CVEs published September 18, 2024
239 CVEs were published on September 18, 2024: 22 critical, 101 high.
- Published
- 239
- Critical
- 22
- High
- 101
- Medium
- 61
- Low
- 2
- Unrated
- 53
- Now in CISA KEV
- 0
- Fix available
- 53
Most affected products
- Linux
- 85
- Open Networking Foundation (ONF) libfluid
- 37
- Mautic · mautic/core
- 6
- Eliz Software Panel
- 5
- OpenPLC_v3
- 5
- CIRCUTOR Q-SMT
- 4
- Mautic · mautic/core +1
- 3
- TAKENAKA ENGINEERING CO. HDVR-400 · TAKENAKA ENGINEERING… +7
- 3
- CIRCUTOR TCP2RS+
- 2
- github.com/coredns/coredns
- 2
Critical 22
- CVE-2024-46986Arbitrary file write leading to RCE in Camaleon CMSowen2345 camaleon-cms · camaleon_cms
- CVE-2024-6878Directory Browsing in Eliz Software's PanelEliz Software Panel
- CVE-2024-6877Reflected XSS in Eliz Software's PanelEliz Software Panel
- CVE-2024-5960Plaintext Storage of a Password in Eliz Software's PanelEliz Software Panel
- CVE-2024-5959Stored XSS in Eliz Software's PanelEliz Software Panel
- CVE-2024-5958SQLi in Eliz Software's PanelEliz Software Panel
- CVE-2024-34026A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d10248OpenPLC_v3
- CVE-2024-8889Improper Input Validation vulnerability on CIRCUTOR TCP2RS+CIRCUTOR TCP2RS+
- CVE-2024-8888Insufficient Session Expiration vulnerability on CIRCUTOR Q-SMTCIRCUTOR Q-SMT
- CVE-2024-8887Authentication bypass vulnerability on CIRCUTOR Q-SMTCIRCUTOR Q-SMT
- CVE-2024-46796smb: client: fix double put of @cfile in smb2_set_path_size()Linux
- CVE-2024-46736smb: client: fix double put of @cfile in smb2_rename_path()Linux
- CVE-2024-46717net/mlx5e: SHAMPO, Fix incorrect page releaseLinux
- CVE-2024-34399**UNSUPPORTED WHEN ASSIGNED** An issue was discovered in BMC Remedy Mid Tier 7.6.04.
- CVE-2024-35515Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code.sqlitedict
- CVE-2024-40568Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute a
- CVE-2024-44542SQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code via the /todesk.com/news.html parameter.
- CVE-2024-45523An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.359
- CVE-2024-46374Best House Rental Management System 1.0 contains a SQL injection vulnerability in the delete_category() function of the file rental/admin_cl
- CVE-2024-46375Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the signup() function of the file rental/admin_cl
- CVE-2024-46376Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the update_account() function of the file rental/
- CVE-2024-46377Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the save_settings() function of the file rental/a
High 101
- CVE-2024-37406In Brave Android prior to v1.67.116, domains in the Brave Shields popup are elided from the right instead of the left, which may lead to domBrave Android Browser
- CVE-2022-25770Insufficient authentication in upgrade flowMautic · mautic/core +1
- CVE-2021-27917XSS in contact tracking and page hits reportMautic · mautic/core-lib +1
- CVE-2022-25768Improper Access Control in UI upgrade processMautic · mautic/core-lib +1
- CVE-2024-8287Anbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS certificate provided to it by the Anbox Stream Agent.Canonical Anbox Cloud
- CVE-2024-45601Local file Inclusion via static file serving functionality in Mesopgoogle mesop · mesop
- CVE-2024-46987Arbitrary path traversal in Camaleon CMSowen2345 camaleon-cms · camaleon_cms
- CVE-2022-25776Sensitive Data Exposure due to inadequate user permission settingsMautic · mautic/core
- CVE-2024-45858An arbitrary code execution vulnerability exists in versions 0.2.9 up to 0.5.10 of the Guardrails AI Guardrails framework because of the wayGuardrails AI guardrails · guardrails-ai
