
- CVE-2024-41006netrom: Fix a memory leak in nr_heartbeat_expiry()Linux
- CVE-2024-41005netpoll: Fix race condition in netpoll_owner_activeLinux
- CVE-2024-41004tracing: Build event generation tests only as modulesLinux
- CVE-2024-41002crypto: hisilicon/sec - Fix memory leak for sec resource releaseLinux
- CVE-2024-41001io_uring/sqpoll: work around a potential audit memory leakLinux
- CVE-2024-41000block/ioctl: prefer different overflow checkLinux
- CVE-2024-40998ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()Linux
- CVE-2024-40997cpufreq: amd-pstate: fix memory leak on CPU EPP exitLinux
- CVE-2024-40996bpf: Avoid splat in pskb_pull_reasonLinux
- CVE-2024-40995net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()Linux
- CVE-2024-40994ptp: fix integer overflow in max_vclocks_storeLinux
- CVE-2024-40993netfilter: ipset: Fix suspicious rcu_dereference_protected()Linux
- CVE-2024-40988drm/radeon: fix UBSAN warning in kv_dpm.cLinux
- CVE-2024-40987drm/amdgpu: fix UBSAN warning in kv_dpm.cLinux
- CVE-2024-40985net/tcp_ao: Don't leak ao_info on error-pathLinux
- CVE-2024-40981batman-adv: bypass empty buckets in batadv_purge_orig_ref()Linux
- CVE-2024-40978scsi: qedi: Fix crash while reading debugfs attributeLinux
- CVE-2024-40977wifi: mt76: mt7921s: fix potential hung tasks during chip recoveryLinux
- CVE-2024-40976drm/lima: mask irqs in timeout path before hard resetLinux
- CVE-2024-40975platform/x86: x86-android-tablets: Unregister devices in reverse orderLinux
- CVE-2024-40973media: mtk-vcodec: potential null pointer deference in SCPLinux
- CVE-2024-40972ext4: do not create EA inode under buffer lockLinux
- CVE-2024-40969f2fs: don't set RO when shutting down f2fsLinux
- CVE-2024-40968MIPS: Octeon: Add PCIe link status checkLinux
- CVE-2024-40967serial: imx: Introduce timeout when waiting on transmitter emptyLinux
- CVE-2024-40966tty: add the option to have a tty reject a new ldiscLinux
- CVE-2024-40965i2c: lpi2c: Avoid calling clk_get_rate during transferLinux
- CVE-2024-40964ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind()Linux
- CVE-2024-40963mips: bmips: BCM6358: make sure CBR is correctly setLinux
- CVE-2024-40962btrfs: zoned: allocate dummy checksums for zoned NODATASUM writesLinux
- CVE-2024-40961ipv6: prevent possible NULL deref in fib6_nh_init()Linux
- CVE-2024-40960ipv6: prevent possible NULL dereference in rt6_probe()Linux
- CVE-2024-40959xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()Linux
- CVE-2024-40955ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()Linux
- CVE-2024-40952ocfs2: fix NULL pointer dereference in ocfs2_journal_dirty()Linux
- CVE-2024-40951ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger()Linux
- CVE-2024-40950mm: huge_memory: fix misused mapping_large_folio_support() for anon foliosLinux
- CVE-2024-40948mm/page_table_check: fix crash on ZONE_DEVICELinux
- CVE-2024-40945iommu: Return right value in iommu_sva_bind_device()Linux
- CVE-2024-40944x86/kexec: Fix bug with call depth trackingLinux
- CVE-2024-40942wifi: mac80211: mesh: Fix leak of mesh_preq_queue objectsLinux
- CVE-2024-40940net/mlx5: Fix tainted pointer delete is case of flow rules creation failLinux
- CVE-2024-40939net: wwan: iosm: Fix tainted pointer delete is case of region creation failLinux
- CVE-2024-40938landlock: Fix d_parent walkLinux
- CVE-2024-40936cxl/region: Fix memregion leaks in devm_cxl_add_region()Linux
- CVE-2024-40935cachefiles: flush all requests after setting CACHEFILES_DEADLinux
- CVE-2024-40934HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()Linux
- CVE-2024-40933iio: temperature: mlx90635: Fix ERR_PTR dereference in mlx90635_probe()Linux
- CVE-2024-40932drm/exynos/vidi: fix memory leak in .get_modes()Linux
- CVE-2024-40931mptcp: ensure snd_una is properly initialized on connectLinux
- CVE-2024-40928net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()Linux
- CVE-2024-40927xhci: Handle TD clearing for multiple streams caseLinux
- CVE-2024-40926drm/nouveau: don't attempt to schedule hpd_work on headless cardsLinux
