2024 CVEs (page 269)
Page 269 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-36373 | Medium | 4.6 | 2024-05-29 | In JetBrains TeamCity before 2024.03.2 several stored XSS in untrusted builds settings were possible |
CVE-2024-36372 | Medium | 4.6 | 2024-05-29 | In JetBrains TeamCity before 2023.05.6 reflected XSS on the subscriptions page was possible |
CVE-2024-36371 | Medium | 4.6 | 2024-05-29 | In JetBrains TeamCity before 2023.05.6, 2023.11.5 stored XSS in Commit status publisher was possible |
CVE-2024-36370 | Medium | 4.6 | 2024-05-29 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via OAuth connection settings was possible |
CVE-2024-36369 | Medium | 4.6 | 2024-05-29 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via issue tracker integration was possible |
CVE-2024-36368 | Medium | 4.6 | 2024-05-29 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 reflected XSS via OAuth provider configuration was possible |
CVE-2024-36367 | Medium | 4.6 | 2024-05-29 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via third-party reports was possible |
CVE-2024-36366 | Medium | 5.4 | 2024-05-29 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 an XSS could be executed via certain report grouping and filtering operations |
CVE-2024-36365 | Medium | 6.8 | 2024-05-29 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 a third-party agent could impersonate a cloud agent |
CVE-2024-36364 | Medium | 6.5 | 2024-05-29 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 improper access control in Pull Requests and Commit status publisher build features was… |
CVE-2024-36363 | Medium | 4.6 | 2024-05-29 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 several Stored XSS in code inspection reports were possible |
CVE-2024-36362 | Medium | 6.5 | 2024-05-29 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was possible |
CVE-2024-25975 | Medium | 6.5 | 2024-05-29 | The application implements an up- and downvote function which alters a value within a JSON file. The POST parameters are not filtered properly and therefore an… |
CVE-2024-5185 | High | 7.3 | 2024-05-29 | The EmbedAI application is susceptible to security issues that enable Data Poisoning attacks. This weakness could result in the application becoming compromise… |
CVE-2024-5039 | Medium | 6.4 | 2024-05-29 | The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all… |
CVE-2024-25977 | High | 7.3 | 2024-05-29 | The application does not change the session token when using the login or logout functionality. An attacker can set a session token in the victim's browser (e… |
CVE-2024-25976 | Medium | 6.1 | 2024-05-29 | When LDAP authentication is activated in the configuration it is possible to obtain reflected XSS execution by creating a custom URL that the victim only needs… |
CVE-2024-27313 | Medium | 6.3 | 2024-05-29 | Zoho ManageEngine PAM360 is vulnerable to Stored XSS vulnerability. This vulnerability is applicable only in the version 6610. |
CVE-2024-28826 | High | 8.8 | 2024-05-29 | Improper restriction of local upload and download paths in check_sftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and in Checkmk 2.0.0 (EOL) allows attacker… |
CVE-2024-3412 | Critical | 9.1 | 2024-05-29 | The WP STAGING WordPress Backup Plugin – Migration Backup Restore plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validat… |
CVE-2024-5086 | Medium | 6.4 | 2024-05-29 | The Essential Addons for Elementor PRO – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site… |
CVE-2024-36015 | High | 7.8 | 2024-05-29 | In the Linux kernel, the following vulnerability has been resolved: ppdev: Add an error check in register_device In register_device, the return value of ida_… |
CVE-2024-36014 | Medium | 5.5 | 2024-05-29 | In the Linux kernel, the following vulnerability has been resolved: drm/arm/malidp: fix a possible null pointer dereference In malidp_mw_connector_reset, new… |
CVE-2024-4419 | Medium | 4.4 | 2024-05-29 | The Fetch JFT plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.8.3 due to insuffici… |
CVE-2024-3937 | Medium | 4.8 | 2024-05-29 | The Playlist for Youtube WordPress plugin through 1.32 does not sanitise and escape some of its settings, which could allow high privilege users such as admin… |
CVE-2024-3921 | Medium | 4.8 | 2024-05-29 | The Gianism WordPress plugin through 5.1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform S… |
CVE-2024-3050 | Critical | 9.1 | 2024-05-29 | The Site Reviews WordPress plugin before 7.0.0 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value… |
CVE-2024-4611 | High | 8.1 | 2024-05-29 | The AppPresser plugin for WordPress is vulnerable to improper missing encryption exception handling on the 'decrypt_value' and on the 'doCookieAuth' functions… |
CVE-2024-21512 | High | 8.2 | 2024-05-29 | Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when usin… |
CVE-2024-0434 | Medium | 5.3 | 2024-05-29 | The WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly plugin for WordPress is vulnerable to unauthorized modification of data due to a missin… |
CVE-2024-5204 | High | 8.8 | 2024-05-29 | The Swiss Toolkit For WP plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0.7. This is due to the plugin storing… |