- CVE-2022-25769Improper regex in htaccess fileMautic · mautic/core
- CVE-2024-36981An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f7OpenPLC_v3
- CVE-2024-36980An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f7OpenPLC_v3
- CVE-2024-39590Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a3OpenPLC_v3
- CVE-2024-39589Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a3OpenPLC_v3
- CVE-2024-8890Insertion of Sensitive Information Into Sent Data vulnerability on CIRCUTOR Q-SMTCIRCUTOR Q-SMT
- CVE-2024-6406Sensetive Data Exposure in Yordam Information Technology's Mobile Library ApplicationYordam Information Technology Mobile Library Application
- CVE-2024-46801libfs: fix get_stashed_dentry()Linux
- CVE-2024-46800sch/netem: fix use after free in netem_dequeueLinux
- CVE-2024-46799net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TXLinux
- CVE-2024-46798ASoC: dapm: Fix UAF for snd_soc_pcm_runtime objectLinux
- CVE-2024-46792riscv: misaligned: Restrict user access to kernel memoryLinux
- CVE-2024-46788tracing/osnoise: Use a cpumask to know what threads are kthreadsLinux
- CVE-2024-46787userfaultfd: fix checks for huge PMDsLinux
- CVE-2024-46781nilfs2: fix missing cleanup on rollforward recovery errorLinux
- CVE-2024-46780nilfs2: protect references to superblock parameters exposed in sysfsLinux
- CVE-2024-46777udf: Avoid excessive partition lengthsLinux
- CVE-2024-46771can: bcm: Remove proc entry when dev is unregistered.Linux
- CVE-2024-46765ice: protect XDP configuration with a mutexLinux
- CVE-2024-46764bpf: add check for invalid name in btf_name_valid_section()Linux
- CVE-2024-46763fou: Fix null-ptr-deref in GRO.Linux
- CVE-2024-46762xen: privcmd: Fix possible access to a freed kirqfd instanceLinux
- CVE-2024-46755wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()Linux
- CVE-2024-46754bpf: Remove tst_run from lwt_seg6local_prog_ops.Linux
- CVE-2024-46751btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()Linux
- CVE-2024-46750PCI: Add missing bridge lock to pci_bus_lock()Linux
- CVE-2024-46746HID: amd_sfh: free driver_data after destroying hid deviceLinux
- CVE-2024-46743of/irq: Prevent device address out-of-bounds read in interrupt map walkLinux
- CVE-2024-46741misc: fastrpc: Fix double free of 'buf' in error pathLinux
- CVE-2024-46740binder: fix UAF caused by offsets overwriteLinux
- CVE-2024-46738VMCI: Fix use-after-free when removing resource in vmci_resource_remove()Linux
- CVE-2024-46737nvmet-tcp: fix kernel crash if commands allocation failsLinux
- CVE-2024-46734btrfs: fix race between direct IO write and fsync when using same fdLinux
- CVE-2024-46730drm/amd/display: Ensure array index tg_inst won't be -1Linux
- CVE-2024-46725drm/amdgpu: Fix out-of-bounds write warningLinux
- CVE-2024-46716dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptorLinux
- CVE-2024-43778OS command injection vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD.TAKENAKA ENGINEERING CO. HDVR-400 · TAKENAKA ENGINEERING… +7
- CVE-2024-47001Hidden functionality issue in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD.TAKENAKA ENGINEERING CO. HDVR-400 · TAKENAKA ENGINEERING… +7
- CVE-2024-41929Improper authentication vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD.TAKENAKA ENGINEERING CO. HDVR-400 · TAKENAKA ENGINEERING… +7
- CVE-2024-42404SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the infWelcart e-Commerce
- CVE-2024-45679Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a Open Asset Import Library Assimp
- CVE-2023-28451An issue was discovered in Technitium 11.0.2.
