# CVEs published 2024-07-12

200 CVEs were published on July 12, 2024: 14 critical, 73 high. Days are UTC.

- [CVE-2024-5902](https://cve.now/CVE-2024-5902.md): UserFeedback Lite \<= 1.0.15 - Unauthenticated Stored Cross-Site Scripting via Name Parameter (CVSS 7.2, smub UserFeedback – Create Interactive Feedback Form, User…)
- [CVE-2023-41093](https://cve.now/CVE-2023-41093.md): Loss of confidentiality due to potential race condition in Bluetooth controller Connection\_Handle reuse (CVSS 3.1, Silicon Labs Simplicity SDK)
- [CVE-2024-40690](https://cve.now/CVE-2024-40690.md): IBM InfoSphere Server cross-site scripting (CVSS 5.4, IBM InfoSphere Server)
- [CVE-2024-37405](https://cve.now/CVE-2024-37405.md): Livechat messages can be leaked by combining two NoSQL injections affecting livechat:loginByToken (pre-authentication) and livechat:loadHist (CVSS 6.5, Rocket.Chat)
- [CVE-2024-39917](https://cve.now/CVE-2024-39917.md): xrdp allows an ininite number of login attempts (CVSS 7.2, neutrinolabs xrdp)
- [CVE-2024-38736](https://cve.now/CVE-2024-38736.md): WordPress Realtyna Organic IDX plugin \<= 4.14.13 - Arbitrary File Upload vulnerability (CVSS 9.1, Realtyna Organic IDX plugin)
- [CVE-2024-38735](https://cve.now/CVE-2024-38735.md): WordPress Event post plugin \<= 5.9.5 - Local File Inclusion vulnerability (CVSS 7.5, Bastien Ho Event post)
- [CVE-2024-38734](https://cve.now/CVE-2024-38734.md): WordPress Import Spreadsheets from Microsoft Excel plugin \<= 10.1.4 - Arbitrary File Upload vulnerability (CVSS 9.1, SpreadsheetConverter Import Spreadsheets from Microsoft Exc…)
- [CVE-2024-38717](https://cve.now/CVE-2024-38717.md): WordPress Booking Ultra Pro Appointments Booking Calendar plugin \<= 1.1.13 - Local File Inclusion vulnerability (CVSS 7.1, Booking Ultra Pro)
- [CVE-2024-38716](https://cve.now/CVE-2024-38716.md): WordPress Events Calendar for Google plugin \<= 2.1.0 - Local File Inclusion vulnerability (CVSS 6.5, Blue Plugins Events Calendar for Google)
- [CVE-2024-39916](https://cve.now/CVE-2024-39916.md): NFS server misconfiguration allows file access outside the exported directory (CVSS 6.4, fogproject)
- [CVE-2024-39914](https://cve.now/CVE-2024-39914.md): FOG has a command injection in /fog/management/export.php?filename= (CVSS 9.8, fogproject)
- [CVE-2024-39909](https://cve.now/CVE-2024-39909.md): SQL Injection in the KubeClarity REST API (CVSS 6.5, openclarity kubeclarity · github.com/openclarity/kubeclarit…)
- [CVE-2024-39903](https://cve.now/CVE-2024-39903.md): Local File Inclusion in Solara (CVSS 8.6, widgetti solara · solara)
- [CVE-2024-38715](https://cve.now/CVE-2024-38715.md): WordPress ExS Widgets plugin \<= 0.3.1 - Local File Inclusion vulnerability (CVSS 6.5, ExS Widgets)
- [CVE-2024-38709](https://cve.now/CVE-2024-38709.md): WordPress GD Rating System plugin \<= 3.6 - Local File Inclusion vulnerability (CVSS 5.3, Milan Petrovic GD Rating System)
- [CVE-2024-38706](https://cve.now/CVE-2024-38706.md): WordPress HT Mega plugin \<= 2.5.7 - JSON Path Traversal vulnerability (CVSS 6.5, DevItems HT Mega)
- [CVE-2024-38704](https://cve.now/CVE-2024-38704.md): WordPress Team Manager plugin \<= 2.1.12 - Local File Inclusion vulnerability (CVSS 6.5, DynamicWebLab WordPress Team Manager)
- [CVE-2024-38700](https://cve.now/CVE-2024-38700.md): WordPress WPCS – WordPress Currency Switcher Professional plugin \<= 1.2.0.3 - Arbitrary Shortcode Execution vulnerability (CVSS 6.5, realmag777 WPCS)
- [CVE-2024-37932](https://cve.now/CVE-2024-37932.md): WordPress Woocommerce OpenPos plugin \<= 6.4.4 - Unauthenticated Arbitrary File Deletion vulnerability (CVSS 8.6, anhvnit Woocommerce OpenPos)
