CVEs published December 28, 2024
50 CVEs were published on December 28, 2024: 0 critical, 20 high.
- Published
- 50
- Critical
- 0
- High
- 20
- Medium
- 12
- Low
- 6
- Unrated
- 12
- Now in CISA KEV
- 0
- Fix available
- 8
Most affected products
- Linux
- 32
- Huawei IPS Module · Huawei NGFW Module +7
- 5
- Imagination Technologies Graphics DDK
- 3
- Huawei HarmonyOS
- 2
- Huawei HarmonyOS AILife Solution
- 2
- Apache Software Foundation Apache NiFi · org.apache.nifi:ni…
- 1
- code-projects Online Car Rental System
- 1
- Huawei PT9030-15 · Huawei WS7206-10 +7
- 1
- Huawei TC7001-10 · Huawei WS7200-10 +1
- 1
- ruifang-tech Rebuild
- 1
High 20
- CVE-2024-56708EDAC/igen6: Avoid segmentation fault on module unloadLinux
- CVE-2024-56706s390/cpum_sf: Fix and protect memory allocation of SDBs with mutexLinux
- CVE-2024-567049p/xen: fix release of IRQLinux
- CVE-2024-56703ipv6: Fix soft lockups in fib6_select_path under high next hop churnLinux
- CVE-2024-56695drm/amdkfd: Use dynamic allocation for CU occupancy array in 'kfd_get_cu_occupancy()'Linux
- CVE-2024-56694bpf: fix recursive lock when verdict program return SK_PASSLinux
- CVE-2024-56693brd: defer automatic disk creation until module initialization succeedsLinux
- CVE-2024-56692f2fs: fix to do sanity check on node blkaddr in truncate_node()Linux
- CVE-2024-56688sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transportLinux
- CVE-2024-56684mailbox: mtk-cmdq: fix wrong use of sizeof in cmdq_get_clocks()Linux
- CVE-2024-56681crypto: bcm - add error check in the ahash_hmac_init functionLinux
- CVE-2024-56678powerpc/mm/fault: Fix kfence page fault reportingLinux
- CVE-2024-56677powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()Linux
- CVE-2023-7263Some Huawei home music system products have a path traversal vulnerability.Huawei HarmonyOS AILife Solution
- CVE-2023-7266Some Huawei home routers have a connection hijacking vulnerability.Huawei TC7001-10 · Huawei WS7200-10 +1
- CVE-2021-22484Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data.Huawei HarmonyOS
- CVE-2021-37000Some Huawei wearables have a permission management vulnerability.Huawei HarmonyOS
- CVE-2024-43705GPU DDK - Security: Exploitable PVRSRVBridgePhysmemWrapExtMem may lead to overwrite read-only file/memory (e.g. libc.so)Imagination Technologies Graphics DDK
- CVE-2024-46973Exploitable kernel use-after-free on psServerMMUContext due to reference count mismanagementImagination Technologies Graphics DDK
- CVE-2024-46972GPU DDK - Security: Reference count overflow in pvr_sync_rollback_export_fenceImagination Technologies Graphics DDK
Medium, low and unrated 30
- CVE-2024-12998code-projects Online Car Rental System GET Parameter index.php cross site scriptingcode-projects Online Car Rental System
- CVE-2024-56512Apache NiFi: Missing Complete Authorization for Parameter and Service ReferencesApache Software Foundation Apache NiFi · org.apache.nifi:ni…
- CVE-2024-12995ruifang-tech Rebuild Project Tasks Section tasks cross site scriptingruifang-tech Rebuild
- CVE-2024-12994running-elephant Datart File Upload import extractModel deserializationrunning-elephant Datart
- CVE-2024-56707octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.cLinux
- CVE-2024-56705media: atomisp: Add check for rgby_data memory allocation failureLinux
- CVE-2024-56702bpf: Mark raw_tp arguments with PTR_MAYBE_NULLLinux
- CVE-2024-56701powerpc/pseries: Fix dtl_access_lock to be a rw_semaphoreLinux
- CVE-2024-56700media: wl128x: Fix atomicity violation in fmc_send_cmd()Linux
- CVE-2024-56699s390/pci: Fix potential double remove of hotplug slotLinux
- CVE-2024-56698usb: dwc3: gadget: Fix looping of queued SG entriesLinux
- CVE-2024-56697drm/amdgpu: Fix the memory allocation issue in amdgpu_discovery_get_nps_info()Linux
- CVE-2024-56696ALSA: core: Fix possible NULL dereference caused by kunit_kzalloc()Linux
- CVE-2024-56691mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C deviceLinux
- CVE-2024-56690crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSYLinux
- CVE-2024-56689PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio'Linux
- CVE-2024-56687usb: musb: Fix hardware lockup on first Rx endpoint requestLinux
- CVE-2024-56685ASoC: mediatek: Check num_codecs is not zero to avoid panic during probeLinux
- CVE-2024-56683drm/vc4: hdmi: Avoid hang with debug registers when suspendedLinux
- CVE-2024-56682irqchip/riscv-aplic: Prevent crash when MSI domain is missingLinux
- CVE-2024-56680media: intel/ipu6: do not handle interrupts when device is disabledLinux
- CVE-2024-56679octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.cLinux
- CVE-2024-56676thermal: testing: Initialize some variables annoteded with _free()Linux
- CVE-2023-52718A connection hijacking vulnerability exists in some Huawei home routers.Huawei PT9030-15 · Huawei WS7206-10 +7
- CVE-2022-48470Huawei HiLink AI Life product has an identity authentication bypass vulnerability.Huawei HarmonyOS AILife Solution
- CVE-2020-1824There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei IPS Module · Huawei NGFW Module +7
- CVE-2020-1823There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei IPS Module · Huawei NGFW Module +7
- CVE-2020-1822There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei IPS Module · Huawei NGFW Module +7
- CVE-2020-1821There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei IPS Module · Huawei NGFW Module +7
- CVE-2020-1820There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei IPS Module · Huawei NGFW Module +7