VIR Vulnerability Intelligence Relay

CVEs from 2024

7,195 normalized CVEs published or assigned in this year.

Total
7,195
critical
critical 114
high
high 1,044
medium
medium 1,991
low
low 40
% Critical
1.6%
% with KEV
2.3%
% with exploit
2.3%

Top vendors

Top products

  • checkmk 10
  • office 8
  • profilegrid 8
  • office_long_term_servicing_channel 6
  • glibc 5
  • virtual_traffic_manager 5
  • element_pack 5
  • propertyhive 5

Top packages

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2024-21219 high — 8.0 1y ago Important: mysql:8.0 security update redhatrockylinuxdebian
CVE-2024-21237 high — 8.0 1y ago Important: mysql:8.0 security update redhatrockylinuxdebian
CVE-2024-21197 high — 8.0 1y ago Important: mysql security update redhatrockylinuxdebian
CVE-2024-21193 high — 8.0 1y ago Important: mysql security update redhatrockylinuxdebian
CVE-2024-21218 high — 8.0 1y ago Important: mysql:8.0 security update redhatrockylinuxdebian
CVE-2024-21201 high — 8.0 1y ago Important: mysql security update redhatrockylinuxdebian
CVE-2024-21199 high — 8.0 1y ago Important: mysql security update redhatrockylinuxdebian
CVE-2024-21196 high — 8.0 1y ago Important: mysql security update redhatrockylinuxdebian
CVE-2024-21230 high — 8.0 1y ago Important: mysql:8.0 security update redhatrockylinuxdebian
CVE-2024-21198 high — 8.0 1y ago Important: mysql security update redhatrockylinuxdebian
CVE-2024-21236 high — 8.0 1y ago Important: mysql security update redhatrockylinuxdebian
CVE-2024-21194 high — 8.0 1y ago Important: mysql security update redhatrockylinuxdebian
CVE-2024-21247 high — 8.0 1y ago Important: mysql security update redhatrockylinuxdebianalmalinux
CVE-2024-21213 high — 8.0 1y ago Important: mysql security update redhatrockylinuxdebian
CVE-2024-21239 high — 8.0 1y ago Important: mysql security update redhatrockylinuxdebianalmalinux
CVE-2024-7264 high — 8.0 1y ago Important: mysql security update redhatrockylinuxdebiansuse+1
CVE-2024-21238 high — 8.0 1y ago Important: mysql security update redhatrockylinuxdebian
CVE-2024-21241 high — 8.0 1y ago Important: mysql security update redhatrockylinuxdebianalmalinux
CVE-2024-11053 high — 8.0 1y ago Important: mysql security update redhatrockylinuxdebiansuse
CVE-2024-12705 high — 8.0 1y ago Important: bind9.18 security update redhatdebiansuserockylinux
CVE-2024-21203 high — 8.0 1y ago Important: mysql security update redhatrockylinuxdebian
CVE-2024-11187 high — 8.0 1y ago Important: bind security update redhatdebianrockylinuxsuse
CVE-2024-21212 high — 8.0 1y ago Important: mysql security update redhatrockylinuxdebian
CVE-2024-21231 high — 8.0 1y ago Important: mysql security update redhatrockylinuxdebian
CVE-2024-12797 high — 8.0 1y ago Important: openssl security update redhatsuserockylinuxdebian+1
CVE-2024-11218 high — 8.0 1y ago Important: buildah security update redhatrockylinuxdebiansuse+1
CVE-2024-52531 high — 8.0 1y ago Important: libsoup security update redhatrockylinuxsusedebian
CVE-2024-46981 high — 8.0 1y ago Important: redis:6 security update redhatrockylinuxsusedebian
CVE-2024-51741 high — 8.0 1y ago Important: redis:7 security update redhatsuserockylinuxdebian
CVE-2024-53263 high — 8.0 1y ago Important: git-lfs security update redhatrockylinuxdebiangolang
CVE-2024-12085 high — 8.0 1y ago Important: rsync security update archredhatrockylinuxsuse+1
CVE-2024-56201 high — 8.0 1y ago Important: fence-agents security update redhatdebiansusepython
CVE-2024-56326 high — 8.0 1y ago Important: fence-agents security update redhatrockylinuxdebiansuse+1
CVE-2024-11831 high — 8.0 1y ago A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object type… redhatsusedebiannpm
CVE-2024-57823 high — 8.0 1y ago Important: raptor2 security update redhatrockylinuxsusedebian
CVE-2024-54508 high — 8.0 1y ago Important: webkit2gtk3 security update redhatrockylinuxsusedebian
CVE-2024-54502 high — 8.0 1y ago Important: webkit2gtk3 security update redhatrockylinuxsusedebian
CVE-2024-53580 high — 8.0 1y ago Important: iperf3 security update redhatrockylinuxdebiansuse