- [CVE-2024-37928](https://cve.now/CVE-2024-37928.md): WordPress Jobmonster theme \<= 4.7.0 - Unauthenticated Arbitrary File Deletion vulnerability (CVSS 8.6, NooTheme Jobmonster)
- [CVE-2024-37927](https://cve.now/CVE-2024-37927.md): WordPress Jobmonster theme \<= 4.7.5 - Unauthenticated Privilege Escalation vulnerability (CVSS 9.8, NooTheme Jobmonster)
- [CVE-2024-37560](https://cve.now/CVE-2024-37560.md): WordPress WP User Switch plugin \<= 1.1.0 - Privilege Escalation vulnerability (CVSS 8.0, IqbalRony WP User Switch)
- [CVE-2024-37938](https://cve.now/CVE-2024-37938.md): WordPress SociallyViral theme \<= 1.0.10 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, MyThemeShop SociallyViral)
- [CVE-2024-37939](https://cve.now/CVE-2024-37939.md): WordPress Patricia Lite theme \<= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, VolThemes Patricia Lite)
- [CVE-2024-37940](https://cve.now/CVE-2024-37940.md): WordPress Seraphinite Accelerator (Full, premium) plugin \<= 2.21.13 - CSRF Leading to Arbitrary File Deletion vulnerability (CVSS 7.4, Seraphinite Solutions Seraphinite Accelerator)
- [CVE-2024-37941](https://cve.now/CVE-2024-37941.md): WordPress Internal Link Juicer: SEO Auto Linker for WordPress plugin \<= 2.24.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Internal Link Juicer: SEO Auto Linker for WordPress)
- [CVE-2024-35773](https://cve.now/CVE-2024-35773.md): WordPress Comment Reply Email plugin \<= 1.3 - CSRF to Stored XSS vulnerability (CVSS 7.1, WPJohnny, zerOneIT Comment Reply Email)
- [CVE-2024-37202](https://cve.now/CVE-2024-37202.md): WordPress Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter plugin \<= 1.222.17 - Broken Access Control to XSS vulnerability (CVSS 6.5, BinaryCarpenter Ultimate Custom Add To Cart Button (Ajax) F…)
- [CVE-2024-37213](https://cve.now/CVE-2024-37213.md): WordPress AliExpress Dropshipping with AliNext Lite plugin \<= 3.4.6 - CSRF to XSS vulnerability (CVSS 7.1, guru-aliexpress AliNext)
- [CVE-2024-37544](https://cve.now/CVE-2024-37544.md): WordPress Get Better Reviews for WooCommerce plugin \<= 4.0.6 - Broken Access Control vulnerability (CVSS 4.3, Saleswonder Team: Tobias Get Better Reviews for WooCommerce)
- [CVE-2024-37564](https://cve.now/CVE-2024-37564.md): WordPress PayPlus Payment Gateway plugin \<= 7.0.7 - SQL Injection vulnerability (CVSS 8.5, PayPlus Payment Gateway)
- [CVE-2024-37933](https://cve.now/CVE-2024-37933.md): WordPress Woocommerce OpenPos plugin \<= 6.4.4 - Unauthenticated SQL Injection vulnerability (CVSS 9.3, anhvnit Woocommerce OpenPos)
- [CVE-2024-5325](https://cve.now/CVE-2024-5325.md): Form Vibes \<= 1.4.10 - Authenticated (Subscriber+) SQL Injection via fv\_export\_data (CVSS 8.8, wpvibes Form Vibes – Database Manager for Forms)
- [CVE-2024-6495](https://cve.now/CVE-2024-6495.md): Premium Addons for Elementor \<= 4.10.36 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Animated Text Widget (CVSS 6.4, leap13 Premium Addons for Elementor – Powerful Elementor Te…)
- [CVE-2024-41006](https://cve.now/CVE-2024-41006.md): netrom: Fix a memory leak in nr\_heartbeat\_expiry() (no CVSS, Linux)
- [CVE-2024-41005](https://cve.now/CVE-2024-41005.md): netpoll: Fix race condition in netpoll\_owner\_active (no CVSS, Linux)
- [CVE-2024-41004](https://cve.now/CVE-2024-41004.md): tracing: Build event generation tests only as modules (no CVSS, Linux)
- [CVE-2024-41003](https://cve.now/CVE-2024-41003.md): bpf: Fix reg\_set\_min\_max corruption of fake\_reg (CVSS 7.8, Linux)
- [CVE-2024-41002](https://cve.now/CVE-2024-41002.md): crypto: hisilicon/sec - Fix memory leak for sec resource release (no CVSS, Linux)
- [CVE-2024-41001](https://cve.now/CVE-2024-41001.md): io\_uring/sqpoll: work around a potential audit memory leak (no CVSS, Linux)
