CVEs published December 27, 2024
283 CVEs were published on December 27, 2024: 17 critical, 111 high. 3 are now in CISA KEV.
- Published
- 283
- Critical
- 17
- High
- 111
- Medium
- 94
- Low
- 8
- Unrated
- 53
- Now in CISA KEV
- 3
- Fix available
- 78
Most affected products
- Linux
- 221
- tecnick tcpdf · tecnickcom/tcpdf
- 4
- code-projects Job Recruitment
- 3
- dcat/laravel-admin
- 2
- DrayTek Vigor2960 · DrayTek Vigor300B
- 2
- HUAWEI 4G Router B612
- 2
- Huawei FusionCompute
- 2
- Huawei IPS Module · Huawei NGFW Module +7
- 2
- HUAWEI Mate
- 2
- Kovah LinkAce
- 2
Critical 17
- CVE-2024-56732HarfBuzz heap-buffer-overflow on hb_cairo_glyphs_from_bufferharfbuzz
- CVE-2024-56656bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chipsLinux
- CVE-2024-56645can: j1939: j1939_session_new(): fix skb reference countingLinux
- CVE-2024-56640net/smc: fix LGR and link use-after-free issueLinux
- CVE-2024-53209bnxt_en: Fix receive ring space parameters when XDP is activeLinux
- CVE-2024-53206tcp: Fix use-after-free of nreq in reqsk_timer_handler().Linux
- CVE-2024-53186ksmbd: fix use-after-free in SMB request handlingLinux
- CVE-2024-53179smb: client: fix use-after-free of signing keyLinux
- CVE-2024-53177smb: prevent use-after-free due to open_cached_dir error pathsLinux
- CVE-2024-53176smb: During unmount, ensure all cached dir instances drop their dentryLinux
- CVE-2024-53169nvme-fabrics: fix kernel crash while shutting down controllerLinux
- CVE-2024-50713SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php.
- CVE-2024-50716SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the id parameter in the /sendPushM
- CVE-2024-50717SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the client parameter in the /recup
- CVE-2024-50944Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functionality
- CVE-2024-54450An issue was discovered in Kurmi Provisioning Suite 7.9.0.33.
- CVE-2024-56521An issue was discovered in TCPDF before 6.8.0.tecnick tcpdf · tecnickcom/tcpdf
High 111
- CVE-2024-12856Four-Faith Industrial Router adjust_sys_time OS Command InjectionFour-Faith F3x24 · Four-Faith F3x36
- CVE-2024-56509changedetection.io has Improper Input Validation Leading to LFR/Path Traversaldgtlmoon changedetection.io · changedetection-io
- CVE-2024-56508File Upload Vulnerability Leading to XSS in LinkAce v1.15.5Kovah LinkAce
- CVE-2024-56675bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavorsLinux
- CVE-2024-56672blk-cgroup: Fix UAF in blkcg_unpin_online()Linux
- CVE-2024-56669iommu/vt-d: Remove cache tags before disabling ATSLinux
- CVE-2024-56664bpf, sockmap: Fix race between element replace and close()Linux
- CVE-2024-56663wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-oneLinux
- CVE-2024-56662acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctlLinux
- CVE-2024-56658net: defer final 'struct net' free in netns dismantleLinux
- CVE-2024-56655netfilter: nf_tables: do not defer rule destruction via call_rcuLinux
- CVE-2024-56654Bluetooth: hci_event: Fix using rcu_read_(un)lock while iteratingLinux
- CVE-2024-56653Bluetooth: btmtk: avoid UAF in btmtk_process_coredumpLinux
- CVE-2024-56652drm/xe/reg_sr: Remove register poolLinux
- CVE-2024-56651can: hi311x: hi3110_can_ist(): fix potential use-after-freeLinux
- CVE-2024-56650netfilter: x_tables: fix LED ID check in led_tg_check()Linux
- CVE-2024-56644net/ipv6: release expired exception dst cached in socketLinux
- CVE-2024-56642tipc: Fix use-after-free of kernel socket in cleanup_bearer().Linux
- CVE-2024-56641net/smc: initialize close_work early to avoid warningLinux
- CVE-2024-56637netfilter: ipset: Hold module reference while requesting a moduleLinux
- CVE-2024-56635net: avoid potential UAF in default_operstate()Linux
- CVE-2024-56632nvme-tcp: fix the memleak while create new ctrl failedLinux
- CVE-2024-56631scsi: sg: Fix slab-use-after-free read in sg_release()Linux
- CVE-2024-56628LoongArch: Add architecture specific huge_pte_clear()Linux
- CVE-2024-56627ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_readLinux
