2024 CVEs (page 330)
Page 330 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-29433 | Critical | 9.8 | 2024-04-01 | A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data. |
CVE-2024-3135 | Medium | 6.5 | 2024-04-01 | A Cross-Site Request Forgery (CSRF) vulnerability exists in the mudler/localai application, allowing attackers to craft malicious webpages that, when visited b… |
CVE-2024-3131 | Medium | 6.3 | 2024-04-01 | A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. This vulnerability affects unknown cod… |
CVE-2024-28232 | Medium | 6.2 | 2024-04-01 | Go package IceWhaleTech/CasaOS-UserService provides user management functionalities to CasaOS. The Casa OS Login page has disclosed the username enumeration vu… |
CVE-2024-3129 | Medium | 6.3 | 2024-04-01 | A vulnerability was found in SourceCodester Image Accordion Gallery App 1.0. It has been classified as critical. This affects an unknown part of the file /endp… |
CVE-2024-30867 | Critical | 9.8 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_virtual_site_info.php. |
CVE-2024-30863 | Medium | 6.3 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php. |
CVE-2024-30862 | High | 8.8 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php. |
CVE-2024-30861 | Medium | 5.3 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsec_guide_1.php. |
CVE-2024-30860 | High | 8.8 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/export_excel_user.php. |
CVE-2024-30859 | High | 8.8 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupSSLCert.php. |
CVE-2024-30858 | Critical | 9.8 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_fire_wall.php. |
CVE-2024-25574 | High | 8.8 | 2024-04-01 | SQL injection vulnerability exists in GetDIAE_usListParameters. |
CVE-2024-3128 | Low | 2.4 | 2024-04-01 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in Replify-Messenger 1.0 on Android. This issue affects so… |
CVE-2024-30866 | Medium | 5.4 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php. |
CVE-2024-30865 | Critical | 9.8 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_user_login.php. |
CVE-2024-30864 | Medium | 6.3 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupTimePolicy.php. |
CVE-2024-26655 | Medium | 5.5 | 2024-04-01 | In the Linux kernel, the following vulnerability has been resolved: Fix memory leak in posix_clock_open() If the clk ops.open() function returns an error, we… |
CVE-2024-21473 | Critical | 9.8 | 2024-04-01 | Memory corruption while redirecting log file to any file location with any file name. |
CVE-2024-21472 | High | 8.4 | 2024-04-01 | Memory corruption in Kernel while handling GPU operations. |
CVE-2024-21470 | High | 8.4 | 2024-04-01 | Memory corruption while allocating memory for graphics. |
CVE-2024-21468 | High | 8.4 | 2024-04-01 | Memory corruption when there is failed unmap operation in GPU. |
CVE-2024-21463 | High | 7.3 | 2024-04-01 | Memory corruption while processing Codec2 during v13k decoder pitch synthesis. |
CVE-2024-21454 | High | 7.5 | 2024-04-01 | Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics. |
CVE-2024-21453 | High | 7.5 | 2024-04-01 | Transient DOS while decoding message of size that exceeds the available system memory. |
CVE-2024-21452 | High | 7.3 | 2024-04-01 | Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions. |
CVE-2024-3125 | Low | 2.4 | 2024-04-01 | A vulnerability classified as problematic was found in Zebra ZTC GK420d 1.0. This vulnerability affects unknown code of the file /settings of the component Ale… |
CVE-2024-31099 | Medium | 6.4 | 2024-04-01 | Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue affects Shortcodes and extra features for… |
CVE-2024-3124 | Low | 2.4 | 2024-04-01 | A vulnerability classified as problematic has been found in fridgecow smartalarm 1.8.1 on Android. This affects an unknown part of the file androidmanifest.xml… |
CVE-2024-30872 | Medium | 5.1 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php. |
CVE-2024-30871 | High | 8.8 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php. |
CVE-2024-30870 | High | 8.8 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/address_interpret.php. |
CVE-2024-30868 | Critical | 9.8 | 2024-04-01 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/add_getlogin.php. |
CVE-2024-3130 | Medium | 5.7 | 2024-04-01 | Hard-coded Credentials in CoolKit eWeLlink app are before 5.4.x on Android and IOS allows local attacker to unauthorized access to sensitive data via Decryptio… |