- [CVE-2024-41000](https://cve.now/CVE-2024-41000.md): block/ioctl: prefer different overflow check (no CVSS, Linux)
- [CVE-2024-40999](https://cve.now/CVE-2024-40999.md): net: ena: Add validation for completion descriptors consistency (CVSS 9.8, Linux)
- [CVE-2024-40998](https://cve.now/CVE-2024-40998.md): ext4: fix uninitialized ratelimit\_state-\>lock access in \_\_ext4\_fill\_super() (no CVSS, Linux)
- [CVE-2024-40997](https://cve.now/CVE-2024-40997.md): cpufreq: amd-pstate: fix memory leak on CPU EPP exit (no CVSS, Linux)
- [CVE-2024-40996](https://cve.now/CVE-2024-40996.md): bpf: Avoid splat in pskb\_pull\_reason (no CVSS, Linux)
- [CVE-2024-40995](https://cve.now/CVE-2024-40995.md): net/sched: act\_api: fix possible infinite loop in tcf\_idr\_check\_alloc() (no CVSS, Linux)
- [CVE-2024-40994](https://cve.now/CVE-2024-40994.md): ptp: fix integer overflow in max\_vclocks\_store (no CVSS, Linux)
- [CVE-2024-40993](https://cve.now/CVE-2024-40993.md): netfilter: ipset: Fix suspicious rcu\_dereference\_protected() (no CVSS, Linux)
- [CVE-2024-40992](https://cve.now/CVE-2024-40992.md): RDMA/rxe: Fix responder length checking for UD request packets (CVSS 7.5, Linux)
- [CVE-2024-40991](https://cve.now/CVE-2024-40991.md): dmaengine: ti: k3-udma-glue: Fix of\_k3\_udma\_glue\_parse\_chn\_by\_id() (CVSS 7.8, Linux)
- [CVE-2024-40990](https://cve.now/CVE-2024-40990.md): RDMA/mlx5: Add check for srq max\_sge attribute (CVSS 7.8, Linux)
- [CVE-2024-40989](https://cve.now/CVE-2024-40989.md): KVM: arm64: Disassociate vcpus from redistributor region on teardown (CVSS 7.8, Linux)
- [CVE-2024-40988](https://cve.now/CVE-2024-40988.md): drm/radeon: fix UBSAN warning in kv\_dpm.c (no CVSS, Linux)
- [CVE-2024-40987](https://cve.now/CVE-2024-40987.md): drm/amdgpu: fix UBSAN warning in kv\_dpm.c (no CVSS, Linux)
- [CVE-2024-40986](https://cve.now/CVE-2024-40986.md): dmaengine: xilinx: xdma: Fix data synchronisation in xdma\_channel\_isr() (CVSS 7.8, Linux)
- [CVE-2024-40985](https://cve.now/CVE-2024-40985.md): net/tcp\_ao: Don't leak ao\_info on error-path (no CVSS, Linux)
- [CVE-2024-40984](https://cve.now/CVE-2024-40984.md): ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CVSS 7.8, Linux)
- [CVE-2024-40983](https://cve.now/CVE-2024-40983.md): tipc: force a dst refcount before doing decryption (CVSS 9.8, Linux)
- [CVE-2024-40981](https://cve.now/CVE-2024-40981.md): batman-adv: bypass empty buckets in batadv\_purge\_orig\_ref() (no CVSS, Linux)
- [CVE-2024-40980](https://cve.now/CVE-2024-40980.md): drop\_monitor: replace spin\_lock by raw\_spin\_lock (CVSS 7.5, Linux)
- [CVE-2024-40979](https://cve.now/CVE-2024-40979.md): wifi: ath12k: fix kernel crash during resume (CVSS 7.8, Linux)
- [CVE-2024-40978](https://cve.now/CVE-2024-40978.md): scsi: qedi: Fix crash while reading debugfs attribute (no CVSS, Linux)
- [CVE-2024-40977](https://cve.now/CVE-2024-40977.md): wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (no CVSS, Linux)
- [CVE-2024-40976](https://cve.now/CVE-2024-40976.md): drm/lima: mask irqs in timeout path before hard reset (no CVSS, Linux)
- [CVE-2024-40975](https://cve.now/CVE-2024-40975.md): platform/x86: x86-android-tablets: Unregister devices in reverse order (no CVSS, Linux)
- [CVE-2024-40974](https://cve.now/CVE-2024-40974.md): powerpc/pseries: Enforce hcall result buffer validity and size (CVSS 7.8, Linux)
- [CVE-2024-40973](https://cve.now/CVE-2024-40973.md): media: mtk-vcodec: potential null pointer deference in SCP (no CVSS, Linux)
- [CVE-2024-40972](https://cve.now/CVE-2024-40972.md): ext4: do not create EA inode under buffer lock (no CVSS, Linux)
- [CVE-2024-40971](https://cve.now/CVE-2024-40971.md): f2fs: remove clear SB\_INLINECRYPT flag in default\_options (CVSS 7.3, Linux)
