2024 CVEs (page 288)
Page 288 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-33953 | Medium | 6.5 | 2024-05-14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt van Andel Adventure Journal allows Stored XSS.This i… |
CVE-2024-33952 | Medium | 6.5 | 2024-05-14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Tadlock Unique allows Stored XSS.This issue affect… |
CVE-2024-33951 | Medium | 6.5 | 2024-05-14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adam DeHaven Perfect Pullquotes allows Stored XSS.This is… |
CVE-2024-33950 | Medium | 5.9 | 2024-05-14 | Administrator Cross Site Scripting (XSS) in Archives Calendar Widget <= 1.0.15 versions. |
CVE-2024-33942 | Medium | 4.3 | 2024-05-14 | Missing Authorization vulnerability in Eric Alli Google Typography.This issue affects Google Typography: from n/a through 1.1.2. |
CVE-2024-33938 | Medium | 6.5 | 2024-05-14 | Missing Authorization vulnerability in codename065 Sliding Widgets allows Cross-Site Scripting (XSS).This issue affects Sliding Widgets: from n/a through 1.5.0. |
CVE-2024-33877 | High | 8.8 | 2024-05-14 | HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5T__conv_struct_opt in H5Tconv.c. |
CVE-2024-33876 | Medium | 5.7 | 2024-05-14 | HDF5 Library through 1.14.3 has a heap buffer overflow in H5S__point_deserialize in H5Spoint.c. |
CVE-2024-33875 | Medium | 5.7 | 2024-05-14 | HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5O__layout_encode in H5Olayout.c, resulting in the corruption of the instruction pointer. |
CVE-2024-33874 | Critical | 9.8 | 2024-05-14 | HDF5 Library through 1.14.3 has a heap buffer overflow in H5O__mtime_new_encode in H5Omtime.c. |
CVE-2024-33873 | High | 8.8 | 2024-05-14 | HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5D__scatter_mem in H5Dscatgath.c. |
CVE-2024-33819 | Medium | 4.6 | 2024-05-14 | Globitel KSA SpeechLog v8.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Save Query function. |
CVE-2024-33818 | High | 7.5 | 2024-05-14 | Globitel KSA SpeechLog v8.1 was discovered to contain an Insecure Direct Object Reference (IDOR) via the userID parameter. |
CVE-2024-33774 | Medium | 6.5 | 2024-05-14 | A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanSetup_Wizard allows remote authenticated users to trigger a denial of s… |
CVE-2024-33773 | Medium | 6.5 | 2024-05-14 | A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanGuestSetup allows remote authenticated users to trigger a denial of ser… |
CVE-2024-33772 | Medium | 5.7 | 2024-05-14 | A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formTcpipSetup allows remote authenticated users to trigger a denial of service… |
CVE-2024-33771 | Medium | 6.5 | 2024-05-14 | A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via goform/formWPS, allows remote authenticated users to trigger a denial of servic… |
CVE-2024-33454 | Medium | 6.5 | 2024-05-14 | Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the Bluetooth stack component. |
CVE-2024-33433 | Medium | 4.8 | 2024-05-14 | Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Cont… |
CVE-2024-33263 | Medium | 4.0 | 2024-05-14 | QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime(JSRuntime *) at quickjs.c. |
CVE-2024-33250 | High | 7.2 | 2024-05-14 | An issue in Open-Source Technology Committee SRS real-time video server RS/4.0.268(Leo) and SRS/4.0.195(Leo) allows a remote attacker to execute arbitrary code… |
CVE-2024-32999 | Medium | 6.8 | 2024-05-14 | Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32998 | Medium | 5.9 | 2024-05-14 | NULL pointer access vulnerability in the clock module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32997 | High | 8.4 | 2024-05-14 | Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32996 | Medium | 6.2 | 2024-05-14 | Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32995 | Medium | 6.2 | 2024-05-14 | Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32993 | Medium | 5.6 | 2024-05-14 | Out-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32992 | High | 7.5 | 2024-05-14 | Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32991 | High | 7.5 | 2024-05-14 | Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32990 | Medium | 6.1 | 2024-05-14 | Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32989 | Low | 3.3 | 2024-05-14 | Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32985 | Medium | 5.9 | 2024-05-14 | Stellar-core is a reference implementation for the peer-to-peer agent that manages the Stellar network. Prior to 20.4.0, core nodes could be randomly crashed d… |
CVE-2024-32964 | Critical | 9.0 | 2024-05-14 | Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Prior to 0.150.6, lobe-chat had an una… |
CVE-2024-32874 | Medium | 6.8 | 2024-05-14 | Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Below 0.13.2 Release, when uploading a file or retrieving the fi… |
CVE-2024-32776 | Medium | 6.5 | 2024-05-14 | Missing Authorization vulnerability in AppPresser Team AppPresser.This issue affects AppPresser: from n/a through 4.3.0. |
CVE-2024-32739 | High | 7.5 | 2024-05-14 | A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via… |
CVE-2024-32738 | High | 7.5 | 2024-05-14 | A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via… |
