CVEs published October 21, 2024
433 CVEs were published on October 21, 2024: 23 critical, 141 high. 1 is now in CISA KEV.
- Published
- 433
- Critical
- 23
- High
- 141
- Medium
- 29
- Low
- 0
- Unrated
- 240
- Now in CISA KEV
- 1
- Fix available
- 118
Most affected products
- Linux
- 372
- code-projects Pharmacy Management System
- 4
- 0xJacky nginx-ui
- 3
- Wellchoose Administrative Management System
- 3
- Aman FunnelKit Automations
- 1
- Amazon AWS ALB Route Directive Adapter For Istio · github.c…
- 1
- Amazon.ApplicationLoadBalancer.Identity.AspNetCore Middlewa…
- 1
- cilium · github.com/cilium/cilium
- 1
- colorlibplugins Simple Custom Post Order
- 1
- cryptocoinjs secp256k1-node · secp256k1
- 1
Critical 23
- CVE-2022-49003nvme: fix SRCU protection of nvme_ns_head listLinux
- CVE-2022-48985net: mana: Fix race on per-CQ variable napi work_doneLinux
- CVE-2024-50047smb: client: fix UAF in async decryptionLinux
- CVE-2024-50046NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()Linux
- CVE-2024-50043nfsd: fix possible badness in FREE_STATEIDLinux
- CVE-2024-50033slip: make slhc_remember() more robust against malicious packetsLinux
- CVE-2024-49996cifs: Fix buffer overflow when parsing NFS reparse pointsLinux
- CVE-2024-49855nbd: fix race between timeout and normal completionLinux
- CVE-2024-47695RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in boundsLinux
- CVE-2024-47678icmp: change the order of rate limitsLinux
- CVE-2024-35285A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a command inject
- CVE-2024-35286A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection
- CVE-2024-35314A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.2
- CVE-2024-40083A Buffer Overflow vulnerabilty in the local_app_set_router_token function of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, unauthentic
- CVE-2024-40084A Buffer Overflow in the Boa webserver of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, unauthenticated attackers to execute arbitrary
- CVE-2024-40085A Buffer Overflow vulnerability in the local_app_set_router_wan function of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, unauthentica
- CVE-2024-40086A Buffer Overflow vulnerability in the local_app_set_router_wifi_SSID_PWD function of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, un
- CVE-2024-40087Vilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Insecure Permissions.
- CVE-2024-40089A Command Injection vulnerability in Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, authenticated attackers to execute arbitrary code b
- CVE-2024-41713A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenti
- CVE-2024-47223A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an un
- CVE-2024-48509Learning with Texts (LWT) 2.0.3 is vulnerable to SQL Injection.
- CVE-2024-48659An issue in DCME-320-L <=9.3.2.114 allows a remote attacker to execute arbitrary code via the log_u_umount.php component.
High 141
- CVE-2022-49030libbpf: Handle size overflow for ringbuf mmapLinux
- CVE-2022-49029hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() failsLinux
- CVE-2022-49026e100: Fix possible use after free in e100_xmit_prepareLinux
- CVE-2022-49025net/mlx5e: Fix use-after-free when reverting termination tableLinux
- CVE-2022-49023wifi: cfg80211: fix buffer overflow in elem comparisonLinux
- CVE-2022-49022wifi: mac8021: fix possible oob access in ieee80211_get_rate_durationLinux
- CVE-2022-49017tipc: re-fetch skb cb after tipc_msg_validateLinux
- CVE-2022-49015net: hsr: Fix potential use-after-freeLinux
- CVE-2022-49014net: tun: Fix use-after-free in tun_detach()Linux
- CVE-2022-49001riscv: fix race when vmap stack overflowLinux
- CVE-2022-48999ipv4: Handle attempt to delete multipath route when fib_info contains an nh referenceLinux
- CVE-2022-48998powerpc/bpf/32: Fix Oops on tail call testsLinux
- CVE-2022-48991mm/khugepaged: invoke MMU notifiers in shmem/file collapse pathsLinux
- CVE-2022-48990drm/amdgpu: fix use-after-free during gpu recoveryLinux
- CVE-2022-48989fscache: Fix oops due to race with cookie_lru and use_cookieLinux
- CVE-2022-48988memcg: fix possible use-after-free in memcg_write_event_control()Linux
- CVE-2022-48986mm/gup: fix gup_pud_range() for daxLinux
- CVE-2022-48981drm/shmem-helper: Remove errant put in error pathLinux
- CVE-2022-48979drm/amd/display: fix array index out of bound error in DCN32 DMLLinux
- CVE-2022-48967NFC: nci: Bounds check struct nfc_target arraysLinux
- CVE-2022-48964ravb: Fix potential use-after-free in ravb_rx_gbeth()Linux
- CVE-2022-48962net: hisilicon: Fix potential use-after-free in hisi_femac_rx()Linux
