CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- linux, linux kernel +1 moredrm/vmwgfx: Disable coherent dumb buffers without 3d5.5 Medium
- linux, linux kernel +1 moremptcp: pm: fix ID 0 endp usage after multiple re-creations4.7 Medium
- linux, linux kernel +1 moredrm/vmwgfx: Prevent unmapping active read buffers7.8 High
- linux, linux kernel +1 moredrm/vmwgfx: Fix prime with external buffers7.8 High
- linux, linux kernel +1 morepinctrl: qcom: x1e80100: Fix special pin offsets5.5 Medium
- linux, linux kernel +1 moreKVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv35.5 Medium
- linux, linux kernel +1 moretty: serial: fsl_lpuart: mark last busy before uart_add_one_port5.5 Medium
- linux, linux kernel +1 moredrm/xe: reset mmio mappings with devm7.8 High
- linux, linux kernel +1 moreworkqueue: Fix spruious data race in __flush_work()4.7 Medium
- linux, linux kernel +1 moreRevert "serial: 8250_omap: Set the console genpd always on if no console suspend"5.5 Medium
- linux, linux kernel +1 morethunderbolt: Mark XDomain as unplugged when router is removed5.5 Medium
- linux, linux kernel +1 morelibfs: fix infinite directory reads for offset dir5.5 Medium
- spring, spring by vmware tanzu framework +1 moreCVE-2024-38816: Path traversal vulnerability in functional web frameworks7.5 High
- pixeljar favicon generator, unknown favicon generator (closed) +1 moreFavicon Generator < 2.1 - Arbitrary File Deletion via CSRF6.5 Medium
- pixeljar favicon generator, unknown favicon generator (closed) +1 moreFavicon Generator < 2.1 - Arbitrary File Upload via CSRF6.8 Medium
- premio my sticky bar, unknown floating notification bar, sticky menu on scroll, announcement banner, and sticky header for any theme +1 moreMy Sticky Bar < 2.7.3 - Admin+ Stored XSS4.8 Medium
- nsquared appointment booking calendar, croixhaug appointment booking calendar — simply schedule appointments booking plugin, nsqua simply schedule appointments +2 moreAppointment Booking Calendar < 1.6.7.43 - Admin+ Template Injection to RCE7.2 High
- majeedraza carousel sliderCarousel Slider < 2.2.14 - Editor+ Stored XSS4.8 Medium
- jordy meow ai engineAI Engine < 2.4.8 - Admin+ SQLi4.7 Medium
- ninjateam header footer custom code, unknown ninjateam header footer custom code +1 moreNinjaTeam Header Footer Custom Code <= 1.2 - Admin+ Stored XSS via CSS Styles4.8 Medium
- ninjateam header footer custom code, unknown ninjateam header footer custom code +1 moreNinjaTeam Header Footer Custom Code < 1.2 - Admin+ Stored XSS4.8 Medium
- theme-fusion avada, themefusion avada (fusion) builder +1 moreAvada | Website Builder For WordPress & eCommerce <= 3.11.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via fusion_button Shortcode6.4 Medium
- linux, linux kernel +1 moredrm/v3d: Disable preemption while updating GPU stats7.8 High
- linux, linux kernel +1 morevideo/aperture: optionally match the device in sysfb_disable()5.5 Medium
- linux, linux kernel +1 morenfsd: ensure that nfsd4_fattr_args.context is zeroed out9.8 Critical
- linux, linux kernel +1 morenfsd: fix potential UAF in nfsd4_cb_getattr_release9.8 Critical
- linux, linux kernel +1 moreselinux,smack: don't bypass permissions check in inode_setsecctx hook9.8 Critical
- linux, linux kernel +1 moredrm/amd/display: avoid using null object of framebuffer5.5 Medium
- linux, linux kernel +1 moresoc: qcom: pmic_glink: Fix race during initialization4.7 Medium
- linux, linux kernel +1 morefirmware: qcom: scm: Mark get_wq_ctx() as atomic call5.5 Medium
- linux, linux kernel +1 moreusb: typec: ucsi: Move unregister out of atomic section5.5 Medium
- linux, linux kernel +1 morenfsd: fix nfsd4_deleg_getattr_conflict in presence of third party lease9.8 Critical
- linux, linux kernel +1 moresoc: qcom: cmd-db: Map shared memory as WC, not WB5.5 Medium
- linux, linux kernel +1 moreerofs: fix out-of-bound access when z_erofs_gbuf_growsize() partially fails5.5 Medium
- linux, linux kernel +1 morebtrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()7.8 High
- linux, linux kernel +1 moresmb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()5.5 Medium
- linux, linux kernel +1 morepinctrl: single: fix potential NULL dereference in pcs_get_function()5.5 Medium
- linux, linux kernel +1 morebinfmt_elf_fdpic: fix AUXV size calculation when ELF_HWCAP2 is defined5.5 Medium
- linux, linux kernel +1 moredrm/xe: prevent UAF around preempt fence7.8 High
- linux, linux kernel +1 morenfsd: prevent panic for nfsv4.0 closed files in nfs4_show_open5.5 Medium
- linux, linux kernel +1 morepktgen: use cpus_read_lock() in pg_net_init()5.5 Medium
- linux, linux kernel +1 moreBluetooth: btnxpuart: Fix random crash seen while removing driver7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreethtool: check device is present when getting link settings4.7 Medium
- linux, linux kernel +1 morebonding: change ipsec_lock from spin lock to mutex7.8 High
- linux, linux kernel +1 moregtp: fix a potential NULL pointer dereference5.5 Medium
- linux, linux kernel +1 morenfc: pn533: Add poll mod list filling check5.5 Medium
- linux, linux kernel +1 moreusb: dwc3: core: Prevent USB core invalid event buffer address access5.5 Medium
- linux, linux kernel +1 moreusb: dwc3: st: fix probed platform device ref count on probe error path7.8 High
- linux, linux kernel +1 morescsi: aacraid: Fix double-free on probe failure7.8 High
- algoritmika wpfactory helper, wpfactory helper +1 moreWPFactory Helper <= 1.7.0 - Reflected Cross-Site Scripting6.1 Medium
- Show moreLoading…