CVE-2024-26654 | High | 7.8 | 2024-04-01 | In the Linux kernel, the following vulnerability has been resolved: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs The dreamcastcard->timer cou… |
CVE-2024-26653 | High | 7.8 | 2024-04-01 | In the Linux kernel, the following vulnerability has been resolved: usb: misc: ljca: Fix double free in error handling path When auxiliary_device_add() retur… |
CVE-2024-25080 | Medium | 4.7 | 2024-04-01 | WebMail in Axigen 10.x before 10.3.3.62 allows XSS via the image attachment viewer. |
CVE-2024-2278 | Medium | 6.1 | 2024-04-01 | Themify WordPress plugin before 1.4.4 does not sanitise and escape some of its Filters settings, which could allow high privilege users such as admin to perfo… |
CVE-2024-2263 | Medium | 4.8 | 2024-04-01 | Themify WordPress plugin before 1.4.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Script… |
CVE-2024-2262 | Medium | 4.7 | 2024-04-01 | Themify WordPress plugin before 1.4.4 does not have CSRF check in its bulk action, which could allow attackers to make logged in users delete arbitrary filter… |
CVE-2024-1526 | Medium | 5.3 | 2024-04-01 | The Hubbub Lite WordPress plugin before 1.33.1 does not ensure that user have access to password protected post before displaying its content in a meta tag. |
CVE-2024-20055 | Medium | 6.3 | 2024-04-01 | In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution priv… |
CVE-2024-20054 | Medium | 6.6 | 2024-04-01 | In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2024-20053 | High | 8.4 | 2024-04-01 | In flashc, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege with System execution privile… |
CVE-2024-20052 | Medium | 4.4 | 2024-04-01 | In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privi… |
CVE-2024-20051 | Low | 2.3 | 2024-04-01 | In flashc, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with System execution privileges needed. U… |
CVE-2024-20050 | Medium | 4.4 | 2024-04-01 | In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privi… |
CVE-2024-20049 | Medium | 4.4 | 2024-04-01 | In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privi… |
CVE-2024-20048 | Medium | 6.2 | 2024-04-01 | In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privi… |
CVE-2024-20047 | Medium | 5.4 | 2024-04-01 | In battery, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges… |
CVE-2024-20046 | Medium | 6.6 | 2024-04-01 | In battery, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege with System execution priv… |
CVE-2024-20045 | Low | 2.3 | 2024-04-01 | In audio, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System ex… |
CVE-2024-20044 | Medium | 6.6 | 2024-04-01 | In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges… |
CVE-2024-20043 | Medium | 6.6 | 2024-04-01 | In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges… |
CVE-2024-20042 | Medium | 6.6 | 2024-04-01 | In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges… |
CVE-2024-20041 | Medium | 4.4 | 2024-04-01 | In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges n… |
CVE-2024-20040 | High | 8.8 | 2024-04-01 | In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additiona… |
CVE-2024-20039 | High | 8.8 | 2024-04-01 | In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution… |
CVE-2024-31033 | Medium | 6.8 | 2024-04-01 | JJWT (aka Java JWT) through 0.12.5 ignores certain characters and thus a user might falsely conclude that they have a strong key. The impacted code is the setS… |
CVE-2024-28895 | Medium | 6.1 | 2024-04-01 | 'Yahoo! JAPAN' App for Android v2.3.1 to v3.161.1 and 'Yahoo! JAPAN' App for iOS v3.2.2 to v4.109.0 contain a cross-site scripting vulnerability. If this vulne… |
CVE-2024-27609 | Medium | 6.5 | 2024-04-01 | Bonita before 2023.2-u2 allows stored XSS via a UI screen in the administration panel. |
CVE-2024-31104 | Medium | 6.5 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GetResponse GetResponse for WordPress allows Stored XSS.T… |
CVE-2024-31103 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kanban for WordPress Kanban Boards for WordPress allows R… |
CVE-2024-31102 | Medium | 5.9 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scimone Ignazio Prenotazioni allows Stored XSS.This issue… |
CVE-2024-31101 | Medium | 6.5 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in August Infotech AI Twitter Feeds (Twitter widget & shortc… |
CVE-2024-31097 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stephan Spencer SEO Title Tag allows Reflected XSS.This i… |
