2024 CVEs (page 222)
Page 222 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-41599 | Medium | 6.1 | 2024-07-19 | Cross Site Scripting vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the file upload method |
CVE-2024-41597 | Medium | 4.2 | 2024-07-19 | Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allows a remote attacker to insert a comment. NOTE: this is disputed by the Supplier because… |
CVE-2024-41124 | Medium | 6.3 | 2024-07-19 | Puncia is the Official CLI utility for Subdomain Center & Exploit Observer. `API_URLS` is utilizing HTTP instead of HTTPS for communication that can lead to is… |
CVE-2024-41122 | High | 7.5 | 2024-07-19 | Woodpecker is a simple yet powerful CI/CD engine with great extensibility. The server allow to create any user who can trigger a pipeline run malicious workflo… |
CVE-2024-41121 | High | 8.8 | 2024-07-19 | Woodpecker is a simple yet powerful CI/CD engine with great extensibility. The server allow to create any user who can trigger a pipeline run malicious workflo… |
CVE-2024-39906 | High | 8.3 | 2024-07-19 | A command injection vulnerability was found in the IndieAuth functionality of the Ruby on Rails based Haven blog web application. The affected functionality re… |
CVE-2024-39123 | Medium | 5.4 | 2024-07-19 | In janeczku Calibre-Web 0.6.0 to 0.6.21, the edit_book_comments function is vulnerable to Cross Site Scripting (XSS) due to improper sanitization performed by… |
CVE-2024-40400 | High | 8.8 | 2024-07-19 | An arbitrary file upload vulnerability in the image upload function of Automad v2.0.0 allows attackers to execute arbitrary code via a crafted file. |
CVE-2024-41600 | High | 7.5 | 2024-07-19 | Insecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and before allows a remote attacker to obtain sensitive information via the login method in th… |
CVE-2024-41603 | Critical | 9.6 | 2024-07-19 | Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the URI /admin/layout. |
CVE-2024-41602 | High | 8.8 | 2024-07-19 | Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privileges via a crafted URL |
CVE-2024-41601 | High | 7.5 | 2024-07-19 | Insecure Permissions vulnerability in lin-CMS v.0.2.0 and before allows a remote attacker to obtain sensitive information via the login method in the UserContr… |
CVE-2024-41492 | High | 7.5 | 2024-07-19 | A stack overflow in Tenda AX1806 v1.0.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
CVE-2024-41281 | High | 8.8 | 2024-07-19 | Linksys WRT54G v4.21.5 has a stack overflow vulnerability in get_merge_mac function. |
CVE-2024-29080 | Medium | 6.5 | 2024-07-19 | Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application Enabling Software Driver which might allo… |
CVE-2024-24970 | Medium | 6.5 | 2024-07-19 | Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application Enabling Software Driver which might allo… |
CVE-2024-6908 | | 2024-07-19 | Improper privilege management in Yugabyte Platform allows authenticated admin users to escalate privileges to SuperAdmin via a crafted PUT HTTP request, potent… | |
CVE-2024-6895 | | 2024-07-19 | Insufficient authentication in user account management in Yugabyte Platform allows local network attackers with a compromised user session to change critical s… | |
CVE-2024-39963 | High | 8.0 | 2024-07-19 | AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 V22.03.01.46 and AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX12 V1.0 V22.03.01.46 were discovered to contain an authe… |
CVE-2024-39962 | Critical | 9.8 | 2024-07-19 | D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router v21_D240126 was discovered to contain a remote code execution (RCE) vulnerability in the ntp_zone_val… |
CVE-2024-27489 | High | 7.5 | 2024-07-19 | An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request. |
CVE-2024-0006 | | 2024-07-19 | Information exposure in the logging system in Yugabyte Platform allows local attackers with access to application logs to obtain database user credentials in l… | |