- CVE-2023-28452An issue was discovered in CoreDNS through 1.10.1.github.com/coredns/coredns
- CVE-2023-28455An issue was discovered in Technitium through 11.0.2.
- CVE-2023-28456An issue was discovered in Technitium through 11.0.2.
- CVE-2023-28457An issue was discovered in Technitium through 11.0.3.
- CVE-2023-30464CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack.github.com/coredns/coredns
- CVE-2023-41610Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext.
- CVE-2023-41612Victure PC420 1.1.39 was discovered to use a weak encryption key for the file enabled_telnet.dat on the Micro SD card.
- CVE-2023-47105exec.CommandContext in Chaosblade 0.3 through 1.7.3, when server mode is used, allows OS command execution via the cmd parameter without autgithub.com/chaosblade-io/chaosblade
- CVE-2023-49203Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes acc
- CVE-2024-34057Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages.
- CVE-2024-39339A vulnerability has been discovered in all versions of Smartplay headunits, which are widely used in Suzuki and Toyota cars.
- CVE-2024-44589Stack overflow vulnerability in the Login function in the HNAP service in D-Link DCS-960L with firmware 1.09 allows attackers to execute of
- CVE-2024-46086FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123
- CVE-2024-46373Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend.
- CVE-2024-46550Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the CGIbyFieldName parameter at chglog.cgi.
- CVE-2024-46551Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_Pwd parameter at inet15.cgi.
- CVE-2024-46552Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sStRtMskShow parameter at ipstrt.cgi.
- CVE-2024-46553Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ipaddrmsk%d parameter at v2x00.cgi.
- CVE-2024-46554Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the profname parameter at v2x00.cgi.
- CVE-2024-46555Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pb parameter at v2x00.cgi.
- CVE-2024-46556Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sInRCSecret0 parameter at v2x00.cgi.
- CVE-2024-46557Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00.cgi.
- CVE-2024-46558Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the newProname parameter at v2x00.cgi.
- CVE-2024-46559Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_UsrNme parameter at inet15.cgi.
- CVE-2024-46560Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pub_key parameter at v2x00.cgi.
- CVE-2024-46561Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the queryret parameter at v2x00.cgi.
- CVE-2024-46564Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at fextobj.cgi.
- CVE-2024-46565Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi.
- CVE-2024-46566Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAppName parameter at sslapp.cgi.
- CVE-2024-46567Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iProfileIdx parameter at v2x00.cgi.
- CVE-2024-46568Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi.
- CVE-2024-46571Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi.
- CVE-2024-46580Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the fid parameter at v2x00.cgi.
- CVE-2024-46581Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfName parameter at v2x00.cgi.
- CVE-2024-46582Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvAddr parameter at v2x00.cgi.
- CVE-2024-46583Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the extRadSrv2 parameter at cgiapp.cgi.
- CVE-2024-46584Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the AControlIp1 parameter at acontrol.cgi.
- CVE-2024-46585Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at usergrp.cgi.
- CVE-2024-46586Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sCloudPass parameter at v2x00.cgi.
- CVE-2024-46588Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at wizfw.cgi.
- CVE-2024-46589Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sIpv6AiccuUser parameter at inetipv6.cgi.
- CVE-2024-46590Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt%d parameter at v2x00.cgi.
- CVE-2024-46591Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sDnsPro parameter at v2x00.cgi.
- CVE-2024-46592Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt_5g%d parameter at v2x00.cgi.
- CVE-2024-46593Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the trapcomm parameter at cgiswm.cgi.
- CVE-2024-46594Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveVPNProfile parameter at v2x00.cgi.
- CVE-2024-46595Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveitem parameter at lan2lan.cgi.
- CVE-2024-46596Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAct parameter at v2x00.cgi.
- CVE-2024-46597Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPubKey parameter at dialin.cgi.
- CVE-2024-46598Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iprofileidx parameter at dialin.cgi.