- CVE-2024-56626ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_writeLinux
- CVE-2024-56624iommufd: Fix out_fput in iommufd_fault_alloc()Linux
- CVE-2024-56623scsi: qla2xxx: Fix use after free on unloadLinux
- CVE-2024-56619nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()Linux
- CVE-2024-56615bpf: fix OOB devmap writes when deleting elementsLinux
- CVE-2024-56614xsk: fix OOB map writes when deleting elementsLinux
- CVE-2024-56608drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'Linux
- CVE-2024-56606af_packet: avoid erroring out after sock_init_data() in packet_create()Linux
- CVE-2024-56605Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()Linux
- CVE-2024-56604Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()Linux
- CVE-2024-56603net: af_can: do not leave a dangling sk pointer in can_create()Linux
- CVE-2024-56602net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()Linux
- CVE-2024-56601net: inet: do not leave a dangling sk pointer in inet_create()Linux
- CVE-2024-56600net: inet6: do not leave a dangling sk pointer in inet6_create()Linux
- CVE-2024-56598jfs: array-index-out-of-bounds fix in dtReadFirstLinux
- CVE-2024-56597jfs: fix shift-out-of-bounds in dbSplitLinux
- CVE-2024-56596jfs: fix array-index-out-of-bounds in jfs_readdirLinux
- CVE-2024-56595jfs: add a check to prevent array-index-out-of-bounds in dbAdjTreeLinux
- CVE-2024-56591Bluetooth: hci_conn: Use disable_delayed_work_syncLinux
- CVE-2024-56590Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packetLinux
- CVE-2024-56582btrfs: fix use-after-free in btrfs_encoded_read_endio()Linux
- CVE-2024-56581btrfs: ref-verify: fix use-after-free after invalid ref actionLinux
- CVE-2024-56576media: i2c: tc358743: Fix crash in the probe error path when using pollingLinux
- CVE-2024-56573efi/libstub: Free correct pointer on failureLinux
- CVE-2024-56563ceph: fix cred leak in ceph_mds_check_access()Linux
- CVE-2024-56561PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy()Linux
- CVE-2024-56558nfsd: make sure exp active before svc_export_showLinux
- CVE-2024-56557iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xferLinux
- CVE-2024-56556binder: fix node UAF in binder_add_freeze_work()Linux
- CVE-2024-56555binder: fix OOB in binder_add_freeze_work()Linux
- CVE-2024-56554binder: fix freeze UAF in binder_release_work()Linux
- CVE-2024-56552drm/xe/guc_submit: fix race around suspend_pendingLinux
- CVE-2024-56551drm/amdgpu: fix usage slab after freeLinux
- CVE-2024-56549cachefiles: Fix NULL pointer dereference in object->fileLinux
- CVE-2024-56548hfsplus: don't query the device logical block size multiple timesLinux
- CVE-2024-56541wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup()Linux
- CVE-2024-56540accel/ivpu: Prevent recovery invocation during probe and resumeLinux
- CVE-2024-56538drm: zynqmp_kms: Unplug DRM device before removalLinux
- CVE-2024-56531ALSA: caiaq: Use snd_card_free_when_closed() at disconnectionLinux
- CVE-2024-53239ALSA: 6fire: Release resources at card releaseLinux
- CVE-2024-53237Bluetooth: fix use-after-free in device_for_each_child()Linux
- CVE-2024-53232iommu/s390: Implement blocking domainLinux
- CVE-2024-53228riscv: kvm: Fix out-of-bounds array accessLinux
- CVE-2024-53227scsi: bfa: Fix use-after-free in bfad_im_module_exit()Linux
- CVE-2024-53226RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()Linux
- CVE-2024-53224RDMA/mlx5: Move events notifier registration to be after device registrationLinux
- CVE-2024-53220f2fs: fix to account dirty data in __get_secs_required()Linux
- CVE-2024-53218f2fs: fix race in concurrent f2fs_stop_gc_threadLinux
- CVE-2024-53217NFSD: Prevent NULL dereference in nfsd4_process_cb_update()Linux
- CVE-2024-53216nfsd: release svc_expkey/svc_export with rcu_workLinux
- CVE-2024-53214vfio/pci: Properly hide first-in-list PCIe extended capabilityLinux
- CVE-2024-53213net: usb: lan78xx: Fix double free issue with interrupt buffer allocationLinux
- CVE-2024-53208Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_syncLinux