CVE-2024-37066 | Medium | 6.8 | 2024-07-19 | A command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows attackers to execute arbitrary commands over Bluetoo… |
CVE-2024-6916 | Medium | 5.9 | 2024-07-19 | A vulnerability in Zowe CLI allows local, privileged actors to display securely stored properties in cleartext within a terminal using the '--show-inputs-only'… |
CVE-2024-5977 | Medium | 5.4 | 2024-07-19 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includi… |
CVE-2024-41107 | High | 8.1 | 2024-07-19 | The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an… |
CVE-2024-6907 | Low | 3.5 | 2024-07-19 | A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file so… |
CVE-2024-6906 | Medium | 6.3 | 2024-07-19 | A vulnerability was found in SourceCodester Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file add… |
CVE-2024-6905 | Medium | 6.3 | 2024-07-19 | A vulnerability has been found in SourceCodester Record Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file v… |
CVE-2024-6904 | Medium | 6.3 | 2024-07-19 | A vulnerability, which was classified as critical, was found in SourceCodester Record Management System 1.0. This affects an unknown part of the file sort2_use… |
CVE-2024-41172 | High | 7.5 | 2024-07-19 | In versions of Apache CXF before 3.6.4 and 4.0.5 (3.5.x and lower versions are not impacted), a CXF HTTP client conduit may prevent HTTPClient instances from b… |
CVE-2024-39457 | Medium | 5.4 | 2024-07-19 | Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerability in PDF preview. If this vulnerability is exploited, an arbitrary script may be execu… |
CVE-2024-32007 | High | 7.5 | 2024-07-19 | An improper input validation of the p2c parameter in the Apache CXF JOSE code before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform a denial of service a… |
CVE-2024-29736 | Critical | 9.1 | 2024-07-19 | A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform SSRF style attacks on RE… |
CVE-2024-6903 | Medium | 6.3 | 2024-07-19 | A vulnerability, which was classified as critical, has been found in SourceCodester Record Management System 1.0. Affected by this issue is some unknown functi… |
CVE-2024-6902 | Medium | 6.3 | 2024-07-19 | A vulnerability classified as critical was found in SourceCodester Record Management System 1.0. Affected by this vulnerability is an unknown functionality of… |
CVE-2024-6799 | Medium | 4.3 | 2024-07-19 | The YITH Essential Kit for WooCommerce #1 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'act… |
CVE-2024-6338 | High | 8.8 | 2024-07-19 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to time-based SQL Injection via the ‘exclude’ parameter in all versions up to, and including… |
CVE-2024-40724 | High | 7.8 | 2024-07-19 | Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted f… |
CVE-2024-6901 | Medium | 6.3 | 2024-07-19 | A vulnerability classified as critical has been found in SourceCodester Record Management System 1.0. Affected is an unknown function of the file entry.php. Th… |
CVE-2024-6900 | Medium | 6.3 | 2024-07-19 | A vulnerability was found in SourceCodester Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file… |
CVE-2024-6205 | Critical | 9.8 | 2024-07-19 | The PayPlus Payment Gateway WordPress plugin before 6.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement via a WooCommerc… |
CVE-2024-5604 | Medium | 5.9 | 2024-07-19 | The Bug Library WordPress plugin before 2.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfor… |
CVE-2024-6899 | Medium | 6.3 | 2024-07-19 | A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2024-21583 | Medium | 4.1 | 2024-07-19 | Versions of the package github.com/gitpod-io/gitpod/components/server/go/pkg/lib before main-gha.27122; versions of the package github.com/gitpod-io/gitpod/com… |
CVE-2024-21527 | High | 8.2 | 2024-07-19 | Versions of the package github.com/gotenberg/gotenberg/v8/pkg/gotenberg before 8.1.0; versions of the package github.com/gotenberg/gotenberg/v8/pkg/modules/chr… |
CVE-2024-6898 | High | 7.3 | 2024-07-19 | A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file index.ph… |