- CVE-2022-48960net: hisilicon: Fix potential use-after-free in hix5hd2_rx()Linux
- CVE-2022-48956ipv6: avoid use-after-free in ip6_fragment()Linux
- CVE-2022-48954s390/qeth: fix use-after-free in hsciLinux
- CVE-2022-48950perf: Fix perf_pending_task() UaFLinux
- CVE-2024-50063bpf: Prevent tail call between progs attached to different hooksLinux
- CVE-2024-50062RDMA/rtrs-srv: Avoid null pointer deref during path establishmentLinux
- CVE-2024-50059ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race conditionLinux
- CVE-2024-50055driver core: bus: Fix double free in driver API bus_register()Linux
- CVE-2024-50045netfilter: br_netfilter: fix panic with metadata_dst skbLinux
- CVE-2024-50041i40e: Fix macvlan leak by synchronizing access to mac_filter_hashLinux
- CVE-2024-50039net/sched: accept TCA_STAB only for root qdiscLinux
- CVE-2024-50036net: do not delay dst_entries_add() in dst_release()Linux
- CVE-2024-50031drm/v3d: Stop the active perfmon before being destroyedLinux
- CVE-2024-50030drm/xe/ct: prevent UAF in send_recv()Linux
- CVE-2024-50029Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_syncLinux
- CVE-2024-50028thermal: core: Reference count the zone in thermal_zone_get_by_id()Linux
- CVE-2024-50027thermal: core: Free tzp copy along with the thermal zoneLinux
- CVE-2024-50024net: Fix an unsafe loop on the listLinux
- CVE-2024-50001net/mlx5: Fix error path in multi-packet WQE transmitLinux
- CVE-2024-49999afs: Fix the setting of the server responding flagLinux
- CVE-2024-49992drm/stm: Avoid use-after-free issues with crtc and planeLinux
- CVE-2024-49991drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointerLinux
- CVE-2024-49988ksmbd: add refcnt to ksmbd_conn structLinux
- CVE-2024-49986platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errorsLinux
- CVE-2024-49984drm/v3d: Prevent out of bounds access in performance query extensionsLinux
- CVE-2024-49983ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-freeLinux
- CVE-2024-49982aoe: fix the potential use-after-free problem in more placesLinux
- CVE-2024-49981media: venus: fix use after free bug in venus_remove due to race conditionLinux
- CVE-2024-49979net: gso: fix tcp fraglist segmentation after pull from frag_listLinux
- CVE-2024-49978gso: fix udp gso fraglist segmentation after pull from frag_listLinux
- CVE-2024-49973r8169: add tally counter fields added with RTL8125Linux
- CVE-2024-49969drm/amd/display: Fix index out of bounds in DCN30 color transformationLinux
- CVE-2024-49966ocfs2: cancel dqi_sync_work before freeing oinfoLinux
- CVE-2024-49965ocfs2: remove unreasonable unlock in ocfs2_read_blocksLinux
- CVE-2024-49960ext4: fix timer use-after-free on failed mountLinux
- CVE-2024-49958ocfs2: reserve space for inline xattr before attaching reflink treeLinux
- CVE-2024-49956gfs2: fix double destroy_workqueue errorLinux
- CVE-2024-49952netfilter: nf_tables: prevent nf_skb_duplicated corruptionLinux
- CVE-2024-49951Bluetooth: MGMT: Fix possible crash on mgmt_index_removedLinux
- CVE-2024-49950Bluetooth: L2CAP: Fix uaf in l2cap_connectLinux
- CVE-2024-49943drm/xe/guc_submit: add missing locking in wedged_finiLinux
- CVE-2024-49940l2tp: prevent possible tunnel refcount underflowLinux
- CVE-2024-49939wifi: rtw89: avoid to add interface to list twice when SERLinux
- CVE-2024-49936net/xen-netback: prevent UAF in xenvif_flush_hash()Linux
- CVE-2024-49934fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.nameLinux
- CVE-2024-49932btrfs: don't readahead the relocation inode on RSTLinux
- CVE-2024-49930wifi: ath11k: fix array out-of-bound access in SoC statsLinux
- CVE-2024-49925fbdev: efifb: Register sysfs groups through driver coreLinux
- CVE-2024-49924fbdev: pxafb: Fix possible use after free in pxafb_task()Linux
- CVE-2024-49902jfs: check if leafidx greater than num leaves per dmap treeLinux
- CVE-2024-49894drm/amd/display: Fix index out of bounds in degamma hardware format translationLinux
- CVE-2024-49889ext4: avoid use-after-free in ext4_ext_show_leaf()Linux
- CVE-2024-49886platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bugLinux
- CVE-2024-49884ext4: fix slab-use-after-free in ext4_split_extent_at()Linux
- CVE-2024-49883ext4: aovid use-after-free in ext4_ext_insert_extent()Linux
- CVE-2024-49882ext4: fix double brelse() the buffer of the extents pathLinux
- CVE-2024-49876drm/xe: fix UAF around queue destructionLinux
- CVE-2024-49875nfsd: map the EBADMSG to nfserr_io to avoid warningLinux
- CVE-2024-49874i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race ConditionLinux
