CVEs published July 29, 2024
280 CVEs were published on July 29, 2024: 12 critical, 119 high.
- Published
- 280
- Critical
- 12
- High
- 119
- Medium
- 69
- Low
- 11
- Unrated
- 69
- Now in CISA KEV
- 0
- Fix available
- 139
Most affected products
- Linux
- 121
- Apple macOS
- 35
- TOTOLINK A3600R
- 14
- Apple iOS and iPadOS · Apple macOS +3
- 9
- Apple iOS and iPadOS · Apple macOS
- 8
- Apple iOS and iPadOS · Apple macOS +1
- 8
- Apple iOS and iPadOS · Apple macOS +2
- 7
- Apple Safari · Apple iOS and iPadOS +4
- 6
- itsourcecode Society Management System
- 5
- SourceCodester Complaints Report Management System
- 5
Critical 12
- CVE-2024-40782A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2024-41081ila: block BH in ila_output()Linux
- CVE-2024-41073nvme: avoid double free special payloadLinux
- CVE-2024-41040net/sched: Fix UAF when resolving a clashLinux
- CVE-2024-38529Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachmentadmidio · admidio/admidio
- CVE-2024-37906Admidio has Blind SQL Injection in ecard_send.phpadmidio · admidio/admidio
- CVE-2024-6366User Profile Builder < 3.11.8 - Unauthenticated Media UploadUser Profile Builder
- CVE-2024-7202Simopro Technology WinMatrix3 Web package - SQL InjectionSimopro Technology WinMatrix3
- CVE-2024-7201Simopro Technology WinMatrix3 Web package - SQL InjectionSimopro Technology WinMatrix3
- CVE-2024-5670Softnext Mail SQR Expert and Mail Archiving Expert - OS Command InjectionSoftnext SN OS
- CVE-2024-28805An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215.
- CVE-2024-37858SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to
High 119
- CVE-2024-27888A permissions issue was addressed by removing vulnerable code and adding additional checks.Apple macOS
- CVE-2024-40809A logic issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-27826The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-40805A permissions issue was addressed with additional restrictions.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-40829The issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +1
- CVE-2024-40828The issue was addressed with improved checks.Apple macOS
- CVE-2024-40783The issue was addressed with improved restriction of data container access.Apple macOS
- CVE-2024-40812A logic issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-40824This issue was addressed through improved state management.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-40799An out-of-bounds read issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-40815A race condition was addressed with additional validation.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-40803A type confusion issue was addressed with improved checks.Apple macOS
- CVE-2024-40784An integer overflow was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-40802The issue was addressed with improved checks.Apple macOS
- CVE-2024-40814A downgrade issue was addressed with additional code-signing restrictions.Apple macOS
- CVE-2024-40786This issue was addressed through improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2024-40821An access issue was addressed with additional sandbox restrictions.Apple macOS
- CVE-2024-40836A logic issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +1
- CVE-2024-40800An input validation issue was addressed with improved input validation.Apple macOS
- CVE-2024-40787This issue was addressed by adding an additional prompt for user consent.Apple iOS and iPadOS · Apple macOS +1
- CVE-2024-23261A logic issue was addressed with improved state management.Apple macOS
- CVE-2024-40811The issue was addressed with improved checks.Apple macOS
- CVE-2024-27886A logic issue was addressed with improved restrictions.Apple macOS
