2024 CVEs (page 240)
Page 240 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-25053 | Medium | 5.9 | 2024-06-28 | IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Pla… |
CVE-2024-25041 | Medium | 5.4 | 2024-06-28 | IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is potentially vulnerable to cross site scripting (XSS). A remote attac… |
CVE-2024-25031 | Medium | 6.5 | 2024-06-28 | IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4 uses an inadequate account lockout setting that could allow an attacker on the network to brute f… |
CVE-2024-38374 | High | 7.5 | 2024-06-28 | The CycloneDX core module provides a model representation of the SBOM along with utilities to assist in creating, validating, and parsing SBOMs. Before deseria… |
CVE-2024-38371 | High | 8.6 | 2024-06-28 | authentik is an open-source Identity Provider. Access restrictions assigned to an application were not checked when using the OAuth2 Device code flow. This cou… |
CVE-2024-37905 | High | 8.8 | 2024-06-28 | authentik is an open-source Identity Provider that emphasizes flexibility and versatility. Authentik API-Access-Token mechanism can be exploited to gain admin… |
CVE-2024-35155 | Medium | 6.5 | 2024-06-28 | IBM MQ Console 9.3 LTS and 9.3 CD could disclose could allow a remote attacker to obtain sensitive information when a detailed technical error message is retur… |
CVE-2024-31919 | Medium | 5.9 | 2024-06-28 | IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD, in certain configurations, is vulnerable to a denial of service attack caused by an error processing mess… |
CVE-2024-31912 | High | 7.5 | 2024-06-28 | IBM MQ 9.3 LTS and 9.3 CD could allow an authenticated user to escalate their privileges under certain configurations due to incorrect privilege assignment. I… |
CVE-2024-6403 | Medium | 6.5 | 2024-06-28 | A vulnerability, which was classified as critical, has been found in Tenda A301 15.13.08.12. Affected by this issue is the function formWifiBasicSet of the fil… |
CVE-2024-6402 | Medium | 6.5 | 2024-06-28 | A vulnerability classified as critical was found in Tenda A301 15.13.08.12. Affected by this vulnerability is the function fromSetWirelessRepeat of the file /g… |
CVE-2024-38522 | Medium | 6.3 | 2024-06-28 | Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. The CSP policy applied on the `tips.hushline.app` websit… |
CVE-2024-38521 | High | 8.8 | 2024-06-28 | Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. There is a stored XSS in the Inbox. The input is display… |
CVE-2024-35139 | Medium | 6.2 | 2024-06-28 | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from the container due to incorrect defau… |
CVE-2024-35137 | Medium | 6.2 | 2024-06-28 | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileges due to sensitive configuration infor… |
CVE-2024-29039 | Critical | 9.0 | 2024-06-28 | tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools. This vulnerability allows attackers to manipulate tpm2_checkquote outputs by alte… |
CVE-2024-38531 | Low | 3.6 | 2024-06-28 | Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. A build process has access to and can change… |
CVE-2024-29038 | Medium | 4.3 | 2024-06-28 | tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detecte… |
CVE-2024-3816 | Critical | 9.8 | 2024-06-28 | Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to a blind SQL Injection executed using the search bar. Only a part of observed services is… |
CVE-2024-3801 | Medium | 6.1 | 2024-06-28 | Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in one of GET header parameters. Only a part of obser… |
CVE-2024-3800 | Medium | 6.1 | 2024-06-28 | Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in requested file names. Only a part of observed serv… |
CVE-2024-39704 | Critical | 9.8 | 2024-06-28 | Soft Circle French-Bread Melty Blood: Actress Again: Current Code through 1.07 Rev. 1.4.0 allows a remote attacker to execute arbitrary code on a client's mach… |
CVE-2024-37741 | Medium | 5.4 | 2024-06-28 | OpenPLC 3 through 9cd8f1b allows XSS via an SVG document as a profile picture. |