- CVE-2024-49867btrfs: wait for fixup workers before stopping cleaner kthread during umountLinux
- CVE-2024-49866tracing/timerlat: Fix a race during cpuhp processingLinux
- CVE-2024-49865drm/xe/vm: move xa_alloc to prevent UAFLinux
- CVE-2024-49864rxrpc: Fix a race between socket set up and I/O thread creationLinux
- CVE-2024-49368Unchecked logrotate settings lead to arbitrary command execution0xJacky nginx-ui
- CVE-2024-49366Nginx UI's json field can construct a directory traversal payload, causing arbitrary files to be written0xJacky nginx-ui
- CVE-2024-48930secp256k1-node vulnerable to private key extraction over ECDHcryptocoinjs secp256k1-node · secp256k1
- CVE-2024-45309OneDev vulnerable to arbitrary file reading for unauthenticated usertheonedev onedev
- CVE-2024-6519Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerabilityqemu · Red Hat Enterprise Linux
- CVE-2024-49862powercap: intel_rapl: Fix off by one in get_rpi()Linux
- CVE-2024-49861bpf: Fix helper writes to read-only mapsLinux
- CVE-2024-49860ACPI: sysfs: validate return type of _STR methodLinux
- CVE-2024-49859f2fs: fix to check atomic_file in f2fs ioctl interfacesLinux
- CVE-2024-49857wifi: iwlwifi: mvm: set the cipher for secured NDP rangingLinux
- CVE-2024-49854block, bfq: fix uaf for accessing waker_bfqq after splittingLinux
- CVE-2024-47750RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08Linux
- CVE-2024-47749RDMA/cxgb4: Added NULL check for lookup_atidLinux
- CVE-2024-47748vhost_vdpa: assign irq bypass producer token correctlyLinux
- CVE-2024-47747net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race ConditionLinux
- CVE-2024-47745mm: call the security_mmap_file() LSM hook in remap_file_pages()Linux
- CVE-2024-47742firmware_loader: Block path traversalLinux
- CVE-2024-47741btrfs: fix race setting file private on concurrent lseek using same fdLinux
- CVE-2024-47740f2fs: Require FMODE_WRITE for atomic write ioctlsLinux
- CVE-2024-47739padata: use integer wrap around to prevent deadlock on seq_nr overflowLinux
- CVE-2024-47732crypto: iaa - Fix potential use after free bugLinux
- CVE-2024-47730crypto: hisilicon/qm - inject error before stopping queueLinux
- CVE-2024-47727x86/tdx: Fix "in-kernel MMIO" checkLinux
- CVE-2024-47726f2fs: fix to wait dio completionLinux
- CVE-2024-47724wifi: ath11k: use work queue to process beacon tx eventLinux
- CVE-2024-47723jfs: fix out-of-bounds in dbNextAG() and diAlloc()Linux
- CVE-2024-47721wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-bounds readingLinux
- CVE-2024-47714wifi: mt76: mt7996: use hweight16 to get correct tx antennaLinux
- CVE-2024-47712wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_paramLinux
- CVE-2024-47711af_unix: Don't return OOB skb in manage_oob().Linux
- CVE-2024-47706block, bfq: fix possible UAF for bfqq->bic with merge chainLinux
- CVE-2024-47703bpf, lsm: Add check for BPF LSM return valueLinux
- CVE-2024-47702bpf: Fail verification for sign-extension of packet data/data_end/data_metaLinux
- CVE-2024-47701ext4: avoid OOB when system.data xattr changes underneath the filesystemLinux
- CVE-2024-47698drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write errorLinux
- CVE-2024-47697drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write errorLinux
- CVE-2024-47696RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependencyLinux
- CVE-2024-47690f2fs: get rid of online repaire on corrupted directoryLinux
- CVE-2024-47682scsi: sd: Fix off-by-one error in sd_read_block_characteristics()Linux
- CVE-2024-47679vfs: fix race between evice_inodes() and find_inode()&iput()Linux
- CVE-2024-47676mm/hugetlb.c: fix UAF of vma in hugetlb fault pathwayLinux
- CVE-2024-47675bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()Linux
- CVE-2024-47328WordPress Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin <= 3.1.2 - SQL Injection vulnerabilityAman FunnelKit Automations
- CVE-2024-8625TS Poll – Survey, Versus Poll, Image Poll, Video Poll < 2.4.0 - Admin+ SQL InjectionTS Poll
- CVE-2024-10202Wellchoose Administrative Management System - OS Command InjectionWellchoose Administrative Management System
- CVE-2024-10201Wellchoose Administrative Management System - Arbitrary File UploadWellchoose Administrative Management System
- CVE-2024-10200Wellchoose Administrative Management System - Arbitrary File Read through Path TraversalWellchoose Administrative Management System
- CVE-2024-43689Stack-based buffer overflow vulnerability exists in ELECOM wireless access points.ELECOM CO. WAB-I1750-PS · ELECOM CO. WAB-M1775-PS +3
- CVE-2024-30157A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with
