2024 CVEs (page 306)
Page 306 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-32650 | High | 7.5 | 2024-04-19 | Rustls is a modern TLS library written in Rust. `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input. When using a b… |
CVE-2024-32409 | High | 7.1 | 2024-04-19 | An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script. |
CVE-2024-32206 | Medium | 4.6 | 2024-04-19 | A stored cross-site scripting (XSS) vulnerability in the component \affiche\admin\index.php of WUZHICMS v4.1.0 allows attackers to execute arbitrary web script… |
CVE-2024-31846 | High | 7.5 | 2024-04-19 | An issue was discovered in Italtel Embrace 1.6.4. The web application does not restrict or incorrectly restricts access to a resource from an unauthorized acto… |
CVE-2024-31841 | High | 7.5 | 2024-04-19 | An issue was discovered in Italtel Embrace 1.6.4. The web server fails to sanitize input data, allowing remote unauthenticated attackers to read arbitrary file… |
CVE-2024-31587 | Medium | 6.5 | 2024-04-19 | SecuSTATION Camera V2.5.5.3116-S50-SMA-B20160811A and lower allows an unauthenticated attacker to download device configuration files via a crafted request. |
CVE-2024-29183 | Medium | 6.1 | 2024-04-19 | OpenRASP is a RASP solution that directly integrates its protection engine into the application server by instrumentation. There exists a reflected XSS in the… |
CVE-2024-29029 | Medium | 6.1 | 2024-04-19 | memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/image that allows unauthenticated users… |
CVE-2024-27752 | Medium | 5.4 | 2024-04-19 | Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the Default Keyword field in the settings function. |
CVE-2024-22640 | High | 7.5 | 2024-04-19 | TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color. |
CVE-2024-3684 | High | 8.0 | 2024-04-19 | A server side request forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console t… |
CVE-2024-3646 | High | 8.0 | 2024-04-19 | A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain adm… |
CVE-2024-3470 | Medium | 5.9 | 2024-04-19 | An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed an attacker to use a deploy key pertaining to an organiz… |
CVE-2024-32644 | Critical | 9.1 | 2024-04-19 | Evmos is a scalable, high-throughput Proof-of-Stake EVM blockchain that is fully compatible and interoperable with Ethereum. Prior to 17.0.0, there is a way to… |
CVE-2024-32478 | Medium | 6.9 | 2024-04-19 | Git Credential Manager (GCM) is a secure Git credential helper. Prior to 2.5.0, the Debian package does not set root ownership on installed files. This allows… |
CVE-2024-32038 | Critical | 9.8 | 2024-04-19 | Wazuh is a free and open source platform used for threat prevention, detection, and response. There is a buffer overflow hazard in wazuh-analysisd when handlin… |
CVE-2024-29030 | Medium | 5.8 | 2024-04-19 | memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /api/resource that allows authenticated users t… |
CVE-2024-29028 | Medium | 5.8 | 2024-04-19 | memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/httpmeta that allows unauthenticated use… |
CVE-2024-32166 | High | 8.8 | 2024-04-19 | Webid v1.2.1 suffers from an Insecure Direct Object Reference (IDOR) - Broken Access Control vulnerability, allowing attackers to buy now an auction that is su… |
CVE-2024-3654 | Medium | 6.3 | 2024-04-19 | An XSS vulnerability has been found in Teimas Global's Teixo, version 1.42.42-stable. This vulnerability could allow an attacker to send a specially crafted Ja… |
CVE-2024-31744 | High | 7.5 | 2024-04-19 | In Jasper 4.2.2, the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an assertion failure vulnerability, allowing attackers to cause a d… |
CVE-2024-32683 | Medium | 5.3 | 2024-04-19 | Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5. |
CVE-2024-1065 | Medium | 5.9 | 2024-04-19 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |
CVE-2024-0671 | Medium | 6.8 | 2024-04-19 | Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GP… |
CVE-2024-29969 | High | 7.5 | 2024-04-19 | When a Brocade SANnav installation is upgraded from Brocade SANnav v2.2.2 to Brocade SANnav 2.3.0, TLS/SSL weak message authentication code ciphers are added b… |
CVE-2024-29968 | High | 7.7 | 2024-04-19 | An information disclosure vulnerability exists in Brocade SANnav before v2.3.1 and v2.3.0a when Brocade SANnav instances are configured in disaster recovery mo… |
CVE-2024-2761 | Medium | 6.8 | 2024-04-19 | The Genesis Blocks WordPress plugin before 3.1.3 does not properly escape data input provided to some of its blocks, allowing using with at least contributor p… |
CVE-2024-29967 | Medium | 4.4 | 2024-04-19 | In Brocade SANnav before Brocade SANnav v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount points, allowing read… |
CVE-2024-29966 | High | 7.5 | 2024-04-19 | Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hard-coded credentials in the documentation that appear as the appliance's root password. The vulnerabilit… |