CVE-2024-31092 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Philip M. Hofer (Frumph) Comic Easel allows Reflected XSS… |
CVE-2024-31091 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SparkWeb Interactive, Inc. Custom Field Bulk Editor allow… |
CVE-2024-31090 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 荒野无灯 Hacklog Down As PDF allows Reflected XSS.This issue… |
CVE-2024-31089 | Medium | 5.9 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Techblissonline.Com (Rajesh) Platinum SEO allows Stored X… |
CVE-2024-31087 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joel Starnes pageMash > Page Management allows Reflected… |
CVE-2024-31085 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rob Marsh, SJ Post-Plugin Library allows Reflected XSS.Th… |
CVE-2024-31084 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pulsar Web Design Weekly Class Schedule allows Reflected… |
CVE-2024-30561 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scientech It Solution Appointment Calendar allows Reflect… |
CVE-2024-30559 | Medium | 6.5 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maurice Spin 360 deg and 3D Model Viewer allows Stored XS… |
CVE-2024-30558 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Simpson Add Shortcodes Actions And Filters allows… |
CVE-2024-30557 | Medium | 6.5 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aesopinteractive Aesop Story Engine allows Stored XSS.Thi… |
CVE-2024-30556 | Medium | 6.5 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MightyThemes Mighty Classic Pros And Cons allows Stored X… |
CVE-2024-30555 | Medium | 6.5 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sayan Datta Ultimate Social Comments – Email Notification… |
CVE-2024-30554 | Medium | 5.9 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wouter Dijkstra DD Rating allows Stored XSS.This issue af… |
CVE-2024-30553 | Medium | 5.9 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joby Joseph WP Twitter Mega Fan Box Widget allows Stored… |
CVE-2024-30552 | Medium | 6.5 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wppdf.Org Responsive flipbook allows Stored XSS.This issu… |
CVE-2024-30551 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Toast Plugins Sticky Anything.This issue affects Sticky A… |
CVE-2024-30550 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows R… |
CVE-2024-30549 | Medium | 5.9 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cimatti Contact Forms by Cimatti contact-forms.This issue… |
CVE-2024-30548 | Medium | 5.9 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noah Kagan underConstruction allows Stored XSS.This issue… |
CVE-2024-30530 | Medium | 6.5 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast… |
CVE-2024-30524 | Medium | 6.5 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RedLettuce Plugins PDF Viewer for Elementor allows Stored… |
CVE-2024-31123 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebDorado SpiderFAQ allows Reflected XSS.This issue affec… |
CVE-2024-31122 | Medium | 5.8 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Prism IT Systems User Rights Access Manager allows Reflec… |
CVE-2024-31121 | Medium | 6.5 | 2024-03-31 | Contributor Cross Site Scripting (XSS) in HeartThis <= 0.1.0 versions. |
CVE-2024-31120 | Medium | 6.5 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows S… |
CVE-2024-31117 | Medium | 6.5 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moises Heberle WooCommerce Bookings Calendar.This issue a… |
CVE-2024-31116 | High | 7.6 | 2024-03-31 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web 10Web Map Builder for Google Maps.This issue affect… |
CVE-2024-31112 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stephanie Leary Convert Post Types allows Reflected XSS.T… |
CVE-2024-31110 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Katz Web Services, Inc. Contact Form 7 Newsletter allows… |
CVE-2024-31108 | Medium | 6.5 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iFlyChat Team iFlyChat – WordPress Chat iflychat allows S… |
CVE-2024-31107 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DiSo Development Team OpenID allows Reflected XSS.This is… |
CVE-2024-31106 | High | 7.1 | 2024-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yooslider Yoo Slider allows Reflected XSS.This issue affe… |
CVE-2024-31100 | Medium | 5.4 | 2024-03-31 | Cross-Site Request Forgery (CSRF) vulnerability in Festi-Team Popup Cart Lite for WooCommerce.This issue affects Popup Cart Lite for WooCommerce: from n/a thro… |