- CVE-2024-40781The issue was addressed with improved checks.Apple macOS
- CVE-2024-7252Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation VulnerabilityComodo Internet Security Pro
- CVE-2024-7251Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation VulnerabilityComodo Internet Security Pro
- CVE-2024-7250Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation VulnerabilityComodo Internet Security Pro
- CVE-2024-7249Comodo Firewall Link Following Local Privilege Escalation VulnerabilityComodo Firewall
- CVE-2024-7248Comodo Internet Security Pro Directory Traversal Local Privilege Escalation VulnerabilityComodo Internet Security Pro
- CVE-2023-40398This issue was addressed with improved checks.Apple macOS · Apple iOS and iPadOS
- CVE-2023-40396The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2023-42958A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2023-42959A race condition was addressed with improved state handling.Apple macOS
- CVE-2023-42918A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2024-6578Stored XSS in aimhubio/aimaimhubio/aim · aim
- CVE-2024-42097ALSA: emux: improve patch ioctl data validationLinux
- CVE-2024-6726Remote Code Execution (RCE) in DelphixDelphix Engine
- CVE-2024-42088ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai linkLinux
- CVE-2024-6748SQL InjectionManageEngine OpManager
- CVE-2024-41819Note Mark has a stored XSS in the note link href attributeenchant97 note-mark
- CVE-2024-41818ReDOS at currency parsing fast-xml-parserNaturalIntelligence fast-xml-parser · fast-xml-parser
- CVE-2024-42083ionic: fix kernel panic due to multi-buffer handlingLinux
- CVE-2024-41817Arbitrary Code Execution in `AppImage` version `ImageMagick`ImageMagick
- CVE-2024-42075bpf: Fix remap of arena.Linux
- CVE-2024-42072bpf: Fix may_goto with negative offset.Linux
- CVE-2024-42071ionic: use dev_consume_skb_any outside of napiLinux
- CVE-2024-42069net: mana: Fix possible double free in error handling pathLinux
- CVE-2024-42068bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()Linux
- CVE-2024-42067bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()Linux
- CVE-2024-42066drm/xe: Fix potential integer overflow in page size calculationLinux
- CVE-2024-42064drm/amd/display: Skip pipe if the pipe idx not set properlyLinux
- CVE-2023-52887net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_newLinux
- CVE-2024-41096PCI/MSI: Fix UAF in msi_capability_initLinux
- CVE-2024-41092drm/i915/gt: Fix potential UAF by revoke of fence registersLinux
- CVE-2024-41087ata: libata-core: Fix double free on errorLinux
- CVE-2024-41086bcachefs: Fix sb_field_downgrade validationLinux
- CVE-2024-41079nvmet: always initialize cqe.resultLinux
- CVE-2024-41799tgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned userstgstation-server · Tgstation.Server.Api +1
- CVE-2024-41075cachefiles: add consistency check for copen/creadLinux
- CVE-2024-41070KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()Linux
- CVE-2024-41069ASoC: topology: Fix references to freed memoryLinux
- CVE-2024-41066ibmvnic: Add tx check to prevent skb leakLinux
- CVE-2024-41064powerpc/eeh: avoid possible crash when edev->pdev changesLinux
- CVE-2024-41062bluetooth/l2cap: sync sock recv cb and releaseLinux
- CVE-2024-41060drm/radeon: check bo_va->bo is non-NULL before using itLinux
- CVE-2024-41059hfsplus: fix uninit-value in copy_nameLinux
- CVE-2024-41057cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie()Linux
- CVE-2024-41671twisted.web has disordered HTTP pipeline responsetwisted
- CVE-2024-41056firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw filesLinux
- CVE-2024-41051cachefiles: wait for ondemand_object_worker to finish when dropping objectLinux
- CVE-2024-41049filelock: fix potential use-after-free in posix_lock_inodeLinux
