2024 CVEs (page 240)
Page 240 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-5922 | Medium | 6.4 | 2024-06-28 | The Scylla lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Button shortcode in all versions up… |
CVE-2024-5662 | Medium | 6.4 | 2024-06-28 | The Ultimate Post Kit Addons For Elementor – (Post Grid, Post Carousel, Post Slider, Category List, Post Tabs, Timeline, Post Ticker, Tag Cloud) plugin for Wor… |
CVE-2024-5424 | Medium | 6.4 | 2024-06-28 | The Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery plugin for WordPress is vulnerabl… |
CVE-2024-30135 | Low | 3.3 | 2024-06-28 | HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken. |
CVE-2024-6288 | Medium | 4.7 | 2024-06-28 | The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site… |
CVE-2024-5796 | Medium | 6.4 | 2024-06-28 | The Infinite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘project_url’ parameter in all versions up to, and including, 1.1.2 due t… |
CVE-2024-5788 | Medium | 6.4 | 2024-06-28 | The Silesia theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ attribute within the theme's Button shortcode in all versions up to… |
CVE-2024-39350 | High | 7.5 | 2024-06-28 | A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-middle attackers to obtain privileges wi… |
CVE-2024-39348 | High | 7.5 | 2024-06-28 | Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows… |
CVE-2024-39347 | Medium | 5.9 | 2024-06-28 | Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-… |
CVE-2024-30111 | Low | 3.3 | 2024-06-28 | HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due… |
CVE-2024-30110 | Low | 3.7 | 2024-06-28 | HCL DRYiCE AEX product is impacted by lack of input validation vulnerability in a particular web application. A malicious script can be injected into a system… |
CVE-2024-2795 | Medium | 5.3 | 2024-06-28 | The SEO SIMPLE PACK plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.2.1 via META description. This makes it… |
CVE-2024-5730 | Medium | 6.1 | 2024-06-28 | The Pagerank tools WordPress plugin through 1.1.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-… |
CVE-2024-5729 | Medium | 6.1 | 2024-06-28 | The Simple AL Slider WordPress plugin through 1.2.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cro… |
CVE-2024-5728 | Medium | 5.4 | 2024-06-28 | The Animated AL List WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cros… |
CVE-2024-5727 | Medium | 4.7 | 2024-06-28 | The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Sit… |
CVE-2024-5570 | Medium | 6.5 | 2024-06-28 | The Simple Photoswipe WordPress plugin through 0.1 does not have authorisation check when updating its settings, which could allow any authenticated users, suc… |
CVE-2024-39352 | Medium | 4.9 | 2024-06-28 | A vulnerability regarding incorrect authorization is found in the firmware upgrade functionality. This allows remote authenticated users with administrator pri… |
CVE-2024-39351 | High | 7.2 | 2024-06-28 | A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the NTP configuration. This al… |
CVE-2024-39349 | Critical | 9.8 | 2024-06-28 | A vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow') is found in the libjansson component and it does not affect th… |
CVE-2024-30109 | Low | 3.7 | 2024-06-28 | HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick… |
CVE-2024-37282 | High | 8.1 | 2024-06-28 | It was identified that under certain specific preconditions, an API key that was originally created with a specific privileges could be subsequently used to cr… |
CVE-2024-6296 | Medium | 6.4 | 2024-06-28 | The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-caption’ parameter in all version… |
CVE-2024-5864 | Medium | 4.3 | 2024-06-28 | The Easy Affiliate Links plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eafl_reset_settings A… |
CVE-2024-5863 | Medium | 5.4 | 2024-06-28 | The Easy Image Collage plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the ajax_image_collage() function i… |
CVE-2024-37137 | Low | 3.8 | 2024-06-28 | Dell Key Trust Platform, v3.0.6 and prior, contains Use of a Cryptographic Primitive with a Risky Implementation vulnerability. A local privileged attacker cou… |