- CVE-2024-30158A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrat
- CVE-2024-41714A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and MiVoice Business Solution Virtual Instance (M
- CVE-2024-47189The API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an
- CVE-2024-47912A vulnerability in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an u
- CVE-2024-48231Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \backend\controller\auth\Auth.php.funadmin/funadmin
- CVE-2024-48597Online Clinic Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /success/editp.php?acti
- CVE-2024-48645In Minecraft mod "Command Block IDE" up to and including version 0.4.9, a missing authorization (CWE-862) allows any user to modify "functio
Medium, low and unrated 269
- CVE-2024-10125Lack of JWT issuer and signer validationAmazon.ApplicationLoadBalancer.Identity.AspNetCore Middlewa…
- CVE-2024-8901Lack of JWT issuer and signer validationAmazon AWS ALB Route Directive Adapter For Istio · github.c…
- CVE-2022-49033btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()Linux
- CVE-2022-49032iio: health: afe4404: Fix oob read in afe4404_[read|write]_rawLinux
- CVE-2022-49031iio: health: afe4403: Fix oob read in afe4403_read_rawLinux
- CVE-2022-49028ixgbevf: Fix resource leak in ixgbevf_init_module()Linux
- CVE-2022-49027iavf: Fix error handling in iavf_init_module()Linux
- CVE-2022-49024can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methodsLinux
- CVE-2022-49021net: phy: fix null-ptr-deref while probe() failedLinux
- CVE-2022-49020net/9p: Fix a potential socket leak in p9_socket_openLinux
- CVE-2022-49019net: ethernet: nixge: fix NULL dereferenceLinux
- CVE-2022-49018mptcp: fix sleep in atomic at close timeLinux
- CVE-2022-49016net: mdiobus: fix unbalanced node reference countLinux
- CVE-2022-49013sctp: fix memory leak in sctp_stream_outq_migrate()Linux
- CVE-2022-49012afs: Fix server->active leak in afs_put_serverLinux
- CVE-2022-49011hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()Linux
- CVE-2022-49010hwmon: (coretemp) Check for null before removing sysfs attrsLinux
- CVE-2022-49009hwmon: (asus-ec-sensors) Add checks for devm_kcallocLinux
- CVE-2022-49008can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev is downLinux
- CVE-2022-49007nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()Linux
- CVE-2022-49006tracing: Free buffers when a used dynamic event is removedLinux
- CVE-2022-49005ASoC: ops: Fix bounds check for _sx controlsLinux
- CVE-2022-49004riscv: Sync efi page table's kernel mappings before switchingLinux
- CVE-2022-49002iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()Linux
- CVE-2022-49000iommu/vt-d: Fix PCI device refcount leak in has_external_pci()Linux
- CVE-2022-48997char: tpm: Protect tpm_pm_suspend with locksLinux
- CVE-2022-48996mm/damon/sysfs: fix wrong empty schemes assumption under online tuning in damon_sysfs_set_schemes()Linux
- CVE-2022-48995Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()Linux
- CVE-2022-48994ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_eventLinux
- CVE-2022-48992ASoC: soc-pcm: Add NULL check in BE reparentingLinux
- CVE-2022-48987media: v4l2-dv-timings.c: fix too strict blanking sanity checksLinux
- CVE-2022-48984can: slcan: fix freed work crashLinux
- CVE-2022-48983io_uring: Fix a null-ptr-deref in io_tctx_exit_cb()Linux
- CVE-2022-48982Bluetooth: Fix crash when replugging CSR fake controllersLinux
- CVE-2022-48980net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing()Linux
- CVE-2022-48978HID: core: fix shift-out-of-bounds in hid_report_raw_eventLinux
- CVE-2022-48977can: af_can: fix NULL pointer dereference in can_rcv_filterLinux
- CVE-2022-48976netfilter: flowtable_offload: fix using __this_cpu_add in preemptibleLinux
- CVE-2022-48975gpiolib: fix memory leak in gpiochip_setup_dev()Linux
- CVE-2022-48974netfilter: conntrack: fix using __this_cpu_add in preemptibleLinux
- CVE-2022-48973gpio: amd8111: Fix PCI device reference count leakLinux
- CVE-2022-48972mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()Linux
- CVE-2022-48971Bluetooth: Fix not cleanup led when bt_init failsLinux
- CVE-2022-48970af_unix: Get user_ns from in_skb in unix_diag_get_exact().Linux
- CVE-2022-48969xen-netfront: Fix NULL sring after live migrationLinux
- CVE-2022-48968octeontx2-pf: Fix potential memory leak in otx2_init_tc()Linux
- CVE-2022-48966net: mvneta: Prevent out of bounds read in mvneta_config_rss()Linux
- CVE-2022-48965gpio/rockchip: fix refcount leak in rockchip_gpiolib_register()Linux
- CVE-2022-48963net: wwan: iosm: fix memory leak in ipc_mux_init()Linux