CVE-2024-5150 | Critical | 9.8 | 2024-05-29 | The Login with phone number plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.26. This is due to the 'activatio… |
CVE-2024-5437 | Low | 3.5 | 2024-05-29 | A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as problematic. Affected is the function save_category of… |
CVE-2024-36112 | Medium | 6.3 | 2024-05-28 | Nautobot is a Network Source of Truth and Network Automation Platform. A user with permissions to view Dynamic Group records (`extras.view_dynamicgroup` permis… |
CVE-2024-23580 | Medium | 6.5 | 2024-05-28 | HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs). This could allow an attacker with access to the database to r… |
CVE-2024-23579 | Medium | 6.5 | 2024-05-28 | HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions. This could allow an attacker with access to the database to recover… |
CVE-2024-35548 | Medium | 5.4 | 2024-05-28 | A SQL injection vulnerability in Mybatis plus versions below 3.5.6 allows remote attackers to obtain database information via a Boolean blind injection. NOTE… |
CVE-2024-35511 | Medium | 4.7 | 2024-05-28 | phpgurukul Men Salon Management System v2.0 is vulnerable to SQL Injection via the "username" parameter of /msms/admin/index.php. |
CVE-2024-35240 | Medium | 5.4 | 2024-05-28 | Umbraco Commerce is an open source dotnet ecommerce solution. In affected versions there exists a stored Cross-site scripting (XSS) issue which would enable at… |
CVE-2024-35239 | Low | 2.7 | 2024-05-28 | Umbraco Commerce is an open source dotnet web forms solution. In affected versions an authenticated user that has access to edit Forms may inject unsafe code i… |
CVE-2024-35226 | High | 7.3 | 2024-05-28 | Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. In affected versions template authors could… |
CVE-2024-22641 | High | 7.5 | 2024-05-28 | TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted SVG file. |
CVE-2024-35583 | Medium | 6.1 | 2024-05-28 | A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a… |
CVE-2024-35582 | Medium | 6.1 | 2024-05-28 | A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a… |
CVE-2024-35581 | Medium | 6.1 | 2024-05-28 | A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a… |
CVE-2024-35510 | Critical | 9.8 | 2024-05-28 | An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code via uploading a crafted… |
CVE-2024-28061 | Medium | 6.3 | 2024-05-28 | An issue was discovered in Apiris Kafeo 6.4.4. It permits a bypass, of the protection in place, to access to the data stored in the embedded database file. |
CVE-2024-28060 | High | 7.3 | 2024-05-28 | An issue was discovered in Apiris Kafeo 6.4.4. It permits DLL hijacking, allowing a user to trigger the execution of arbitrary code every time the product is e… |
CVE-2024-5434 | | 2024-05-28 | The Campbell Scientific CSI Web Server stores web authentication credentials in a file with a specific file name. Passwords within that file are stored in a we… | |
CVE-2024-5433 | | 2024-05-28 | The Campbell Scientific CSI Web Server supports a command that will return the most recent file that matches a given expression. A specially crafted expression… | |
CVE-2024-36110 | High | 8.2 | 2024-05-28 | ansibleguy-webui is an open source WebUI for using Ansible. Multiple forms in versions < 0.0.21 allowed injection of HTML elements. These are returned to the u… |
CVE-2024-36109 | High | 7.6 | 2024-05-28 | CoCalc is web-based software that enables collaboration in research, teaching, and scientific publishing. In affected versions the markdown parser allows `<scr… |
CVE-2024-36107 | Medium | 5.3 | 2024-05-28 | MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. `If-Modified-Since` and `If-Unmodified-Since` headers when us… |
CVE-2024-33450 | High | 7.5 | 2024-05-28 | SQL Injection in Finereport v.8.0 allows a remote attacker to obtain sensitive information |
CVE-2024-24919 | High | 8.6 | 2024-05-28 | Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN… |
CVE-2024-33402 | High | 8.1 | 2024-05-28 | A SQL injection vulnerability in /model/approve_petty_cash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrar… |
CVE-2024-35563 | Critical | 9.8 | 2024-05-28 | CDG-Server-V5.6.2.126.139 and earlier was discovered to contain a SQL injection vulnerability via the permissionId parameter in CDGTempPermissions. |
CVE-2024-35403 | Low | 2.7 | 2024-05-28 | TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setIpPortFilterRules |
CVE-2024-35401 | Medium | 5.9 | 2024-05-28 | TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile functio… |
CVE-2024-35344 | Critical | 9.9 | 2024-05-28 | Certain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D3… |
CVE-2024-35343 | Critical | 9.8 | 2024-05-28 | Certain Anpviz products allow unauthenticated users to download arbitrary files from the device's filesystem via a HTTP GET request to the /playback/ URI. This… |
CVE-2024-35342 | Medium | 4.6 | 2024-05-28 | Certain Anpviz products allow unauthenticated users to modify or disable camera related settings such as microphone volume, speaker volume, LED lighting, NTP… |
