2024 CVEs (page 330)
Page 330 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-3142 | Medium | 4.3 | 2024-04-02 | A vulnerability was found in Clavister E10 and E80 up to 14.00.10 and classified as problematic. This issue affects some unknown processing of the component Se… |
CVE-2024-3137 | High | 7.1 | 2024-04-02 | Improper Privilege Management in uvdesk/community-skeleton |
CVE-2024-27334 | Medium | 5.5 | 2024-04-02 | Kofax Power PDF JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2024-3141 | Low | 2.4 | 2024-04-01 | A vulnerability has been found in Clavister E10 and E80 up to 14.00.10 and classified as problematic. This vulnerability affects unknown code of the file /?Pag… |
CVE-2024-3140 | Low | 3.5 | 2024-04-01 | A vulnerability, which was classified as problematic, was found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part of th… |
CVE-2024-3139 | Medium | 5.4 | 2024-04-01 | A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the fu… |
CVE-2024-27333 | Medium | 5.5 | 2024-04-01 | Kofax Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2024-3165 | Medium | 4.5 | 2024-04-01 | System->Maintenance-> Log Files in dotCMS dashboard is providing the username/password for database connections in the log output. Nevertheless, this is a mode… |
CVE-2024-3164 | Medium | 4.5 | 2024-04-01 | In dotCMS dashboard, the Tools and Log Files tabs under System → Maintenance Portlet, which is and always has been an Admin portlet, is accessible to anyone wi… |
CVE-2024-3138 | Low | 3.5 | 2024-04-01 | ** DISPUTED ** A vulnerability was found in francoisjacquet RosarioSIS 11.5.1. It has been rated as problematic. This issue affects some unknown processing of… |
CVE-2024-27332 | Low | 3.3 | 2024-04-01 | PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2024-27331 | Low | 3.3 | 2024-04-01 | PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2024-27330 | Low | 3.3 | 2024-04-01 | PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2024-27329 | Medium | 5.5 | 2024-04-01 | PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2024-27328 | Medium | 5.5 | 2024-04-01 | PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2024-27327 | High | 7.8 | 2024-04-01 | PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co… |
CVE-2024-27326 | Medium | 5.5 | 2024-04-01 | PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2024-27325 | Medium | 5.5 | 2024-04-01 | PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2024-27324 | Medium | 5.5 | 2024-04-01 | PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2024-27323 | High | 7.5 | 2024-04-01 | PDF-XChange Editor Updater Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute… |
CVE-2024-23119 | High | 8.8 | 2024-04-01 | Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2024-23118 | High | 7.2 | 2024-04-01 | Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
CVE-2024-23117 | High | 7.2 | 2024-04-01 | Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o… |
CVE-2024-23116 | High | 7.2 | 2024-04-01 | Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-23115 | High | 7.2 | 2024-04-01 | Centreon updateGroups SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected insta… |
CVE-2024-1863 | Critical | 9.8 | 2024-04-01 | Sante PACS Server Token Endpoint SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on aff… |
CVE-2024-1179 | High | 8.8 | 2024-04-01 | TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers… |
CVE-2024-0637 | High | 8.8 | 2024-04-01 | Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in… |
CVE-2024-29435 | Medium | 4.1 | 2024-04-01 | An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter. |
CVE-2024-29433 | Critical | 9.8 | 2024-04-01 | A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data. |
CVE-2024-3135 | Medium | 6.5 | 2024-04-01 | A Cross-Site Request Forgery (CSRF) vulnerability exists in the mudler/localai application, allowing attackers to craft malicious webpages that, when visited b… |
CVE-2024-3131 | Medium | 6.3 | 2024-04-01 | A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. This vulnerability affects unknown cod… |
CVE-2024-28232 | Medium | 6.2 | 2024-04-01 | Go package IceWhaleTech/CasaOS-UserService provides user management functionalities to CasaOS. The Casa OS Login page has disclosed the username enumeration vu… |
