CVE-2024-35965

CVE-2024-35965 affects the Linux kernel Bluetooth stack (L2CAP) where setsockopt input length is not validated before copying data. The root cause is missing validation of user input length, enabling potential memory/contagion issues as described in vendor advisories that reference this CVE (e.g....

CVE-2024-35964

CVE-2024-35964 : Linux kernel Bluetooth ISO component fixed an issue where setsockopt user input was not properly validated. The description states to check input length before copying data, indicating a potential input-validation/overflow risk. Connected advisories reference the CVE and confirm ...

CVE-2024-35962

CVE-2024-35962 (Linux kernel netfilter nf_tables) involves incomplete validation of user input in netfilter: complete validation of user input. Root cause: do_replace() handlers use copy_from_sockptr() followed by unsafe copy_from_sockptr_offset() without validating optlen early enough; the patch...

CVE-2024-35963

CVE-2024-35963: In the Linux kernel, the Bluetooth subsystem (hci_sock) was fixed for not validating user input passed to setsockopt. The fix validates input length before copying data, mitigating a potential improper input handling vector in Bluetooth setsockopt. The vulnerability is described i...

CVE-2024-35955

CVE-2024-35955 : Linux kernel vulnerability in kprobe registration that could cause a use-after-free if module unload changes MODULE_STATE from LIVE/GOING to UNFORMED between address checks. The fix switches to using only __module_text_address() and performs try_module_get(module) while MODULE_ST...

CVE-2024-35953

The CVE-2024-35953 issue affects the Linux kernel’s accel/ivpu code: ivpu_device->context_xa could deadlock because the XA lock could be held in a thread and interrupted by IRQs that also lock it. The fix is to pass XA_FLAGS_LOCK_IRQ during initialization to prevent the second lock in IRQ cont...

CVE-2024-5137

CVE-2024-5137 affects PHPGurukul Directory Management System 1.0. The issue is in the /admin/admin-profile.php file of the Searchbar component, where input manipulation leads to cross-site scripting. The vulnerability can be exploited remotely, and the exploit has been disclosed publicly (VDB-265...

CVE-2024-5134

SourceCodester Electricity Consumption Monitoring Tool 1.0 has a SQL injection flaw in /endpoint/delete-bill.php caused by unsafely handling the bill parameter. The vulnerability can be exploited remotely and is considered high impact (as per CVSS notes: critical in NVD, with high confidentiality...

CVE-2024-5121

SourceCodester Event Registration System 1.0 contains a cross-site scripting vulnerability in the /registrar/?page=registration endpoint, caused by unsafe handling of the e parameter. The vulnerability is exploitable remotely and has been publicly disclosed. Several sources confirm the issue, inc...

CVE-2024-5111

The CVE-2024-5111 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability arises from SQL injection in an unknown part of the file /view/student_payment_invoice1.php, triggered by manipulating the date argument. It is exploitable remotely and the exploit has been disc...

CVE-2024-5106

CVE-2024-5106 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a SQL injection in the file /view/student_payment_details3.php, caused by manipulating the index parameter. It is exploitable remotely and an exploit has been disclosed publicly. Various sources ...

CVE-2024-5105

CVE-2024-5105 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability exists in an unknown portion of the file /view/student_payment_details.php, where manipulation of the argument index enables a SQL injection. Exploitation is possible remotely, and the exploit has b...

CVE-2024-4284

CVE-2024-4284 affects mintplex-labs/anything-llm (versions prior to 1.0.0). The vulnerability allows a DoS by changing a user’s id to 0, enabling a manager/admin to render a target account inaccessible and cause uncontrolled resource consumption. Root cause: lack of input validation/sanitization ...

CVE-2024-5103

CVE-2024-5103 affects Campcodes Complete Web-Based School Management System v1.0. The vulnerability is an SQL injection in the file /view/student_first_payment.php caused by manipulation of the grade parameter. It is exploitable remotely, with the exploit publicly disclosed. Details across source...

CVE-2024-36076

CVE-2024-36076 affects SysReptor, with vulnerable versions 2024.28–2024.30. The issue is Cross-Site WebSocket Hijacking, allowing an attacker to escalate privileges and obtain sensitive information when a logged-in SysReptor user visits a malicious same-site subdomain within the same browser sess...

CVE-2024-5100

CVE-2024-5100 is a SQL injection in SourceCodester Simple Inventory System 1.0, affecting the file tableedit.php . The issue arises from improper handling of the from and to parameters, allowing an attacker to manipulate input values to execute arbitrary SQL. The vulnerability is exploitable remo...

CVE-2024-35946

CVE-2024-35946 affects the Linux kernel’s wifi rt89 (rtw89) driver, where a null pointer dereference could occur during abort/cancel of a scan because the code might reference a vif that wasn’t scanning. The public description and connected advisories confirm the issue and cite resolving it by en...

CVE-2024-35945

CVE-2024-35945 (Linux kernel) is reported as resolved in OSV entries for Root:Ubuntu 22.04 via ROOT-OS-UBUNTU-2204-CVE-2024-35945, with multiple fixed ROOT rootio-linux versions available. Other OSVs (ROOT-OS-DEBIAN-11-CVE-2024-35945, ROOT-OS-DEBIAN-12-CVE-2024-35945) also indicate patches in roo...

CVE-2024-35944

CVE-2024-35944: In the Linux kernel VMCI path, a run-time warning triggered by memcpy was observed when a field-spanning write occurred in vmci_datagram.c. The code copies a vmci_datagram dg into a local dg_info->msg with memcpy(&dg_info->msg, dg, dg_size), while dg_size = VMCI_DG_HEADERSIZ...

CVE-2024-35943

The CVE-2024-35943 entry pertains to the Linux kernel, specifically a vulnerability in TI-related pmdomain handling where omap_prm_domain_init lacked a null-pointer check after a dynamic allocation. The issue arises because devm_kasprintf() can return NULL on allocation failure, and without verif...