2024 CVEs (page 225)
Page 225 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-40631 | High | 8.1 | 2024-07-15 | Plate media is an open source, rich-text editor for React. Editors that use `MediaEmbedElement` and pass custom `urlParsers` to the `useMediaState` hook may be… |
CVE-2024-37386 | Medium | 4.2 | 2024-07-15 | An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.25, 4.4.0 through 4.7.5, and 4.8.0. Certain manipulations allow restarting in s… |
CVE-2024-36438 | High | 7.3 | 2024-07-15 | eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead to card duplication and… |
CVE-2024-36434 | High | 7.5 | 2024-07-15 | An SMM callout vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4. |
CVE-2024-36433 | High | 7.5 | 2024-07-15 | An arbitrary memory write vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4. |
CVE-2024-36432 | High | 7.5 | 2024-07-15 | An arbitrary memory write vulnerability was discovered in Supermicro X11DPG-HGX2, X11PDG-QT, X11PDG-OT, and X11PDG-SN motherboards with BIOS firmware before 4… |
CVE-2024-31946 | Medium | 4.2 | 2024-07-15 | An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.41, 3.10.0 through 3.11.29, 4.0 through 4.3.24, and 4.4.0 through 4.7.4. A user… |
CVE-2024-40416 | Critical | 9.8 | 2024-07-15 | A vulnerability in /goform/SetVirtualServerCfg in the sub_6320C function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow. |
CVE-2024-40415 | Critical | 9.8 | 2024-07-15 | A vulnerability in /goform/SetStaticRouteCfg in the sub_519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow. |
CVE-2024-39827 | Medium | 5.5 | 2024-07-15 | Improper input validation in the installer for Zoom Workplace Desktop App for Windows before version 6.0.10 may allow an authenticated user to conduct a denial… |
CVE-2024-39826 | Medium | 6.8 | 2024-07-15 | Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network acc… |
CVE-2024-39821 | Medium | 6.6 | 2024-07-15 | Race condition in the installer for Zoom Workplace App for Windows and Zoom Rooms App for Windows may allow an authenticated user to conduct a denial of servic… |
CVE-2024-39820 | Medium | 6.6 | 2024-07-15 | Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a d… |
CVE-2024-39819 | Medium | 6.7 | 2024-07-15 | Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local… |
CVE-2024-37016 | Medium | 6.8 | 2024-07-15 | Mengshen Wireless Door Alarm M70 2024-05-24 allows Authentication Bypass via a Capture-Replay approach. |
CVE-2024-27241 | Medium | 5.3 | 2024-07-15 | Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via network access. |
CVE-2024-27240 | High | 7.1 | 2024-07-15 | Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a privilege escalation via local access. |
CVE-2024-27238 | High | 7.1 | 2024-07-15 | Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated user to conduct a privilege escalation… |
CVE-2024-40414 | Critical | 9.8 | 2024-07-15 | A vulnerability in /goform/SetNetControlList in the sub_656BC function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow. |
CVE-2024-40560 | High | 7.3 | 2024-07-15 | Tmall_demo before v2024.07.03 was discovered to contain a SQL injection vulnerability. |
CVE-2024-40555 | Medium | 5.3 | 2024-07-15 | Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability. |
CVE-2024-40554 | High | 7.5 | 2024-07-15 | An access control issue in Tmall_demo v2024.07.03 allows attackers to obtain sensitive information. |
CVE-2024-40553 | Medium | 4.9 | 2024-07-15 | Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage. |
CVE-2024-38496 | | 2024-07-15 | The vulnerability allows a malicious low-privileged PAM user to access information about other PAM users and their group memberships. | |
CVE-2024-38495 | | 2024-07-15 | A specific authentication strategy allows a malicious attacker to learn ids of all PAM users defined in its database. | |
CVE-2024-6689 | High | 7.8 | 2024-07-15 | Local Privilege Escalation in MSI-Installer in baramundi Management Agent v23.1.172.0 on Windows allows a local unprivileged user to escalate privileges to SYS… |
CVE-2024-38494 | | 2024-07-15 | This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by sending a specially crafte… | |
CVE-2024-38493 | Medium | 6.1 | 2024-07-15 | A reflected cross-site scripting (XSS) vulnerability exists in the PAM UI web interface. A remote attacker able to convince a PAM user to click on a specially… |
CVE-2024-38492 | | 2024-07-15 | This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgra… | |
CVE-2024-38491 | | 2024-07-15 | The vulnerability allows an unauthenticated attacker to read arbitrary information from the database. | |
CVE-2024-36458 | | 2024-07-15 | The vulnerability allows a malicious low-privileged PAM user to perform server upgrade related actions. | |
CVE-2024-36457 | | 2024-07-15 | The vulnerability allows an attacker to bypass the authentication requirements for a specific PAM endpoint. | |
CVE-2024-36456 | | 2024-07-15 | This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgra… | |
CVE-2024-36455 | | 2024-07-15 | An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by sending a specially crafted H… | |
