2024 CVEs (page 285)
Page 285 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-4814 | Medium | 6.3 | 2024-05-14 | A vulnerability classified as critical was found in Ruijie RG-UAC up to 20240506. Affected by this vulnerability is an unknown functionality of the file /view/… |
CVE-2024-4813 | Medium | 6.3 | 2024-05-14 | A vulnerability classified as critical has been found in Ruijie RG-UAC up to 20240506. Affected is an unknown function of the file /view/networkConfig/physical… |
CVE-2024-4809 | Medium | 6.3 | 2024-05-14 | A vulnerability has been found in SourceCodester Open Source Clinic Management System 1.0 and classified as critical. Affected by this vulnerability is an unkn… |
CVE-2024-4808 | Medium | 6.3 | 2024-05-14 | A vulnerability, which was classified as critical, was found in Kashipara College Management System 1.0. Affected is an unknown function of the file delete_fac… |
CVE-2024-4807 | Medium | 6.3 | 2024-05-14 | A vulnerability, which was classified as critical, has been found in Kashipara College Management System 1.0. This issue affects some unknown processing of the… |
CVE-2024-4806 | Medium | 6.3 | 2024-05-14 | A vulnerability classified as critical was found in Kashipara College Management System 1.0. This vulnerability affects unknown code of the file each_extracurr… |
CVE-2024-4805 | Medium | 6.3 | 2024-05-14 | A vulnerability classified as critical has been found in Kashipara College Management System 1.0. This affects an unknown part of the file edit_faculty.php. Th… |
CVE-2024-4804 | Medium | 6.3 | 2024-05-14 | A vulnerability was found in Kashipara College Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of th… |
CVE-2024-4803 | Medium | 6.3 | 2024-05-14 | A vulnerability was found in Kashipara College Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functional… |
CVE-2024-4802 | Medium | 6.3 | 2024-05-14 | A vulnerability was found in Kashipara College Management System 1.0. It has been classified as critical. Affected is an unknown function of the file submit_ex… |
CVE-2024-4801 | Medium | 6.3 | 2024-05-14 | A vulnerability was found in Kashipara College Management System 1.0 and classified as critical. This issue affects some unknown processing of the file submit_… |
CVE-2024-4800 | Medium | 6.3 | 2024-05-14 | A vulnerability has been found in Kashipara College Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file submi… |
CVE-2024-4799 | Medium | 6.3 | 2024-05-14 | A vulnerability, which was classified as critical, was found in Kashipara College Management System 1.0. This affects an unknown part of the file view_each_fac… |
CVE-2024-4798 | Medium | 6.3 | 2024-05-14 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknow… |
CVE-2024-4797 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of th… |
CVE-2024-4796 | Medium | 6.3 | 2024-05-14 | A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been classified as critical. This affects an unknown part of the file /mana… |
CVE-2024-4795 | Medium | 6.3 | 2024-05-14 | A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of… |
CVE-2024-4794 | Medium | 6.3 | 2024-05-14 | A vulnerability has been found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown funct… |
CVE-2024-4793 | Medium | 6.3 | 2024-05-14 | A vulnerability, which was classified as critical, was found in Campcodes Online Laundry Management System 1.0. Affected is an unknown function of the file /ma… |
CVE-2024-4792 | Medium | 6.3 | 2024-05-14 | A vulnerability, which was classified as critical, has been found in Campcodes Online Laundry Management System 1.0. This issue affects some unknown processing… |
CVE-2024-4791 | High | 7.5 | 2024-05-14 | A vulnerability classified as critical was found in Contemporary Control System BASrouter BACnet BASRT-B 2.7.2. This vulnerability affects unknown code of the… |
CVE-2024-4790 | Medium | 4.3 | 2024-05-14 | A vulnerability classified as problematic has been found in DedeCMS 5.7.114. This affects an unknown part of the file /sys_verifies.php?action=view. The manipu… |
CVE-2024-4747 | High | 7.1 | 2024-05-14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Propovoice Propovoice CRM allows Stored XSS.This issue af… |
CVE-2024-4738 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code. The mani… |
CVE-2024-4737 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin… |
CVE-2024-4736 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of… |
CVE-2024-4735 | Low | 3.5 | 2024-05-14 | A vulnerability has been found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functi… |
CVE-2024-4732 | Low | 3.5 | 2024-05-14 | A vulnerability, which was classified as problematic, has been found in Campcodes Legal Case Management System 1.0. Affected by this issue is some unknown func… |
CVE-2024-4731 | Low | 3.5 | 2024-05-14 | A vulnerability classified as problematic was found in Campcodes Legal Case Management System 1.0. Affected by this vulnerability is an unknown functionality o… |