- [CVE-2024-40970](https://cve.now/CVE-2024-40970.md): Avoid hw\_desc array overrun in dw-axi-dmac (CVSS 7.8, Linux)
- [CVE-2024-40969](https://cve.now/CVE-2024-40969.md): f2fs: don't set RO when shutting down f2fs (no CVSS, Linux)
- [CVE-2024-40968](https://cve.now/CVE-2024-40968.md): MIPS: Octeon: Add PCIe link status check (no CVSS, Linux)
- [CVE-2024-40967](https://cve.now/CVE-2024-40967.md): serial: imx: Introduce timeout when waiting on transmitter empty (no CVSS, Linux)
- [CVE-2024-40966](https://cve.now/CVE-2024-40966.md): tty: add the option to have a tty reject a new ldisc (no CVSS, Linux)
- [CVE-2024-40965](https://cve.now/CVE-2024-40965.md): i2c: lpi2c: Avoid calling clk\_get\_rate during transfer (no CVSS, Linux)
- [CVE-2024-40964](https://cve.now/CVE-2024-40964.md): ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41\_hda\_unbind() (no CVSS, Linux)
- [CVE-2024-40963](https://cve.now/CVE-2024-40963.md): mips: bmips: BCM6358: make sure CBR is correctly set (no CVSS, Linux)
- [CVE-2024-40962](https://cve.now/CVE-2024-40962.md): btrfs: zoned: allocate dummy checksums for zoned NODATASUM writes (no CVSS, Linux)
- [CVE-2024-40961](https://cve.now/CVE-2024-40961.md): ipv6: prevent possible NULL deref in fib6\_nh\_init() (no CVSS, Linux)
- [CVE-2024-40960](https://cve.now/CVE-2024-40960.md): ipv6: prevent possible NULL dereference in rt6\_probe() (no CVSS, Linux)
- [CVE-2024-40959](https://cve.now/CVE-2024-40959.md): xfrm6: check ip6\_dst\_idev() return value in xfrm6\_get\_saddr() (no CVSS, Linux)
- [CVE-2024-40958](https://cve.now/CVE-2024-40958.md): netns: Make get\_net\_ns() handle zero refcount net (CVSS 7.8, Linux)
- [CVE-2024-40957](https://cve.now/CVE-2024-40957.md): seg6: fix parameter passing when calling NF\_HOOK() in End.DX4 and End.DX6 behaviors (CVSS 7.5, Linux)
- [CVE-2024-40956](https://cve.now/CVE-2024-40956.md): dmaengine: idxd: Fix possible Use-After-Free in irq\_process\_work\_list (CVSS 7.8, Linux)
- [CVE-2024-40955](https://cve.now/CVE-2024-40955.md): ext4: fix slab-out-of-bounds in ext4\_mb\_find\_good\_group\_avg\_frag\_lists() (no CVSS, Linux)
- [CVE-2024-40954](https://cve.now/CVE-2024-40954.md): net: do not leave a dangling sk pointer, when socket creation fails (CVSS 7.8, Linux)
- [CVE-2024-40953](https://cve.now/CVE-2024-40953.md): KVM: Fix a data race on last\_boosted\_vcpu in kvm\_vcpu\_on\_spin() (CVSS 7.9, Linux)
- [CVE-2024-40952](https://cve.now/CVE-2024-40952.md): ocfs2: fix NULL pointer dereference in ocfs2\_journal\_dirty() (no CVSS, Linux)
- [CVE-2024-40951](https://cve.now/CVE-2024-40951.md): ocfs2: fix NULL pointer dereference in ocfs2\_abort\_trigger() (no CVSS, Linux)
- [CVE-2024-40950](https://cve.now/CVE-2024-40950.md): mm: huge\_memory: fix misused mapping\_large\_folio\_support() for anon folios (no CVSS, Linux)
- [CVE-2024-40949](https://cve.now/CVE-2024-40949.md): mm: shmem: fix getting incorrect lruvec when replacing a shmem folio (CVSS 7.8, Linux)
- [CVE-2024-40948](https://cve.now/CVE-2024-40948.md): mm/page\_table\_check: fix crash on ZONE\_DEVICE (no CVSS, Linux)
- [CVE-2024-40947](https://cve.now/CVE-2024-40947.md): ima: Avoid blocking in RCU read-side critical section (CVSS 7.8, Linux)
- [CVE-2024-40945](https://cve.now/CVE-2024-40945.md): iommu: Return right value in iommu\_sva\_bind\_device() (no CVSS, Linux)
- [CVE-2024-40944](https://cve.now/CVE-2024-40944.md): x86/kexec: Fix bug with call depth tracking (no CVSS, Linux)
- [CVE-2024-40943](https://cve.now/CVE-2024-40943.md): ocfs2: fix races between hole punching and AIO+DIO (CVSS 7.8, Linux)
- [CVE-2024-40942](https://cve.now/CVE-2024-40942.md): wifi: mac80211: mesh: Fix leak of mesh\_preq\_queue objects (no CVSS, Linux)
- [CVE-2024-40941](https://cve.now/CVE-2024-40941.md): wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CVSS 8.1, Linux)
- [CVE-2024-40940](https://cve.now/CVE-2024-40940.md): net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (no CVSS, Linux)
- [CVE-2024-40939](https://cve.now/CVE-2024-40939.md): net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (no CVSS, Linux)
- [CVE-2024-40938](https://cve.now/CVE-2024-40938.md): landlock: Fix d\_parent walk (no CVSS, Linux)
- [CVE-2024-40937](https://cve.now/CVE-2024-40937.md): gve: Clear napi-\>skb before dev\_kfree\_skb\_any() (CVSS 9.8, Linux)
- [CVE-2024-40936](https://cve.now/CVE-2024-40936.md): cxl/region: Fix memregion leaks in devm\_cxl\_add\_region() (no CVSS, Linux)
- [CVE-2024-40935](https://cve.now/CVE-2024-40935.md): cachefiles: flush all requests after setting CACHEFILES\_DEAD (no CVSS, Linux)
- [CVE-2024-40934](https://cve.now/CVE-2024-40934.md): HID: logitech-dj: Fix memory leak in logi\_dj\_recv\_switch\_to\_dj\_mode() (no CVSS, Linux)
- [CVE-2024-40933](https://cve.now/CVE-2024-40933.md): iio: temperature: mlx90635: Fix ERR\_PTR dereference in mlx90635\_probe() (no CVSS, Linux)
- [CVE-2024-40932](https://cve.now/CVE-2024-40932.md): drm/exynos/vidi: fix memory leak in .get\_modes() (no CVSS, Linux)
- [CVE-2024-40931](https://cve.now/CVE-2024-40931.md): mptcp: ensure snd\_una is properly initialized on connect (no CVSS, Linux)
- [CVE-2024-40930](https://cve.now/CVE-2024-40930.md): wifi: cfg80211: validate HE operation element parsing (CVSS 7.1, Linux)
- [CVE-2024-40929](https://cve.now/CVE-2024-40929.md): wifi: iwlwifi: mvm: check n\_ssids before accessing the ssids (CVSS 7.1, Linux)
- [CVE-2024-40928](https://cve.now/CVE-2024-40928.md): net: ethtool: fix the error condition in ethtool\_get\_phy\_stats\_ethtool() (no CVSS, Linux)
- [CVE-2024-40927](https://cve.now/CVE-2024-40927.md): xhci: Handle TD clearing for multiple streams case (no CVSS, Linux)
- [CVE-2024-40926](https://cve.now/CVE-2024-40926.md): drm/nouveau: don't attempt to schedule hpd\_work on headless cards (no CVSS, Linux)
- [CVE-2024-40925](https://cve.now/CVE-2024-40925.md): block: fix request.queuelist usage in flush (CVSS 7.8, Linux)
- [CVE-2024-40924](https://cve.now/CVE-2024-40924.md): drm/i915/dpt: Make DPT object unshrinkable (CVSS 7.8, Linux)
- [CVE-2024-40923](https://cve.now/CVE-2024-40923.md): vmxnet3: disable rx data ring on dma allocation failure (CVSS 9.8, Linux)
- [CVE-2024-40922](https://cve.now/CVE-2024-40922.md): io\_uring/rsrc: don't lock while !TASK\_RUNNING (no CVSS, Linux)
- [CVE-2024-40921](https://cve.now/CVE-2024-40921.md): net: bridge: mst: pass vlan group directly to br\_mst\_vlan\_set\_state (no CVSS, Linux)
- [CVE-2024-40920](https://cve.now/CVE-2024-40920.md): net: bridge: mst: fix suspicious rcu usage in br\_mst\_set\_state (CVSS 7.1, Linux)
- [CVE-2024-40919](https://cve.now/CVE-2024-40919.md): bnxt\_en: Adjust logging of firmware messages in case of released token in \_\_hwrm\_send() (no CVSS, Linux)
- [CVE-2024-40918](https://cve.now/CVE-2024-40918.md): parisc: Try to fix random segmentation faults in package builds (CVSS 7.8, Linux)
- [CVE-2024-40917](https://cve.now/CVE-2024-40917.md): memblock: make memblock\_set\_node() also warn about use of MAX\_NUMNODES (no CVSS, Linux)
- [CVE-2024-40916](https://cve.now/CVE-2024-40916.md): drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found (no CVSS, Linux)
- [CVE-2024-40915](https://cve.now/CVE-2024-40915.md): riscv: rewrite \_\_kernel\_map\_pages() to fix sleeping in invalid context (no CVSS, Linux)
- [CVE-2024-40914](https://cve.now/CVE-2024-40914.md): mm/huge\_memory: don't unpoison huge\_zero\_folio (no CVSS, Linux)