- CVE-2022-48961net: mdio: fix unbalanced fwnode reference count in mdio_device_release()Linux
- CVE-2022-48959net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()Linux
- CVE-2022-48958ethernet: aeroflex: fix potential skb leak in greth_init_rings()Linux
- CVE-2022-48957dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove()Linux
- CVE-2022-48955net: thunderbolt: fix memory leak in tbnet_open()Linux
- CVE-2022-48953rtc: cmos: Fix event handler registration ordering issueLinux
- CVE-2022-48952PCI: mt7621: Add sentinel to quirks tableLinux
- CVE-2022-48951ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()Linux
- CVE-2022-48949igb: Initialize mailbox message for VF resetLinux
- CVE-2022-48948usb: gadget: uvc: Prevent buffer overflow in setup handlerLinux
- CVE-2022-48947Bluetooth: L2CAP: Fix u8 overflowLinux
- CVE-2022-48946udf: Fix preallocation discarding at indirect extent boundaryLinux
- CVE-2024-50065ntfs3: Change to non-blocking allocation in ntfs_d_hashLinux
- CVE-2024-50064zram: free secondary algorithms namesLinux
- CVE-2024-50061i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race ConditionLinux
- CVE-2024-50060io_uring: check if we need to reschedule during overflow flushLinux
- CVE-2024-50058serial: protect uart_port_dtr_rts() in uart_shutdown() tooLinux
- CVE-2024-50057usb: typec: tipd: Free IRQ only if it was requested beforeLinux
- CVE-2024-50056usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.cLinux
- CVE-2024-50049drm/amd/display: Check null pointer before dereferencing seLinux
- CVE-2024-50048fbcon: Fix a NULL pointer dereference issue in fbcon_putcsLinux
- CVE-2024-50044Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_changeLinux
- CVE-2024-50042ice: Fix increasing MSI-X on VFLinux
- CVE-2024-50040igb: Do not bring the device up after non-fatal errorLinux
- CVE-2024-50038netfilter: xtables: avoid NFPROTO_UNSPEC where neededLinux
- CVE-2024-50037drm/fbdev-dma: Only cleanup deferred I/O if necessaryLinux
- CVE-2024-50035ppp: fix ppp_async_encode() illegal accessLinux
- CVE-2024-50034net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMCLinux
- CVE-2024-50026scsi: wd33c93: Don't use stale scsi_pointer valueLinux
- CVE-2024-50025scsi: fnic: Move flush_work initialization out of if blockLinux
- CVE-2024-50023net: phy: Remove LED entry from LEDs list on unregisterLinux
- CVE-2024-50022device-dax: correct pgoff align in dax_set_mapping()Linux
- CVE-2024-50021ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins()Linux
- CVE-2024-50020ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()Linux
- CVE-2024-50019kthread: unpark only parked kthreadLinux
- CVE-2024-47825CIDR deny policies may not take effect when a more narrow CIDR allow is presentcilium · github.com/cilium/cilium
- CVE-2024-50017x86/mm/ident_map: Use gbpages only where full GB page should be mapped.Linux
- CVE-2024-50015ext4: dax: fix overflowing extents beyond inode size when partially writingLinux
- CVE-2024-50014ext4: fix access to uninitialised lock in fc replay pathLinux
- CVE-2024-50013exfat: fix memory leak in exfat_load_bitmap()Linux
- CVE-2024-50012cpufreq: Avoid a bad reference count on CPU nodeLinux
- CVE-2024-50011ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty itemLinux
- CVE-2024-50010exec: don't WARN for racy path_noexec checkLinux
- CVE-2024-50009cpufreq: amd-pstate: add check for cpufreq_cpu_get's return valueLinux
- CVE-2024-50008wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()Linux
- CVE-2024-50007ALSA: asihpi: Fix potential OOB array accessLinux
- CVE-2024-50006ext4: fix i_data_sem unlock order in ext4_ind_migrate()Linux
- CVE-2024-50005mac802154: Fix potential RCU dereference issue in mac802154_scan_workerLinux
- CVE-2024-50004drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35Linux
- CVE-2024-50003drm/amd/display: Fix system hang while resume with TBT monitorLinux
- CVE-2024-50002static_call: Handle module init failure correctly in static_call_del_module()Linux
- CVE-2024-50000net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()Linux
- CVE-2024-49998net: dsa: improve shutdown sequenceLinux
- CVE-2024-49997net: ethernet: lantiq_etop: fix memory disclosureLinux
- CVE-2024-49994block: fix integer overflow in BLKSECDISCARDLinux
- CVE-2024-49990drm/xe/hdcp: Check GSC structure validityLinux
- CVE-2024-49989drm/amd/display: fix double free issue during amdgpu module unloadLinux
- CVE-2024-49987bpftool: Fix undefined behavior in qsort(NULL, 0, ...)Linux
- CVE-2024-49985i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resumeLinux
