2024 CVEs (page 285)
Page 285 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-4732 | Low | 3.5 | 2024-05-14 | A vulnerability, which was classified as problematic, has been found in Campcodes Legal Case Management System 1.0. Affected by this issue is some unknown func… |
CVE-2024-4731 | Low | 3.5 | 2024-05-14 | A vulnerability classified as problematic was found in Campcodes Legal Case Management System 1.0. Affected by this vulnerability is an unknown functionality o… |
CVE-2024-4730 | Low | 3.5 | 2024-05-14 | A vulnerability classified as problematic has been found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/judg… |
CVE-2024-4729 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the fi… |
CVE-2024-4728 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the fi… |
CVE-2024-4727 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin… |
CVE-2024-4726 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of… |
CVE-2024-4725 | Low | 3.5 | 2024-05-14 | A vulnerability has been found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functi… |
CVE-2024-4724 | Low | 3.5 | 2024-05-14 | A vulnerability, which was classified as problematic, was found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /adm… |
CVE-2024-4723 | Low | 3.5 | 2024-05-14 | A vulnerability, which was classified as problematic, has been found in Campcodes Legal Case Management System 1.0. This issue affects some unknown processing… |
CVE-2024-4722 | Low | 3.5 | 2024-05-14 | A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects unknown code of th… |
CVE-2024-4721 | Low | 3.5 | 2024-05-14 | A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file… |
CVE-2024-4720 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as problematic. Affected by this issue is some unknow… |
CVE-2024-4719 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. Affected by this vulnerability is… |
CVE-2024-4718 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. Affected is an unknown function… |
CVE-2024-4717 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects some unknown processin… |
CVE-2024-4716 | Low | 3.5 | 2024-05-14 | A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerability affects unknown c… |
CVE-2024-4715 | Low | 3.5 | 2024-05-14 | A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of t… |
CVE-2024-4714 | Low | 3.5 | 2024-05-14 | A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is so… |
CVE-2024-4713 | Low | 3.5 | 2024-05-14 | A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown… |
CVE-2024-4712 | High | 7.8 | 2024-05-14 | An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within th… |
CVE-2024-4701 | Critical | 9.9 | 2024-05-14 | A path traversal issue potentially leading to remote code execution in Genie for all versions prior to 4.3.18 |
CVE-2024-4699 | Medium | 6.3 | 2024-05-14 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230922. This issue affects some… |
CVE-2024-4693 | Medium | 5.5 | 2024-05-14 | A flaw was found in the QEMU Virtio PCI Bindings (hw/virtio/virtio-pci.c). An improper release and use of the irqfd for vector 0 during the boot process leads… |
CVE-2024-4689 | Medium | 4.3 | 2024-05-14 | Cross-Site Request Forgery (CSRF) vulnerability in ShortPixel ShortPixel Adaptive Images shortpixel-adaptive-images.This issue affects ShortPixel Adaptive Imag… |
CVE-2024-4688 | Low | 3.5 | 2024-05-14 | A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown… |
CVE-2024-4687 | Low | 3.5 | 2024-05-14 | A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the f… |
CVE-2024-4686 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as problematic. This issue affects some unknown proce… |
CVE-2024-4685 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. This vulnerability affects unknown… |
CVE-2024-4684 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. This affects an unknown part of… |
CVE-2024-4683 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. Affected by this issue is some unknown fu… |
CVE-2024-4682 | Low | 3.5 | 2024-05-14 | A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. Affected by this vulnerability is an… |
CVE-2024-4681 | Medium | 4.7 | 2024-05-14 | A vulnerability, which was classified as critical, was found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/… |
CVE-2024-4678 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. Affected by this vulnerability is… |
CVE-2024-4677 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. Affected is an unknown function… |
CVE-2024-4676 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects some unknown processin… |
CVE-2024-4675 | Low | 3.5 | 2024-05-14 | A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerability affects unknown c… |
