Low-severity CVEs (page 49)
Page 49 of 100 — low-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-5657 | Low | 3.7 | 2024-06-06 | The CraftCMS plugin Two-Factor Authentication in versions 3.3.1, 3.3.2 and 3.3.3 discloses the password hash of the currently authenticated user after submitti… |
CVE-2023-50804 | Low | 3.7 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor, and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2… |
CVE-2023-50803 | Low | 3.7 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor, and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2… |
CVE-2023-52147 | Low | 3.7 | 2024-06-04 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in All In One WP Security & Firewall Team All In One WP Security & Firewall allows Acc… |
CVE-2023-49822 | Low | 3.7 | 2024-06-04 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Vongries Ultimate Dashboard allows Accessing Functionality Not Properly Const… |
CVE-2023-49748 | Low | 3.7 | 2024-06-04 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPServeur, NicolasKulka, wpformation WPS Hide Login allows Accessing Functionality… |
CVE-2023-49741 | Low | 3.7 | 2024-06-04 | Authentication Bypass by Spoofing vulnerability in wpdevart Coming soon and Maintenance mode allows Accessing Functionality Not Properly Constrained by ACLs.Th… |
CVE-2023-48335 | Low | 3.7 | 2024-06-04 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Webcraftic Hide login page allows Accessing Functionality Not Properly Constrained… |
CVE-2023-47818 | Low | 3.7 | 2024-06-04 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in LWS LWS Hide Login allows Accessing Functionality Not Properly Constrained by ACLs… |
CVE-2023-47769 | Low | 3.7 | 2024-06-04 | Authentication Bypass by Spoofing vulnerability in WP Maintenance allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Mainten… |
CVE-2023-27437 | Low | 3.7 | 2024-06-03 | Missing Authorization vulnerability in Event Espresso Event Espresso 4 Decaf allows Functionality Misuse.This issue affects Event Espresso 4 Decaf: from n/a th… |
CVE-2023-24373 | Low | 3.7 | 2024-06-03 | External Control of Assumed-Immutable Web Parameter vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Manipulating Hidden Fields.Th… |
CVE-2024-31684 | Low | 3.5 | 2024-06-03 | Incorrect access control in the fingerprint authentication mechanism of Bitdefender Mobile Security v4.11.3-gms allows attackers to bypass fingerprint authenti… |
CVE-2024-35196 | Low | 2.0 | 2024-05-31 | Sentry is a developer-first error tracking and performance monitoring platform. Sentry's Slack integration incorrectly records the incoming request body in log… |
CVE-2024-36119 | Low | 1.8 | 2024-05-30 | Statamic is a, Laravel + Git powered CMS designed for building websites. In affected versions users registering via the `user:register_form` tag will have thei… |
CVE-2024-36118 | Low | 3.5 | 2024-05-30 | MeterSphere is a test management and interface testing tool. In affected versions users without workspace permissions can view functional test cases of other w… |
CVE-2024-4330 | Low | 3.3 | 2024-05-30 | A path traversal vulnerability was identified in the parisneo/lollms-webui repository, specifically within version 9.6. The vulnerability arises due to imprope… |
CVE-2024-34715 | Low | 2.3 | 2024-05-29 | Fides is an open-source privacy engineering platform. The Fides webserver requires a connection to a hosted PostgreSQL database for persistent storage of appli… |
CVE-2024-35311 | Low | 3.3 | 2024-05-29 | Yubico YubiKey 5 Series before 5.7.0, Security Key Series before 5.7.0, YubiKey Bio Series before 5.6.4, and YubiKey 5 FIPS before 5.7.2 have Incorrect Access… |
CVE-2024-5437 | Low | 3.5 | 2024-05-29 | A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as problematic. Affected is the function save_category of… |
CVE-2024-35239 | Low | 2.7 | 2024-05-28 | Umbraco Commerce is an open source dotnet web forms solution. In affected versions an authenticated user that has access to edit Forms may inject unsafe code i… |
CVE-2024-35403 | Low | 2.7 | 2024-05-28 | TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setIpPortFilterRules |
CVE-2024-32944 | Low | 3.3 | 2024-05-28 | Path traversal vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product installs a crafted UTAU voicebank installer (.uar file, .zip fi… |