- CVE-2024-53207Bluetooth: MGMT: Fix possible deadlocksLinux
- CVE-2024-53198xen: Fix the issue of resource not being properly released in xenbus_dev_probe()Linux
- CVE-2024-53197ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesLinux
- CVE-2024-53194PCI: Fix use-after-free of slot->bus on hot removeLinux
- CVE-2024-53193clk: clk-loongson2: Fix memory corruption bug in struct loongson2_clk_providerLinux
- CVE-2024-53192clk: clk-loongson2: Fix potential buffer overflow in flexible-array member accessLinux
- CVE-2024-53191wifi: ath12k: fix warning when unbindingLinux
- CVE-2024-53188wifi: ath12k: fix crash when unbindingLinux
- CVE-2024-53185smb: client: fix NULL ptr deref in crypto_aead_setkey()Linux
- CVE-2024-53182Revert "block, bfq: merge bfq_release_process_ref() into bfq_put_cooperator()"Linux
- CVE-2024-53178smb: Don't leak cfid when reconnect races with open_cached_dirLinux
- CVE-2024-53174SUNRPC: make sure cache entry active before cache_showLinux
- CVE-2024-53173NFSv4.0: Fix a use-after-free problem in the asynchronous open()Linux
- CVE-2024-53171ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commitLinux
- CVE-2024-53170block: fix uaf for flush rq while iterating tagsLinux
- CVE-2024-53168sunrpc: fix one UAF issue caused by sunrpc kernel tcp socketLinux
- CVE-2024-53167nfs/blocklayout: Don't attempt unregister for invalid block deviceLinux
- CVE-2024-53166block, bfq: fix bfqq uaf in bfq_limit_depth()Linux
- CVE-2024-53165sh: intc: Fix use-after-free bug in register_intc_controller()Linux
- CVE-2024-53164net: sched: fix ordering of qlen adjustmentLinux
- CVE-2020-9236There is an improper interface design vulnerability in Huawei product.Huawei FusionCompute
- CVE-2020-9222There is a privilege escalation vulnerability in Huawei FusionCompute product.Huawei FusionCompute
- CVE-2024-3393PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted PacketPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS
- CVE-2020-9080There is an improper privilege management vulnerability in Huawei smart phone product.HUAWEI Mate 20 Pro · HUAWEI nova
- CVE-2024-39025Incorrect access control in the /users endpoint of Cpacker MemGPT v0.3.17 allows attackers to access sensitive data.letta
- CVE-2024-50714A Server-Side Request Forgery (SSRF) in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via a cr
- CVE-2024-50715An issue in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via command injection through a vuln
- CVE-2024-50945An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submi
- CVE-2024-54453An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15.
- CVE-2024-56519An issue was discovered in TCPDF before 6.8.0.tecnick tcpdf · tecnickcom/tcpdf
- CVE-2024-56520An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products.tecnick tcpdf · tecnickcom/tc-lib-pdf-font
- CVE-2024-56522An issue was discovered in TCPDF before 6.8.0.tecnick tcpdf · tecnickcom/tcpdf
- CVE-2024-56527An issue was discovered in TCPDF before 6.8.0.tecnick tcpdf · tecnickcom/tcpdf
Medium, low and unrated 155
- CVE-2024-12991Beijing Longda Jushang Technology DBShop商城系统 home-order cross site scriptingBeijing Longda Jushang Technology DBShop商城系统
- CVE-2024-12990ruifang-tech Rebuild Admin Verification Page admin-verify redirectruifang-tech Rebuild
- CVE-2024-12989WISI Tangram GT31 HTTP Request server-side request forgeryWISI Tangram GT31
- CVE-2024-12988Netgear R6900P/R7000P HTTP Header sub_16C4C buffer overflowNetgear R6900P · Netgear R7000P
- CVE-2024-12987DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injectionDrayTek Vigor2960 · DrayTek Vigor300B
- CVE-2024-56507Reflected Cross-Site Scripting (XSS) Vulnerability in LinkAceKovah LinkAce
- CVE-2024-12986DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injectionDrayTek Vigor2960 · DrayTek Vigor300B
- CVE-2024-56674virtio_net: correct netdev_tx_reset_queue() invocation pointLinux
- CVE-2024-56673riscv: mm: Do not call pmd dtor on vmemmap page table teardownLinux
- CVE-2024-56671gpio: graniterapids: Fix vGPIO driver crashLinux