- CVE-2024-49980vrf: revert "vrf: Remove unnecessary RCU-bh critical section"Linux
- CVE-2024-49977net: stmmac: Fix zero-division error when disabling tc cbsLinux
- CVE-2024-49976tracing/timerlat: Drop interface_lock in stop_kthread()Linux
- CVE-2024-49975uprobes: fix kernel info leak via "[uprobes]" vmaLinux
- CVE-2024-49974NFSD: Limit the number of concurrent async COPY operationsLinux
- CVE-2024-49972drm/amd/display: Deallocate DML memory if allocation failsLinux
- CVE-2024-49971drm/amd/display: Increase array size of dummy_booleanLinux
- CVE-2024-49970drm/amd/display: Implement bounds check for stream encoder creation in DCN401Linux
- CVE-2024-49968ext4: filesystems without casefold feature cannot be mounted with siphashLinux
- CVE-2024-49964mm/hugetlb: fix memfd_pin_folios free_huge_pages leakLinux
- CVE-2024-49963mailbox: bcm2835: Fix timeout during suspend modeLinux
- CVE-2024-49962ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()Linux
- CVE-2024-49961media: i2c: ar0521: Use cansleep version of gpiod_set_value()Linux
- CVE-2024-49959jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns errorLinux
- CVE-2024-49957ocfs2: fix null-ptr-deref when journal load failed.Linux
- CVE-2024-49955ACPI: battery: Fix possible crash when unregistering a battery hookLinux
- CVE-2024-49954static_call: Replace pointless WARN_ON() in static_call_module_notify()Linux
- CVE-2024-49953net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twiceLinux
- CVE-2024-49949net: avoid potential underflow in qdisc_pkt_len_init() with UFOLinux
- CVE-2024-49948net: add more sanity checks to qdisc_pkt_len_init()Linux
- CVE-2024-49947net: test for not too small csum_start in virtio_net_hdr_to_skb()Linux
- CVE-2024-49946ppp: do not assume bh is held in ppp_channel_bridge_input()Linux
- CVE-2024-49945net/ncsi: Disable the ncsi work before freeing the associated structureLinux
- CVE-2024-49944sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_startLinux
- CVE-2024-49942drm/xe: Prevent null pointer access in xe_migrate_copyLinux
- CVE-2024-49941gpiolib: Fix potential NULL pointer dereference in gpiod_get_label()Linux
- CVE-2024-49938wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmitLinux
- CVE-2024-49937wifi: cfg80211: Set correct chandef when starting CACLinux
- CVE-2024-49935ACPI: PAD: fix crash in exit_round_robin()Linux
- CVE-2024-49933blk_iocost: fix more out of bound shiftsLinux
- CVE-2024-49931wifi: ath12k: fix array out-of-bound access in SoC statsLinux
- CVE-2024-49929wifi: iwlwifi: mvm: avoid NULL pointer dereferenceLinux
- CVE-2024-49928wifi: rtw89: avoid reading out of bounds when loading TX power FW elementsLinux
- CVE-2024-49927x86/ioapic: Handle allocation failures gracefullyLinux
- CVE-2024-49926rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()Linux
- CVE-2024-49923drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flagsLinux
- CVE-2024-49922drm/amd/display: Check null pointers before using themLinux
- CVE-2024-49921drm/amd/display: Check null pointers before usedLinux
- CVE-2024-49920drm/amd/display: Check null pointers before multiple usesLinux
- CVE-2024-49919drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layerLinux
- CVE-2024-49918drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layerLinux
- CVE-2024-49917drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hwLinux
- CVE-2024-49916drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn401_init_hwLinux
- CVE-2024-49915drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hwLinux
- CVE-2024-49914drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipeLinux
- CVE-2024-49913drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_streamLinux
- CVE-2024-49912drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'Linux
- CVE-2024-49911drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_funcLinux
- CVE-2024-49910drm/amd/display: Add NULL check for function pointer in dcn401_set_output_transfer_funcLinux
- CVE-2024-49909drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_funcLinux
- CVE-2024-49908drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)Linux
- CVE-2024-49907drm/amd/display: Check null pointers before using dc->clk_mgrLinux
- CVE-2024-49906drm/amd/display: Check null pointer before try to access itLinux
- CVE-2024-49905drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)Linux
- CVE-2024-49904drm/amdgpu: add list empty check to avoid null pointer issueLinux
- CVE-2024-49903jfs: Fix uaf in dbFreeBitsLinux
- CVE-2024-49901drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrsLinux
- CVE-2024-49900jfs: Fix uninit-value access of new_ea in ea_bufferLinux