CVE-2024-4674 | Low | 3.5 | 2024-05-14 | A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of t… |
CVE-2024-4673 | Low | 3.5 | 2024-05-14 | A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is so… |
CVE-2024-4672 | Low | 3.5 | 2024-05-14 | A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown… |
CVE-2024-4671 | Critical | 9.6 | 2024-05-14 | Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a… |
CVE-2024-4630 | Medium | 6.4 | 2024-05-14 | The Starter Templates — Elementor, WordPress & Beaver Builder Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘custom_uploa… |
CVE-2024-4606 | Medium | 5.4 | 2024-05-14 | Deserialization of Untrusted Data vulnerability in BdThemes Ultimate Store Kit Elementor Addons.This issue affects Ultimate Store Kit Elementor Addons: from n/… |
CVE-2024-4605 | High | 8.8 | 2024-05-14 | The Breakdance plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.7.1 via post meta data. This is due to the p… |
CVE-2024-4597 | Medium | 5.7 | 2024-05-14 | An issue has been discovered in GitLab EE affecting all versions from 16.7 before 16.9.7, all versions starting from 16.10 before 16.10.5, all versions startin… |
CVE-2024-4574 | Medium | 6.4 | 2024-05-14 | The Graphina – Elementor Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and in… |
CVE-2024-4567 | Medium | 6.4 | 2024-05-14 | The Themify Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's themify_button shortcode in all versions up to, and i… |
CVE-2024-4560 | Critical | 9.8 | 2024-05-14 | The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the chatbot_chatgpt_upl… |
CVE-2024-4545 | High | 7.7 | 2024-05-14 | All versions of EnterpriseDB Postgres Advanced Server (EPAS) from 15.0 prior to 15.7.0 and from 16.0 prior to 16.3.0 may allow users using edbldr to bypass ro… |
CVE-2024-4539 | Medium | 4.3 | 2024-05-14 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from… |
CVE-2024-4490 | Medium | 6.4 | 2024-05-14 | The Elegant Themes Divi theme, Extra theme, and Divi Page Builder plugin for WordPress are vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘title’… |
CVE-2024-4487 | Medium | 6.4 | 2024-05-14 | The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG uploads in versions up to, and including, 2.0.45 due to insuffi… |
CVE-2024-4481 | Medium | 6.4 | 2024-05-14 | The Gutenberg Blocks with AI by Kadence WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the plugin's blocks in… |
CVE-2024-4463 | Medium | 4.3 | 2024-05-14 | The Squelch Tabs and Accordions Shortcodes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.4.7. This i… |
CVE-2024-4449 | Medium | 6.4 | 2024-05-14 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scr… |
CVE-2024-4448 | Medium | 6.4 | 2024-05-14 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scr… |
CVE-2024-4446 | Medium | 6.4 | 2024-05-14 | The Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) plugin for WordPress is vulnerable to Stored Cros… |
CVE-2024-4444 | Medium | 5.3 | 2024-05-14 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to bypass to user registration in versions up to, and including, 4.2.6.5. This is due… |
CVE-2024-4441 | High | 8.1 | 2024-05-14 | The XML Sitemap & Google News plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.4.8 via the 'feed' parameter… |
CVE-2024-4434 | Critical | 9.8 | 2024-05-14 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the ‘term_id’ parameter in versions up to, and includi… |
CVE-2024-4430 | Medium | 6.4 | 2024-05-14 | The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the photo widget crop attribute in all versio… |
CVE-2024-4425 | Medium | 5.4 | 2024-05-14 | The access control in CemiPark software stores integration (e.g. FTP or SIP) credentials in plain-text. An attacker who gained unauthorized access to the devic… |
CVE-2024-4424 | Medium | 6.1 | 2024-05-14 | The access control in CemiPark software does not properly validate user-entered data, which allows the stored cross-site scripting (XSS) attack. The parameters… |
CVE-2024-4423 | High | 7.2 | 2024-05-14 | The access control in CemiPark software does not properly validate user-entered data, which allows the authentication bypass. An attacker who has network acces… |
CVE-2024-4417 | Medium | 4.4 | 2024-05-14 | The Falang multilanguage for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and includin… |
CVE-2024-4413 | Critical | 9.8 | 2024-05-14 | The Hotel Booking Lite plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.11.1 via deserialization of untrusted… |
CVE-2024-4411 | Medium | 6.4 | 2024-05-14 | The Mihdan: Yandex Turbo Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and includ… |
CVE-2024-4398 | Medium | 6.4 | 2024-05-14 | The HTML5 Audio Player- Best WordPress Audio Player Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all ve… |