CVE-2024-3129 | Medium | 6.3 | 2024-04-01 | A vulnerability was found in SourceCodester Image Accordion Gallery App 1.0. It has been classified as critical. This affects an unknown part of the file /endp… |
CVE-2024-30867 | Critical | 9.8 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_virtual_site_info.php. |
CVE-2024-30863 | Medium | 6.3 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php. |
CVE-2024-30862 | High | 8.8 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php. |
CVE-2024-30861 | Medium | 5.3 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsec_guide_1.php. |
CVE-2024-30860 | High | 8.8 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/export_excel_user.php. |
CVE-2024-30859 | High | 8.8 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupSSLCert.php. |
CVE-2024-30858 | Critical | 9.8 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_fire_wall.php. |
CVE-2024-25574 | High | 8.8 | 2024-04-01 | SQL injection vulnerability exists in GetDIAE_usListParameters. |
CVE-2024-3128 | Low | 2.4 | 2024-04-01 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in Replify-Messenger 1.0 on Android. This issue affects so… |
CVE-2024-30866 | Medium | 5.4 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php. |
CVE-2024-30865 | Critical | 9.8 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_user_login.php. |
CVE-2024-30864 | Medium | 6.3 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupTimePolicy.php. |
CVE-2024-26655 | Medium | 5.5 | 2024-04-01 | In the Linux kernel, the following vulnerability has been resolved: Fix memory leak in posix_clock_open() If the clk ops.open() function returns an error, we… |
CVE-2024-21473 | Critical | 9.8 | 2024-04-01 | Memory corruption while redirecting log file to any file location with any file name. |
CVE-2024-21472 | High | 8.4 | 2024-04-01 | Memory corruption in Kernel while handling GPU operations. |
CVE-2024-21470 | High | 8.4 | 2024-04-01 | Memory corruption while allocating memory for graphics. |
CVE-2024-21468 | High | 8.4 | 2024-04-01 | Memory corruption when there is failed unmap operation in GPU. |
CVE-2024-21463 | High | 7.3 | 2024-04-01 | Memory corruption while processing Codec2 during v13k decoder pitch synthesis. |
CVE-2024-21454 | High | 7.5 | 2024-04-01 | Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics. |
CVE-2024-21453 | High | 7.5 | 2024-04-01 | Transient DOS while decoding message of size that exceeds the available system memory. |
CVE-2024-21452 | High | 7.3 | 2024-04-01 | Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions. |
CVE-2024-3125 | Low | 2.4 | 2024-04-01 | A vulnerability classified as problematic was found in Zebra ZTC GK420d 1.0. This vulnerability affects unknown code of the file /settings of the component Ale… |
CVE-2024-31099 | Medium | 6.4 | 2024-04-01 | Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue affects Shortcodes and extra features for… |
CVE-2024-3124 | Low | 2.4 | 2024-04-01 | A vulnerability classified as problematic has been found in fridgecow smartalarm 1.8.1 on Android. This affects an unknown part of the file androidmanifest.xml… |
CVE-2024-30872 | Medium | 5.1 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php. |
CVE-2024-30871 | High | 8.8 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php. |
CVE-2024-30870 | High | 8.8 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/address_interpret.php. |
CVE-2024-30868 | Critical | 9.8 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/add_getlogin.php. |
CVE-2024-3130 | Medium | 5.7 | 2024-04-01 | Hard-coded Credentials in CoolKit eWeLlink app are before 5.4.x on Android and IOS allows local attacker to unauthorized access to sensitive data via Decryptio… |
CVE-2024-26654 | High | 7.8 | 2024-04-01 | In the Linux kernel, the following vulnerability has been resolved: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs The dreamcastcard->timer cou… |
CVE-2024-26653 | High | 7.8 | 2024-04-01 | In the Linux kernel, the following vulnerability has been resolved: usb: misc: ljca: Fix double free in error handling path When auxiliary_device_add() retur… |
CVE-2024-25080 | Medium | 4.7 | 2024-04-01 | WebMail in Axigen 10.x before 10.3.3.62 allows XSS via the image attachment viewer. |
CVE-2024-2278 | Medium | 6.1 | 2024-04-01 | Themify WordPress plugin before 1.4.4 does not sanitise and escape some of its Filters settings, which could allow high privilege users such as admin to perfo… |
