Menu

Star on GitHub · 3.2k

2024

39,956 vulnerabilities published in 2024.

Results

14,319 of 39,956· Page 245/287
8.4
CVE-2024-27209

there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege

8.4
CVE-2024-27208

there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege

7.5
CVE-2024-27206

there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure w

8.4
CVE-2024-27205

there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no

8.4
CVE-2024-27204

In tmu_set_gov_active of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead t

8.4
CVE-2024-25993

In tmu_reset_tmu_trip_counter of , there is a possible out of bounds write due to a missing bounds check. This could lea

7.8
CVE-2024-25992

In tmu_tz_control of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to loc

8.4
CVE-2024-25988

In SAEMM_DiscloseGuti of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check

7.8
CVE-2024-25986

In ppmp_unprotect_buf of drm_fw.c, there is a possible compromise of protected memory due to a logic error in the code.

8.4
CVE-2024-25985

In bigo_unlocked_ioctl of bigo.c, there is a possible UAF due to a missing bounds check. This could lead to local escala

7.5
CVE-2024-22011

In ss_ProcessRejectComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a missing bounds che

7.1
CVE-2024-22009

In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escala

7.8
CVE-2024-22008

In config_gov_time_windows of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could l

8.4
CVE-2024-22005

there is a possible Authentication Bypass due to improperly used crypto. This could lead to local escalation of privileg

8.2
CVE-2024-26620

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: always filter entire AP matrix The v

7.8
CVE-2024-26619

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix module loading free order Reverse order

7.8
CVE-2024-26617

In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: move mmu notification mechanism i

7.8
CVE-2024-26616

In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: avoid use-after-free when chunk lengt

7.8
CVE-2024-26614

In the Linux kernel, the following vulnerability has been resolved: tcp: make sure init the accept_queue's spinlocks on

7.5
CVE-2024-26611

In the Linux kernel, the following vulnerability has been resolved: xsk: fix usage of multi-buffer BPF helpers for ZC X

7.8
CVE-2024-26610

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix a memory corruption iwl_fw_ini_

7.8
CVE-2024-26608

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix global oob in ksmbd_nl_policy Similar t

7.2
CVE-2024-1068

The 404 Solution WordPress plugin before 2.35.8 does not properly sanitise and escape a parameter before using it in a S

7.8
CVE-2023-52495

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmic_glink_altmode: fix port sanity chec

7.8
CVE-2023-52494

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring

7.8
CVE-2023-52491

In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: Fix use after free bug due to erro

7.8
CVE-2023-52486

In the Linux kernel, the following vulnerability has been resolved: drm: Don't unref the same fb many times by mistake

8.8
CVE-2024-23717

In access_secure_service_from_temp_bond of btm_sec.cc, there is a possible way to achieve keystroke injection due to imp

7.8
CVE-2024-1696

In Santesoft Sante FFT Imaging versions 1.4.1 and prior once a user opens a malicious DCM file on affected FFT Imaging i

7.8
CVE-2024-0051

In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lea

7.8
CVE-2024-0050

In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation ch

7.8
CVE-2024-0049

In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local e

7.8
CVE-2024-0048

In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to inco

7.8
CVE-2024-0046

In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a lo

7.8
CVE-2024-23612

An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requir

7.8
CVE-2024-23611

An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploita

7.8
CVE-2024-23610

An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploita

7.8
CVE-2024-23609

An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requir

7.8
CVE-2024-23608

An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploit

8.8
CVE-2024-0670

Privilege escalation in windows agent plugin in Checkmk before 2.2.0p23, 2.1.0p40 and 2.0.0 (EOL) allows local user to e

7.1
CVE-2024-28816

Student Information Chatbot a0196ab allows SQL injection via the username to the login function in index.php.

8.8
CVE-2024-2353

A vulnerability, which was classified as critical, has been found in Totolink X6000R 9.4.0cu.852_20230719. This issue af

7.5
CVE-2024-28757

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via

8.8
CVE-2024-25501

An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to t

8.0
CVE-2024-25951

A command injection vulnerability exists in local RACADM. A malicious authenticated user could gain control of the under

8.8
CVE-2023-46426

Heap-based Buffer Overflow vulnerability in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to ex

8.8
CVE-2023-50015

An issue was discovered in Grandstream GXP14XX 1.0.8.9 and GXP16XX 1.0.7.13, allows remote attackers to escalate privile

7.5
CVE-2023-49341

An issue was discovered in Newland Nquire 1000 Interactive Kiosk version NQ1000-II_G_V1.00.011, allows remote attackers

7.4
CVE-2024-28184

WeasyPrint helps web developers to create PDF documents. Since version 61.0, there's a vulnerability which allows attach

7.5
CVE-2024-28754

RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to cause a persistent denial of service (bricking) via

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.