CVE-2024-6746 | Medium | 4.3 | 2024-07-15 | A vulnerability classified as problematic was found in NaiboWang EasySpider 0.6.2 on Windows. Affected by this vulnerability is an unknown functionality of the… |
CVE-2024-5402 | High | 7.8 | 2024-07-15 | Unquoted Search Path or Element vulnerability in ABB Mint Workbench. A local attacker who successfully exploited this vulnerability could gain elevated priv… |
CVE-2024-6745 | High | 7.3 | 2024-07-15 | A vulnerability classified as critical has been found in code-projects Simple Ticket Booking 1.0. Affected is an unknown function of the file adminauthenticate… |
CVE-2024-6741 | Medium | 5.8 | 2024-07-15 | Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed. Unauthenticated remote attackers can exploit this vulnerability using spe… |
CVE-2024-6398 | Medium | 4.3 | 2024-07-15 | An information disclosure vulnerability in SWG in versions 12.x prior to 12.2.10 and 11.x prior to 11.2.24 allows information stored in a customizable block pa… |
CVE-2024-41007 | High | 7.5 | 2024-07-15 | In the Linux kernel, the following vulnerability has been resolved: tcp: avoid too many retransmit packets If a TCP socket is using TCP_USER_TIMEOUT, and the… |
CVE-2024-39767 | Medium | 4.2 | 2024-07-15 | Mattermost Mobile Apps versions <=2.16.0 fail to validate that the push notifications received for a server actually came from this serve that which allows a m… |
CVE-2024-32945 | Low | 2.6 | 2024-07-15 | Mattermost Mobile Apps versions <=2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a… |
CVE-2024-6740 | Medium | 6.1 | 2024-07-15 | Openfind's Mail2000 does not properly validate email atachments, allowing unauthenticated remote attackers to inject JavaScript code within the attachment and… |
CVE-2024-6540 | Medium | 5.7 | 2024-07-15 | Improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS could allow an authorized user to download… |
CVE-2024-23794 | Medium | 5.2 | 2024-07-15 | An incorrect privilege assignment vulnerability in the inline editing functionality of OTRS can lead to privilege escalation. This flaw allows an agent with re… |
CVE-2024-6744 | Critical | 9.8 | 2024-07-15 | The SMTP Listener of Secure Email Gateway from Cellopoint does not properly validate user input, leading to a Buffer Overflow vulnerability. An unauthenticated… |
CVE-2024-6743 | Critical | 9.8 | 2024-07-15 | AguardNet's Space Management System does not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read… |
CVE-2024-6742 | Medium | 5.4 | 2024-07-15 | AguardNet Technology's Space Management System does not properly filter user input, allowing remote attackers with regular privileges to inject JavaScript and… |
CVE-2024-6289 | Medium | 6.1 | 2024-07-15 | The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthen… |
CVE-2024-6076 | Medium | 6.1 | 2024-07-15 | The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Ref… |
CVE-2024-6075 | High | 8.8 | 2024-07-15 | The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not have CSRF checks in some places, which could allow attackers to make logged in users pe… |
CVE-2024-6074 | Medium | 6.1 | 2024-07-15 | The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Ref… |
CVE-2024-6073 | Medium | 6.1 | 2024-07-15 | The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Ref… |
CVE-2024-6072 | Medium | 6.1 | 2024-07-15 | The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute… |
CVE-2024-5630 | High | 8.8 | 2024-07-15 | The Insert or Embed Articulate Content into WordPress plugin before 4.3000000024 does not prevent authors from uploading arbitrary files to the site, which may… |
CVE-2024-21513 | High | 8.5 | 2024-07-15 | Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the databas… |
CVE-2024-6739 | Medium | 5.3 | 2024-07-15 | The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote attackers to potentially steal the session… |
CVE-2024-6738 | Medium | 5.3 | 2024-07-15 | The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers to obtain certain specific files by modi… |
CVE-2024-6737 | High | 8.8 | 2024-07-15 | The access control in the Electronic Official Document Management System from 2100 TECHNOLOGY is not properly implemented, allowing remote attackers with regu… |
CVE-2024-39741 | Medium | 4.3 | 2024-07-15 | IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to traverse directories on the system. An attacker could send a speci… |
CVE-2024-39740 | Medium | 4.3 | 2024-07-15 | IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 displays version information in HTTP requests that could allow an attacker to gather information fo… |
CVE-2024-39735 | Medium | 5.4 | 2024-07-15 | IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arb… |
CVE-2024-39729 | Medium | 4.3 | 2024-07-15 | IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow an authenticated user to obtain sensitive information from source code that could be us… |
CVE-2024-39739 | Medium | 5.4 | 2024-07-15 | IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to se… |
CVE-2024-39737 | Medium | 5.4 | 2024-07-15 | IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to obtain sensitive information when a detailed technical error messa… |
CVE-2024-39736 | Medium | 6.5 | 2024-07-15 | IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers… |
CVE-2024-39731 | Medium | 5.9 | 2024-07-15 | IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly s… |
CVE-2024-39728 | Medium | 6.4 | 2024-07-15 | IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary Ja… |
CVE-2024-6736 | Medium | 6.3 | 2024-07-15 | A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as critical. This issue affects some unknown p… |
CVE-2024-6345 | High | 8.8 | 2024-07-15 | A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functio… |
CVE-2024-6735 | Medium | 6.3 | 2024-07-15 | A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the fil… |
CVE-2024-6734 | Medium | 6.3 | 2024-07-15 | A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file templat… |
CVE-2024-6733 | Medium | 6.3 | 2024-07-14 | A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of t… |
CVE-2024-6732 | Medium | 6.3 | 2024-07-14 | A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. This vulnerability affects unknown code of… |
CVE-2024-6731 | Medium | 6.3 | 2024-07-14 | A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. This affects an unknown part of the fi… |
CVE-2024-39734 | Medium | 4.3 | 2024-07-14 | IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able… |
CVE-2024-39733 | Medium | 5.5 | 2024-07-14 | IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 29… |
CVE-2024-39732 | Medium | 4.1 | 2024-07-14 | IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 temporarily stores data from different environments that could be obtained by a malicious user. IB… |
CVE-2024-6730 | Medium | 6.3 | 2024-07-14 | A vulnerability was found in Nanjing Xingyuantu Technology SparkShop up to 1.1.6. It has been rated as critical. This issue affects some unknown processing of… |
CVE-2024-6729 | Medium | 6.3 | 2024-07-14 | A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been declared as critical. This vulnerability affects unk… |
CVE-2024-6728 | Medium | 6.3 | 2024-07-14 | A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file typeedi… |
CVE-2024-6465 | Medium | 4.3 | 2024-07-13 | The WP Links Page plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wplf_ajax_update_screenshot… |
CVE-2024-6574 | Medium | 5.3 | 2024-07-13 | The Laposta plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.12. This is due to the plugin not preventing dir… |
CVE-2024-6070 | Medium | 4.8 | 2024-07-13 | The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.4 does not sanitise and escape some of its settings, which could allow high privilege u… |
CVE-2024-5744 | Medium | 6.8 | 2024-07-13 | The wp-eMember WordPress plugin before 10.6.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead… |
CVE-2024-5715 | High | 7.1 | 2024-07-13 | The wp-eMember WordPress plugin before 10.6.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site… |
CVE-2024-5713 | Medium | 5.4 | 2024-07-13 | The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.4 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an… |
CVE-2024-5644 | Medium | 5.4 | 2024-07-13 | The Tournamatch WordPress plugin before 4.6.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfor… |
CVE-2024-5627 | Medium | 5.4 | 2024-07-13 | The Tournamatch WordPress plugin before 4.6.1 does not sanitise and escape some parameters, which could allow users with a role as low as subscriber to perform… |
CVE-2024-5575 | Medium | 4.7 | 2024-07-13 | The Ditty WordPress plugin before 3.1.43 does not sanitise and escape some of its blocks' settings, which could allow high privilege users such as authors to… |
CVE-2024-5472 | High | 7.1 | 2024-07-13 | The WP QuickLaTeX WordPress plugin before 3.8.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perf… |
CVE-2024-5450 | Critical | 9.1 | 2024-07-13 | The Bug Library WordPress plugin before 2.1.1 does not check the file type on user-submitted bug reports, allowing an unauthenticated user to upload PHP files |
CVE-2024-5442 | Medium | 5.9 | 2024-07-13 | The Photo Gallery, Sliders, Proofing and WordPress plugin before 3.59.3 does not sanitise and escape some of its settings, which could allow high privilege u… |
CVE-2024-5287 | High | 7.1 | 2024-07-13 | The wp-affiliate-platform WordPress plugin before 6.5.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a log… |
CVE-2024-5286 | Medium | 4.8 | 2024-07-13 | The wp-affiliate-platform WordPress plugin before 6.5.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected… |
CVE-2024-5284 | Medium | 6.8 | 2024-07-13 | The wp-affiliate-platform WordPress plugin before 6.5.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could a… |
CVE-2024-5283 | Medium | 6.1 | 2024-07-13 | The wp-affiliate-platform WordPress plugin before 6.5.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected… |
CVE-2024-5282 | Medium | 6.1 | 2024-07-13 | The wp-affiliate-platform WordPress plugin before 6.5.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected… |
CVE-2024-5281 | Medium | 6.1 | 2024-07-13 | The wp-affiliate-platform WordPress plugin before 6.5.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected… |
CVE-2024-5280 | Medium | 4.7 | 2024-07-13 | The wp-affiliate-platform WordPress plugin before 6.5.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could a… |