CVE-2024-32737 | High | 7.5 | 2024-05-14 | A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via… |
CVE-2024-32736 | High | 7.5 | 2024-05-14 | A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via… |
CVE-2024-32735 | Critical | 9.8 | 2024-05-14 | An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker… |
CVE-2024-32730 | Medium | 6.5 | 2024-05-14 | SAP Enable Now Manager does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploita… |
CVE-2024-32724 | High | 7.5 | 2024-05-14 | Missing Authorization vulnerability in Woo product importer Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy.This issue affects Sharkdropship drop… |
CVE-2024-32719 | Medium | 5.3 | 2024-05-14 | Missing Authorization vulnerability in WP Club Manager WP Club Manager wp-club-manager.This issue affects WP Club Manager: from n/a through <= 2.2.11. |
CVE-2024-32717 | Medium | 6.5 | 2024-05-14 | Missing Authorization vulnerability in WPDeveloper SchedulePress.This issue affects SchedulePress: from n/a through 5.0.8. |
CVE-2024-32712 | High | 7.5 | 2024-05-14 | Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.0.14. |
CVE-2024-32700 | Critical | 10.0 | 2024-05-14 | Unrestricted Upload of File with Dangerous Type vulnerability in Kognetiks Kognetiks Chatbot for WordPress.This issue affects Kognetiks Chatbot for WordPress… |
CVE-2024-32672 | Medium | 5.3 | 2024-05-14 | A Segmentation Fault issue discovered in Samsung Open Source Escargot JavaScript engine allows remote attackers to cause a denial of service via crafted in… |
CVE-2024-32669 | Medium | 5.3 | 2024-05-14 | Improper Input Validation vulnerability in Samsung Open Source escargot JavaScript engine allows Overflow Buffers. However, it occurs in the test code and doe… |
CVE-2024-32655 | High | 8.1 | 2024-05-14 | Npgsql is the .NET data provider for PostgreSQL. The `WriteBind()` method in `src/Npgsql/Internal/NpgsqlConnector.FrontendMessages.cs` uses `int` variables to… |
CVE-2024-32624 | High | 7.4 | 2024-05-14 | HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__ref_mem_setnull in H5Tref.c (called from H5T__conv_ref in H5Tconv.c), resulting in th… |
CVE-2024-32623 | High | 8.8 | 2024-05-14 | HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VM_array_fill in H5VM.c (called from H5S_select_elements in H5Spoint.c). |
CVE-2024-32622 | Critical | 9.1 | 2024-05-14 | HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FL_arr_malloc in H5FL.c (called from H5S_set_extent_simple in H5S.c). |
CVE-2024-32621 | Critical | 9.8 | 2024-05-14 | HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG_read in H5HG.c (called from H5VL__native_blob_get in H5VLnative_blob.c), resulting in… |
CVE-2024-32620 | High | 7.4 | 2024-05-14 | HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5F_addr_decode_len in H5Fint.c, resulting in the corruption of the instruction pointer. |
CVE-2024-32619 | High | 7.4 | 2024-05-14 | HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T_copy_reopen in H5T.c, resulting in the corruption of the instruction pointer. |
CVE-2024-32618 | High | 7.4 | 2024-05-14 | HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__get_native_type in H5Tnative.c, resulting in the corruption of the instruction pointe… |
CVE-2024-32617 | High | 8.8 | 2024-05-14 | HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MM_xstrdup in H5MM.c (called from H5G__ent_to_link i… |
CVE-2024-32616 | High | 7.4 | 2024-05-14 | HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5O__dtype_encode_helper in H5Odtype.c. |
CVE-2024-32615 | Critical | 9.8 | 2024-05-14 | HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Z__nbit_decompress_one_byte in H5Znbit.c, caused by the earlier use of an initialized po… |
CVE-2024-32614 | High | 8.8 | 2024-05-14 | HDF5 Library through 1.14.3 has a SEGV in H5VM_memcpyvv in H5VM.c. |
CVE-2024-32613 | High | 7.4 | 2024-05-14 | HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HL__fl_deserialize in H5HLcache.c, a different vulnerability than CVE-2024… |
CVE-2024-32612 | High | 7.4 | 2024-05-14 | HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HL__fl_deserialize in H5HLcache.c, resulting in the corruption of the instruction point… |
CVE-2024-32611 | Critical | 9.8 | 2024-05-14 | HDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c. |
CVE-2024-32610 | Medium | 5.7 | 2024-05-14 | HDF5 Library through 1.14.3 has a SEGV in H5T_close_real in H5T.c, resulting in a corrupted instruction pointer. |
CVE-2024-32609 | High | 7.5 | 2024-05-14 | HDF5 Library through 1.14.3 allows stack consumption in the function H5E_printf_stack in H5Eint.c. |
CVE-2024-32607 | Medium | 5.7 | 2024-05-14 | HDF5 Library through 1.14.3 has a SEGV in H5A__close in H5Aint.c, resulting in the corruption of the instruction pointer. |
CVE-2024-32606 | Medium | 5.7 | 2024-05-14 | HDF5 Library through 1.14.3 may attempt to dereference uninitialized values in h5tools_str_sprint in tools/lib/h5tools_str.c (called from h5tools_dump_simple_d… |
CVE-2024-32605 | High | 8.8 | 2024-05-14 | HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv in H5VM.c (called from H5D__compact_readvv in H5Dcompact.c). |