- [CVE-2024-40913](https://cve.now/CVE-2024-40913.md): cachefiles: defer exposing anon\_fd until after copy\_to\_user() succeeds (no CVSS, Linux)
- [CVE-2024-40912](https://cve.now/CVE-2024-40912.md): wifi: mac80211: Fix deadlock in ieee80211\_sta\_ps\_deliver\_wakeup() (no CVSS, Linux)
- [CVE-2024-40911](https://cve.now/CVE-2024-40911.md): wifi: cfg80211: Lock wiphy in cfg80211\_get\_station (CVSS 8.8, Linux)
- [CVE-2024-40910](https://cve.now/CVE-2024-40910.md): ax25: Fix refcount imbalance on inbound connections (CVSS 8.8, Linux)
- [CVE-2024-40909](https://cve.now/CVE-2024-40909.md): bpf: Fix a potential use-after-free in bpf\_link\_free() (CVSS 7.8, Linux)
- [CVE-2024-40908](https://cve.now/CVE-2024-40908.md): bpf: Set run context for rawtp test\_run callback (no CVSS, Linux)
- [CVE-2024-40907](https://cve.now/CVE-2024-40907.md): ionic: fix kernel panic in XDP\_TX action (CVSS 9.8, Linux)
- [CVE-2024-40906](https://cve.now/CVE-2024-40906.md): net/mlx5: Always stop health timer during driver removal (no CVSS, Linux)
- [CVE-2024-40905](https://cve.now/CVE-2024-40905.md): ipv6: fix possible race in \_\_fib6\_drop\_pcpu\_from() (no CVSS, Linux)
- [CVE-2024-40904](https://cve.now/CVE-2024-40904.md): USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (no CVSS, Linux)
- [CVE-2024-40903](https://cve.now/CVE-2024-40903.md): usb: typec: tcpm: fix use-after-free case in tcpm\_register\_source\_caps (no CVSS, Linux)
- [CVE-2024-40902](https://cve.now/CVE-2024-40902.md): jfs: xattr: fix buffer overflow for invalid xattr (CVSS 7.8, Linux)
- [CVE-2024-40901](https://cve.now/CVE-2024-40901.md): scsi: mpt3sas: Avoid test/set\_bit() operating in non-allocated memory (CVSS 7.3, Linux)
- [CVE-2024-40900](https://cve.now/CVE-2024-40900.md): cachefiles: remove requests from xarray during flushing requests (CVSS 7.8, Linux)
- [CVE-2024-40899](https://cve.now/CVE-2024-40899.md): cachefiles: fix slab-use-after-free in cachefiles\_ondemand\_get\_fd() (no CVSS, Linux)
- [CVE-2024-39510](https://cve.now/CVE-2024-39510.md): cachefiles: fix slab-use-after-free in cachefiles\_ondemand\_daemon\_read() (no CVSS, Linux)
- [CVE-2024-39509](https://cve.now/CVE-2024-39509.md): HID: core: remove unnecessary WARN\_ON() in implement() (no CVSS, Linux)
- [CVE-2024-39508](https://cve.now/CVE-2024-39508.md): io\_uring/io-wq: Use set\_bit() and test\_bit() at worker-\>flags (CVSS 7.8, Linux)
- [CVE-2024-39507](https://cve.now/CVE-2024-39507.md): net: hns3: fix kernel crash problem in concurrent scenario (CVSS 7.0, Linux)
- [CVE-2024-39506](https://cve.now/CVE-2024-39506.md): liquidio: Adjust a NULL pointer handling path in lio\_vf\_rep\_copy\_packet (no CVSS, Linux)
- [CVE-2024-39505](https://cve.now/CVE-2024-39505.md): drm/komeda: check for error-valued pointer (no CVSS, Linux)
- [CVE-2024-39504](https://cve.now/CVE-2024-39504.md): netfilter: nft\_inner: validate mandatory meta and payload (no CVSS, Linux)
- [CVE-2024-39503](https://cve.now/CVE-2024-39503.md): netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (CVSS 7.8, Linux)
- [CVE-2024-39502](https://cve.now/CVE-2024-39502.md): ionic: fix use after netif\_napi\_del() (CVSS 7.8, Linux)
- [CVE-2024-39500](https://cve.now/CVE-2024-39500.md): sock\_map: avoid race between sock\_map\_close and sk\_psock\_put (CVSS 7.8, Linux)
- [CVE-2024-39499](https://cve.now/CVE-2024-39499.md): vmci: prevent speculation leaks by sanitizing event in event\_deliver() (no CVSS, Linux)
- [CVE-2024-39498](https://cve.now/CVE-2024-39498.md): drm/mst: Fix NULL pointer dereference at drm\_dp\_add\_payload\_part2 (no CVSS, Linux)
- [CVE-2024-39497](https://cve.now/CVE-2024-39497.md): drm/shmem-helper: Fix BUG\_ON() on mmap(PROT\_WRITE, MAP\_PRIVATE) (no CVSS, Linux)