CVE-2024-39708 | High | 7.0 | 2024-06-28 | An issue was discovered in the Agent in Delinea Privilege Manager (formerly Thycotic Privilege Manager) before 12.0.1096 on Windows. Sometimes, a non-administr… |
CVE-2024-6071 | Critical | 10.0 | 2024-06-27 | PTC Creo Elements/Direct License Server exposes a web interface which can be used by unauthenticated remote attackers to execute arbitrary OS commands on the s… |
CVE-2024-4395 | High | 7.8 | 2024-06-27 | The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation. |
CVE-2024-39705 | Critical | 9.8 | 2024-06-27 | NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used… |
CVE-2024-36059 | Critical | 9.4 | 2024-06-27 | Directory Traversal vulnerability in Kalkitech ASE ASE61850 IEDSmart upto and including version 2.3.5 allows attackers to read/write arbitrary files via the IE… |
CVE-2024-5642 | Medium | 6.5 | 2024-06-27 | CPython 3.9 and earlier doesn't disallow configuring an empty list ("[]") for SSLContext.set_npn_protocols() which is an invalid value for the underlying OpenS… |
CVE-2024-39209 | Medium | 6.3 | 2024-06-27 | luci-app-sms-tool v1.9-6 was discovered to contain a command injection vulnerability via the score parameter. |
CVE-2024-39134 | High | 7.5 | 2024-06-27 | A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at /zzip/z… |
CVE-2024-39132 | Medium | 6.5 | 2024-06-27 | A NULL Pointer Dereference vulnerability in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function VerifyCommandLine() at /src/Du… |
CVE-2024-36755 | Medium | 6.8 | 2024-06-27 | D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL. This can allow attackers to… |
CVE-2024-36075 | Medium | 6.5 | 2024-06-27 | The CoSoSys Endpoint Protector through 5.9.3 and Unify agent through 7.0.6 is susceptible to an arbitrary code execution vulnerability due to the way an archiv… |
CVE-2024-36074 | High | 7.2 | 2024-06-27 | Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the Endpoint Protector and Un… |
CVE-2024-36073 | High | 7.2 | 2024-06-27 | Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the shadowing component of th… |
CVE-2024-36072 | Critical | 9.8 | 2024-06-27 | Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the logging component of the… |
CVE-2024-2973 | Critical | 10.0 | 2024-06-27 | An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer a… |
CVE-2024-22276 | Medium | 5.3 | 2024-06-27 | VMware Cloud Director Object Storage Extension contains an Insertion of Sensitive Information vulnerability. A malicious actor with adjacent access to web/p… |
CVE-2024-22272 | Medium | 4.9 | 2024-06-27 | VMware Cloud Director contains an Improper Privilege Management vulnerability. An authenticated tenant administrator for a given organization within VMware… |
CVE-2024-22260 | Medium | 6.8 | 2024-06-27 | VMware Workspace One UEM update addresses an information exposure vulnerability. A malicious actor with network access to the Workspace One UEM may be able t… |
CVE-2024-6127 | Critical | 9.8 | 2024-06-27 | BC Security Empire before 5.9.3 is vulnerable to a path traversal issue that can lead to remote code execution. A remote, unauthenticated attacker can exploit… |
CVE-2024-39208 | Critical | 9.8 | 2024-06-27 | luci-app-lucky v2.8.3 was discovered to contain hardcoded credentials. |
CVE-2024-39207 | High | 8.2 | 2024-06-27 | lua-shmem v1.0-1 was discovered to contain a buffer overflow via the shmem_write function. |
CVE-2024-39133 | Medium | 4.3 | 2024-06-27 | Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zi… |
CVE-2024-39130 | High | 7.5 | 2024-06-27 | A NULL Pointer Dereference discovered in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function DumpOneStream() at /src/DumpStrea… |
CVE-2024-39129 | Medium | 5.3 | 2024-06-27 | Heap Buffer Overflow vulnerability in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function PushTSBuf() at /src/PayloadBuf.cpp. |
CVE-2024-38523 | High | 7.5 | 2024-06-27 | Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. The TOTP authentication flow has multiple issues that we… |