CVE-2024-27314 | Low | 2.4 | 2024-05-27 | Zoho ManageEngine ServiceDesk Plus versions below 14730, ServiceDesk Plus MSP below 14720 and SupportCenter Plus below 14720 are vulnerable to stored XSS in th… |
CVE-2024-5385 | Low | 2.4 | 2024-05-27 | A vulnerability, which was classified as problematic, has been found in oretnom23 Online Car Wash Booking System 1.0. This issue affects some unknown processin… |
CVE-2024-5383 | Low | 3.5 | 2024-05-26 | A vulnerability classified as problematic has been found in lakernote EasyAdmin up to 20240324. This affects an unknown part of the file /sys/file/upload. The… |
CVE-2024-5380 | Low | 3.5 | 2024-05-26 | A vulnerability classified as problematic has been found in jsy-1 short-url 1.0.0. Affected is an unknown function of the file admin.php. The manipulation of t… |
CVE-2024-5379 | Low | 3.5 | 2024-05-26 | A vulnerability was found in JFinalCMS up to 20240111. It has been rated as problematic. This issue affects some unknown processing of the file /admin/template… |
CVE-2024-5376 | Low | 3.5 | 2024-05-26 | A vulnerability was found in Kashipara College Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the… |
CVE-2024-5375 | Low | 3.5 | 2024-05-26 | A vulnerability has been found in Kashipara College Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functiona… |
CVE-2024-5374 | Low | 3.5 | 2024-05-26 | A vulnerability, which was classified as problematic, was found in Kashipara College Management System 1.0. Affected is an unknown function of the file submit_… |
CVE-2024-5373 | Low | 3.5 | 2024-05-26 | A vulnerability, which was classified as problematic, has been found in Kashipara College Management System 1.0. This issue affects some unknown processing of… |
CVE-2024-5372 | Low | 3.5 | 2024-05-26 | A vulnerability classified as problematic was found in Kashipara College Management System 1.0. This vulnerability affects unknown code of the file submit_extr… |
CVE-2024-5371 | Low | 3.5 | 2024-05-26 | A vulnerability classified as problematic has been found in Kashipara College Management System 1.0. This affects an unknown part of the file submit_enroll_stu… |
CVE-2024-5370 | Low | 3.5 | 2024-05-26 | A vulnerability was found in Kashipara College Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of… |
CVE-2024-5369 | Low | 3.5 | 2024-05-26 | A vulnerability was found in Kashipara College Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functio… |
CVE-2024-5368 | Low | 3.5 | 2024-05-26 | A vulnerability was found in Kashipara College Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file delete… |
CVE-2024-5367 | Low | 3.5 | 2024-05-26 | A vulnerability was found in Kashipara College Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file each… |
CVE-2024-36241 | Low | 3.1 | 2024-05-26 | Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1 and 8.1.x <= 8.1.12 fail to enforce proper access controls which allows user to view arbitrary post contents… |
CVE-2024-35232 | Low | 3.7 | 2024-05-24 | github.com/huandu/facebook is a Go package that fully supports the Facebook Graph API with file upload, batch request and marketing API. access_token can be ex… |
CVE-2024-5310 | Low | 2.4 | 2024-05-24 | A vulnerability classified as problematic has been found in JFinalCMS up to 20221020. This affects an unknown part of the file /admin/content. The manipulation… |
CVE-2023-7259 | Low | 2.4 | 2024-05-24 | ** DISPUTED ** A vulnerability was found in zzdevelop lenosp up to 20230831. It has been classified as problematic. This affects an unknown part of the compone… |
CVE-2023-1111 | Low | 2.4 | 2024-05-24 | A vulnerability was found in FastCMS up to 0.1.5 and classified as problematic. Affected by this issue is some unknown functionality of the component New Artic… |
CVE-2023-1001 | Low | 3.5 | 2024-05-24 | A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file p… |
CVE-2024-5279 | Low | 3.5 | 2024-05-23 | A vulnerability was found in Qiwen Netdisk up to 1.4.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the… |
CVE-2024-32969 | Low | 2.7 | 2024-05-23 | vantage6 is an open-source infrastructure for privacy preserving analysis. Collaboration administrators can add extra organizations to their collaboration that… |
CVE-2024-3920 | Low | 3.5 | 2024-05-23 | The Flattr WordPress plugin through 1.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform St… |