- CVE-2024-41048skmsg: Skip zero length skb in sk_msg_recvmsgLinux
- CVE-2024-41046net: ethernet: lantiq_etop: fix double free in detachLinux
- CVE-2024-41045bpf: Defer work in bpf_timer_cancel_and_freeLinux
- CVE-2024-41041udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().Linux
- CVE-2024-41038firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headersLinux
- CVE-2024-41036net: ks8851: Fix deadlock with the SPI chip variantLinux
- CVE-2024-41034nilfs2: fix kernel bug on rename operation of broken directoryLinux
- CVE-2024-41032mm: vmalloc: check if a hash-index is in cpu_possible_maskLinux
- CVE-2024-41028platform/x86: toshiba_acpi: Fix array out-of-bounds accessLinux
- CVE-2024-41026mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's lengthLinux
- CVE-2024-6984An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged attacker to access Canonical Juju · github.com/juju/juju
- CVE-2024-6576MOVEit Transfer Privilege Escalation VulnerabilityProgress MOVEit Transfer
- CVE-2024-41022drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()Linux
- CVE-2024-41020filelock: Fix fcntl/close race recovery compat pathLinux
- CVE-2024-6124Reflected XSS in Hubshare via Open RedirectM-Files Hubshare
- CVE-2024-6881Stored XSS VulnerabilityM-Files Hubshare
- CVE-2024-41726Path traversal vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e.Sky Co. SKYSEA Client View
- CVE-2024-41143Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e.Sky Co. SKYSEA Client View
- CVE-2024-41139Incorrect privilege assignment vulnerability exists in SKYSEA Client View Ver.6.010.06 to Ver.19.210.04e.Sky Co. SKYSEA Client View
- CVE-2024-41881SDoP versions prior to 1.11 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow Philip Hazel SDoP
- CVE-2024-41019fs/ntfs3: Validate ff offsetLinux
- CVE-2024-41018fs/ntfs3: Add a check for attr_names and oatblLinux
- CVE-2024-41017jfs: don't walk off the end of ealistLinux
- CVE-2024-41016ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()Linux
- CVE-2024-41015ocfs2: add bounds checking to ocfs2_check_dir_entry()Linux
- CVE-2024-41014xfs: add bounds checking to xlog_recover_process_dataLinux
- CVE-2024-7187TOTOLINK A3600R cstecgi.cgi UploadCustomModule buffer overflowTOTOLINK A3600R
- CVE-2024-41091tun: add missing verification for short frameLinux
- CVE-2024-41090tap: add missing verification for short frameLinux
- CVE-2024-7186TOTOLINK A3600R cstecgi.cgi setWiFiAclAddConfig buffer overflowTOTOLINK A3600R
- CVE-2024-5882Ultimate Classified Listings < 1.3 - Unauthenticated LFIUltimate Classified Listings
- CVE-2024-37381An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an authenticated attacker within the same network tIvanti EPM
- CVE-2024-7185TOTOLINK A3600R cstecgi.cgi setWebWlanIdx buffer overflowTOTOLINK A3600R
- CVE-2024-7184TOTOLINK A3600R cstecgi.cgi setUrlFilterRules buffer overflowTOTOLINK A3600R
- CVE-2024-7183TOTOLINK A3600R cstecgi.cgi setUploadSetting buffer overflowTOTOLINK A3600R
- CVE-2024-7182TOTOLINK A3600R cstecgi.cgi setUpgradeFW buffer overflowTOTOLINK A3600R
- CVE-2024-7180TOTOLINK A3600R cstecgi.cgi setPortForwardRules buffer overflowTOTOLINK A3600R
- CVE-2024-7179TOTOLINK A3600R cstecgi.cgi setParentalRules buffer overflowTOTOLINK A3600R
- CVE-2024-7178TOTOLINK A3600R cstecgi.cgi setMacQos buffer overflowTOTOLINK A3600R
- CVE-2024-7177TOTOLINK A3600R cstecgi.cgi setLanguageCfg buffer overflowTOTOLINK A3600R
- CVE-2024-7176TOTOLINK A3600R cstecgi.cgi setIpQosRules buffer overflowTOTOLINK A3600R
- CVE-2024-7174TOTOLINK A3600R cstecgi.cgi setdeviceName buffer overflowTOTOLINK A3600R
- CVE-2024-28804An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215.
- CVE-2024-28806An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215.
