CVEs published December 29, 2024
69 CVEs were published on December 29, 2024: 2 critical, 9 high.
- Published
- 69
- Critical
- 2
- High
- 9
- Medium
- 47
- Low
- 7
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- Linux
- 39
- PHPGurukul Maid Hiring Management System
- 7
- PHPGurukul Small CRM
- 3
- Antabot White-Jotter
- 2
- code-projects Chat System
- 2
- GNU GRUB2
- 2
- 1000 Projects Attendance Tracking Management System
- 1
- 1000 Projects Bookstore Management System
- 1
- 1000 Projects Human Resource Management System
- 1
- 1000 Projects Portfolio Management System MCA
- 1
Critical 2
High 9
- CVE-2024-56749dlm: fix dlm_recover_members refcount on errorLinux
- CVE-2024-56740nfs/localio: must clear res.replen in nfs_local_read_doneLinux
- CVE-2024-56721x86/CPU/AMD: Terminate the erratum_1386_microcode arrayLinux
- CVE-2024-56720bpf, sockmap: Several fixes to bpf_msg_pop_dataLinux
- CVE-2024-56717net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()Linux
- CVE-2024-56715ionic: Fix netdev notifier unregister on failureLinux
- CVE-2024-56709io_uring: check if iowq is killed before queuingLinux
- CVE-2018-25107The Crypt::Random::Source package before 0.13 for Perl has a fallback to the built-in rand() function, which is not a secure source of rando
- CVE-2024-56737GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.GNU GRUB2
Medium, low and unrated 58
- CVE-2024-13029Antabot White-Jotter Edit Book book server-side request forgeryAntabot White-Jotter
- CVE-2024-13028Antabot White-Jotter login observable response discrepancyAntabot White-Jotter
- CVE-2024-13025Codezips College Management System faculty.php sql injectionCodezips College Management System
- CVE-2024-13024Codezips Blood Bank Management System campaign.php sql injectionCodezips Blood Bank Management System
- CVE-2024-13023PHPGurukul Maid Hiring Management System Search Maid Page search-maid.php cross site scriptingPHPGurukul Maid Hiring Management System
- CVE-2024-13022taisan tarzan-cms Article Management UploadController.java UploadResponse unrestricted uploadtaisan tarzan-cms
- CVE-2024-13021SourceCodester Road Accident Map Marker add-mark.php cross site scriptingSourceCodester Road Accident Map Marker
- CVE-2024-13020code-projects Chat System chatroom.php sql injectioncode-projects Chat System
- CVE-2024-13019code-projects Chat System Chat Room Page update_room.php cross site scriptingcode-projects Chat System
- CVE-2024-13018PHPGurukul Maid Hiring Management System profile.php cross site scriptingPHPGurukul Maid Hiring Management System
- CVE-2024-13017PHPGurukul Maid Hiring Management System About Us Page aboutus.php cross site scriptingPHPGurukul Maid Hiring Management System
- CVE-2024-13016PHPGurukul Maid Hiring Management System edit-category.php sql injectionPHPGurukul Maid Hiring Management System
- CVE-2024-13015PHPGurukul Maid Hiring Management System search-booking-request.php cross site scriptingPHPGurukul Maid Hiring Management System
- CVE-2024-13014PHPGurukul Maid Hiring Management System search-maid.php sql injectionPHPGurukul Maid Hiring Management System
- CVE-2024-13013PHPGurukul Maid Hiring Management System Contact Us Page contactus.php cross site scriptingPHPGurukul Maid Hiring Management System
- CVE-2024-13012code-projects Hostel Management System registration.php cross site scriptingcode-projects Hostel Management System
- CVE-2024-56756nvme-pci: fix freeing of the HMB descriptor tableLinux
- CVE-2024-56755netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATINGLinux
- CVE-2024-56754crypto: caam - Fix the pointer passed to caam_qi_shutdown()Linux
- CVE-2024-56753drm/amdgpu/gfx9: Add Cleaner Shader Deinitialization in gfx_v9_0 ModuleLinux
- CVE-2024-56752drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()Linux
- CVE-2024-56751ipv6: release nexthop on device removalLinux
- CVE-2024-56750erofs: fix blksize < PAGE_SIZE for file-backed mountsLinux
- CVE-2024-56748scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()Linux
- CVE-2024-56747scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()Linux
- CVE-2024-56746fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()Linux
- CVE-2024-56745PCI: Fix reset_method_store() memory leakLinux
- CVE-2024-56744f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()Linux
- CVE-2024-56743nfs_common: must not hold RCU while calling nfsd_file_put_localLinux
- CVE-2024-56742vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()Linux
- CVE-2024-56739rtc: check if __rtc_read_time was successful in rtc_timer_do_work()Linux
- CVE-2024-56730net/9p/usbg: fix handling of the failed kzalloc() memory allocationLinux
- CVE-2024-56729smb: Initialize cfid->tcon before performing network opsLinux
- CVE-2024-56728octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.cLinux
- CVE-2024-56727octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.cLinux
- CVE-2024-56726octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.cLinux
- CVE-2024-56725octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.cLinux
- CVE-2024-56724mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU deviceLinux
- CVE-2024-56723mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devicesLinux
- CVE-2024-56722RDMA/hns: Fix cpu stuck caused by printings during resetLinux
- CVE-2024-13008code-projects Responsive Hotel Site newsletter.php sql injectioncode-projects Responsive Hotel Site
- CVE-2024-56716netdevsim: prevent bad user input in nsim_dev_health_break_write()Linux
- CVE-2024-56714ionic: no double destroy workqueueLinux
- CVE-2024-56713net: netdevsim: fix nsim_pp_hold_write()Linux
- CVE-2024-56712udmabuf: fix memory leak on last export_udmabuf() error pathLinux
- CVE-2024-56711drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereferenceLinux
- CVE-2024-56710ceph: fix memory leak in ceph_direct_read_write()Linux
- CVE-2024-13007Codezips Event Management System contact.php sql injectionCodezips Event Management System
- CVE-2024-130061000 Projects Human Resource Management System employeeview.php sql injection1000 Projects Human Resource Management System
- CVE-2024-130051000 Projects Attendance Tracking Management System attendance_action.php sql injection1000 Projects Attendance Tracking Management System
- CVE-2024-13004PHPGurukul Complaint Management System category.php sql injectionPHPGurukul Complaint Management System
- CVE-2024-12238Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.22 - Authenticated (Subscriber+) Arbitrary Shortcode Executionkstover Ninja Forms – The Contact Form Builder That Grows W…
- CVE-2024-130031000 Projects Portfolio Management System MCA update_ed.php sql injection1000 Projects Portfolio Management System MCA
- CVE-2024-130021000 Projects Bookstore Management System order_process.php sql injection1000 Projects Bookstore Management System
- CVE-2024-13001PHPGurukul Small CRM index.php sql injectionPHPGurukul Small CRM
- CVE-2024-13000PHPGurukul Small CRM quote-details.php sql injectionPHPGurukul Small CRM
- CVE-2024-12999PHPGurukul Small CRM edit-user.php sql injectionPHPGurukul Small CRM
- CVE-2024-56738GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.GNU GRUB2