- CVE-2024-56670usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointerLinux
- CVE-2024-56668iommu/vt-d: Fix qi_batch NULL pointer with nested parent domainLinux
- CVE-2024-56667drm/i915: Fix NULL pointer dereference in capture_engineLinux
- CVE-2024-56666drm/amdkfd: Dereference null return valueLinux
- CVE-2024-56665bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_progLinux
- CVE-2024-56661tipc: fix NULL deref in cleanup_bearer()Linux
- CVE-2024-56660net/mlx5: DR, prevent potential error pointer dereferenceLinux
- CVE-2024-56659net: lapb: increase LAPB_HEADER_LENLinux
- CVE-2024-56657ALSA: control: Avoid WARN() for symlink errorsLinux
- CVE-2024-56649net: enetc: Do not configure preemptible TCs if SIs do not supportLinux
- CVE-2024-56648net: hsr: avoid potential out-of-bound access in fill_frame_info()Linux
- CVE-2024-56647net: Fix icmp host relookup triggering ip_rt_bugLinux
- CVE-2024-56646ipv6: avoid possible NULL deref in modify_prefix_route()Linux
- CVE-2024-56643dccp: Fix memory leak in dccp_feat_change_recvLinux
- CVE-2024-56639net: hsr: must allocate more bytes for RedBox supportLinux
- CVE-2024-56638netfilter: nft_inner: incorrect percpu area handling under softirqLinux
- CVE-2024-56636geneve: do not assume mac header is set in geneve_xmit_skb()Linux
- CVE-2024-56634gpio: grgpio: Add NULL check in grgpio_probeLinux
- CVE-2024-56633tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsgLinux
- CVE-2024-12985Overtek OT-E801G passwd os command injectionOvertek OT-E801G
- CVE-2024-56630ocfs2: free inode when ocfs2_get_init_inode() failsLinux
- CVE-2024-56629HID: wacom: fix when get product name maybe null pointerLinux
- CVE-2024-56625can: dev: can_set_termination(): allow sleeping GPIOsLinux
- CVE-2024-56622scsi: ufs: core: sysfs: Prevent div by zeroLinux
- CVE-2024-56621scsi: ufs: core: Cancel RTC work during ufshcd_remove()Linux
- CVE-2024-56620scsi: ufs: qcom: Only free platform MSIs when ESI is enabledLinux
- CVE-2024-56618pmdomain: imx: gpcv2: Adjust delay after power up handshakeLinux
- CVE-2024-56617cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPULinux
- CVE-2024-56616drm/dp_mst: Fix MST sideband message body length checkLinux
- CVE-2024-56613sched/numa: fix memory leak due to the overwritten vma->numab_stateLinux
- CVE-2024-56612mm/gup: handle NULL pages in unpin_user_pages()Linux
- CVE-2024-56611mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MMLinux
- CVE-2024-56610kcsan: Turn report_filterlist_lock into a raw_spinlockLinux
- CVE-2024-56609wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skbLinux
- CVE-2024-56607wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()Linux
- CVE-2024-56599wifi: ath10k: avoid NULL pointer error during sdio removeLinux
- CVE-2024-56594drm/amdgpu: set the right AMDGPU sg segment limitationLinux
- CVE-2024-56593wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()Linux
- CVE-2024-56592bpf: Call free_htab_elem() after htab_unlock_bucket()Linux
- CVE-2024-56589scsi: hisi_sas: Add cond_resched() for no forced preemption modelLinux
- CVE-2024-56588scsi: hisi_sas: Create all dump files during debugfs initializationLinux
- CVE-2024-56587leds: class: Protect brightness_show() with led_cdev->led_access mutexLinux
- CVE-2024-56586f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.Linux
- CVE-2024-56585LoongArch: Fix sleeping in atomic context for PREEMPT_RTLinux
- CVE-2024-56584io_uring/tctx: work around xa_store() allocation error issueLinux
- CVE-2024-56583sched/deadline: Fix warning in migrate_enable for boosted tasksLinux
- CVE-2024-12984Amcrest IP2M-841B Web Interface webCapsConfig information disclosureAmcrest IP2M-841B · Amcrest IP2M-841W +5
- CVE-2024-56580media: qcom: camss: fix error path on configuration of power domainsLinux
- CVE-2024-56579media: amphion: Set video drvdata before register video deviceLinux
- CVE-2024-56578media: imx-jpeg: Set video drvdata before register video deviceLinux
- CVE-2024-56577media: mtk-jpeg: Fix null-ptr-deref during unload moduleLinux