- CVE-2024-33365Buffer Overflow vulnerability in Tenda AC10 v4 US_AC10V4.0si_V16.03.10.20_cn allows a remote attacker to execute arbitrary code via the Virt
- CVE-2024-37857SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php
- CVE-2024-41631Buffer Overflow vulnerability in host-host NEUQ_board v.1.0 allows a remote attacker to cause a denial of service via the password.h compone
- CVE-2024-41637RaspAP before 3.1.5 allows an attacker to escalate privileges: the www-data user has write access to the restapi.service file and also possebillz/raspap-webgui
Medium, low and unrated 149
- CVE-2024-40777An out-of-bounds access issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-40798This issue was addressed with improved redaction of sensitive information.Apple iOS and iPadOS · Apple macOS
- CVE-2024-27871A path handling issue was addressed with improved validation.Apple iOS and iPadOS · Apple macOS
- CVE-2024-40833A logic issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2024-40794This issue was addressed through improved state management.Apple Safari · Apple iOS and iPadOS +1
- CVE-2024-27884This issue was addressed with a new entitlement.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-40813A lock screen issue was addressed with improved state management.Apple iOS and iPadOS · Apple watchOS
- CVE-2024-40804The issue was addressed with improved checks.Apple macOS
- CVE-2024-40795This issue was addressed with improved data protection.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-40832The issue was addressed with improved checks.Apple macOS
- CVE-2024-40776A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2024-27882A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2024-27877The issue was addressed with improved memory handling.Apple macOS
- CVE-2024-40788A type confusion issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-40823The issue was addressed with improved checks.Apple macOS
- CVE-2024-40835A logic issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +1
- CVE-2024-40834This issue was addressed by adding an additional prompt for user consent.Apple macOS
- CVE-2024-40822This issue was addressed by restricting options offered on a locked device.Apple iOS and iPadOS · Apple macOS +1
- CVE-2024-40789An out-of-bounds access issue was addressed with improved bounds checking.Apple Safari · Apple iOS and iPadOS +4
- CVE-2024-40818This issue was addressed by restricting options offered on a locked device.Apple iOS and iPadOS · Apple macOS +1
- CVE-2024-40785This issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +4
- CVE-2024-27883A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2024-40793This issue was addressed by removing the vulnerable code.Apple iOS and iPadOS · Apple macOS +1
- CVE-2024-40817The issue was addressed with improved UI handling.Apple Safari · Apple macOS
- CVE-2024-27863An information disclosure issue was addressed with improved private data redaction for log entries.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-27862A logic issue was addressed with improved state management.Apple macOS
- CVE-2024-27823A race condition was addressed with improved locking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-27881A privacy issue was addressed with improved private data redaction for log entries.Apple macOS
- CVE-2024-40816An out-of-bounds read was addressed with improved input validation.Apple macOS
- CVE-2024-27878A buffer overflow issue was addressed with improved memory handling.Apple macOS
- CVE-2024-40827The issue was addressed with improved checks.Apple macOS
- CVE-2024-27873An out-of-bounds write issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2024-40775A downgrade issue was addressed with additional code-signing restrictions.Apple macOS
- CVE-2024-27853This issue was addressed with improved checks.Apple macOS
- CVE-2024-40780An out-of-bounds read was addressed with improved bounds checking.Apple Safari · Apple iOS and iPadOS +4
- CVE-2024-40807A logic issue was addressed with improved checks.Apple macOS
- CVE-2024-40796A privacy issue was addressed with improved private data redaction for log entries.Apple iOS and iPadOS · Apple macOS
- CVE-2024-40779An out-of-bounds read was addressed with improved bounds checking.Apple Safari · Apple iOS and iPadOS +4
- CVE-2024-40778An authentication issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2024-27887A path handling issue was addressed with improved validation.Apple macOS
- CVE-2024-40806An out-of-bounds read issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-40774A downgrade issue was addressed with additional code-signing restrictions.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-27872This issue was addressed with improved validation of symlinks.Apple macOS