CVE-2024-2263 | Medium | 4.8 | 2024-04-01 | Themify WordPress plugin before 1.4.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Script… |
CVE-2024-2262 | Medium | 4.7 | 2024-04-01 | Themify WordPress plugin before 1.4.4 does not have CSRF check in its bulk action, which could allow attackers to make logged in users delete arbitrary filter… |
CVE-2024-1526 | Medium | 5.3 | 2024-04-01 | The Hubbub Lite WordPress plugin before 1.33.1 does not ensure that user have access to password protected post before displaying its content in a meta tag. |
CVE-2024-20055 | Medium | 6.3 | 2024-04-01 | In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution priv… |
CVE-2024-20054 | Medium | 6.6 | 2024-04-01 | In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2024-20053 | High | 8.4 | 2024-04-01 | In flashc, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege with System execution privile… |
CVE-2024-20052 | Medium | 4.4 | 2024-04-01 | In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privi… |
CVE-2024-20051 | Low | 2.3 | 2024-04-01 | In flashc, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with System execution privileges needed. U… |
CVE-2024-20050 | Medium | 4.4 | 2024-04-01 | In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privi… |
CVE-2024-20049 | Medium | 4.4 | 2024-04-01 | In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privi… |
CVE-2024-20048 | Medium | 6.2 | 2024-04-01 | In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privi… |
CVE-2024-20047 | Medium | 5.4 | 2024-04-01 | In battery, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges… |
CVE-2024-20046 | Medium | 6.6 | 2024-04-01 | In battery, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege with System execution priv… |
CVE-2024-20045 | Low | 2.3 | 2024-04-01 | In audio, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System ex… |
CVE-2024-20044 | Medium | 6.6 | 2024-04-01 | In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges… |
CVE-2024-20043 | Medium | 6.6 | 2024-04-01 | In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges… |
CVE-2024-20042 | Medium | 6.6 | 2024-04-01 | In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges… |
CVE-2024-20041 | Medium | 4.4 | 2024-04-01 | In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges n… |
CVE-2024-20040 | High | 8.8 | 2024-04-01 | In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additiona… |
CVE-2024-20039 | High | 8.8 | 2024-04-01 | In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution… |
CVE-2024-31033 | Medium | 6.8 | 2024-04-01 | JJWT (aka Java JWT) through 0.12.5 ignores certain characters and thus a user might falsely conclude that they have a strong key. The impacted code is the setS… |
CVE-2024-28895 | Medium | 6.1 | 2024-04-01 | 'Yahoo! JAPAN' App for Android v2.3.1 to v3.161.1 and 'Yahoo! JAPAN' App for iOS v3.2.2 to v4.109.0 contain a cross-site scripting vulnerability. If this vulne… |
CVE-2024-27609 | Medium | 6.5 | 2024-04-01 | Bonita before 2023.2-u2 allows stored XSS via a UI screen in the administration panel. |
CVE-2024-31104 | Medium | 6.5 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GetResponse GetResponse for WordPress allows Stored XSS.T… |
CVE-2024-31103 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kanban for WordPress Kanban Boards for WordPress allows R… |
CVE-2024-31102 | Medium | 5.9 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scimone Ignazio Prenotazioni allows Stored XSS.This issue… |
CVE-2024-31101 | Medium | 6.5 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in August Infotech AI Twitter Feeds (Twitter widget & shortc… |
CVE-2024-31097 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stephan Spencer SEO Title Tag allows Reflected XSS.This i… |
CVE-2024-31092 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Philip M. Hofer (Frumph) Comic Easel allows Reflected XSS… |
CVE-2024-31091 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SparkWeb Interactive, Inc. Custom Field Bulk Editor allow… |
CVE-2024-31090 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 荒野无灯 Hacklog Down As PDF allows Reflected XSS.This issue… |
CVE-2024-31089 | Medium | 5.9 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Techblissonline.Com (Rajesh) Platinum SEO allows Stored X… |
CVE-2024-31087 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joel Starnes pageMash > Page Management allows Reflected… |