- [CVE-2024-39496](https://cve.now/CVE-2024-39496.md): btrfs: zoned: fix use-after-free due to race with dev replace (CVSS 7.8, Linux)
- [CVE-2024-39495](https://cve.now/CVE-2024-39495.md): greybus: Fix use-after-free bug in gb\_interface\_release due to race condition. (CVSS 7.8, Linux)
- [CVE-2024-39494](https://cve.now/CVE-2024-39494.md): ima: Fix use-after-free on a dentry's dname.name (CVSS 7.8, Linux)
- [CVE-2024-36522](https://cve.now/CVE-2024-36522.md): Apache Wicket: Remote code execution via XSLT injection (CVSS 9.8, Apache Software Foundation Apache Wicket · org.apache.wicke…)
- [CVE-2024-6328](https://cve.now/CVE-2024-6328.md): MStore API – Create Native Android & iOS Apps On The Cloud \<= 4.14.7 - Authentication Bypass (CVSS 9.8, inspireui MStore API – Create Native Android & iOS Apps On…)
- [CVE-2024-6353](https://cve.now/CVE-2024-6353.md): Wallet for WooCommerce \<= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'search\[value\]' (CVSS 8.8, subratamal Wallet for WooCommerce)
- [CVE-2024-6625](https://cve.now/CVE-2024-6625.md): WP Total Branding \<= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via title Parameter (CVSS 5.5, m\_uysl WP Total Branding – Complete branding solution for W…)
- [CVE-2024-6588](https://cve.now/CVE-2024-6588.md): PowerPress Podcasting plugin by Blubrry \<= 11.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via media\_url Parameter (CVSS 6.4, PowerPress Podcasting plugin by Blubrry)
- [CVE-2024-6024](https://cve.now/CVE-2024-6024.md): ContentLock \<= 1.0.3 - Groups/Emails Deletion via CSRF (CVSS 8.8, ContentLock)
- [CVE-2024-6023](https://cve.now/CVE-2024-6023.md): ContentLock \<= 1.0.3 - Email Adding via CSRF (CVSS 8.8, ContentLock)
- [CVE-2024-6022](https://cve.now/CVE-2024-6022.md): ContentLock \<= 1.0.3 - Settings Update via CSRF (CVSS 8.8, ContentLock)
- [CVE-2024-5811](https://cve.now/CVE-2024-5811.md): Simple Video Directory \< 1.4.4 - Contributor+ Stored XSS (CVSS 6.1, Simple Video Directory)
- [CVE-2024-5626](https://cve.now/CVE-2024-5626.md): Inline Related Posts \< 3.7.0 - Reflected XSS (CVSS 5.9, Inline Related Posts)
- [CVE-2024-4753](https://cve.now/CVE-2024-4753.md): WP Secure Maintenance \< 1.7 - Admin+ Stored XSS (CVSS 5.9, WP Secure Maintenance)
- [CVE-2024-3112](https://cve.now/CVE-2024-3112.md): Quotes and Tips \< 1.45 - Admin+ Arbitrary File Upload (CVSS 4.9, Quotes and Tips by BestWebSoft)
- [CVE-2024-2696](https://cve.now/CVE-2024-2696.md): Swift Framework \< 2024.04.30 - Admin+ Stored XSS via Settings (CVSS 4.8, socialdriver-framework)
- [CVE-2024-2640](https://cve.now/CVE-2024-2640.md): Watu Quiz \< 3.4.1.2 - Author+ Stored XSS (CVSS 6.8, Watu Quiz)
- [CVE-2024-2430](https://cve.now/CVE-2024-2430.md): Website Content in Page or Post \< 2024.04.09 - Contributor+ Stored Cross-Site Scripting (CVSS 6.5, Website Content in Page or Post)
- [CVE-2024-0974](https://cve.now/CVE-2024-0974.md): Social Media Widget \< 4.0.9 - Admin+ Stored XSS (CVSS 4.8, Social Media Widget)
- [CVE-2024-6555](https://cve.now/CVE-2024-6555.md): WP Popups – WordPress Popup builder \<= 2.2.0.1 - Unauthenticated Full Path Disclosure (CVSS 5.3, timersys WP Popups – WordPress Popup builder)
- [CVE-2024-6677](https://cve.now/CVE-2024-6677.md): Privilege escalation in uberAgent (CVSS 7.3, Citrix uberAgent)
- [CVE-2024-1375](https://cve.now/CVE-2024-1375.md): Event post \<= 5.9.10 - Cross-Site Request Forgery (CVSS 4.3, bastho Event post)
- [CVE-2024-6396](https://cve.now/CVE-2024-6396.md): Arbitrary File Overwrite and Data Exfiltration in aimhubio/aim (CVSS 9.8, aimhubio/aim)
- [CVE-2024-30213](https://cve.now/CVE-2024-30213.md): StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows remote authenticated users to achieve Command Injection via a Ping URL, l (CVSS 8.8)
