CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- linux, linux kernel +1 morenet/sched: Fix UAF when resolving a clash9.8 Critical
- linux, linux kernel +1 morefirmware: cs_dsp: Fix overflow checking of wmfw header7.8 High
- linux, linux kernel +1 morefirmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers7.8 High
- linux, linux kernel +1 moreASoC: SOF: Intel: hda: fix null deref on system suspend entry5.5 Medium
- linux, linux kernel +1 morenet: ks8851: Fix deadlock with the SPI chip variant7.5 High
- linux, linux kernel +1 moreUSB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor5.5 Medium
- linux, linux kernel +1 morenilfs2: fix kernel bug on rename operation of broken directory7.8 High
- linux, linux kernel +1 morecachestat: do not flush stats in recency check5.5 Medium
- linux, linux kernel +1 moremm: vmalloc: check if a hash-index is in cpu_possible_mask7.8 High
- linux, linux kernel +1 moremm/filemap: skip to create PMD-sized page cache if needed5.5 Medium
- linux, linux kernel +1 moreksmbd: discard write access to the directory open5.5 Medium
- linux, linux kernel +1 morenvmem: core: limit cell sysfs permissions to main attribute ones5.5 Medium
- linux, linux kernel +1 moreplatform/x86: toshiba_acpi: Fix array out-of-bounds access7.1 High
- linux, linux kernel +1 moreFix userfaultfd_api to return EINVAL as expected3.3 Low
- linux, linux kernel +1 moremmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length7.8 High
- linux, linux kernel +1 moremisc: fastrpc: Fix memory leak in audio daemon attach operation5.5 Medium
- linux, linux kernel +1 moresched/deadline: Fix task_struct reference leak5.5 Medium
- admidioAdmidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment9.1 Critical
- admidioAdmidio has Blind SQL Injection in ecard_send.php10.0 Critical
- canonical jujuJuju's unprivileged user running on charm node can leak any secret or relation data accessible to the local charm8.8 High
- progress moveit transferMOVEit Transfer Privilege Escalation Vulnerability7.3 High
- linux, linux kernel +1 moredrm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()7.0 High
- linux, linux kernel +1 mores390/mm: Fix VM_FAULT_HWPOISON handling in do_exception()5.5 Medium
- linux, linux kernel +1 morefilelock: Fix fcntl/close race recovery compat path7.8 High
- m-files hubshareReflected XSS in Hubshare via Open Redirect8.5 High
- oretnom23 complaints report management systemSourceCodester Complaints Report Management System cross site scripting5.3 Medium
- m-files hubshareStored XSS Vulnerability8.5 High
- oretnom23 complaints report management systemSourceCodester Complaints Report Management System manage_user.php sql injection5.3 Medium
- oretnom23 complaints report management systemSourceCodester Complaints Report Management System manage_station.php sql injection5.3 Medium
- oretnom23 complaints report management systemSourceCodester Complaints Report Management System manage_complaint.php sql injection5.3 Medium
- oretnom23 complaints report management systemSourceCodester Complaints Report Management System sql injection6.9 Medium
python-DjangoopenSUSESecurity update for python-DjangoNo score- angeljudesuarez society management systemitsourcecode Society Management System check_admin.php sql injection5.3 Medium
- angeljudesuarez society management systemitsourcecode Society Management System check_student.php sql injection5.3 Medium
- mp3tagMp3tag DLL tak_deco_lib.dll uncontrolled search path4.8 Medium
- angeljudesuarez society management systemitsourcecode Society Management System student.php unrestricted upload5.3 Medium
- sky co.,ltd. skysea client view, skysea client view +1 morePath traversal vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this...7.5 High
- sky co.,ltd. skysea client viewOrigin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e...7.8 High
- sky co.,ltd. skysea client viewIncorrect privilege assignment vulnerability exists in SKYSEA Client View Ver.6.010.06 to Ver.19...7.8 High
- philip hazel sdopSDoP versions prior to 1.11 fails to handle appropriately some parameters inside the input data,...8.8 High
- angeljudesuarez society management systemitsourcecode Society Management System get_balance.php sql injection5.3 Medium
- angeljudesuarez society management systemitsourcecode Society Management System get_price.php sql injection5.3 Medium
- itsourcecode online food ordering systemitsourcecode Online Food Ordering System editproduct.php unrestricted upload5.3 Medium
- bylancer quicklancerBylancer Quicklancer GET Parameter listing sql injection6.9 Medium
- linux, linux kernel +1 morefs/ntfs3: Validate ff offset7.8 High
- linux, linux kernel +1 morefs/ntfs3: Add a check for attr_names and oatbl7.8 High
- linux, linux kernel +1 morejfs: don't walk off the end of ealist7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()7.8 High
- linux, linux kernel +1 moreocfs2: add bounds checking to ocfs2_check_dir_entry()7.8 High
- linux, linux kernel +1 morexfs: add bounds checking to xlog_recover_process_data7.1 High
- Show moreLoading…