CVE-2024-4730 | Low | 3.5 | 2024-05-14 | A vulnerability classified as problematic has been found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/judg… |
CVE-2024-4729 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the fi… |
CVE-2024-4728 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the fi… |
CVE-2024-4727 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin… |
CVE-2024-4726 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of… |
CVE-2024-4725 | Low | 3.5 | 2024-05-14 | A vulnerability has been found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functi… |
CVE-2024-4724 | Low | 3.5 | 2024-05-14 | A vulnerability, which was classified as problematic, was found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /adm… |
CVE-2024-4723 | Low | 3.5 | 2024-05-14 | A vulnerability, which was classified as problematic, has been found in Campcodes Legal Case Management System 1.0. This issue affects some unknown processing… |
CVE-2024-4722 | Low | 3.5 | 2024-05-14 | A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects unknown code of th… |
CVE-2024-4721 | Low | 3.5 | 2024-05-14 | A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file… |
CVE-2024-4720 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as problematic. Affected by this issue is some unknow… |
CVE-2024-4719 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. Affected by this vulnerability is… |
CVE-2024-4718 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. Affected is an unknown function… |
CVE-2024-4717 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects some unknown processin… |
CVE-2024-4716 | Low | 3.5 | 2024-05-14 | A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerability affects unknown c… |
CVE-2024-4715 | Low | 3.5 | 2024-05-14 | A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of t… |
CVE-2024-4714 | Low | 3.5 | 2024-05-14 | A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is so… |
CVE-2024-4713 | Low | 3.5 | 2024-05-14 | A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown… |
CVE-2024-4712 | High | 7.8 | 2024-05-14 | An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within th… |
CVE-2024-4701 | Critical | 9.9 | 2024-05-14 | A path traversal issue potentially leading to remote code execution in Genie for all versions prior to 4.3.18 |
CVE-2024-4699 | Medium | 6.3 | 2024-05-14 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230922. This issue affects some… |
CVE-2024-4693 | Medium | 5.5 | 2024-05-14 | A flaw was found in the QEMU Virtio PCI Bindings (hw/virtio/virtio-pci.c). An improper release and use of the irqfd for vector 0 during the boot process leads… |
CVE-2024-4689 | Medium | 4.3 | 2024-05-14 | Cross-Site Request Forgery (CSRF) vulnerability in ShortPixel ShortPixel Adaptive Images shortpixel-adaptive-images.This issue affects ShortPixel Adaptive Imag… |
CVE-2024-4688 | Low | 3.5 | 2024-05-14 | A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown… |
CVE-2024-4687 | Low | 3.5 | 2024-05-14 | A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the f… |
CVE-2024-4686 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as problematic. This issue affects some unknown proce… |
CVE-2024-4685 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. This vulnerability affects unknown… |
CVE-2024-4684 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. This affects an unknown part of… |
CVE-2024-4683 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. Affected by this issue is some unknown fu… |
CVE-2024-4682 | Low | 3.5 | 2024-05-14 | A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. Affected by this vulnerability is an… |
CVE-2024-4681 | Medium | 4.7 | 2024-05-14 | A vulnerability, which was classified as critical, was found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/… |
CVE-2024-4678 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. Affected by this vulnerability is… |
CVE-2024-4677 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. Affected is an unknown function… |
CVE-2024-4676 | Low | 3.5 | 2024-05-14 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects some unknown processin… |
CVE-2024-4675 | Low | 3.5 | 2024-05-14 | A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerability affects unknown c… |
CVE-2024-4674 | Low | 3.5 | 2024-05-14 | A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of t… |
CVE-2024-4673 | Low | 3.5 | 2024-05-14 | A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is so… |
CVE-2024-4672 | Low | 3.5 | 2024-05-14 | A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown… |
CVE-2024-4671 | Critical | 9.6 | 2024-05-14 | Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a… |
CVE-2024-4630 | Medium | 6.4 | 2024-05-14 | The Starter Templates — Elementor, WordPress & Beaver Builder Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘custom_uploa… |
CVE-2024-4606 | Medium | 5.4 | 2024-05-14 | Deserialization of Untrusted Data vulnerability in BdThemes Ultimate Store Kit Elementor Addons.This issue affects Ultimate Store Kit Elementor Addons: from n/… |
CVE-2024-4605 | High | 8.8 | 2024-05-14 | The Breakdance plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.7.1 via post meta data. This is due to the p… |
CVE-2024-4597 | Medium | 5.7 | 2024-05-14 | An issue has been discovered in GitLab EE affecting all versions from 16.7 before 16.9.7, all versions starting from 16.10 before 16.10.5, all versions startin… |
CVE-2024-4574 | Medium | 6.4 | 2024-05-14 | The Graphina – Elementor Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and in… |
CVE-2024-4567 | Medium | 6.4 | 2024-05-14 | The Themify Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's themify_button shortcode in all versions up to, and i… |
CVE-2024-4560 | Critical | 9.8 | 2024-05-14 | The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the chatbot_chatgpt_upl… |
CVE-2024-4545 | High | 7.7 | 2024-05-14 | All versions of EnterpriseDB Postgres Advanced Server (EPAS) from 15.0 prior to 15.7.0 and from 16.0 prior to 16.3.0 may allow users using edbldr to bypass ro… |
CVE-2024-4539 | Medium | 4.3 | 2024-05-14 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from… |
CVE-2024-4490 | Medium | 6.4 | 2024-05-14 | The Elegant Themes Divi theme, Extra theme, and Divi Page Builder plugin for WordPress are vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘title’… |
CVE-2024-4487 | Medium | 6.4 | 2024-05-14 | The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG uploads in versions up to, and including, 2.0.45 due to insuffi… |
CVE-2024-4481 | Medium | 6.4 | 2024-05-14 | The Gutenberg Blocks with AI by Kadence WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the plugin's blocks in… |
CVE-2024-4463 | Medium | 4.3 | 2024-05-14 | The Squelch Tabs and Accordions Shortcodes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.4.7. This i… |
CVE-2024-4449 | Medium | 6.4 | 2024-05-14 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scr… |
CVE-2024-4448 | Medium | 6.4 | 2024-05-14 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scr… |
CVE-2024-4446 | Medium | 6.4 | 2024-05-14 | The Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) plugin for WordPress is vulnerable to Stored Cros… |
CVE-2024-4444 | Medium | 5.3 | 2024-05-14 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to bypass to user registration in versions up to, and including, 4.2.6.5. This is due… |
CVE-2024-4441 | High | 8.1 | 2024-05-14 | The XML Sitemap & Google News plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.4.8 via the 'feed' parameter… |
CVE-2024-4434 | Critical | 9.8 | 2024-05-14 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the ‘term_id’ parameter in versions up to, and includi… |
CVE-2024-4430 | Medium | 6.4 | 2024-05-14 | The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the photo widget crop attribute in all versio… |
CVE-2024-4425 | Medium | 5.4 | 2024-05-14 | The access control in CemiPark software stores integration (e.g. FTP or SIP) credentials in plain-text. An attacker who gained unauthorized access to the devic… |
CVE-2024-4424 | Medium | 6.1 | 2024-05-14 | The access control in CemiPark software does not properly validate user-entered data, which allows the stored cross-site scripting (XSS) attack. The parameters… |
CVE-2024-4423 | High | 7.2 | 2024-05-14 | The access control in CemiPark software does not properly validate user-entered data, which allows the authentication bypass. An attacker who has network acces… |
CVE-2024-4417 | Medium | 4.4 | 2024-05-14 | The Falang multilanguage for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and includin… |
CVE-2024-4413 | Critical | 9.8 | 2024-05-14 | The Hotel Booking Lite plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.11.1 via deserialization of untrusted… |
CVE-2024-4411 | Medium | 6.4 | 2024-05-14 | The Mihdan: Yandex Turbo Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and includ… |
CVE-2024-4398 | Medium | 6.4 | 2024-05-14 | The HTML5 Audio Player- Best WordPress Audio Player Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all ve… |
CVE-2024-4397 | High | 8.8 | 2024-05-14 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_post_materi… |
CVE-2024-4386 | Medium | 6.4 | 2024-05-14 | The Gallery Block (Meow Gallery) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data_atts’ parameter in versions up to, and includi… |
CVE-2024-4383 | Medium | 6.4 | 2024-05-14 | The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swpm_paypal_subscription_cancel_link' shortcode in al… |
CVE-2024-4339 | Medium | 6.4 | 2024-05-14 | The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripti… |
CVE-2024-4335 | Medium | 6.4 | 2024-05-14 | The Rank Math SEO with AI Best SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘textAlign’ parameter in versions up to, and… |