CVE-2024-38156 | Medium | 6.1 | 2024-07-19 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2024-35199 | High | 8.2 | 2024-07-19 | TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. In affected versions the two gRPC ports 7070 and 7071, are… |
CVE-2024-35198 | Critical | 9.8 | 2024-07-19 | TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. TorchServe 's check on allowed_urls configuration can be by… |
CVE-2024-30130 | Low | 3.7 | 2024-07-19 | HCL Nomad server on Domino is vulnerable to the cache containing sensitive information which could potentially give an attacker the ability to acquire the sens… |
CVE-2024-41111 | High | 7.2 | 2024-07-18 | Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. Slive… |
CVE-2024-40642 | High | 8.1 | 2024-07-18 | The netty incubator codec.bhttp is a java language binary http parser. In affected versions the `BinaryHttpParser` class does not properly validate input value… |
CVE-2024-5997 | Medium | 4.3 | 2024-07-18 | The Duplica – Duplicate Posts, Pages, Custom Posts or Users plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability… |
CVE-2024-6455 | Medium | 5.3 | 2024-07-18 | The ElementsKit Elementor addons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.2.0 due to a missing capabi… |
CVE-2024-39173 | Critical | 9.8 | 2024-07-18 | calculator-boilerplate v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the eval function at /routes/calculator.js. This vulnerab… |
CVE-2024-39090 | Medium | 6.1 | 2024-07-18 | The PHPGurukul Online Shopping Portal Project version 2.0 contains a vulnerability that allows Cross-Site Request Forgery (CSRF) to lead to Stored Cross-Site S… |
CVE-2024-30126 | Medium | 4.7 | 2024-07-18 | HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that embeds the target web… |
CVE-2024-5321 | Medium | 6.1 | 2024-07-18 | A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated… |
CVE-2024-38806 | Low | 3.9 | 2024-07-18 | Failure to properly synchronize user's permissions in UAA in Cloud Foundry Foundation v40.17.0 https://github.com/cloudfoundry/cf-deployment/releases/tag/v40… |
CVE-2024-5625 | Medium | 6.5 | 2024-07-18 | Improper Restriction of XML External Entity Reference vulnerability in PruvaSoft Informatics Apinizer Management Console allows Data Serialization External Ent… |
CVE-2024-30125 | Medium | 6.2 | 2024-07-18 | HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the server process to die. |
CVE-2024-0857 | Critical | 9.8 | 2024-07-18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Universal Software Inc. FlexWater Corporate Water Managem… |
CVE-2024-5620 | Medium | 6.5 | 2024-07-18 | Authentication Bypass Using an Alternate Path or Channel vulnerability in PruvaSoft Informatics Apinizer Management Console allows Authentication Bypass. This… |
CVE-2024-5619 | Critical | 9.6 | 2024-07-18 | Authorization Bypass Through User-Controlled Key vulnerability in PruvaSoft Informatics Apinizer Management Console allows Exploiting Incorrectly Configured Ac… |
CVE-2024-5618 | Critical | 9.9 | 2024-07-18 | Incorrect Permission Assignment for Critical Resource vulnerability in PruvaSoft Informatics Apinizer Management Console allows Accessing Functionality Not Pro… |
CVE-2024-40648 | Medium | 5.4 | 2024-07-18 | matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The `UserIdentity::is_verified()` method in the matrix-sdk-crypto crate before… |
CVE-2024-40647 | Medium | 5.3 | 2024-07-18 | sentry-sdk is the official Python SDK for Sentry.io. A bug in Sentry's Python SDK < 2.8.0 allows the environment variables to be passed to subprocesses despite… |
CVE-2024-40644 | Medium | 6.8 | 2024-07-18 | gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git. `gix-path` can be tricked into running another `git.exe` placed in an untrusted locat… |
CVE-2024-40629 | Critical | 10.0 | 2024-07-18 | JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes… |
CVE-2024-40628 | Critical | 10.0 | 2024-07-18 | JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes… |
CVE-2024-39911 | Critical | 10.0 | 2024-07-18 | 1Panel is a web-based linux server management control panel. 1Panel contains an unspecified sql injection via User-Agent handling. This issue has been addresse… |