CVE-2024-2220 | Low | 3.5 | 2024-05-23 | The Button contact VR WordPress plugin through 4.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to p… |
CVE-2024-29852 | Low | 2.7 | 2024-05-22 | Veeam Backup Enterprise Manager allows high-privileged users to read backup session logs. |
CVE-2021-47440 | Low | 2.3 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: net: encx24j600: check error in devm_regmap_init_encx24j600 devm_regmap_init may return e… |
CVE-2024-34274 | Low | 3.9 | 2024-05-21 | OpenBD 20210306203917-6cbe797 is vulnerable to Deserialization of Untrusted Data. The cookies bdglobals and bdclient_spot of the OpenBD software uses serialize… |
CVE-2023-52839 | Low | 3.3 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drivers: perf: Do not broadcast to other cpus when starting a counter This command: $ pe… |
CVE-2023-52746 | Low | 2.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() int type = nla_… |
CVE-2021-47430 | Low | 3.3 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n Commit 3c73b81a9164 ("x86/ent… |
CVE-2024-5137 | Low | 2.4 | 2024-05-20 | A vulnerability classified as problematic was found in PHPGurukul Directory Management System 1.0. Affected by this vulnerability is an unknown functionality o… |
CVE-2024-5136 | Low | 2.4 | 2024-05-20 | A vulnerability classified as problematic has been found in PHPGurukul Directory Management System 1.0. Affected is an unknown function of the file /admin/sear… |
CVE-2024-5121 | Low | 3.5 | 2024-05-20 | A vulnerability was found in SourceCodester Event Registration System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown fu… |
CVE-2024-35935 | Low | 3.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: btrfs: send: handle path ref underflow in header iterate_inode_ref() Change BUG_ON to pro… |
CVE-2024-5044 | Low | 3.7 | 2024-05-17 | A vulnerability was found in Emlog Pro 2.3.4. It has been classified as problematic. This affects an unknown part of the component Cookie Handler. The manipula… |
CVE-2024-32708 | Low | 3.7 | 2024-05-17 | Authentication Bypass by Spoofing vulnerability in helderk Maintenance Mode allows Functionality Bypass.This issue affects Maintenance Mode: from n/a through 3… |
CVE-2024-4214 | Low | 2.7 | 2024-05-17 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS vulnerability in Bill Minozzi Car Dealer allows Code Injection.This issue affects… |
CVE-2024-30480 | Low | 3.7 | 2024-05-17 | Authentication Bypass by Spoofing vulnerability in Pippin Williamson CGC Maintenance Mode allows Functionality Bypass.This issue affects CGC Maintenance Mode… |
CVE-2024-22139 | Low | 3.7 | 2024-05-17 | Authentication Bypass by Spoofing vulnerability in Filipe Seabra WordPress Manutenção allows Functionality Bypass.This issue affects WordPress Manutenção: from… |
CVE-2024-22384 | Low | 2.8 | 2024-05-16 | Out-of-bounds read for some Intel(R) Trace Analyzer and Collector software before version 2022.0.0 published Nov 2023 may allow an authenticated user to potent… |
CVE-2023-48727 | Low | 3.3 | 2024-05-16 | NULL pointer dereference in some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable information disclosure vi… |
CVE-2023-47282 | Low | 3.9 | 2024-05-16 | Out-of-bounds write in Intel(R) Media SDK all versions and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially e… |
CVE-2023-47169 | Low | 3.3 | 2024-05-16 | Improper buffer restrictions in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local acce… |
CVE-2023-45733 | Low | 2.8 | 2024-05-16 | Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via lo… |
CVE-2023-43745 | Low | 2.8 | 2024-05-16 | Improper input validation in some Intel(R) CBI software before version 1.1.0 may allow an authenticated user to potentially enable denial of service via local… |
CVE-2023-38420 | Low | 3.8 | 2024-05-16 | Improper conditions check in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable information disclosure… |
CVE-2023-22656 | Low | 3.9 | 2024-05-16 | Out-of-bounds read in Intel(R) Media SDK and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable escalati… |
CVE-2024-35039 | Low | 3.8 | 2024-05-16 | idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/tplSys_deal.php?mudi=area. |
