PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 73

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 73 / 84

  1. CVE-2024-22365pam: allowing unprivileged user to block another user namespace
  2. CVE-2024-22234spring-security: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated
  3. CVE-2024-22233spring-boot: Crafted HTTP requests may lead to debial-of-service (DOS)
  4. CVE-2024-22211freerdp: Integer Overflow leading to Heap Overflow in freerdp_bitmap_planar_context_reset
  5. CVE-2024-22201jetty: stop accepting new connections from valid clients
  6. CVE-2024-22195jinja2: HTML attribute injection when passing user input as keys to xmlattr filter
  7. CVE-2024-22099kernel: NULL Pointer dereference bluetooth allows Overflow Buffers
  8. CVE-2024-22029tomcat: Escalation to root from tomcat user via %post script
  9. CVE-2024-22025nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service
  10. CVE-2024-22020nodejs: Bypass network import restriction via data URL
  11. CVE-2024-22019nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks
  12. CVE-2024-22018nodejs: fs.lstat bypasses permission model
  13. CVE-2024-22017nodejs: setuid() does not drop all privileges due to io_uring
  14. CVE-2024-21978linux-firmware: hw:amd: Improper input validation in SEV-SNP
  15. CVE-2024-21896nodejs: path traversal by monkey-patching buffer internals
  16. CVE-2024-21892nodejs: code injection and privilege escalation through Linux capabilities
  17. CVE-2024-21891nodejs: multiple permission model bypasses due to improper path traversal sequence sanitization
  18. CVE-2024-21890nodejs: improper handling of wildcards in --allow-fs-read and --allow-fs-write
  19. CVE-2024-21886xorg-x11-server: heap buffer overflow in DisableDevice
  20. CVE-2024-21885xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
  21. CVE-2024-21853kernel: microcode_ctl: From CVEorg collector
  22. CVE-2024-21823kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application
  23. CVE-2024-21803kernel: bluetooth: use-after-free vulnerability in af_bluetooth.c
  24. CVE-2024-21733tomcat: Leaking of unrelated request bodies in default error page
  25. CVE-2024-21626runc: file descriptor leak
  26. CVE-2024-21538cross-spawn: regular expression denial of service
  27. CVE-2024-21536http-proxy-middleware: http-proxy-middleware: Denial of Service via unhandled error during path matching
  28. CVE-2024-21510sinatra: Open Redirect Vulnerability in Sinatra via X-Forwarded-Host Header
  29. CVE-2024-21490angular: Inefficient Regular Expression Complexity
  30. CVE-2024-21489uplot: Prototype Pollution in uplot
  31. CVE-2024-21409dotnet: Release COM server object when CPimcManager creation fails
  32. CVE-2024-21404dotnet: Denial of Service in X509Certificate2
  33. CVE-2024-21392dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support
  34. CVE-2024-21386dotnet: Denial of Service in SignalR server
  35. CVE-2024-21319dotnet: .NET Denial of Service Vulnerability
  36. CVE-2024-21312dotnet: Denial of Service Vulnerability
  37. CVE-2024-21247mysql: mysqldump unspecified vulnerability (CPU Oct 2024)
  38. CVE-2024-21244mysql: Telemetry unspecified vulnerability (CPU Oct 2024)
  39. CVE-2024-21243mysql: Telemetry unspecified vulnerability (CPU Oct 2024)
  40. CVE-2024-21241mysql: Optimizer unspecified vulnerability (CPU Oct 2024)
  41. CVE-2024-21239mysql: InnoDB unspecified vulnerability (CPU Oct 2024)
  42. CVE-2024-21238mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024)
  43. CVE-2024-21237mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024)
  44. CVE-2024-21236mysql: InnoDB unspecified vulnerability (CPU Oct 2024)
  45. CVE-2024-21235JDK: Integer conversion error leads to incorrect range check (8332644)
  46. CVE-2024-21232mysql: Components Services unspecified vulnerability (CPU Oct 2024)
  47. CVE-2024-21231mysql: Client programs unspecified vulnerability (CPU Oct 2024)
  48. CVE-2024-21230mysql: Optimizer unspecified vulnerability (CPU Oct 2024)
  49. CVE-2024-21219mysql: DML unspecified vulnerability (CPU Oct 2024)
  50. CVE-2024-21218mysql: InnoDB unspecified vulnerability (CPU Oct 2024)
CVE 2024 document archive — Page 73 | PulseLinux