CVE-2024-5737 | Medium | 6.1 | 2024-06-28 | Script afGdStream.php in AdmirorFrames Joomla! extension doesn’t specify a content type and as a result default (text/html) is used. An attacker may embed HTML… |
CVE-2024-5736 | High | 7.5 | 2024-06-28 | Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to access local files or server pages avail… |
CVE-2024-5735 | High | 7.5 | 2024-06-28 | Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root f… |
CVE-2024-5925 | Medium | 6.4 | 2024-06-28 | The Theron Lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Button shortcode in all versions up… |
CVE-2024-5922 | Medium | 6.4 | 2024-06-28 | The Scylla lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Button shortcode in all versions up… |
CVE-2024-5662 | Medium | 6.4 | 2024-06-28 | The Ultimate Post Kit Addons For Elementor – (Post Grid, Post Carousel, Post Slider, Category List, Post Tabs, Timeline, Post Ticker, Tag Cloud) plugin for Wor… |
CVE-2024-5424 | Medium | 6.4 | 2024-06-28 | The Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery plugin for WordPress is vulnerabl… |
CVE-2024-30135 | Low | 3.3 | 2024-06-28 | HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken. |
CVE-2024-6288 | Medium | 4.7 | 2024-06-28 | The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site… |
CVE-2024-5796 | Medium | 6.4 | 2024-06-28 | The Infinite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘project_url’ parameter in all versions up to, and including, 1.1.2 due t… |
CVE-2024-5788 | Medium | 6.4 | 2024-06-28 | The Silesia theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ attribute within the theme's Button shortcode in all versions up to… |
CVE-2024-39350 | High | 7.5 | 2024-06-28 | A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-middle attackers to obtain privileges wi… |
CVE-2024-39348 | High | 7.5 | 2024-06-28 | Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows… |
CVE-2024-39347 | Medium | 5.9 | 2024-06-28 | Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-… |
CVE-2024-30111 | Low | 3.3 | 2024-06-28 | HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due… |
CVE-2024-30110 | Low | 3.7 | 2024-06-28 | HCL DRYiCE AEX product is impacted by lack of input validation vulnerability in a particular web application. A malicious script can be injected into a system… |
CVE-2024-2795 | Medium | 5.3 | 2024-06-28 | The SEO SIMPLE PACK plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.2.1 via META description. This makes it… |
CVE-2024-5730 | Medium | 6.1 | 2024-06-28 | The Pagerank tools WordPress plugin through 1.1.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-… |
CVE-2024-5729 | Medium | 6.1 | 2024-06-28 | The Simple AL Slider WordPress plugin through 1.2.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cro… |
CVE-2024-5728 | Medium | 5.4 | 2024-06-28 | The Animated AL List WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cros… |
CVE-2024-5727 | Medium | 4.7 | 2024-06-28 | The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Sit… |
CVE-2024-5570 | Medium | 6.5 | 2024-06-28 | The Simple Photoswipe WordPress plugin through 0.1 does not have authorisation check when updating its settings, which could allow any authenticated users, suc… |
CVE-2024-39352 | Medium | 4.9 | 2024-06-28 | A vulnerability regarding incorrect authorization is found in the firmware upgrade functionality. This allows remote authenticated users with administrator pri… |
CVE-2024-39351 | High | 7.2 | 2024-06-28 | A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the NTP configuration. This al… |
CVE-2024-39349 | Critical | 9.8 | 2024-06-28 | A vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow') is found in the libjansson component and it does not affect th… |
CVE-2024-30109 | Low | 3.7 | 2024-06-28 | HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick… |
CVE-2024-37282 | High | 8.1 | 2024-06-28 | It was identified that under certain specific preconditions, an API key that was originally created with a specific privileges could be subsequently used to cr… |
CVE-2024-6296 | Medium | 6.4 | 2024-06-28 | The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-caption’ parameter in all version… |