CVE-2024-31802 | Medium | 6.3 | 2024-06-27 | DESIGNA ABACUS v.18 and before allows an attacker to bypass the payment process via a crafted QR code. |
CVE-2024-6250 | High | 7.5 | 2024-06-27 | An absolute path traversal vulnerability exists in parisneo/lollms-webui v9.6, specifically in the `open_file` endpoint of `lollms_advanced.py`. The `sanitize_… |
CVE-2024-6139 | High | 7.3 | 2024-06-27 | A path traversal vulnerability exists in the XTTS server of the parisneo/lollms package version v9.6. This vulnerability allows an attacker to write audio file… |
CVE-2024-6090 | High | 7.5 | 2024-06-27 | A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This vulnerabili… |
CVE-2024-6086 | Medium | 4.3 | 2024-06-27 | In version 1.2.7 of lunary-ai/lunary, any authenticated user, regardless of their role, can change the name of an organization due to improper access control… |
CVE-2024-6085 | High | 8.6 | 2024-06-27 | A path traversal vulnerability exists in the XTTS server included in the lollms package, version v9.6. This vulnerability arises from the ability to perform an… |
CVE-2024-6038 | High | 7.5 | 2024-06-27 | A Regular Expression Denial of Service (ReDoS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability is located in the fi… |
CVE-2024-5980 | Critical | 9.8 | 2024-06-27 | A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files… |
CVE-2024-5979 | High | 7.5 | 2024-06-27 | In h2oai/h2o-3 version 3.46.0, the `run_tool` command in the `rapids` component allows the `main` function of any class under the `water.tools` namespace to be… |
CVE-2024-5936 | Medium | 6.1 | 2024-06-27 | An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter. This vulnerability allows attacke… |
CVE-2024-5935 | Medium | 5.4 | 2024-06-27 | A Cross-Site Request Forgery (CSRF) vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the server. This… |
CVE-2024-5933 | Medium | 5.4 | 2024-06-27 | A Cross-site Scripting (XSS) vulnerability exists in the chat functionality of parisneo/lollms-webui in the latest version. This vulnerability allows an attack… |
CVE-2024-5885 | High | 8.6 | 2024-06-27 | stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery (SSRF) vulnerability. The application does not provide sufficient controls when crawlin… |
CVE-2024-5826 | Critical | 9.8 | 2024-06-27 | In the latest version of vanna-ai/vanna, the `vanna.ask` function is vulnerable to remote code execution due to prompt injection. The root cause is the lack of… |
CVE-2024-5824 | High | 7.4 | 2024-06-27 | A path traversal vulnerability in the `/set_personality_config` endpoint of parisneo/lollms version 9.4.0 allows an attacker to overwrite the `configs/config.y… |
CVE-2024-5822 | Critical | 9.8 | 2024-06-27 | A Server-Side Request Forgery (SSRF) vulnerability exists in the upload processing interface of gaizhenbiao/ChuanhuChatGPT versions <= ChuanhuChatGPT-20240410-… |
CVE-2024-5820 | High | 8.8 | 2024-06-27 | An unprotected WebSocket connection in the latest version of stitionai/devika (commit ecee79f) allows a malicious website to connect to the backend and issue c… |
CVE-2024-5755 | Medium | 5.3 | 2024-06-27 | In lunary-ai/lunary versions <=v1.2.11, an attacker can bypass email validation by using a dot character ('.') in the email address. This allows the creation o… |
CVE-2024-5751 | Critical | 9.8 | 2024-06-27 | BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution. The vulnerability exists in the `add_deployment`… |
CVE-2024-5714 | Medium | 6.8 | 2024-06-27 | In lunary-ai/lunary version 1.2.4, an improper access control vulnerability allows members with team management permissions to manipulate project identifiers i… |
CVE-2024-5710 | Medium | 6.5 | 2024-06-27 | berriai/litellm version 1.34.34 is vulnerable to improper access control in its team management functionality. This vulnerability allows attackers to perform u… |
CVE-2024-4578 | High | 8.4 | 2024-06-27 | This Advisory describes an issue that impacts Arista Wireless Access Points. Any entity with the ability to authenticate via SSH to an affected AP as the “conf… |
CVE-2024-3331 | Medium | 6.8 | 2024-06-27 | Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfi… |