CVE-2024-32476 | Medium | 6.5 | 2024-05-14 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. There is a Denial of Service (DoS) vulnerability via OOM using jq in ignoreDifference… |
CVE-2024-32100 | Medium | 5.3 | 2024-05-14 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through… |
CVE-2024-31954 | High | 7.3 | 2024-05-14 | An issue was discovered in the installer in Samsung Portable SSD for T5 1.6.10 on Windows. Because it is possible to tamper with the directory and DLL files us… |
CVE-2024-31953 | Medium | 6.7 | 2024-05-14 | An issue was discovered in Samsung Magician 8.0.0 on macOS. Because it is possible to tamper with the directory and executable files used during the installati… |
CVE-2024-31952 | Medium | 6.7 | 2024-05-14 | An issue was discovered in Samsung Magician 8.0.0 on macOS. Because symlinks are used during the installation process, an attacker can escalate privileges via… |
CVE-2024-31810 | Critical | 9.8 | 2024-05-14 | TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a hardcoded password for root at /etc/shadow.sample. |
CVE-2024-31803 | Medium | 6.2 | 2024-05-14 | Buffer Overflow vulnerability in emp-ot v.0.2.4 allows a remote attacker to execute arbitrary code via the FerretCOT<T>::read_pre_data128_from_file function. |
CVE-2024-31771 | High | 7.8 | 2024-05-14 | Insecure Permission vulnerability in TotalAV v.6.0.740 allows a local attacker to escalate privileges via a crafted file |
CVE-2024-31460 | Medium | 6.5 | 2024-05-14 | Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data stored in `automation_tree_rules.php` is not… |
CVE-2024-31459 | High | 8.0 | 2024-05-14 | Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, there is a file inclusion issue in the `lib/plugin.php` file… |
CVE-2024-31458 | Medium | 4.6 | 2024-05-14 | Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data stored in `form_save()` function in `graph_t… |
CVE-2024-31445 | High | 8.8 | 2024-05-14 | Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, a SQL injection vulnerability in `automation_get_new_graphs_s… |
CVE-2024-31444 | Medium | 4.6 | 2024-05-14 | Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data stored in `automation_tree_rules_form_save()… |
CVE-2024-31443 | Medium | 5.7 | 2024-05-14 | Cacti provides an operational monitoring and fault management framework. Prior to 1.2.27, some of the data stored in `form_save()` function in `data_queries.ph… |
CVE-2024-31441 | High | 7.5 | 2024-05-14 | DataEase is an open source data visualization analysis tool. Due to the lack of restrictions on the connection parameters for the ClickHouse data source, it is… |
CVE-2024-31377 | Critical | 10.0 | 2024-05-14 | Unrestricted Upload of File with Dangerous Type vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus.This issue affects WP Photo Album Plus: from… |
CVE-2024-31113 | Medium | 4.3 | 2024-05-14 | Cross-Site Request Forgery (CSRF) vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.11. |
CVE-2024-30802 | Critical | 9.8 | 2024-05-14 | An issue in Vehicle Management System 7.31.0.3_20230412 allows an attacker to escalate privileges via the login.html component. |
CVE-2024-30801 | Medium | 5.5 | 2024-05-14 | SQL Injection vulnerability in Cloud based customer service management platform v.1.0.0 allows a local attacker to execute arbitrary code via a crafted payload… |
CVE-2024-30268 | Medium | 6.1 | 2024-05-14 | Cacti provides an operational monitoring and fault management framework. A reflected cross-site scripting vulnerability on the 1.3.x DEV branch allows attacker… |
CVE-2024-30259 | High | 8.2 | 2024-05-14 | FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4… |
CVE-2024-30258 | High | 8.2 | 2024-05-14 | FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4… |
CVE-2024-30172 | High | 7.5 | 2024-05-14 | An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and p… |
CVE-2024-30171 | Medium | 5.9 | 2024-05-14 | An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exceptio… |
CVE-2024-30055 | Medium | 5.4 | 2024-05-14 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2024-2923 | Medium | 6.4 | 2024-05-14 | The Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) plugin for WordPress is vulnerable to Stored Cr… |
CVE-2024-2846 | Medium | 4.4 | 2024-05-14 | The Visual Footer Credit Remover plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'selector' parameter in all versions up to, and incl… |
CVE-2024-2785 | Medium | 6.4 | 2024-05-14 | The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Age Gate widget in all versions up to, and includin… |
CVE-2024-2749 | Medium | 5.9 | 2024-05-14 | The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's access control mechanism fails to properly restrict access to its settings, permittin… |
CVE-2024-2662 | High | 7.2 | 2024-05-14 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to command injection in all versions up to, and inclu… |
CVE-2024-2651 | Medium | 6.5 | 2024-05-14 | An issue has been discovered in GitLab CE/EE affecting all versions before 16.9.7, all versions starting from 16.10 before 16.10.5, all versions starting from… |
CVE-2024-2454 | Medium | 6.5 | 2024-05-14 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.11 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting fro… |