CVE-2024-5864 | Medium | 4.3 | 2024-06-28 | The Easy Affiliate Links plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eafl_reset_settings A… |
CVE-2024-5863 | Medium | 5.4 | 2024-06-28 | The Easy Image Collage plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the ajax_image_collage() function i… |
CVE-2024-37137 | Low | 3.8 | 2024-06-28 | Dell Key Trust Platform, v3.0.6 and prior, contains Use of a Cryptographic Primitive with a Risky Implementation vulnerability. A local privileged attacker cou… |
CVE-2024-39708 | High | 7.0 | 2024-06-28 | An issue was discovered in the Agent in Delinea Privilege Manager (formerly Thycotic Privilege Manager) before 12.0.1096 on Windows. Sometimes, a non-administr… |
CVE-2024-6071 | Critical | 10.0 | 2024-06-27 | PTC Creo Elements/Direct License Server exposes a web interface which can be used by unauthenticated remote attackers to execute arbitrary OS commands on the s… |
CVE-2024-4395 | High | 7.8 | 2024-06-27 | The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation. |
CVE-2024-39705 | Critical | 9.8 | 2024-06-27 | NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used… |
CVE-2024-36059 | Critical | 9.4 | 2024-06-27 | Directory Traversal vulnerability in Kalkitech ASE ASE61850 IEDSmart upto and including version 2.3.5 allows attackers to read/write arbitrary files via the IE… |
CVE-2024-5642 | Medium | 6.5 | 2024-06-27 | CPython 3.9 and earlier doesn't disallow configuring an empty list ("[]") for SSLContext.set_npn_protocols() which is an invalid value for the underlying OpenS… |
CVE-2024-39209 | Medium | 6.3 | 2024-06-27 | luci-app-sms-tool v1.9-6 was discovered to contain a command injection vulnerability via the score parameter. |
CVE-2024-39134 | High | 7.5 | 2024-06-27 | A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at /zzip/z… |
CVE-2024-39132 | Medium | 6.5 | 2024-06-27 | A NULL Pointer Dereference vulnerability in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function VerifyCommandLine() at /src/Du… |
CVE-2024-36755 | Medium | 6.8 | 2024-06-27 | D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL. This can allow attackers to… |
CVE-2024-36075 | Medium | 6.5 | 2024-06-27 | The CoSoSys Endpoint Protector through 5.9.3 and Unify agent through 7.0.6 is susceptible to an arbitrary code execution vulnerability due to the way an archiv… |
CVE-2024-36074 | High | 7.2 | 2024-06-27 | Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the Endpoint Protector and Un… |
CVE-2024-36073 | High | 7.2 | 2024-06-27 | Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the shadowing component of th… |
CVE-2024-36072 | Critical | 9.8 | 2024-06-27 | Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the logging component of the… |
CVE-2024-2973 | Critical | 10.0 | 2024-06-27 | An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer a… |
CVE-2024-22276 | Medium | 5.3 | 2024-06-27 | VMware Cloud Director Object Storage Extension contains an Insertion of Sensitive Information vulnerability. A malicious actor with adjacent access to web/p… |
CVE-2024-22272 | Medium | 4.9 | 2024-06-27 | VMware Cloud Director contains an Improper Privilege Management vulnerability. An authenticated tenant administrator for a given organization within VMware… |
CVE-2024-22260 | Medium | 6.8 | 2024-06-27 | VMware Workspace One UEM update addresses an information exposure vulnerability. A malicious actor with network access to the Workspace One UEM may be able t… |
CVE-2024-6127 | Critical | 9.8 | 2024-06-27 | BC Security Empire before 5.9.3 is vulnerable to a path traversal issue that can lead to remote code execution. A remote, unauthenticated attacker can exploit… |
CVE-2024-39208 | Critical | 9.8 | 2024-06-27 | luci-app-lucky v2.8.3 was discovered to contain hardcoded credentials. |
CVE-2024-39207 | High | 8.2 | 2024-06-27 | lua-shmem v1.0-1 was discovered to contain a buffer overflow via the shmem_write function. |
CVE-2024-39133 | Medium | 4.3 | 2024-06-27 | Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zi… |
CVE-2024-39130 | High | 7.5 | 2024-06-27 | A NULL Pointer Dereference discovered in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function DumpOneStream() at /src/DumpStrea… |
CVE-2024-39129 | Medium | 5.3 | 2024-06-27 | Heap Buffer Overflow vulnerability in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function PushTSBuf() at /src/PayloadBuf.cpp. |
CVE-2024-38523 | High | 7.5 | 2024-06-27 | Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. The TOTP authentication flow has multiple issues that we… |
CVE-2024-31802 | Medium | 6.3 | 2024-06-27 | DESIGNA ABACUS v.18 and before allows an attacker to bypass the payment process via a crafted QR code. |
CVE-2024-6250 | High | 7.5 | 2024-06-27 | An absolute path traversal vulnerability exists in parisneo/lollms-webui v9.6, specifically in the `open_file` endpoint of `lollms_advanced.py`. The `sanitize_… |
CVE-2024-6139 | High | 7.3 | 2024-06-27 | A path traversal vulnerability exists in the XTTS server of the parisneo/lollms package version v9.6. This vulnerability allows an attacker to write audio file… |
CVE-2024-6090 | High | 7.5 | 2024-06-27 | A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This vulnerabili… |
CVE-2024-6086 | Medium | 4.3 | 2024-06-27 | In version 1.2.7 of lunary-ai/lunary, any authenticated user, regardless of their role, can change the name of an organization due to improper access control… |
CVE-2024-6085 | High | 8.6 | 2024-06-27 | A path traversal vulnerability exists in the XTTS server included in the lollms package, version v9.6. This vulnerability arises from the ability to perform an… |
CVE-2024-6038 | High | 7.5 | 2024-06-27 | A Regular Expression Denial of Service (ReDoS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability is located in the fi… |
CVE-2024-5980 | Critical | 9.8 | 2024-06-27 | A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files… |
CVE-2024-5979 | High | 7.5 | 2024-06-27 | In h2oai/h2o-3 version 3.46.0, the `run_tool` command in the `rapids` component allows the `main` function of any class under the `water.tools` namespace to be… |
CVE-2024-5936 | Medium | 6.1 | 2024-06-27 | An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter. This vulnerability allows attacke… |
CVE-2024-5935 | Medium | 5.4 | 2024-06-27 | A Cross-Site Request Forgery (CSRF) vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the server. This… |
CVE-2024-5933 | Medium | 5.4 | 2024-06-27 | A Cross-site Scripting (XSS) vulnerability exists in the chat functionality of parisneo/lollms-webui in the latest version. This vulnerability allows an attack… |
CVE-2024-5885 | High | 8.6 | 2024-06-27 | stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery (SSRF) vulnerability. The application does not provide sufficient controls when crawlin… |
CVE-2024-5826 | Critical | 9.8 | 2024-06-27 | In the latest version of vanna-ai/vanna, the `vanna.ask` function is vulnerable to remote code execution due to prompt injection. The root cause is the lack of… |
CVE-2024-5824 | High | 7.4 | 2024-06-27 | A path traversal vulnerability in the `/set_personality_config` endpoint of parisneo/lollms version 9.4.0 allows an attacker to overwrite the `configs/config.y… |
CVE-2024-5822 | Critical | 9.8 | 2024-06-27 | A Server-Side Request Forgery (SSRF) vulnerability exists in the upload processing interface of gaizhenbiao/ChuanhuChatGPT versions <= ChuanhuChatGPT-20240410-… |
CVE-2024-5820 | High | 8.8 | 2024-06-27 | An unprotected WebSocket connection in the latest version of stitionai/devika (commit ecee79f) allows a malicious website to connect to the backend and issue c… |
CVE-2024-5755 | Medium | 5.3 | 2024-06-27 | In lunary-ai/lunary versions <=v1.2.11, an attacker can bypass email validation by using a dot character ('.') in the email address. This allows the creation o… |
CVE-2024-5751 | Critical | 9.8 | 2024-06-27 | BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution. The vulnerability exists in the `add_deployment`… |
CVE-2024-5714 | Medium | 6.8 | 2024-06-27 | In lunary-ai/lunary version 1.2.4, an improper access control vulnerability allows members with team management permissions to manipulate project identifiers i… |
CVE-2024-5710 | Medium | 6.5 | 2024-06-27 | berriai/litellm version 1.34.34 is vulnerable to improper access control in its team management functionality. This vulnerability allows attackers to perform u… |