CVE-2024-3330 | Critical | 9.9 | 2024-06-27 | Vulnerability in Spotfire Spotfire Analyst, Spotfire Spotfire Server, Spotfire Spotfire for AWS Marketplace allows In the case of the installed Windows client… |
CVE-2024-3043 | High | 7.5 | 2024-06-27 | An unauthenticated IEEE 802.15.4 'co-ordinator realignment' packet can be used to force Zigbee nodes to change their network identifier (pan ID), leading to a… |
CVE-2024-3017 | Medium | 6.5 | 2024-06-27 | In a Silicon Labs multi-protocol gateway, a corrupt pointer to buffered data on a multi-protocol radio co-processor (RCP) causes the OpenThread Border Route… |
CVE-2024-2882 | | 2024-06-27 | SDG Technologies PnPSCADA allows a remote attacker to attach various entities without requiring system authentication. This breach could potentially lead to un… | |
CVE-2024-5548 | High | 7.5 | 2024-06-27 | A directory traversal vulnerability exists in the stitionai/devika repository, specifically within the /api/download-project endpoint. Attackers can exploit th… |
CVE-2024-5547 | High | 7.5 | 2024-06-27 | A directory traversal vulnerability exists in the /api/download-project-pdf endpoint of the stitionai/devika repository, affecting the latest version. The vuln… |
CVE-2024-5334 | High | 7.5 | 2024-06-27 | A local file read vulnerability exists in the stitionai/devika repository, affecting the latest version. The vulnerability is due to improper handling of the '… |
CVE-2024-35260 | High | 8.0 | 2024-06-27 | An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network. |
CVE-2024-35153 | Medium | 4.8 | 2024-06-27 | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript c… |
CVE-2024-31916 | High | 7.5 | 2024-06-27 | IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an unauthorized actor that bypasses authenticatio… |
CVE-2024-24792 | High | 7.5 | 2024-06-27 | Parsing a corrupt or malicious image with invalid color indices can cause a panic. |
CVE-2024-6388 | Medium | 5.9 | 2024-06-27 | Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an a… |
CVE-2024-39669 | Critical | 9.8 | 2024-06-27 | In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execute arbitrary code in… |
CVE-2024-39376 | Critical | 9.8 | 2024-06-27 | TELSAT marKoni FM Transmitters are vulnerable to users gaining unauthorized access to sensitive information or performing actions beyond their designated permi… |
CVE-2024-39375 | Critical | 9.8 | 2024-06-27 | TELSAT marKoni FM Transmitters are vulnerable to an attacker bypassing authentication and gaining administrator privileges. |
CVE-2024-39374 | Critical | 9.8 | 2024-06-27 | TELSAT marKoni FM Transmitters are vulnerable to an attacker exploiting a hidden admin account that can be accessed through the use of hard-coded credentials. |
CVE-2024-39373 | High | 7.2 | 2024-06-27 | TELSAT marKoni FM Transmitters are vulnerable to a command injection vulnerability through the manipulation of settings and could allow an attacker to gain una… |
CVE-2024-31883 | Medium | 5.3 | 2024-06-27 | IBM Security Verify Access 10.0.0.0 through 10.0.7.1, under certain configurations, could allow an unauthenticated attacker to cause a denial of service due to… |
CVE-2024-28820 | Medium | 6.3 | 2024-06-27 | Buffer overflow in the extract_openvpn_cr function in openvpn-cr.c in openvpn-auth-ldap (aka the Three Rings Auth-LDAP plugin for OpenVPN) 2.0.4 allows attacke… |
CVE-2024-6374 | Low | 3.5 | 2024-06-27 | A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as problematic. This issue affects some unknown processing of t… |
CVE-2024-39158 | High | 8.8 | 2024-06-27 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_deal.php?mudi=infoSet. |
CVE-2024-39157 | Low | 3.8 | 2024-06-27 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mudi=del&dataType=&dataID=1. |
CVE-2024-39156 | Low | 3.8 | 2024-06-27 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=add. |
CVE-2024-39155 | Medium | 6.8 | 2024-06-27 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mudi=add. |
CVE-2024-39154 | High | 8.8 | 2024-06-27 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=del&dataType=word&dataTypeCN. |