CVE-2024-29965 | Medium | 6.8 | 2024-04-19 | In Brocade SANnav before v2.3.1, and v2.3.0a, it is possible to back up the appliance from the web interface or the command line interface ("SSH"). The result… |
CVE-2024-29964 | Medium | 5.7 | 2024-04-19 | Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files. An unprivileged attacker who gains access to the serv… |
CVE-2024-29962 | Medium | 5.5 | 2024-04-19 | Brocade SANnav OVA before v2.3.1 and v2.3.0a have an insecure file permission setting that makes files world-readable. This could allow a local user without th… |
CVE-2024-29963 | Low | 1.9 | 2024-04-19 | Brocade SANnav OVA before v2.3.1, and v2.3.0a, contain hardcoded TLS keys used by Docker. Note: Brocade SANnav doesn't have access to remote Docker registries… |
CVE-2024-29961 | High | 8.2 | 2024-04-19 | A vulnerability affects Brocade SANnav before v2.3.1 and v2.3.0a. It allows a Brocade SANnav service to send ping commands in the background at regular interva… |
CVE-2024-29960 | Medium | 6.8 | 2024-04-19 | In Brocade SANnav server before v2.3.1 and v2.3.0a, the SSH keys inside the OVA image are identical in the VM every time SANnav is installed. Any Brocade SAnn… |
CVE-2024-29959 | High | 8.6 | 2024-04-19 | A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support sa… |
CVE-2024-29958 | High | 7.5 | 2024-04-19 | A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints the encryption key in the console when a privileged user executes the script to replace the… |
CVE-2024-29957 | High | 7.5 | 2024-04-19 | When Brocade SANnav before v2.3.1 and v2.3.0a servers are configured in Disaster Recovery mode, the encryption key is stored in the DR log files. This could pr… |
CVE-2024-3818 | Medium | 5.4 | 2024-04-19 | The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's "… |
CVE-2024-3731 | Medium | 6.1 | 2024-04-19 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and incl… |
CVE-2024-3615 | Medium | 6.1 | 2024-04-19 | The Media Library Folders plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 8.2… |
CVE-2024-3600 | High | 7.2 | 2024-04-19 | The Poll Maker – Best WordPress Poll Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check on the ays_poll… |
CVE-2024-3598 | Medium | 6.4 | 2024-04-19 | The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Creative Button widget in all versions up to, and includ… |
CVE-2024-3560 | Medium | 6.4 | 2024-04-19 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _id value in all versions up to, and including… |
CVE-2024-29204 | Critical | 9.8 | 2024-04-19 | A Heap Overflow vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote unauthenticated attacker to execute arbitrary co… |
CVE-2024-27984 | High | 7.1 | 2024-04-19 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to delete specific type of files and/or… |
CVE-2024-27978 | Medium | 6.5 | 2024-04-19 | A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform de… |
CVE-2024-27977 | High | 8.1 | 2024-04-19 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to delete arbitrary files, thereby lead… |
CVE-2024-27976 | High | 8.8 | 2024-04-19 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM… |
CVE-2024-27975 | High | 8.8 | 2024-04-19 | An Use-after-free vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary co… |
CVE-2024-25000 | High | 8.8 | 2024-04-19 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM… |
CVE-2024-24999 | High | 8.8 | 2024-04-19 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM… |
CVE-2024-24998 | High | 8.8 | 2024-04-19 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM… |
CVE-2024-24997 | High | 8.8 | 2024-04-19 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM… |
CVE-2024-24996 | Critical | 9.8 | 2024-04-19 | A Heap overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to execute arbitrary co… |
CVE-2024-24995 | High | 7.5 | 2024-04-19 | A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands… |
CVE-2024-24994 | High | 8.8 | 2024-04-19 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM… |
CVE-2024-24993 | High | 7.5 | 2024-04-19 | A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands… |
CVE-2024-24992 | High | 8.8 | 2024-04-19 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. |
CVE-2024-24991 | Medium | 6.5 | 2024-04-19 | A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform de… |
CVE-2024-23535 | High | 8.8 | 2024-04-19 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM… |
CVE-2024-23534 | High | 8.8 | 2024-04-19 | An Unrestricted File-upload vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary command… |
CVE-2024-23533 | Medium | 6.5 | 2024-04-19 | An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an authenticated remote a… |
CVE-2024-23532 | High | 7.5 | 2024-04-19 | An out-of-bounds Read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform denial… |