- CVE-2024-27809A privacy issue was addressed with improved private data redaction for log entries.Apple macOS
- CVE-2024-3219Pure-Python fallback of socket.socketpair() doesn’t authenticate peer connectionPython Software Foundation CPython
- CVE-2023-42957A permissions issue was addressed with additional restrictions.Apple iOS and iPadOS · Apple macOS +1
- CVE-2023-42948This issue was addressed through improved state management.Apple macOS
- CVE-2023-42925The issue was addressed with improved restriction of data container access.Apple iOS and iPadOS · Apple macOS
- CVE-2023-42949This issue was addressed with improved data protection.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2023-42943A privacy issue was addressed with improved private data redaction for log entries.Apple macOS
- CVE-2024-6620Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability.Honeywell PC42t, PC42tp, and PC42d
- CVE-2024-6727Broken Access Control in DelphixDelphix Data Control Tower
- CVE-2024-42098crypto: ecdh - explicitly zeroize private_keyLinux
- CVE-2024-42096x86: stop playing stack games in profile_pc()Linux
- CVE-2024-42095serial: 8250_omap: Implementation of Errata i2310Linux
- CVE-2024-42094net/iucv: Avoid explicit cpumask var allocation on stackLinux
- CVE-2024-42093net/dpaa2: Avoid explicit cpumask var allocation on stackLinux
- CVE-2024-42092gpio: davinci: Validate the obtained number of IRQsLinux
- CVE-2024-42091drm/xe: Check pat.ops before dumping PAT settingsLinux
- CVE-2024-42090pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFERLinux
- CVE-2024-42089ASoC: fsl-asoc-card: set priv->pdev before using itLinux
- CVE-2024-42087drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleepLinux
- CVE-2024-42086iio: chemical: bme680: Fix overflows in compensate() functionsLinux
- CVE-2024-42085usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlockLinux
- CVE-2024-42084ftruncate: pass a signed offsetLinux
- CVE-2024-42082xdp: Remove WARN() from __xdp_reg_mem_model()Linux
- CVE-2024-42081drm/xe/xe_devcoredump: Check NULL before assignmentsLinux
- CVE-2024-42080RDMA/restrack: Fix potential invalid address accessLinux
- CVE-2024-42079gfs2: Fix NULL pointer dereference in gfs2_log_flushLinux
- CVE-2024-42078nfsd: initialise nfsd_info.mutex early.Linux
- CVE-2024-42077ocfs2: fix DIO failure due to insufficient transaction creditsLinux
- CVE-2024-42076net: can: j1939: Initialize unused data in j1939_send_one()Linux
- CVE-2024-42074ASoC: amd: acp: add a null check for chip_pdev structureLinux
- CVE-2024-42073mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systemsLinux
- CVE-2024-42070netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registersLinux
- CVE-2024-42065drm/xe: Add a NULL check in xe_ttm_stolen_mgr_initLinux
- CVE-2024-42063bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter modeLinux
- CVE-2024-41098ata: libata-core: Fix null pointer dereference on errorLinux
- CVE-2024-41097usb: atm: cxacru: fix endpoint checking in cxacru_bind()Linux
- CVE-2024-41095drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modesLinux
- CVE-2024-41094drm/fbdev-dma: Only set smem_start is enable per module optionLinux
- CVE-2024-41093drm/amdgpu: avoid using null object of framebufferLinux
- CVE-2024-41089drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modesLinux
- CVE-2024-41088can: mcp251xfd: fix infinite loop when xmit failsLinux
- CVE-2024-41085cxl/mem: Fix no cxl_nvd during pmem region auto-assemblingLinux
- CVE-2024-41084cxl/region: Avoid null pointer dereference in region lookupLinux
- CVE-2024-41083netfs: Fix netfs_page_mkwrite() to check folio->mapping is validLinux
- CVE-2024-41810HTML injection in HTTP redirect bodytwisted
- CVE-2024-41082nvme-fabrics: use reserved tag for reg read/write commandLinux
- CVE-2024-41080io_uring: fix possible deadlock in io_register_iowq_max_workers()Linux
- CVE-2024-41078btrfs: qgroup: fix quota root leak after quota disable failureLinux
- CVE-2024-41077null_blk: fix validation of block sizeLinux
- CVE-2024-41076NFSv4: Fix memory leak in nfs4_set_security_labelLinux
- CVE-2024-41074cachefiles: Set object to close if ondemand_id < 0 in copenLinux
- CVE-2024-41072wifi: cfg80211: wext: add extra SIOCSIWSCAN data checkLinux
- CVE-2024-41068s390/sclp: Fix sclp_init() cleanup on failureLinux
- CVE-2024-41067btrfs: scrub: handle RST lookup error correctlyLinux
- CVE-2024-41065powerpc/pseries: Whitelist dtl slub object for copying to userspaceLinux
- CVE-2024-41063Bluetooth: hci_core: cancel all works upon hci_unregister_dev()Linux
- CVE-2024-41061drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupportLinux
- CVE-2024-41058cachefiles: fix slab-use-after-free in fscache_withdraw_volume()Linux
- CVE-2024-41676Magento LTS vulnerable to stored Cross-site Scripting (XSS) in admin system configsOpenMage magento-lts · openmage/magento-lts
- CVE-2024-41055mm: prevent derefencing NULL ptr in pfn_section_valid()Linux
- CVE-2024-41054scsi: ufs: core: Fix ufshcd_clear_cmd racing issueLinux
- CVE-2024-41053scsi: ufs: core: Fix ufshcd_abort_one racing issueLinux
- CVE-2024-41052vfio/pci: Init the count variable in collecting hot-reset devicesLinux
- CVE-2024-41050cachefiles: cyclic allocation of msg_id to avoid reuseLinux
- CVE-2024-41047i40e: Fix XDP program unloading while removing the driverLinux
- CVE-2024-41044ppp: reject claimed-as-LCP but actually malformed packetsLinux
- CVE-2024-41043netfilter: nfnetlink_queue: drop bogus WARN_ONLinux
- CVE-2024-41042netfilter: nf_tables: prefer nft_chain_validateLinux
- CVE-2024-41039firmware: cs_dsp: Fix overflow checking of wmfw headerLinux
- CVE-2024-41037ASoC: SOF: Intel: hda: fix null deref on system suspend entryLinux
- CVE-2024-41035USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptorLinux
- CVE-2024-41033cachestat: do not flush stats in recency checkLinux
- CVE-2024-41031mm/filemap: skip to create PMD-sized page cache if neededLinux
- CVE-2024-41030ksmbd: discard write access to the directory openLinux
- CVE-2024-41029nvmem: core: limit cell sysfs permissions to main attribute onesLinux
- CVE-2024-41027Fix userfaultfd_api to return EINVAL as expectedLinux
- CVE-2024-41025misc: fastrpc: Fix memory leak in audio daemon attach operationLinux
- CVE-2024-41023sched/deadline: Fix task_struct reference leakLinux
- CVE-2024-41021s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception()Linux
- CVE-2024-7200SourceCodester Complaints Report Management System cross site scriptingSourceCodester Complaints Report Management System
- CVE-2024-7199SourceCodester Complaints Report Management System manage_user.php sql injectionSourceCodester Complaints Report Management System
- CVE-2024-7198SourceCodester Complaints Report Management System manage_station.php sql injectionSourceCodester Complaints Report Management System
- CVE-2024-7197SourceCodester Complaints Report Management System manage_complaint.php sql injectionSourceCodester Complaints Report Management System
- CVE-2024-7196SourceCodester Complaints Report Management System sql injectionSourceCodester Complaints Report Management System
- CVE-2024-7195itsourcecode Society Management System check_admin.php sql injectionitsourcecode Society Management System
- CVE-2024-7194itsourcecode Society Management System check_student.php sql injectionitsourcecode Society Management System
- CVE-2024-7193Mp3tag DLL tak_deco_lib.dll uncontrolled search pathMp3tag
- CVE-2024-7192itsourcecode Society Management System student.php unrestricted uploaditsourcecode Society Management System
- CVE-2024-7191itsourcecode Society Management System get_balance.php sql injectionitsourcecode Society Management System
- CVE-2024-7190itsourcecode Society Management System get_price.php sql injectionitsourcecode Society Management System
- CVE-2024-7189itsourcecode Online Food Ordering System editproduct.php unrestricted uploaditsourcecode Online Food Ordering System
- CVE-2024-7188Bylancer Quicklancer GET Parameter listing sql injectionBylancer Quicklancer
- CVE-2024-41013xfs: don't walk off the end of a directory data blockLinux
- CVE-2024-6487Inline Related Posts < 3.8.0 - Admin+ Stored XSSInline Related Posts
- CVE-2024-6362Ultimate Blocks < 3.2.0 - Contributor+ Stored XSSUltimate Blocks
- CVE-2024-5883Ultimate Classified Listings < 1.3 - Reflected XSSUltimate Classified Listings
- CVE-2024-5285WP Affiliate Platform < 6.5.2 - Affiliate Deletion via CSRFwp-affiliate-platform
- CVE-2024-4483Email Encoder < 2.2.2 - Admin+ Stored XSSEmail Encoder
- CVE-2024-7181TOTOLINK A3600R cstecgi.cgi setTelnetCfg command injectionTOTOLINK A3600R
- CVE-2024-32671Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects EscargSamsung Open Source Escargot
- CVE-2024-7175TOTOLINK A3600R cstecgi.cgi setDiagnosisCfg os command injectionTOTOLINK A3600R
- CVE-2024-37856Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the first, l
- CVE-2024-37859Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the page par
- CVE-2024-40576Cross Site Scripting vulnerability in Best House Rental Management System 1.0 allows a remote attacker to execute arbitrary code via the "Ho
- CVE-2024-41624Incorrect access control in Himalaya Xiaoya nano smart speaker rom_version 1.6.96 allows a remote attacker to have an unspecified impact.
- CVE-2024-41640Cross Site Scripting (XSS) vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using