- CVE-2024-49899drm/amd/display: Initialize denominators' default to 1Linux
- CVE-2024-49898drm/amd/display: Check null-initialized variablesLinux
- CVE-2024-49897drm/amd/display: Check phantom_stream before it is usedLinux
- CVE-2024-49896drm/amd/display: Check stream before comparing themLinux
- CVE-2024-49895drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translationLinux
- CVE-2024-49893drm/amd/display: Check stream_status before it is usedLinux
- CVE-2024-49892drm/amd/display: Initialize get_bytes_per_element's default to 1Linux
- CVE-2024-49891scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata pathsLinux
- CVE-2024-49890drm/amd/pm: ensure the fw_info is not null before using itLinux
- CVE-2024-49888bpf: Fix a sdiv overflow issueLinux
- CVE-2024-49887f2fs: fix to don't panic system for no free segment fault injectionLinux
- CVE-2024-49885mm, slub: avoid zeroing kmalloc redzoneLinux
- CVE-2024-49881ext4: update orig_path in ext4_find_extent()Linux
- CVE-2024-49880ext4: fix off by one issue in alloc_flex_gd()Linux
- CVE-2024-49879drm: omapdrm: Add missing check for alloc_ordered_workqueueLinux
- CVE-2024-49878resource: fix region_intersects() vs add_memory_driver_managed()Linux
- CVE-2024-49877ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodateLinux
- CVE-2024-49873mm/filemap: fix filemap_get_folios_contig THP panicLinux
- CVE-2024-49872mm/gup: fix memfd_pin_folios alloc race panicLinux
- CVE-2024-49871Input: adp5589-keys - fix NULL pointer dereferenceLinux
- CVE-2024-49870cachefiles: fix dentry leak in cachefiles_open_file()Linux
- CVE-2024-49869btrfs: send: fix buffer overflow detection when copying path to cache entryLinux
- CVE-2024-49868btrfs: fix a NULL pointer dereference when failed to start a new trasacntionLinux
- CVE-2024-49863vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()Linux
- CVE-2024-49367Nginx UI's log path can be controlled0xJacky nginx-ui
- CVE-2024-40746Extension - hikashop.com - Stored cross site scripting vulnerability in Hikashop component for Joomla < 5.1.1hikashop.com HikaShop component for Joomla
- CVE-2024-8305MongoDB Server secondaries may crash due to forced index constraintsMongoDB Server
- CVE-2024-49858efistub/tpm: Use ACPI reclaim memory for event log to avoid corruptionLinux
- CVE-2024-49856x86/sgx: Fix deadlock in SGX NUMA node searchLinux
- CVE-2024-49853firmware: arm_scmi: Fix double free in OPTEE transportLinux
- CVE-2024-49852scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()Linux
- CVE-2024-49851tpm: Clean up TPM space after command failureLinux
- CVE-2024-49850bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relosLinux
- CVE-2024-47757nilfs2: fix potential oob read in nilfs_btree_check_delete()Linux
- CVE-2024-47756PCI: keystone: Fix if-statement expression in ks_pcie_quirk()Linux
- CVE-2024-47754media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warningLinux
- CVE-2024-47753media: mediatek: vcodec: Fix VP8 stateless decoder smatch warningLinux
- CVE-2024-47752media: mediatek: vcodec: Fix H264 stateless decoder smatch warningLinux
- CVE-2024-47751PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()Linux
- CVE-2024-47746fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is setLinux
- CVE-2024-47744KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlockLinux
- CVE-2024-47743KEYS: prevent NULL pointer dereference in find_asymmetric_key()Linux
- CVE-2024-47738wifi: mac80211: don't use rate mask for offchannel TX eitherLinux
- CVE-2024-47737nfsd: call cache_put if xdr_reserve_space returns NULLLinux
- CVE-2024-47736erofs: handle overlapped pclusters out of crafted images properlyLinux
- CVE-2024-47735RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabledLinux
- CVE-2024-47734bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()Linux
- CVE-2024-47733netfs: Delete subtree of 'fs/netfs' when netfs module exitsLinux
- CVE-2024-47731drivers/perf: Fix ali_drw_pmu driver interrupt status clearingLinux
- CVE-2024-47729drm/xe: Use reserved copy engine for user binds on faulting devicesLinux
- CVE-2024-47728bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of errorLinux
- CVE-2024-47720drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_funcLinux
- CVE-2024-47719iommufd: Protect against overflow of ALIGN() during iova allocationLinux
- CVE-2024-47718wifi: rtw88: always wait for both firmware loading attemptsLinux
- CVE-2024-47717RISC-V: KVM: Don't zero-out PMU snapshot area before freeing dataLinux
- CVE-2024-47716ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macrosLinux