CVE-2024-4397 | High | 8.8 | 2024-05-14 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_post_materi… |
CVE-2024-4386 | Medium | 6.4 | 2024-05-14 | The Gallery Block (Meow Gallery) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data_atts’ parameter in versions up to, and includi… |
CVE-2024-4383 | Medium | 6.4 | 2024-05-14 | The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swpm_paypal_subscription_cancel_link' shortcode in al… |
CVE-2024-4339 | Medium | 6.4 | 2024-05-14 | The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripti… |
CVE-2024-4335 | Medium | 6.4 | 2024-05-14 | The Rank Math SEO with AI Best SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘textAlign’ parameter in versions up to, and… |
CVE-2024-4329 | Medium | 6.4 | 2024-05-14 | The Thim Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.1.9 due… |
CVE-2024-4317 | Low | 3.1 | 2024-05-14 | Missing authorization in PostgreSQL built-in views pg_stats_ext and pg_stats_ext_exprs allows an unprivileged database user to read most common values and othe… |
CVE-2024-4316 | Medium | 6.4 | 2024-05-14 | The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress… |
CVE-2024-4314 | Medium | 4.3 | 2024-05-14 | The Hostel plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.5.3. This is due to missing or incorrect… |
CVE-2024-4312 | Medium | 4.3 | 2024-05-14 | The Soccer Engine – Soccer Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12. Th… |
CVE-2024-4280 | Medium | 5.3 | 2024-05-14 | The White Label CMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reset_plugin function in a… |
CVE-2024-4277 | Medium | 6.4 | 2024-05-14 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘layout_html’ parameter in all versions up to… |
CVE-2024-4275 | Medium | 6.4 | 2024-05-14 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scr… |
CVE-2024-4232 | Medium | 4.1 | 2024-05-14 | This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to lack of encryption or hashing in storing of… |
CVE-2024-4231 | Medium | 4.6 | 2024-05-14 | This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to presence of root terminal access on a serial… |
CVE-2024-4213 | Medium | 5.3 | 2024-05-14 | The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.6.4 via the or… |
CVE-2024-4209 | Medium | 6.4 | 2024-05-14 | The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown timer in… |
CVE-2024-4193 | Medium | 6.4 | 2024-05-14 | The Testimonial Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'testimonialcategory' shortcode in all versions up to, and inc… |
CVE-2024-4158 | Medium | 6.4 | 2024-05-14 | The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tagName’ parameter in versions up to, and including, 2.0.42 due to insuff… |
CVE-2024-4150 | Medium | 6.1 | 2024-05-14 | The Simple Basic Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘scf_email’ parameter in versions up to, and includi… |
CVE-2024-4129 | High | 8.8 | 2024-05-14 | Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if Ac… |
CVE-2024-4107 | Medium | 6.4 | 2024-05-14 | The Elementor Website Builder – More than Just a Page Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the several parameters… |
CVE-2024-4104 | Medium | 6.1 | 2024-05-14 | The ADFO – Custom data in admin dashboard plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dbp_id' parameter in all versions up to… |
CVE-2024-4103 | Medium | 4.3 | 2024-05-14 | The ADFO – Custom data in admin dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.0. This is… |
CVE-2024-4082 | Medium | 4.3 | 2024-05-14 | The Joli FAQ SEO – WordPress FAQ Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.2. This is d… |
CVE-2024-4068 | High | 7.5 | 2024-05-14 | The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In `lib/parse… |
CVE-2024-4067 | Medium | 5.3 | 2024-05-14 | The NPM package `micromatch` prior to 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs in `micromatch.braces()` in… |
CVE-2024-4046 | Medium | 6.4 | 2024-05-14 | Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-4044 | High | 7.8 | 2024-05-14 | A deserialization of untrusted data vulnerability exists in common code used by FlexLogger and InstrumentStudio that may result in remote code execution. Succ… |
CVE-2024-4041 | Medium | 6.1 | 2024-05-14 | The Yoast SEO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 22.5 due to insufficient inpu… |
CVE-2024-4039 | Medium | 6.5 | 2024-05-14 | The The Orders Tracking for WooCommerce plugin for WordPress for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including… |
CVE-2024-4038 | Medium | 6.5 | 2024-05-14 | The The Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro plugin for WordPress for WordPress is vulnerable to arbitrary shortcode execution in… |