CVE-2024-23531 | High | 7.5 | 2024-04-19 | An Integer Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to perform denial o… |
CVE-2024-23530 | High | 7.5 | 2024-04-19 | An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote… |
CVE-2024-23529 | High | 7.5 | 2024-04-19 | An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote… |
CVE-2024-23528 | High | 7.5 | 2024-04-19 | An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote… |
CVE-2024-23526 | High | 7.5 | 2024-04-19 | An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote… |
CVE-2024-22061 | Critical | 9.8 | 2024-04-19 | A Heap Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows a remote unauthenticated attacker to execute arbitrary com… |
CVE-2024-31750 | Critical | 9.8 | 2024-04-19 | SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the req_id parameter. |
CVE-2024-30938 | Critical | 9.8 | 2024-04-19 | SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMS_User.php component. |
CVE-2024-3742 | High | 7.5 | 2024-04-18 | Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system. |
CVE-2024-22186 | High | 8.8 | 2024-04-18 | The application suffers from a privilege escalation vulnerability. An attacker logged in as guest can escalate his privileges by poisoning the cookie to beco… |
CVE-2024-21872 | High | 7.5 | 2024-04-18 | The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages that allows more critical operations to t… |
CVE-2024-21846 | Medium | 5.3 | 2024-04-18 | An unauthenticated attacker can reset the board and stop transmitter operations by sending a specially-crafted GET request to the command.cgi gateway, result… |
CVE-2024-1491 | High | 7.5 | 2024-04-18 | The devices allow access to an unprotected endpoint that allows MPFS file system binary image upload without authentication. The MPFS2 file system module pro… |
CVE-2024-3741 | High | 7.5 | 2024-04-18 | Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except '… |
CVE-2024-32473 | Medium | 4.7 | 2024-04-18 | Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes… |
CVE-2024-30929 | High | 8.0 | 2024-04-18 | Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php |
CVE-2024-30928 | High | 8.1 | 2024-04-18 | SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc |
CVE-2024-30927 | Medium | 6.3 | 2024-04-18 | Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component. |
CVE-2024-30926 | Medium | 4.6 | 2024-04-18 | Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the ./inc/kiosks.inc component. |
CVE-2024-30925 | Medium | 6.5 | 2024-04-18 | Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component. |
CVE-2024-30924 | Medium | 4.6 | 2024-04-18 | Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the checkin.php component. |
CVE-2024-22179 | High | 7.5 | 2024-04-18 | The application is vulnerable to an unauthenticated parameter manipulation that allows an attacker to set the credentials to blank giving her access to the a… |
CVE-2024-30923 | Critical | 9.8 | 2024-04-18 | SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering |
CVE-2024-30922 | Critical | 9.8 | 2024-04-18 | SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering. |
CVE-2024-30921 | Medium | 5.4 | 2024-04-18 | Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the photo.php component. |
CVE-2024-30920 | High | 7.4 | 2024-04-18 | Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component. |
CVE-2024-30107 | Low | 3.5 | 2024-04-18 | HCL Connections contains a broken access control vulnerability that may expose sensitive information to unauthorized users in certain scenarios. |
CVE-2024-32477 | High | 7.7 | 2024-04-18 | Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. By using ANSI escape sequences and a race between `libc::tcflush(0, libc::TCIFL… |
CVE-2024-32474 | High | 7.3 | 2024-04-18 | Sentry is an error tracking and performance monitoring platform. Prior to 24.4.1, when authenticating as a superuser to Sentry with a username and password, th… |
CVE-2024-20380 | High | 7.5 | 2024-04-18 | A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device… |
CVE-2024-29987 | Medium | 6.5 | 2024-04-18 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
CVE-2024-29986 | Medium | 5.4 | 2024-04-18 | Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability |
CVE-2024-23557 | Low | 3.5 | 2024-04-18 | HCL Connections contains a user enumeration vulnerability. Certain actions could allow an attacker to determine if the user is valid or not, leading to a possi… |
CVE-2024-32462 | High | 8.4 | 2024-04-18 | Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a m… |
CVE-2024-24910 | High | 7.3 | 2024-04-18 | A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen, Identity Agent for Windows, and Identity Agent for Windows… |
CVE-2024-32335 | Medium | 5.4 | 2024-04-18 | TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in Access Control under the Wireless Page. |