CVE-2024-35341 | High | 7.5 | 2024-05-28 | Certain Anpviz products allow unauthenticated users to download the running configuration of the device via a HTTP GET request to /ConfigFile.ini or /config.xm… |
CVE-2024-34854 | Critical | 9.8 | 2024-05-28 | F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.` |
CVE-2024-34852 | Medium | 6.3 | 2024-05-28 | F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering at the command execution point in the ./admin/transceiver_schedule.php… |
CVE-2024-30165 | High | 7.1 | 2024-05-28 | Amazon AWS Client VPN before 3.9.1 on macOS has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permis… |
CVE-2024-30164 | Medium | 6.7 | 2024-05-28 | Amazon AWS Client VPN has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permissions. This is resolve… |
CVE-2024-26024 | High | 8.4 | 2024-05-28 | SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in Substation Server. |
CVE-2024-36472 | Medium | 6.5 | 2024-05-28 | In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided by an adversary (e.g… |
CVE-2024-35621 | Medium | 4.8 | 2024-05-28 | A cross-site scripting (XSS) vulnerability in the Edit function of Formwork before 1.13.0 allows attackers to execute arbitrary web scripts or HTML via a craft… |
CVE-2024-35324 | Critical | 9.8 | 2024-05-28 | Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php. |
CVE-2024-33849 | Medium | 6.5 | 2024-05-28 | ci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key. |
CVE-2024-33808 | Critical | 9.8 | 2024-05-28 | A SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary… |
CVE-2024-33807 | Medium | 5.4 | 2024-05-28 | A SQL injection vulnerability in /model/get_teacher_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute ar… |
CVE-2024-33806 | Critical | 9.8 | 2024-05-28 | A SQL injection vulnerability in /model/get_grade.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL… |
CVE-2024-33805 | Critical | 9.8 | 2024-05-28 | A SQL injection vulnerability in /model/get_student.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQ… |
CVE-2024-33804 | Medium | 6.3 | 2024-05-28 | A SQL injection vulnerability in /model/get_subject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQ… |
CVE-2024-33803 | Medium | 5.4 | 2024-05-28 | A SQL injection vulnerability in /model/get_exam.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL c… |
CVE-2024-33802 | Medium | 6.5 | 2024-05-28 | A SQL injection vulnerability in /model/get_student_subject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbi… |
CVE-2024-33801 | Critical | 9.8 | 2024-05-28 | A SQL injection vulnerability in /model/get_subject_routing.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbi… |
CVE-2024-33800 | Critical | 9.8 | 2024-05-28 | A SQL injection vulnerability in /model/get_student1.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary S… |
CVE-2024-33799 | Critical | 9.8 | 2024-05-28 | A SQL injection vulnerability in /model/get_teacher.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQ… |
CVE-2024-30212 | | 2024-05-28 | If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512 and a count of 1, the first 512 byte o… | |
CVE-2024-24963 | Critical | 9.8 | 2024-05-28 | A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-550E 1.2.10.9. A spec… |
CVE-2024-24962 | Critical | 9.8 | 2024-05-28 | A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-550E 1.2.10.9. A spec… |
CVE-2024-24959 | High | 8.2 | 2024-05-28 | Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Spe… |
CVE-2024-24958 | High | 8.2 | 2024-05-28 | Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Spe… |
CVE-2024-24957 | High | 8.2 | 2024-05-28 | Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Spe… |
CVE-2024-24956 | High | 8.2 | 2024-05-28 | Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Spe… |
CVE-2024-24955 | High | 8.2 | 2024-05-28 | Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Spe… |
CVE-2024-24954 | High | 8.2 | 2024-05-28 | Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Spe… |
CVE-2024-24947 | High | 8.2 | 2024-05-28 | A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1.2.10.9. A speciall… |
CVE-2024-24946 | High | 8.2 | 2024-05-28 | A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1.2.10.9. A speciall… |
CVE-2024-24851 | High | 7.5 | 2024-05-28 | A heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of AutomationDirect P3-550E 1.2.10.9. A specially… |
CVE-2024-23601 | Critical | 9.8 | 2024-05-28 | A code injection vulnerability exists in the scan_lib.bin functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted scan_lib.bin can lead to arbi… |
CVE-2024-23315 | High | 7.5 | 2024-05-28 | A read-what-where vulnerability exists in the Programming Software Connection IMM 01A1 Memory Read functionality of AutomationDirect P3-550E 1.2.10.9. A specia… |
CVE-2024-22590 | Critical | 9.1 | 2024-05-28 | The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten… |
CVE-2024-22187 | Critical | 9.1 | 2024-05-28 | A write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality of AutomationDirect P3-550E 1.2.10.9. A… |
CVE-2024-21785 | Critical | 9.8 | 2024-05-28 | A leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted series of… |
CVE-2024-5274 | Critical | 9.6 | 2024-05-28 | Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch… |