CVE 2024 document archive · 77
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,167 documents · Identifier year 2024 · 77 / 84
- CVE-2024-11693firefox: thunderbird: Download Protections were bypassed by .library-ms files on Windows
- CVE-2024-11692firefox: thunderbird: Select list elements could be shown over another site
- CVE-2024-11691firefox: thunderbird: Memory corruption in Apple GPU drivers
- CVE-2024-11614dpdk: Denial Of Service from malicious guest on hypervisors using DPDK Vhost library
- CVE-2024-11596wireshark: Buffer Over-read in Wireshark
- CVE-2024-11595wireshark: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
- CVE-2024-11584cloud-init: Cloud init permissions handling flaw
- CVE-2024-11498libjxl: Resource exhaustion via Stack overflow in libjxl
- CVE-2024-11403libjxl: Out of Bounds Memory Read/Write in libjxl
- CVE-2024-11236php: Integer overflow in the firebird and dblib quoters causing OOB writes
- CVE-2024-11235php: Reference counting in php_request_shutdown causes Use-After-Free
- CVE-2024-11234php: Configuring a proxy in a stream context might allow for CRLF injection in URIs
- CVE-2024-11233php: Single byte overread with convert.quoted-printable-decode filter
- CVE-2024-11218podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile
- CVE-2024-11187bind: bind9: Many records in the additional section cause CPU exhaustion
- CVE-2024-11168python: Improper validation of IPv6 and IPvFuture addresses
- CVE-2024-11159thunderbird: Potential disclosure of plaintext in OpenPGP encrypted message
- CVE-2024-11148httpd: OpenBSD httpd(8) null dereference
- CVE-2024-11053curl: curl netrc password leak
- CVE-2024-11029freeipa: Administrative user data leaked through systemd journal
- CVE-2024-10979postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code
- CVE-2024-10978postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID
- CVE-2024-10977postgresql: PostgreSQL libpq retains an error message from man-in-the-middle
- CVE-2024-10976postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes
- CVE-2024-10963pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass
- CVE-2024-10941firefox: Browser crash from invalid URI
- CVE-2024-10573mpg123: Buffer overflow when writing decoded PCM samples
- CVE-2024-10524wget: GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs
- CVE-2024-10491express: Preload arbitrary resources by injecting additional `Link` headers
- CVE-2024-10468thunderbird: Race conditions in IndexedDB
- CVE-2024-10467firefox: thunderbird: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4
- CVE-2024-10466firefox: DOM push subscription message could hang Firefox
- CVE-2024-10465firefox: thunderbird: Clipboard "paste" button persisted across tabs
- CVE-2024-10464firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser
- CVE-2024-10463firefox: thunderbird: Cross origin video frame leak
- CVE-2024-10462firefox: thunderbird: Origin of permission prompt could be spoofed by long URL
- CVE-2024-10461firefox: thunderbird: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response
- CVE-2024-10460firefox: thunderbird: Confusing display of origin for external protocol handler prompt
- CVE-2024-10459firefox: thunderbird: Use-after-free in layout with accessibility
- CVE-2024-10458firefox: thunderbird: Permission leak via embed or object elements
- CVE-2024-10452grafana: Org admin can delete pending invites in different org
- CVE-2024-10306mod_proxy_cluster: mod_proxy_cluster unauthorized MCMP requests
- CVE-2024-10224module-scandeps: local privilege escalation via unsanitized input
- CVE-2024-10220kubernetes: Arbitrary command execution through gitRepo volume
- CVE-2024-10041pam: libpam: Libpam vulnerable to read hashed password
- CVE-2024-9979pyo3: Risk of use-after-free in `borrowed` reads from Python weak references
- CVE-2024-9936firefox: Undefined behavior in selection node cache
- CVE-2024-9781wireshark: Improper Handling of Missing Values in Wireshark
- CVE-2024-9681curl: HSTS subdomain overwrites parent cache entry
- CVE-2024-9680firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill)