2024 CVEs (page 230)
Page 230 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-40332 | High | 8.8 | 2024-07-10 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecord |
CVE-2024-40331 | High | 8.8 | 2024-07-10 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL_deal.php?mudi=backup |
CVE-2024-40334 | High | 8.8 | 2024-07-10 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile_deal.php?mudi=upFileDel&dataID=3 |
CVE-2024-40333 | High | 8.8 | 2024-07-10 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=del&dataID=2 |
CVE-2024-40329 | High | 8.8 | 2024-07-10 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=backup |
CVE-2024-40328 | Medium | 6.3 | 2024-07-10 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/memberOnline_deal.php?mudi=del&dataType=&dataID=6 |
CVE-2024-28828 | High | 8.8 | 2024-07-10 | Cross-Site request forgery in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and <= 2.0.0p39 (EOL) could lead to 1-click compromize of the site. |
CVE-2024-28827 | High | 8.8 | 2024-07-10 | Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and <= 2.0.0p39 (EOL) allows a local attacker… |
CVE-2024-3799 | | 2024-07-10 | Insecure handling of POST header parameter body included in requests being sent to an instance of the open-source project Phoniebox allows an attacker to creat… | |
CVE-2024-3798 | | 2024-07-10 | Insecure handling of GET header parameter file included in requests being sent to an instance of the open-source project Phoniebox allows an attacker to create… | |
CVE-2024-6556 | Medium | 5.3 | 2024-07-10 | The SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and includi… |
CVE-2024-6422 | Critical | 9.8 | 2024-07-10 | An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data. |
CVE-2024-6421 | High | 7.5 | 2024-07-10 | An unauthenticated remote attacker can read out sensitive device information through a incorrectly configured FTP service. |
CVE-2024-5664 | Medium | 6.4 | 2024-07-10 | The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute… |
CVE-2024-39493 | Medium | 5.5 | 2024-07-10 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak Using completion_done to determine wheth… |
CVE-2024-39492 | High | 7.0 | 2024-07-10 | In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-cmdq: Fix pm_runtime_get_sync() warning in mbox shutdown The return value of… |
CVE-2024-39491 | Medium | 5.5 | 2024-07-10 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance The cs_dsp instance is initialized in… |
CVE-2024-39490 | Medium | 6.2 | 2024-07-10 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix missing sk_buff release in seg6_input_core The seg6_input() function is res… |
CVE-2024-39489 | Medium | 5.5 | 2024-07-10 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix memleak in seg6_hmac_init_algo seg6_hmac_init_algo returns without cleaning… |
CVE-2024-39488 | Medium | 5.5 | 2024-07-10 | In the Linux kernel, the following vulnerability has been resolved: arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY When CONFIG_DEBUG_BUGVERBOSE=n, we… |
CVE-2024-39927 | High | 8.2 | 2024-07-10 | Out-of-bounds write vulnerability exists in Ricoh MFPs and printers. If a remote attacker sends a specially crafted request to the affected products, the produ… |
CVE-2024-39886 | Low | 3.7 | 2024-07-10 | TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App communicates with TONE store website in clear… |
CVE-2024-36453 | Medium | 6.1 | 2024-07-10 | Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions prior to 1.820. If this vulnerability is… |
CVE-2024-36452 | Low | 3.1 | 2024-07-10 | Cross-site request forgery vulnerability exists in ajaxterm module of Webmin versions prior to 2.003. If this vulnerability is exploited, unintended operations… |
CVE-2024-36451 | High | 8.8 | 2024-07-10 | Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003. If this vulnerability is exploite… |
CVE-2024-36450 | Medium | 5.4 | 2024-07-10 | Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is exploited, an arbitrary script may be exec… |
CVE-2024-6411 | High | 8.8 | 2024-07-10 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.8.9… |
CVE-2024-6410 | Medium | 4.3 | 2024-07-10 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inclu… |
CVE-2024-39614 | High | 7.5 | 2024-07-10 | An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. get_supported_language_variant() was subject to a potential denial-of-service attack… |
CVE-2024-39330 | Medium | 4.3 | 2024-07-10 | An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of the django.core.files.storage.Storage base class, when they overri… |
CVE-2024-39329 | Medium | 5.3 | 2024-07-10 | An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.contrib.auth.backends.ModelBackend.authenticate() method allows remote att… |
CVE-2024-38875 | High | 7.5 | 2024-07-10 | An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certa… |
CVE-2024-21526 | High | 7.5 | 2024-07-10 | All versions of the package speaker are vulnerable to Denial of Service (DoS) when providing unexpected input types to the channels property of the Speaker obj… |
CVE-2024-21525 | High | 8.3 | 2024-07-10 | All versions of the package node-twain are vulnerable to Improper Check or Handling of Exceptional Conditions due to the length of the source data not being ch… |
CVE-2024-21524 | High | 8.2 | 2024-07-10 | All versions of the package node-stringbuilder are vulnerable to Out-of-bounds Read due to incorrect memory length calculation, by calling ToBuffer, ToString… |
CVE-2024-21523 | High | 7.5 | 2024-07-10 | All versions of the package images are vulnerable to Denial of Service (DoS) due to providing unexpected input types to several different functions. This makes… |
CVE-2024-21522 | High | 7.5 | 2024-07-10 | All versions of the package audify are vulnerable to Improper Validation of Array Index when frameSize is provided to the new OpusDecoder().decode or new OpusD… |
CVE-2024-21521 | High | 7.5 | 2024-07-10 | All versions of the package @discordjs/opus are vulnerable to Denial of Service (DoS) due to providing an input object with a property toString to several diff… |
CVE-2024-6550 | Medium | 5.3 | 2024-07-10 | The Gravity Forms: Multiple Form Instances plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.1.1. This is due… |
CVE-2024-38301 | Medium | 6.7 | 2024-07-10 | Dell Alienware Command Center, version 5.7.3.0 and prior, contains an improper access control vulnerability. A low privileged attacker could potentially exploi… |
CVE-2024-5792 | High | 8.8 | 2024-07-10 | The Houzez CRM plugin for WordPress is vulnerable to time-based SQL Injection via the notes ‘belong_to’ parameter in all versions up to, and including, 1.4.2 d… |
CVE-2024-5677 | Medium | 4.3 | 2024-07-10 | The Featured Image Generator plugin for WordPress is vulnerable to unauthorized image upload due to a missing capability check on the fig_save_after_generate_i… |
CVE-2024-4866 | Medium | 6.4 | 2024-07-10 | The UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) plugin for WordPress… |
CVE-2024-22018 | Low | 2.9 | 2024-07-10 | A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-read flag is used. This flaw arises fr… |
CVE-2024-6433 | High | 7.5 | 2024-07-10 | The application zips all the files in the folder specified by the user, which allows an attacker to read arbitrary files on the system by providing a crafted p… |
CVE-2024-32670 | | 2024-07-10 | Exposure of Sensitive Information to an Unauthorized Actor in Samsung Galaxy SmartTag2 prior to 0.20.04 allows attackes to potentially identify the tag's locat… | |
CVE-2024-25023 | Medium | 5.5 | 2024-07-10 | IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 stores potentially sensitive information in log… |
CVE-2024-21417 | High | 8.8 | 2024-07-10 | Windows Text Services Framework Elevation of Privilege Vulnerability |
CVE-2024-22477 | Low | 1.8 | 2024-07-09 | A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor. The impact is contained to admin console users only. |
CVE-2024-22377 | Medium | 5.3 | 2024-07-09 | The deploy directory in PingFederate runtime nodes is reachable to unauthorized users. |
CVE-2024-21832 | Low | 3.5 | 2024-07-09 | A potential JSON injection attack vector exists in PingFederate REST API data stores using the POST method and a JSON request body. |
CVE-2024-39901 | Medium | 4.2 | 2024-07-09 | OpenSearch Observability is collection of plugins and applications that visualize data-driven events. An issue in the OpenSearch observability plugins allows u… |
CVE-2024-39900 | Medium | 5.4 | 2024-07-09 | OpenSearch Dashboards Reports allows ‘Report Owner’ export and share reports from OpenSearch Dashboards. An issue in the OpenSearch reporting plugin allows uni… |
CVE-2024-39883 | High | 8.8 | 2024-07-09 | Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target v… |
CVE-2024-39882 | High | 8.8 | 2024-07-09 | Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. If a target visits… |
CVE-2024-39881 | High | 8.8 | 2024-07-09 | Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a memory corruption condition. If a target visits a malicious p… |
CVE-2024-39880 | High | 7.8 | 2024-07-09 | Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. If a target… |
CVE-2024-39069 | High | 7.8 | 2024-07-09 | An issue in ifood Order Manager v3.35.5 'Gestor de Peddios.exe' allows attackers to execute arbitrary code via a DLL hijacking attack. |
CVE-2024-38963 | Medium | 6.1 | 2024-07-09 | Nopcommerce 4.70.1 is vulnerable to Cross Site Scripting (XSS) via the combined "AddProductReview.Title" and "AddProductReview.ReviewText" parameter(s) (Review… |
CVE-2024-36676 | High | 7.5 | 2024-07-09 | Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification email DoS via public… |
CVE-2024-35154 | High | 7.2 | 2024-07-09 | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote authenticated attacker, who has authorized access to the administrative console, to execute a… |
CVE-2024-21993 | Medium | 5.7 | 2024-07-09 | SnapCenter versions prior to 5.0p1 are susceptible to a vulnerability which could allow an authenticated attacker to discover plaintext credentials. |
CVE-2024-39181 | Medium | 6.5 | 2024-07-09 | Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 was discovered to contain a buffer overflow via the ApCliSsid parameter in thegenerate_conf_router() fu… |
CVE-2024-39072 | Medium | 5.5 | 2024-07-09 | AMTT Hotel Broadband Operation System (HiBOS) v3.0.3.151204 is vulnerable to SQL injection via manager/conference/calendar_remind.php. |
CVE-2024-39071 | Critical | 9.8 | 2024-07-09 | Fujian Kelixun <=7.6.6.4391 is vulnerable to SQL Injection in send_event.php. |
CVE-2024-39031 | Medium | 5.4 | 2024-07-09 | In Silverpeas Core <= 6.3.5, in Mes Agendas, a user can create new events and add them to their calendar. Additionally, users can invite others from the same d… |
CVE-2024-38959 | Medium | 6.1 | 2024-07-09 | Cross Site Scripting vulnerability in Creativeitem Academy LMS Learning Management System v.6.8.1 allows a remote attacker to execute arbitrary code and obtain… |
CVE-2024-37865 | Medium | 5.9 | 2024-07-09 | An issue in S3Browser v.11.4.5 and v.10.9.9 and fixed in v.11.5.7 allows a remote attacker to obtain sensitive information via the S3 compatible storage compon… |
CVE-2024-37829 | High | 8.8 | 2024-07-09 | An issue in Outline <= v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link. |
CVE-2024-34726 | High | 7.8 | 2024-07-09 | In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privile… |
CVE-2024-34725 | High | 7.0 | 2024-07-09 | In DevmemIntUnexportCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of pri… |
CVE-2024-34724 | High | 7.0 | 2024-07-09 | In _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in th… |
CVE-2024-34723 | High | 7.8 | 2024-07-09 | In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logic error in the code… |
CVE-2024-34722 | High | 8.8 | 2024-07-09 | In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could l… |
CVE-2024-34721 | Medium | 5.5 | 2024-07-09 | In ensureFileColumns of MediaProvider.java, there is a possible disclosure of files owned by another user due to improper input validation. This could lead to… |
CVE-2024-34720 | High | 7.8 | 2024-07-09 | In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_ZygoteCommandBuffer.cpp, there is a possible method to perform a… |
CVE-2024-31339 | High | 7.8 | 2024-07-09 | In multiple functions of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with… |
CVE-2024-31335 | High | 7.8 | 2024-07-09 | In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escala… |
CVE-2024-31334 | High | 7.8 | 2024-07-09 | In DevmemIntFreeDefBackingPage of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local e… |
CVE-2024-31332 | High | 7.8 | 2024-07-09 | In multiple locations, there is a possible way to bypass a restriction on adding new Wi-Fi connections due to a missing permission check. This could lead to lo… |
CVE-2024-31331 | High | 7.3 | 2024-07-09 | In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code. This could lead to l… |
CVE-2024-31327 | High | 7.0 | 2024-07-09 | In multiple functions of MessageQueueBase.h, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege… |
CVE-2024-31326 | High | 7.8 | 2024-07-09 | In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code. This could lead to local… |
CVE-2024-31325 | High | 7.8 | 2024-07-09 | In multiple locations, there is a possible way to reveal images across users data due to a logic error in the code. This could lead to local escalation of priv… |
CVE-2024-31324 | High | 7.3 | 2024-07-09 | In hide of WindowState.java, there is a possible way to bypass tapjacking/overlay protection by launching the activity in portrait mode first and then rotating… |
CVE-2024-31323 | High | 7.8 | 2024-07-09 | In onCreate of multiple files, there is a possible way to trick the user into granting health permissions due to tapjacking. This could lead to local escalatio… |
CVE-2024-31322 | High | 7.8 | 2024-07-09 | In updateServicesLocked of AccessibilityManagerService.java, there is a possible way for an app to be hidden from the Setting while retaining Accessibility Ser… |
CVE-2024-31320 | High | 7.8 | 2024-07-09 | In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association without any confirmation due to CDM. This cou… |
CVE-2024-31319 | High | 7.8 | 2024-07-09 | In updateNotificationChannelFromPrivilegedListener of NotificationManagerService.java, there is a possible cross-user data leak due to a confused deputy. This… |
CVE-2024-31318 | High | 7.8 | 2024-07-09 | In CompanionDeviceManagerService.java, there is a possible way to pair a companion device without user acceptance due to a missing permission check. This could… |
CVE-2024-31317 | High | 7.8 | 2024-07-09 | In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execution as any app via WRITE_SECURE_SETTINGS due to unsafe deserializati… |
CVE-2024-31316 | High | 7.8 | 2024-07-09 | In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch due to parcel mismatch. This could lead t… |
CVE-2024-31315 | High | 7.8 | 2024-07-09 | In multiple functions of ManagedServices.java, there is a possible way to hide an app with notification access in the Device & app notifications settings due t… |
CVE-2024-31314 | Medium | 5.5 | 2024-07-09 | In multiple functions of ShortcutService.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with n… |
CVE-2024-31313 | High | 7.8 | 2024-07-09 | In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation o… |
CVE-2024-31312 | Medium | 5.5 | 2024-07-09 | In multiple locations, there is a possible information leak due to a missing permission check. This could lead to local information disclosure exposing played… |
CVE-2024-31311 | High | 7.8 | 2024-07-09 | In increment_annotation_count of stats_event.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p… |
CVE-2024-31310 | High | 7.8 | 2024-07-09 | In newServiceInfoLocked of AutofillManagerServiceImpl.java, there is a possible way to hide an enabled Autofill service app in the Autofill service settings du… |
CVE-2024-27386 | Medium | 6.7 | 2024-07-09 | A vulnerability was discovered in the slsi_handle_nan_rx_event_log_ind function in Samsung Mobile Processor Exynos 1380 and Exynos 1480 related to no input val… |
CVE-2024-27385 | Medium | 6.7 | 2024-07-09 | A vulnerability was discovered in the slsi_handle_nan_rx_event_log_ind function in Samsung Mobile Processor Exynos 1380 and Exynos 1480 related to no input val… |