CVE-2024-39907 | Critical | 9.8 | 2024-07-18 | 1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to a… |
CVE-2024-38302 | Medium | 6.8 | 2024-07-18 | Dell Data Lakehouse, version(s) 1.0.0.0, contain(s) a Missing Encryption of Sensitive Data vulnerability in the DDAE (Starburst). A low privileged attacker wit… |
CVE-2024-30473 | Medium | 4.9 | 2024-07-18 | Dell ECS, versions prior to 3.8.1, contain a privilege elevation vulnerability in user management. A remote high privileged attacker could potentially exploit… |
CVE-2024-34013 | High | 7.8 | 2024-07-18 | Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image (macOS) before build 41396, Acron… |
CVE-2024-31143 | High | 7.5 | 2024-07-18 | An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors. Unlike for MSI-X, the setting up of th… |
CVE-2024-29178 | High | 8.8 | 2024-07-18 | On versions before 2.1.4, a user could log in and perform a template injection attack resulting in Remote Code Execution on the server, The attacker must succe… |
CVE-2024-6504 | Medium | 4.3 | 2024-07-18 | Rapid7 InsightVM Console versions below 6.6.260 suffer from a protection mechanism failure whereby an attacker with network access to the InsightVM Console can… |
CVE-2024-40898 | High | 7.5 | 2024-07-18 | SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malic… |
CVE-2024-40725 | Medium | 5.3 | 2024-07-18 | A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "AddTyp… |
CVE-2024-5555 | Medium | 6.4 | 2024-07-18 | The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-… |
CVE-2024-5554 | Medium | 6.4 | 2024-07-18 | The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-… |
CVE-2024-3242 | High | 8.8 | 2024-07-18 | The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the validateImageContent func… |
CVE-2024-40764 | High | 7.5 | 2024-07-18 | Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS). |
CVE-2024-29014 | High | 8.8 | 2024-07-18 | Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when… |
CVE-2024-41011 | High | 7.8 | 2024-07-18 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: don't allow mapping the MMIO HDP page with large pages We don't get the right… |
CVE-2024-6164 | Critical | 9.8 | 2024-07-18 | The Filter & Grids WordPress plugin before 2.8.33 is vulnerable to Local File Inclusion via the post_layout parameter. This makes it possible for an unauthenti… |
CVE-2024-6705 | Medium | 5.5 | 2024-07-18 | The RegLevel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.1 due to insufficie… |
CVE-2024-6599 | Medium | 4.3 | 2024-07-18 | The Meks Video Importer plugin for WordPress is vulnerable to unauthorized API key modification due to a missing capability check on the ajax_save_settings fun… |
CVE-2024-6175 | Medium | 5.4 | 2024-07-18 | The Booking Ultra Pro Appointments Booking Calendar Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability… |
CVE-2024-5964 | Medium | 6.4 | 2024-07-18 | The Zenon Lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Button shortcode in all versions up… |
CVE-2024-5726 | High | 8.8 | 2024-07-18 | The Timeline Event History plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1 via deserialization of untruste… |
CVE-2024-41184 | Critical | 9.8 | 2024-07-18 | In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile… |
CVE-2024-39682 | Medium | 6.4 | 2024-07-18 | Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.7.15.4 due to insu… |
CVE-2024-39681 | Medium | 5.4 | 2024-07-18 | Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1… |
CVE-2024-39680 | Medium | 5.4 | 2024-07-18 | Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1… |
CVE-2024-39679 | Medium | 4.3 | 2024-07-18 | Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1… |
CVE-2024-39678 | Medium | 4.3 | 2024-07-18 | Cooked is a recipe plugin for WordPress. The Cooked plugin is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1.7.15.4 due to… |
CVE-2024-40492 | High | 7.1 | 2024-07-17 | Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function. |