PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 78

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 78 / 84

  1. CVE-2024-9676Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS)
  2. CVE-2024-9675buildah: Buildah allows arbitrary directory mount
  3. CVE-2024-9632xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability
  4. CVE-2024-9506vue: Regular Expression Denial of Service (ReDoS)
  5. CVE-2024-9476grafana: Privilege escalation vulnerability in Grafana Migration Assistance
  6. CVE-2024-9407Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction
  7. CVE-2024-9403firefox: thunderbird: Memory safety bugs fixed in Firefox 131 and Thunderbird 131
  8. CVE-2024-9402firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3
  9. CVE-2024-9401firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3
  10. CVE-2024-9400firefox: thunderbird: Potential memory corruption during JIT compilation
  11. CVE-2024-9399firefox: thunderbird: Specially crafted WebTransport requests could lead to denial of service
  12. CVE-2024-9398firefox: thunderbird: External protocol handlers could be enumerated via popups
  13. CVE-2024-9397firefox: thunderbird: Potential directory upload bypass via clickjacking
  14. CVE-2024-9396firefox: thunderbird: Potential memory corruption may occur when cloning certain objects
  15. CVE-2024-9395firefox: Specially crafted filename could be used to obscure download type
  16. CVE-2024-9394firefox: thunderbird: Cross-origin access to JSON contents through multipart responses
  17. CVE-2024-9393firefox: thunderbird: Cross-origin access to PDF contents through multipart responses
  18. CVE-2024-9392firefox: thunderbird: Compromised content process can bypass site isolation
  19. CVE-2024-9391firefox: Prevent users from exiting full-screen mode in Firefox Focus for Android
  20. CVE-2024-9355golang-fips: Golang FIPS zeroed buffer
  21. CVE-2024-9341Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library
  22. CVE-2024-9287python: Virtual environment (venv) activation scripts don't quote paths
  23. CVE-2024-9266express: URL redirection vulnerability
  24. CVE-2024-9264grafana: Command injection and local file inclusion via SQL Expressions
  25. CVE-2024-9143openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access
  26. CVE-2024-9123chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome
  27. CVE-2024-9050NetworkManager-libreswan: Local privilege escalation via leftupdown
  28. CVE-2024-9026php: PHP-FPM Log Manipulation Vulnerability
  29. CVE-2024-8986grafana-plugin-sdk-go: Information Leakage in grafana-plugin-sdk-go
  30. CVE-2024-8932php: OOB access in ldap_escape
  31. CVE-2024-8929php: Leak partial content of the heap through heap buffer over-read in mysqlnd
  32. CVE-2024-8927php: cgi.force_redirect configuration is bypassable due to the environment variable collision
  33. CVE-2024-8926php: PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass)
  34. CVE-2024-8925php: Erroneous parsing of multipart form data
  35. CVE-2024-8900firefox: Clipboard write permission bypass
  36. CVE-2024-8775ansible-core: Exposure of Sensitive Information in Ansible Vault Files Due to Improper Logging
  37. CVE-2024-8676cri-o: Checkpoint restore can be triggered from different namespaces
  38. CVE-2024-8636chromium: skia: chromium: skia: Heap buffer overflow in Skia
  39. CVE-2024-8612qemu-kvm: information leak in virtio devices
  40. CVE-2024-8508unbound: Unbounded name compression could lead to Denial of Service
  41. CVE-2024-8445389-ds-base: server crash while modifying `userPassword` using malformed input (Incomplete fix for CVE-2024-2199)
  42. CVE-2024-8443libopensc: Heap buffer overflow in OpenPGP driver when generating key
  43. CVE-2024-8418containers/aardvark-dns: TCP Query Handling Flaw in Aardvark-dns Leading to Denial of Service
  44. CVE-2024-8394thunderbird: Crash when aborting verification of OTR chat
  45. CVE-2024-8387mozilla: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2
  46. CVE-2024-8386mozilla: SelectElements could be shown over another site if popups are allowed
  47. CVE-2024-8385mozilla: WASM type confusion involving ArrayTypes
  48. CVE-2024-8384mozilla: Garbage collection could mis-color cross-compartment objects in OOM conditions
  49. CVE-2024-8383mozilla: Firefox did not ask before openings news: links in an external application
  50. CVE-2024-8382mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran
CVE 2024 document archive — Page 78 | PulseLinux