CVE-2024-35300 | Low | 3.5 | 2024-05-16 | In JetBrains TeamCity between 2024.03 and 2024.03.1 several stored XSS in the available updates page were possible |
CVE-2024-4975 | Low | 3.5 | 2024-05-16 | A vulnerability, which was classified as problematic, has been found in code-projects Simple Chat System 1.0. This issue affects some unknown processing of the… |
CVE-2024-4974 | Low | 3.5 | 2024-05-16 | A vulnerability, which was classified as problematic, was found in code-projects Simple Chat System 1.0. Affected is an unknown function of the file /register… |
CVE-2024-4968 | Low | 3.5 | 2024-05-16 | A vulnerability was found in SourceCodester Interactive Map with Marker 1.0. It has been rated as problematic. Affected by this issue is some unknown functiona… |
CVE-2024-4922 | Low | 3.5 | 2024-05-16 | A vulnerability, which was classified as problematic, was found in SourceCodester Simple Image Stack Website 1.0. This affects an unknown part. The manipulatio… |
CVE-2024-3487 | Low | 3.5 | 2024-05-15 | Broken Authentication vulnerability discovered in OpenText™ iManager 3.2.6.0200. This vulnerability allows an attacker to manipulate certain parameters to bypa… |
CVE-2023-5937 | Low | 3.8 | 2024-05-15 | On Windows systems, the Arc configuration files resulted to be world-readable. This can lead to information disclosure by local attackers, via exfiltration… |
CVE-2024-3823 | Low | 2.4 | 2024-05-15 | The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping… |
CVE-2024-3629 | Low | 2.4 | 2024-05-15 | The HL Twitter WordPress plugin through 2014.1.18 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in… |
CVE-2024-32021 | Low | 3.9 | 2024-05-14 | Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when cloning a local source repository that con… |
CVE-2024-32020 | Low | 3.9 | 2024-05-14 | Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, local clones may end up hardlinking files into… |
CVE-2024-34713 | Low | 3.5 | 2024-05-14 | sshproxy is used on a gateway to transparently proxy a user SSH connection on the gateway to an internal host via SSH. Prior to version 1.6.3, any user authori… |
CVE-2024-34355 | Low | 3.5 | 2024-05-14 | TYPO3 is an enterprise content management system. Starting in version 13.0.0 and prior to version 13.1.1, the history backend module is vulnerable to HTML inje… |
CVE-2024-33583 | Low | 3.3 | 2024-05-14 | A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (… |
CVE-2024-33007 | Low | 3.5 | 2024-05-14 | PDFViewer is a control delivered as part of SAPUI5 product which shows the PDF content in an embedded mode by default. If a PDF document contains embedded Java… |
CVE-2024-33000 | Low | 3.5 | 2024-05-14 | SAP Bank Account Management does not perform necessary authorization check for an authorized user, resulting in escalation of privileges. As a result, it has a… |
CVE-2024-32637 | Low | 3.3 | 2024-05-14 | A vulnerability has been identified in JT2Go (All versions < V2312.0005), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization… |
CVE-2024-4855 | Low | 3.6 | 2024-05-14 | Use after free issue in editcap could cause denial of service via crafted capture file |
CVE-2024-4853 | Low | 3.6 | 2024-05-14 | Memory handling issue in editcap could cause denial of service via crafted capture file |
CVE-2024-4797 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of th… |
CVE-2024-4738 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code. The mani… |
CVE-2024-4737 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin… |
CVE-2024-4736 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of… |
CVE-2024-4735 | Low | 3.5 | 2024-05-14 | A vulnerability has been found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functi… |
CVE-2024-4732 | Low | 3.5 | 2024-05-14 | A vulnerability, which was classified as problematic, has been found in Campcodes Legal Case Management System 1.0. Affected by this issue is some unknown func… |
CVE-2024-4731 | Low | 3.5 | 2024-05-14 | A vulnerability classified as problematic was found in Campcodes Legal Case Management System 1.0. Affected by this vulnerability is an unknown functionality o… |
CVE-2024-4730 | Low | 3.5 | 2024-05-14 | A vulnerability classified as problematic has been found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/judg… |
CVE-2024-4729 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the fi… |