- CVE-2024-56575media: imx-jpeg: Ensure power suppliers be suspended before detach themLinux
- CVE-2024-56574media: ts2020: fix null-ptr-deref in ts2020_probe()Linux
- CVE-2024-56572media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()Linux
- CVE-2024-56570ovl: Filter invalid inodes with missing lookup functionLinux
- CVE-2024-56569ftrace: Fix regression with module command in stack_trace_filterLinux
- CVE-2024-56568iommu/arm-smmu: Defer probe of clients after smmu device boundLinux
- CVE-2024-56567ad7780: fix division by zero in ad7780_write_raw()Linux
- CVE-2024-56566mm/slub: Avoid list corruption when removing a slab from the full listLinux
- CVE-2024-56565f2fs: fix to drop all discards after creating snapshot on lvm deviceLinux
- CVE-2024-56564ceph: pass cred pointer to ceph_mds_auth_match()Linux
- CVE-2024-56562i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()Linux
- CVE-2024-56560slab: Fix too strict alignment check in create_cache()Linux
- CVE-2024-56559mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operationLinux
- CVE-2024-56553binder: fix memleak of proc->delivered_freezeLinux
- CVE-2024-56550s390/stacktrace: Use break instead of return statementLinux
- CVE-2024-56547rcu/nocb: Fix missed RCU barrier on deoffloadingLinux
- CVE-2024-56546drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()Linux
- CVE-2024-56545HID: hyperv: streamline driver probe to avoid devres issuesLinux
- CVE-2024-56544udmabuf: change folios array from kmalloc to kvmallocLinux
- CVE-2024-56543wifi: ath12k: Skip Rx TID cleanup for self peerLinux
- CVE-2024-56542drm/amd/display: fix a memleak issue when driver is removedLinux
- CVE-2024-56539wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()Linux
- CVE-2024-56537drm: xlnx: zynqmp_disp: layer may be null while releasingLinux
- CVE-2024-56536wifi: cw1200: Fix potential NULL dereferenceLinux
- CVE-2024-56535wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg()Linux
- CVE-2024-56534isofs: avoid memory leak in iocharsetLinux
- CVE-2024-56533ALSA: usx2y: Use snd_card_free_when_closed() at disconnectionLinux
- CVE-2024-56532ALSA: us122l: Use snd_card_free_when_closed() at disconnectionLinux
- CVE-2024-53238Bluetooth: btmtk: adjust the position to init iso data anchorLinux
- CVE-2024-53236xsk: Free skb when TX metadata options are invalidLinux
- CVE-2024-53235erofs: fix file-backed mounts over FUSELinux
- CVE-2024-53234erofs: handle NONHEAD !delta[1] lclusters gracefullyLinux
- CVE-2024-53233unicode: Fix utf8_load() error pathLinux
- CVE-2024-53231cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()Linux
- CVE-2024-53230cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()Linux
- CVE-2024-53229RDMA/rxe: Fix the qp flush warnings in reqLinux
- CVE-2024-53225iommu/tegra241-cmdqv: Fix alignment failure at max_n_shiftLinux
- CVE-2024-53223clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCsLinux
- CVE-2024-53222zram: fix NULL pointer in comp_algorithm_show()Linux
- CVE-2024-53221f2fs: fix null-ptr-deref in f2fs_submit_page_bio()Linux
- CVE-2024-53219virtiofs: use pages instead of pointer for kernel direct IOLinux
- CVE-2024-53215svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()Linux
- CVE-2024-53212netlink: fix false positive warning in extack during dumpsLinux
- CVE-2024-53211net/l2tp: fix warning in l2tp_exit_net found by syzbotLinux
- CVE-2024-53210s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()Linux
- CVE-2024-53205phy: realtek: usb: fix NULL deref in rtk_usb2phy_probeLinux
- CVE-2024-53204phy: realtek: usb: fix NULL deref in rtk_usb3phy_probeLinux
- CVE-2024-53203usb: typec: fix potential array underflow in ucsi_ccg_sync_control()Linux
- CVE-2024-53202firmware_loader: Fix possible resource leak in fw_log_firmware_info()Linux
- CVE-2024-53201drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipeLinux
- CVE-2024-53200drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dppLinux
- CVE-2024-53199ASoC: imx-audmix: Add NULL check in imx_audmix_probeLinux
- CVE-2024-53196KVM: arm64: Don't retire aborted MMIO instructionLinux
- CVE-2024-53195KVM: arm64: Get rid of userspace_irqchip_in_useLinux
- CVE-2024-53190wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failuresLinux
- CVE-2024-53189wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scanLinux
- CVE-2024-53187io_uring: check for overflows in io_pin_pagesLinux
- CVE-2024-53184um: ubd: Do not use drvdata in releaseLinux
- CVE-2024-53183um: net: Do not use drvdata in releaseLinux
- CVE-2024-53181um: vector: Do not use drvdata in releaseLinux
- CVE-2024-53180ALSA: pcm: Add sanity NULL check for the default mmap fault handlerLinux
- CVE-2024-53175ipc: fix memleak if msg_init_ns failed in create_ipc_nsLinux
- CVE-2024-53172ubi: fastmap: Fix duplicate slab cache names while attachingLinux
- CVE-2022-49034sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACKLinux
- CVE-2020-1819There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei IPS Module · Huawei NGFW Module +7
- CVE-2020-1818There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei IPS Module · Huawei NGFW Module +7
- CVE-2020-9253There is a stack overflow vulnerability in some Huawei smart phone.Huawei Lion-AL00C
- CVE-2020-9211There is an out-of-bound read and write vulnerability in Huawei smartphone.HUAWEI Mate
- CVE-2020-9210There is an insufficient integrity vulnerability in Huawei products.Huawei Myna
- CVE-2020-9089There is an information vulnerability in Huawei smartphones.HUAWEI P30 Pro
- CVE-2020-9086There is a buffer error vulnerability in some Huawei product.HUAWEI 4G Router B612
- CVE-2020-9085There is a NULL pointer dereference vulnerability in some Huawei products.HUAWEI 4G Router B612
- CVE-2020-9082There is an information disclosure vulnerability in several smartphones.HUAWEI Mate
- CVE-2020-9081There is an improper authorization vulnerability in some Huawei smartphones.HUAWEI Mate · HUAWEI P30 +4
- CVE-2024-12983code-projects Hospital Management System Edit Doctor Details Page manage-doctors.php cross site scriptingcode-projects Hospital Management System
- CVE-2024-12982PHPGurukul Blood Bank & Donor Management System update-contactinfo.php cross site scriptingPHPGurukul Blood Bank & Donor Management System
- CVE-2024-11921Give < 3.19.0 - Reflected XSSGiveWP
- CVE-2024-11842DN Shipping by Weight for WooCommerce < 1.2 - Settings Update via CSRFDN Shipping by Weight for WooCommerce
- CVE-2024-11645Float Block <= 1.7 - Admin+ Stored XSS via Widgetfloat block
- CVE-2024-11644WP-SVG <= 0.9 - Contributor+ Stored XSS via ShortcodeWP-SVG
- CVE-2024-11605WP Publications <= 1.2 - Admin+ Stored XSSwp-publications
- CVE-2024-12981CodeAstro Car Rental System bookingconfirm.php sql injectionCodeAstro Car Rental System
- CVE-2024-12980code-projects Job Recruitment _all_edits.php fln_update cross site scriptingcode-projects Job Recruitment
- CVE-2024-12979code-projects Job Recruitment _all_edits.php cn_update cross site scriptingcode-projects Job Recruitment
- CVE-2024-12978code-projects Job Recruitment _all_edits.php add_req sql injectioncode-projects Job Recruitment
- CVE-2024-9774Python-sql: python-sql unary operators does not escape non-expressionpython-sql
- CVE-2024-12977PHPGurukul Complaint Management System state.php sql injectionPHPGurukul Complaint Management System
- CVE-2024-12976CodeZips Hospital Management System staff.php sql injectionCodeZips Hospital Management System
- CVE-2024-53476A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory rest
- CVE-2024-54451A cross-site scripting (XSS) vulnerability in the graphicCustomization.do page in Kurmi Provisioning Suite before 7.9.0.38, 7.10.x through 7
- CVE-2024-54452An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35 and 7.10.x through 7.10.0.18.
- CVE-2024-54454An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15.
- CVE-2024-54774Dcat Admin v2.2.0-beta contains a cross-site scripting (XSS) vulnerability in /admin/articles/create.dcat/laravel-admin
- CVE-2024-54775Dcat-Admin v2.2.0-beta and v2.2.2-beta contains a Cross-Site Scripting (XSS) vulnerability via /admin/auth/menu and /admin/auth/extensions.dcat/laravel-admin