CVE-2024-54505 high — 8.0 1y ago Important: webkit2gtk3 security update redhatrockylinuxsusedebian
CVE-2024-54479 high — 8.0 1y ago Important: webkit2gtk3 security update redhatrockylinuxsusedebian
CVE-2024-11614 high — 8.0 1y ago Important: dpdk security update redhatrockylinuxdebiansuse
CVE-2024-50252 high — 8.0 1y ago In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address The device stores IPv6 addresses that are used for encaps… redhatsusedebian
CVE-2024-53122 high — 8.0 1y ago In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Additional active subflows - i.e. created by the in kernel path man… redhatrockylinuxsusedebian
CVE-2024-46713 high — 8.0 1y ago In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix AUX buffer serialization Ole reported that event->mmap_mutex is strictly insufficient to serialize the AUX buffer, … redhatsusedebian
CVE-2024-50208 high — 8.0 1y ago In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages Avoid memory corruption while setting up Level-2 PBL pages for the non… redhatsusedebian
CVE-2024-34156 high — 8.0 2y ago Important: golang security update redhatrockylinuxdebiansuse+1
CVE-2024-8508 high — 8.0 2y ago Important: unbound security update redhatrockylinuxsusedebian
CVE-2024-47537 high — 8.0 2y ago Important: gstreamer1-plugins-good security update redhatrockylinuxdebiansuse
CVE-2024-47613 high — 8.0 2y ago Important: gstreamer1-plugins-good security update redhatrockylinuxdebiansuse
CVE-2024-47607 high — 8.0 2y ago Important: gstreamer1-plugins-base security update redhatrockylinuxdebiansuse
CVE-2024-47615 high — 8.0 2y ago Important: gstreamer1-plugins-base security update redhatrockylinuxdebiansuse
CVE-2024-47606 high — 8.0 2y ago Important: gstreamer1-plugins-good security update redhatrockylinuxdebiansuse
CVE-2024-47540 high — 8.0 2y ago Important: gstreamer1-plugins-good security update redhatrockylinuxdebiansuse
CVE-2024-47538 high — 8.0 2y ago Important: gstreamer1-plugins-base security update redhatrockylinuxdebiansuse
CVE-2024-47539 high — 8.0 2y ago Important: gstreamer1-plugins-good security update redhatrockylinuxdebiansuse
CVE-2024-9287 high — 8.0 2y ago Important: python39:3.9 security update rockylinuxredhatsusedebian
CVE-2024-12254 high — 8.0 2y ago Important: python3.12 security update redhatrockylinuxsusedebian
CVE-2024-31228 high — 8.0 2y ago Important: redis:6 security update redhatrockylinuxsusedebian
CVE-2024-31449 high — 8.0 2y ago Important: redis:6 security update redhatrockylinuxsusedebian
CVE-2024-10979 high — 8.0 2y ago Important: postgresql security update redhatrockylinuxsusedebian
CVE-2024-10976 high — 8.0 2y ago Important: postgresql security update redhatrockylinuxsusedebian
CVE-2024-10978 high — 8.0 2y ago Important: postgresql security update redhatrockylinuxsusedebian
CVE-2024-11699 high — 8.0 2y ago Important: thunderbird security update redhatrockylinuxdebiansuse
CVE-2024-52804 high — 8.0 2y ago Important: python-tornado security update redhatrockylinuxsusedebian+1
CVE-2024-11692 high — 8.0 2y ago Important: thunderbird security update redhatrockylinuxdebiansuse
CVE-2024-11697 high — 8.0 2y ago Important: thunderbird security update redhatrockylinuxdebiansuse
CVE-2024-11696 high — 8.0 2y ago Important: thunderbird security update redhatrockylinuxdebiansuse
CVE-2024-11694 high — 8.0 2y ago Important: thunderbird security update redhatrockylinuxdebiansuse
CVE-2024-11695 high — 8.0 2y ago Important: thunderbird security update redhatrockylinuxdebiansuse
CVE-2024-11159 high — 8.0 2y ago Important: thunderbird security update redhatrockylinuxsusedebian
CVE-2024-52336 high — 8.0 2y ago Important: tuned security update redhatsuserockylinuxdebian
CVE-2024-52337 high — 8.0 2y ago Important: tuned security update redhatrockylinuxsusedebian
CVE-2024-10963 high — 8.0 2y ago Important: pam security update redhatrockylinuxsusedebian
CVE-2024-53899 high — 8.0 2y ago Important: python36:3.6 security update rockylinuxsusedebianpython
CVE-2024-45802 high — 8.0 2y ago Important: squid:4 security update redhatrockylinuxsusedebian
CVE-2024-43498 high — 8.0 2y ago Important: .NET 9.0 security update redhatnuget
CVE-2024-44296 high — 8.0 2y ago Important: webkit2gtk3 security update rockylinuxsusedebian
CVE-2024-43499 high — 8.0 2y ago Important: .NET 9.0 security update redhatnuget
CVE-2024-44244 high — 8.0 2y ago Important: webkit2gtk3 security update redhatrockylinuxsusedebian
CVE-2024-52532 high — 8.0 2y ago Important: libsoup security update redhatrockylinuxsusedebian
CVE-2024-52530 high — 8.0 2y ago Important: libsoup security update redhatrockylinuxsusedebian
CVE-2024-9050 high — 8.0 2y ago Important: NetworkManager-libreswan security update redhatrockylinux
CVE-2024-35847 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The error handling path in its_vpe_irq_domain_alloc() causes a double free when … redhatrockylinuxsusedebian+1
CVE-2024-36917 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: block: fix overflow in blk_ioctl_discard() There is no check for overflow of 'start + len' in blk_ioctl_discard(). Hung task occu… redhatrockylinuxsusedebian+1
CVE-2024-41008 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: change vm->task_info handling This patch changes the handling and lifecycle of vm->task_info object. The major change… redhatrockylinuxsusedebian+1
CVE-2024-39501 high — 8.0 2y ago Important: kernel security update redhatrockylinuxsusealmalinux
CVE-2024-42240 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in #DB handler due to BHI mitigation When BHI mitigation is enabled, if SYSENTER is invoked with the TF fl… redhatrockylinuxsusedebian+1
CVE-2024-41012 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: filelock: Remove locks reliably when fcntl/close race is detected When fcntl_setlk() races with close(), it removes the created l… redhatrockylinuxsusedebian+1
CVE-2024-40901 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory There is a potential out-of-bounds access when using test_b… redhatrockylinuxsusedebian+1
CVE-2024-35854 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash The rehash delayed work migrates filters from one region to a… redhatrockylinuxsusedebian+1
CVE-2024-26656 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix use-after-free bug The bug can be triggered by sending a single amdgpu_gem_userptr_ioctl to the AMDGPU DRM driver… redhatrockylinuxsusedebian+1
CVE-2024-26717 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid-of: fix NULL-deref on failed power up A while back the I2C HID implementation was split in an ACPI and OF part, but … redhatrockylinuxsusedebian+1
CVE-2024-26614 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: tcp: make sure init the accept_queue's spinlocks once When I run syz's reproduction C program locally, it causes the following is… redhatrockylinuxsusedebian+1
CVE-2024-42237 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Validate payload length before processing block Move the payload length check in cs_dsp_load() and cs_dsp_coeff… redhatrockylinuxsusedebian+1
CVE-2024-36927 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in __ip_make_skb() KMSAN reported uninit-value access in __ip_make_skb() [1]. __ip_make_skb() test… redhatrockylinuxsusedebian+1
CVE-2024-35814 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: swiotlb: Fix double-allocation of slots due to broken alignment handling Commit bbb73a103fbb ("swiotlb: fix a braino in the align… redhatrockylinuxsusedebian+1
CVE-2024-35838 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential sta-link leak When a station is allocated, links are added but not set to valid yet (e.g. during co… redhatrockylinuxsusedebian+1
CVE-2024-35835 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a double-free in arfs_create_groups When `in` allocated by kvzalloc fails, arfs_create_groups will free ft->g and … redhatrockylinuxsusedebian+1
CVE-2024-35853 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash The rehash delayed work migrates filters from one region to another. This… redhatrockylinuxsusedebian+1
CVE-2024-35824 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume When not configured for wakeup lis3lv02d_i2c_su… redhatrockylinuxsusedebian+1