- CVE-2024-40922io_uring/rsrc: don't lock while !TASK_RUNNINGLinux
- CVE-2024-40921net: bridge: mst: pass vlan group directly to br_mst_vlan_set_stateLinux
- CVE-2024-40919bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send()Linux
- CVE-2024-40917memblock: make memblock_set_node() also warn about use of MAX_NUMNODESLinux
- CVE-2024-40916drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID foundLinux
- CVE-2024-40915riscv: rewrite __kernel_map_pages() to fix sleeping in invalid contextLinux
- CVE-2024-40914mm/huge_memory: don't unpoison huge_zero_folioLinux
- CVE-2024-40913cachefiles: defer exposing anon_fd until after copy_to_user() succeedsLinux
- CVE-2024-40912wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()Linux
- CVE-2024-40908bpf: Set run context for rawtp test_run callbackLinux
- CVE-2024-40906net/mlx5: Always stop health timer during driver removalLinux
- CVE-2024-40905ipv6: fix possible race in __fib6_drop_pcpu_from()Linux
- CVE-2024-40904USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messagesLinux
- CVE-2024-40903usb: typec: tcpm: fix use-after-free case in tcpm_register_source_capsLinux
- CVE-2024-40899cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()Linux
- CVE-2024-39510cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()Linux
- CVE-2024-39509HID: core: remove unnecessary WARN_ON() in implement()Linux
- CVE-2024-39506liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packetLinux
- CVE-2024-39505drm/komeda: check for error-valued pointerLinux
- CVE-2024-39504netfilter: nft_inner: validate mandatory meta and payloadLinux
- CVE-2024-39499vmci: prevent speculation leaks by sanitizing event in event_deliver()Linux
- CVE-2024-39498drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2Linux
- CVE-2024-39497drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)Linux
- CVE-2024-6625WP Total Branding <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via title Parameterm_uysl WP Total Branding – Complete branding solution for W…
- CVE-2024-6588PowerPress Podcasting plugin by Blubrry <= 11.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via media_url ParameterPowerPress Podcasting plugin by Blubrry
- CVE-2024-5811Simple Video Directory < 1.4.4 - Contributor+ Stored XSSSimple Video Directory
- CVE-2024-5626Inline Related Posts < 3.7.0 - Reflected XSSInline Related Posts
- CVE-2024-4753WP Secure Maintenance < 1.7 - Admin+ Stored XSSWP Secure Maintenance
- CVE-2024-3112Quotes and Tips < 1.45 - Admin+ Arbitrary File UploadQuotes and Tips by BestWebSoft
- CVE-2024-2696Swift Framework < 2024.04.30 - Admin+ Stored XSS via Settingssocialdriver-framework
- CVE-2024-2640Watu Quiz < 3.4.1.2 - Author+ Stored XSSWatu Quiz
- CVE-2024-2430Website Content in Page or Post < 2024.04.09 - Contributor+ Stored Cross-Site ScriptingWebsite Content in Page or Post
- CVE-2024-0974Social Media Widget < 4.0.9 - Admin+ Stored XSSSocial Media Widget
- CVE-2024-6555WP Popups – WordPress Popup builder <= 2.2.0.1 - Unauthenticated Full Path Disclosuretimersys WP Popups – WordPress Popup builder
- CVE-2024-1375Event post <= 5.9.10 - Cross-Site Request Forgerybastho Event post
- CVE-2024-31947StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows Directory Traversal by authenticated users.
- CVE-2024-40539my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/user.
- CVE-2024-40540my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept.
- CVE-2024-40541my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept/b
- CVE-2024-40542my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/role?o
- CVE-2024-40543PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery (SSRF) via the component /admin/ueditor?action=catchimage.
- CVE-2024-40547PublicCMS v4.0.202302.e was discovered to contain an arbitrary file content replacement vulnerability via the component /admin/cmsTemplate/r
- CVE-2024-40551An arbitrary file upload vulnerability in the component /admin/cmsTemplate/doUpload of PublicCMS v4.0.202302.e allows attackers to execute a