- CVE-2024-47715wifi: mt76: mt7915: fix oops on non-dbdc mt7986Linux
- CVE-2024-47713wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()Linux
- CVE-2024-47710sock_map: Add a cond_resched() in sock_hash_free()Linux
- CVE-2024-47709can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().Linux
- CVE-2024-47708netkit: Assign missing bpf_net_contextLinux
- CVE-2024-47707ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()Linux
- CVE-2024-47705block: fix potential invalid pointer dereference in blk_add_partitionLinux
- CVE-2024-47704drm/amd/display: Check link_res->hpo_dp_link_enc before using itLinux
- CVE-2024-47700ext4: check stripe size compatibility on remount as wellLinux
- CVE-2024-47699nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()Linux
- CVE-2024-47694IB/mlx5: Fix UMR pd cleanup on error flow of driver initLinux
- CVE-2024-47693IB/core: Fix ib_cache_setup_one error flow cleanupLinux
- CVE-2024-47692nfsd: return -EINVAL when namelen is 0Linux
- CVE-2024-47691f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()Linux
- CVE-2024-47689f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()Linux
- CVE-2024-47688driver core: Fix a potential null-ptr-deref in module_add_driver()Linux
- CVE-2024-47687vdpa/mlx5: Fix invalid mr resource destroyLinux
- CVE-2024-47686ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()Linux
- CVE-2024-47685netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()Linux
- CVE-2024-47684tcp: check skb is non-NULL in tcp_rto_delta_us()Linux
- CVE-2024-47683drm/amd/display: Skip Recompute DSC Params if no Stream on LinkLinux
- CVE-2024-47681wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_heLinux
- CVE-2024-47680f2fs: check discard support for conventional zonesLinux
- CVE-2024-47677exfat: resolve memory leak from exfat_create_upcase_table()Linux
- CVE-2024-49273WordPress ProfileGrid plugin <= 5.9.3 - Cross Site Request Forgery (CSRF) vulnerabilityMetagauss ProfileGrid
- CVE-2024-49293WordPress WP VR plugin <= 8.5.4 - Broken Access Control vulnerabilityRexTheme WP VR
- CVE-2024-49321WordPress Simple Custom Post Order plugin <= 2.5.7 - Broken Access Control vulnerabilitycolorlibplugins Simple Custom Post Order
- CVE-2024-43945WordPress LatePoint plugin <= 4.9.91 - Cross Site Request Forgery (CSRF) vulnerabilityLatePoint
- CVE-2024-10199code-projects Pharmacy Management System Manage Medicines Page manage_medicine.php cross site scriptingcode-projects Pharmacy Management System
- CVE-2024-10198code-projects Pharmacy Management System Manage Customer Page manage_customer.php cross site scriptingcode-projects Pharmacy Management System
- CVE-2024-10197code-projects Pharmacy Management System Manage Supplier Page manage_supplier.php cross site scriptingcode-projects Pharmacy Management System
- CVE-2024-10196code-projects Pharmacy Management System add_new_invoice.php sql injectioncode-projects Pharmacy Management System
- CVE-2024-30159A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrat
- CVE-2024-30160A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with
- CVE-2024-31007Buffer Overflow vulnerability in IrfanView 32bit v.4.66 allows a local attacker to cause a denial of service via a crafted file.
- CVE-2024-35287A vulnerability in the NuPoint Messenger (NPM) component of Mitel MiCollab through version 9.8 SP1 (9.8.1.5) could allow an authenticated at
- CVE-2024-35315A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.2
- CVE-2024-40088A Directory Traversal vulnerability in the Boa webserver of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, unauthenticated attackers to
- CVE-2024-40090Vilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Information Disclosure.
- CVE-2024-40091Vilo 5 Mesh WiFi System <= 5.16.1.33 lacks authentication in the Boa webserver, which allows remote, unauthenticated attackers to retrieve l
- CVE-2024-41712A vulnerability in the Web Conferencing Component of Mitel MiCollab through 9.8.1.5 could allow an authenticated attacker to conduct a comma
- CVE-2024-46236CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the address parameter in add_members.php and edi
- CVE-2024-46238Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/a
- CVE-2024-46239Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-p
- CVE-2024-46326Public Knowledge Project pkp-lib 3.4.0-7 and earlier is vulnerable to Open redirect due to a lack of input sanitization in the logout functi
- CVE-2024-47224A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an un
- CVE-2024-48709CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the membershipType parameter in edit_type.php