Medium, low and unrated 116
- CVE-2024-47059Users enumeration - weak password loginMautic · mautic/core
- CVE-2024-47050XSS in contact/company tracking (no authentication)Mautic · mautic/core +1
- CVE-2024-47058Cross-site Scripting (XSS) - stored (edit form HTML field)Mautic · mautic/core +1
- CVE-2024-46989Multiple caveats on resources of the same type can result in no permission when permission is expectedauthzed spicedb · github.com/authzed/spicedb
- CVE-2024-46978Missing checks for notification filter preferences editions in XWiki Platformxwiki-platform · org.xwiki.platform:xwiki-platform-notifica…
- CVE-2024-46979Data leak of notification filters of users in XWiki Platformxwiki-platform · org.xwiki.platform:xwiki-platform-notifica…
- CVE-2024-45298Disabled user can bypass lockout by requesting password reset in wiki.jsrequarks wiki
- CVE-2024-46990SSRF Loopback IP filter bypass in directusdirectus · @directus/api
- CVE-2024-45813ReDoS vulnerability in multiparametric routes in find-my-waydelvedor find-my-way · find-my-way
- CVE-2022-25777Server-Side Request Forgery in Asset sectionMautic · mautic/core
- CVE-2022-25775SQL Injection in dynamic ReportsMautic · mautic/core
- CVE-2022-25774XSS in Notifications via saving DashboardsMautic · mautic/core
- CVE-2024-31198Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31197Improper Null Termination in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31196NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31195Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31194Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31193Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31192Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31191Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31190Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31189Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31188Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31187Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31186Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31185NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31184Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31183Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31182NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31181Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31180Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31179Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31178Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31177Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31176Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31175NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31174Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31173Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31172Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31171Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31170Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31169Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31168Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31167NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31166Out-of-bounds Read in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31165NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-31164NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-23916NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-23915NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) libfluid
- CVE-2024-8891Exposure of Private Personal Information to an Unauthorized Actor vulnerability on CIRCUTOR Q-SMTCIRCUTOR Q-SMT
- CVE-2024-8892Uncontrolled Resource Consumption vulnerability on CIRCUTOR TCP2RS+CIRCUTOR TCP2RS+
- CVE-2024-5682User Enumeration in Yordam Information Technology's Yordam Library Automation SystemYordam Information Technology Yordam Library Automation Sys…
- CVE-2024-43188IBM Business Automation Workflow improper input validationIBM Business Automation Workflow
- CVE-2024-46797powerpc/qspinlock: Fix deadlock in MCS queueLinux
- CVE-2024-46795ksmbd: unset the binding mark of a reused connectionLinux
- CVE-2024-46794x86/tdx: Fix data leak in mmio_read()Linux
- CVE-2024-46793ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harderLinux
- CVE-2024-46791can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_openLinux
- CVE-2024-46790codetag: debug: mark codetags for poisoned page as emptyLinux
- CVE-2024-46789mm/slub: add check for s->flags in the alloc_tagging_slab_free_hookLinux
- CVE-2024-46786fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAFLinux
- CVE-2024-46785eventfs: Use list_del_rcu() for SRCU protected list variableLinux
- CVE-2024-46784net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanupLinux
- CVE-2024-46783tcp_bpf: fix return value of tcp_bpf_sendmsg()Linux
- CVE-2024-46782ila: call nf_unregister_net_hooks() soonerLinux
- CVE-2024-46779drm/imagination: Free pvr_vm_gpuva after unlinkLinux
- CVE-2024-46778drm/amd/display: Check UnboundedRequestEnabled's valueLinux
- CVE-2024-46776drm/amd/display: Run DC_LOG_DC after checking link->link_encLinux
- CVE-2024-46775drm/amd/display: Validate function returnsLinux
- CVE-2024-46774powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()Linux
- CVE-2024-46773drm/amd/display: Check denominator pbn_div before usedLinux
- CVE-2024-46772drm/amd/display: Check denominator crb_pipes before usedLinux
- CVE-2024-46770ice: Add netif_device_attach/detach into PF reset flowLinux
- CVE-2024-46769spi: intel: Add check devm_kasprintf() returned valueLinux
- CVE-2024-46768hwmon: (hp-wmi-sensors) Check if WMI event data existsLinux
- CVE-2024-46767net: phy: Fix missing of_node_put() for ledsLinux
- CVE-2024-46766ice: move netif_queue_set_napi to rtnl-protected sectionsLinux
- CVE-2024-46761pci/hotplug/pnv_php: Fix hotplug driver crash on PowernvLinux
- CVE-2024-46760wifi: rtw88: usb: schedule rx work after everything is set upLinux
- CVE-2024-46759hwmon: (adc128d818) Fix underflows seen when writing limit attributesLinux
- CVE-2024-46753btrfs: handle errors from btrfs_dec_ref() properlyLinux
- CVE-2024-46752btrfs: replace BUG_ON() with error handling at update_ref_for_cow()Linux
- CVE-2024-46749Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()Linux
- CVE-2024-46748cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNTLinux
- CVE-2024-46747HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixupLinux
- CVE-2024-46745Input: uinput - reject requests with unreasonable number of slotsLinux
- CVE-2024-46744Squashfs: sanity check symbolic link sizeLinux
- CVE-2024-46742smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()Linux
- CVE-2024-46739uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescindLinux
- CVE-2024-46735ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()Linux
- CVE-2024-8969The SYSCOM Group OMFLOW - Exposure of Sensitive DataThe SYSCOM Group OMFLOW
- CVE-2024-46733btrfs: fix qgroup reserve leaks in cow_file_rangeLinux
- CVE-2024-46732drm/amd/display: Assign linear_pitch_alignment even for VMLinux
- CVE-2024-46731drm/amd/pm: fix the Out-of-bounds read warningLinux
- CVE-2024-46729drm/amd/display: Fix incorrect size calculation for loopLinux
- CVE-2024-46728drm/amd/display: Check index for aux_rd_interval before usingLinux
- CVE-2024-46727drm/amd/display: Add otg_master NULL check within resource_log_pipe_topology_updateLinux
- CVE-2024-46726drm/amd/display: Ensure index calculation will not overflowLinux
- CVE-2024-46724drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_numberLinux
- CVE-2024-46723drm/amdgpu: fix ucode out-of-bounds read warningLinux
- CVE-2024-46722drm/amdgpu: fix mc_data out-of-bounds read warningLinux
- CVE-2024-46721apparmor: fix possible NULL pointer dereferenceLinux
- CVE-2024-46720drm/amdgpu: fix dereference after null checkLinux
- CVE-2024-46719usb: typec: ucsi: Fix null pointer dereference in traceLinux
- CVE-2024-46718drm/xe: Don't overmap identity VRAM mappingLinux
- CVE-2024-46715driver: iio: add missing checks on iio_info's callback accessLinux
- CVE-2024-46714drm/amd/display: Skip wbscl_set_scaler_filter if filter is nullLinux
- CVE-2024-6641WP Hardening – Fix Your WordPress Security <= 1.2.6 - Unauthenticated Security Feature Bypass to Username Enumerationastrasecuritysuite WP Hardening
- CVE-2024-45366Welcart e-Commerce prior to 2.11.2 contains a cross-site scripting vulnerability.Welcart e-Commerce
- CVE-2022-39068Buffer Overflow Vulnerability in ZTE MF296RZTE MF296R
- CVE-2023-41611Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data.
- CVE-2024-39081An issue in SMART TYRE CAR & BIKE v4.2.0 allows attackers to perform a man-in-the-middle attack via Bluetooth communications.
- CVE-2024-43024Multiple stored cross-site scripting (XSS) vulnerabilities in RWS MultiTrans v7.0.23324.2 and earlier allow attackers to execute arbitrary w
- CVE-2024-43025An HTML injection vulnerability in RWS MultiTrans v7.0.23324.2 and earlier allows attackers to alter the HTML-layout and possibly execute a
- CVE-2024-46372DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module.
- CVE-2024-46959runofast Indoor Security Camera for Baby Monitor has a default password of password for the root account.