- [CVE-2024-31947](https://cve.now/CVE-2024-31947.md): StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows Directory Traversal by authenticated users. (CVSS 6.5)
- [CVE-2024-39340](https://cve.now/CVE-2024-39340.md): The authentication system of Securepoint UTM mishandles OTP keys. (CVSS 8.8)
- [CVE-2024-40110](https://cve.now/CVE-2024-40110.md): Sourcecodester Poultry Farm Management System v1.0 contains an Unauthenticated Remote Code Execution (RCE) vulnerability via the productimag (CVSS 9.8)
- [CVE-2024-40518](https://cve.now/CVE-2024-40518.md): SeaCMS 12.9 has a remote code execution vulnerability. (CVSS 7.2)
- [CVE-2024-40519](https://cve.now/CVE-2024-40519.md): SeaCMS 12.9 has a remote code execution vulnerability. (CVSS 8.8)
- [CVE-2024-40520](https://cve.now/CVE-2024-40520.md): SeaCMS 12.9 has a remote code execution vulnerability. (CVSS 8.8)
- [CVE-2024-40521](https://cve.now/CVE-2024-40521.md): SeaCMS 12.9 has a remote code execution vulnerability. (CVSS 7.2)
- [CVE-2024-40522](https://cve.now/CVE-2024-40522.md): There is a remote code execution vulnerability in SeaCMS 12.9. (CVSS 8.8)
- [CVE-2024-40539](https://cve.now/CVE-2024-40539.md): my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/user. (CVSS 6.2)
- [CVE-2024-40540](https://cve.now/CVE-2024-40540.md): my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept. (CVSS 6.2)
- [CVE-2024-40541](https://cve.now/CVE-2024-40541.md): my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept/b (CVSS 6.2)
- [CVE-2024-40542](https://cve.now/CVE-2024-40542.md): my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/role?o (CVSS 6.3)
- [CVE-2024-40543](https://cve.now/CVE-2024-40543.md): PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery (SSRF) via the component /admin/ueditor?action=catchimage. (CVSS 6.4)
- [CVE-2024-40544](https://cve.now/CVE-2024-40544.md): PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery (SSRF) via the component /admin/#maintenance\_sysTask/edit. (CVSS 8.8)
- [CVE-2024-40545](https://cve.now/CVE-2024-40545.md): An arbitrary file upload vulnerability in the component /admin/cmsWebFile/doUpload of PublicCMS v4.0.202302.e allows attackers to execute ar (CVSS 7.2)
- [CVE-2024-40546](https://cve.now/CVE-2024-40546.md): An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attackers to execute arbitr (CVSS 8.8)
- [CVE-2024-40547](https://cve.now/CVE-2024-40547.md): PublicCMS v4.0.202302.e was discovered to contain an arbitrary file content replacement vulnerability via the component /admin/cmsTemplate/r (CVSS 6.5)
- [CVE-2024-40548](https://cve.now/CVE-2024-40548.md): An arbitrary file upload vulnerability in the component /admin/cmsTemplate/save of PublicCMS v4.0.202302.e allows attackers to execute arbit (CVSS 8.8)
- [CVE-2024-40549](https://cve.now/CVE-2024-40549.md): An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS v4.0.202302.e allows attackers to execute (CVSS 8.8)
- [CVE-2024-40550](https://cve.now/CVE-2024-40550.md): An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlaceMetaData of Public CMS v.4.0.202302.e allows attackers t (CVSS 8.8)
- [CVE-2024-40551](https://cve.now/CVE-2024-40551.md): An arbitrary file upload vulnerability in the component /admin/cmsTemplate/doUpload of PublicCMS v4.0.202302.e allows attackers to execute a (CVSS 6.2)
- [CVE-2024-40552](https://cve.now/CVE-2024-40552.md): PublicCMS v4.0.202302.e was discovered to contain a remote commande execution (RCE) vulnerability via the cmdarray parameter at /site/Script (CVSS 8.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-07-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.