CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- linux, linux kernel +1 moreperf: Fix list corruption in perf_cgroup_switch()5.5 Medium
- linux, linux kernel +1 mores390/cio: verify the driver availability for path_event call5.5 Medium
- linux, linux kernel +1 moremm: don't try to NUMA-migrate COW pages that have other uses7.1 High
- linux, linux kernel +1 moreiommu: Fix potential use-after-free during probe7.8 High
- linux, linux kernel +1 moreparisc: Fix data TLB miss in sba_unmap_sg5.5 Medium
- linux, linux kernel +1 morenet: ieee802154: at86rf230: Stop leaking skb's5.5 Medium
- linux, linux kernel +1 moreKVM: x86: nSVM: fix potential NULL derefernce on nested migration5.5 Medium
- linux, linux kernel +1 morescsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task7.8 High
- linux, linux kernel +1 morescsi: pm8001: Fix use-after-free for aborted TMF sas_task7.8 High
- linux, linux kernel +1 morenvme: fix a possible use-after-free in controller reset during load9.8 Critical
- linux, linux kernel +1 morenvme-tcp: fix possible use-after-free in transport error_recovery work9.8 Critical
- linux, linux kernel +1 morenvme-rdma: fix possible use-after-free in transport error_recovery work9.8 Critical
- linux, linux kernel +1 moreiwlwifi: fix use-after-free7.8 High
- linux, linux kernel +1 morevsock: remove vsock from connected table when connect is interrupted by a signal7.8 High
- linux, linux kernel +1 morenet/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change7.1 High
- linux, linux kernel +1 morepowerpc/fixmap: Fix VM debug warning on unmap5.5 Medium
- linux, linux kernel +1 morescsi: ufs: Fix a deadlock in the error handler5.5 Medium
- linux, linux kernel +1 moreipv6: mcast: use rcu-safe version of ipv6_get_lladdr()8.8 High
- linux, linux kernel +1 morecfg80211: fix race in netlink owner interface destruction4.7 Medium
- linux, linux kernel +1 morenet: dsa: lantiq_gswip: fix use after free in gswip_remove()7.8 High
- linux, linux kernel +1 moremctp: fix use after free8.8 High
- linux, linux kernel +1 morecrypto: af_alg - get rid of alg_memory_allocated5.5 Medium
- linux, linux kernel +1 morenet/smc: Avoid overwriting the copies of clcsock callback functions5.5 Medium
- linux, linux kernel +1 morenet: mscc: ocelot: fix use-after-free in ocelot_vlan_del()7.8 High
- linux, linux kernel +1 moremtd: rawnand: gpmi: don't leak PM reference in error path7.8 High
- linux, linux kernel +1 moremtd: parsers: qcom: Fix kernel panic on skipped partition5.5 Medium
- linux, linux kernel +1 moremtd: parsers: qcom: Fix missing free for pparts in cleanup5.5 Medium
- linux, linux kernel +1 moreDrivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj5.5 Medium
- linux, linux kernel +1 moredmaengine: ptdma: Fix the error handling path in pt_core_init()5.5 Medium
- linux, linux kernel +1 morexprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create5.5 Medium
- rebelcode rss aggregator – rss import, news feeds, feed to post, and autoblogging, rss aggregator +1 moreWP RSS Aggregator <= 4.23.11 - Missing Authorization to Authenticated (Subscriber+) Feed State Update4.3 Medium
- pluginus husky - products filter professional for woocommerce, realmag777 husky – products filter professional for woocommerce +1 moreHUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection9.8 Critical
- linux, linux kernel +1 moreUSB: core: Fix race by not overwriting udev->descriptor in hub_port_init()6.4 Medium
- genetech products web and woocommerce addons for wpbakery builderWeb and WooCommerce Addons for WPBakery Builder <= 1.4.5 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification4.3 Medium
- apache supersetApache Superset: Improper SQL authorisation, parse not checking for specific engine functions4.3 Medium
- brizy, themefusecom brizy – page builder +1 moreBrizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification7.1 High
- vividcolorsjp aforms, aforms — form builder for price calculator & cost estimation +1 moreAForms <= 2.2.6 - Unauthenticated Full Path Disclosure5.3 Medium
- averta premium portfolio features for phlox theme, auxinportfolio +1 morePremium Portfolio Features for Phlox theme <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ' Grid Portfolios'6.4 Medium
- codeat glossaryGlossary <= 2.2.26 - Unauthenticated Full Path Disclosure5.3 Medium
- iptanus wordpress file upload, nickboss iptanus file upload +1 moreWordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal4.3 Medium
- wp-eventmanager wp event manager, wpeventmanager wp event manager – events calendar, registrations, sell tickets with woocommerce +1 moreWP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events' Shortcode6.4 Medium
- eset security, endpoint antivirus, endpoint security +24 more +26 moreDenial of Service in ESET products for Windows6.1 Medium
- linux, linux kernel +1 moredrm/amdgpu: change vm->task_info handling7.8 High
- apache streampark, apache software foundation streampark (incubating) +1 moreApache StreamPark (incubating): Unchecked SQL query fields trigger SQL injection vulnerability8.1 High
- nodejs node, nodejs +1 moreBypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with...8.1 High
- blocksera image hover effects – elementor addonImage Hover Effects – Elementor Addon <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via eihe_link Parameter6.4 Medium
- watchful xcloner, backup, restore and migrate your sites with xcloner +1 moreXCloner <= 4.7.3 - Unauthenticated Full Path Disclosure5.3 Medium
- wpdeveloper schedulepress, wpdevteam schedulepress – auto post & publish, auto social share, schedule posts with editorial calendar & missed schedule post publisher +1 moreSchedulePress <= 5.1.3 - Unauthenticated Full Path Disclosure5.3 Medium
- tecno com.android.server.telecomImproper permission control in com.android.server.telecom3.3 Low
- szlbt lbt-t300-t400 firmwareShenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 were discovered to contain a stack...5.3 Medium
- Show moreLoading…