2024 CVEs (page 345)
Page 345 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-28128 | Medium | 6.1 | 2024-03-18 | Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execute an arbitrary scr… |
CVE-2024-28125 | Critical | 9.8 | 2024-03-18 | FitNesse all releases allows a remote authenticated attacker to execute arbitrary OS commands. Note: A contributor of FitNesse has claimed that this is not a v… |
CVE-2024-27974 | Medium | 6.3 | 2024-03-18 | Cross-site request forgery vulnerability in FUJIFILM printers which implement CentreWare Internet Services or Internet Services allows a remote unauthenticated… |
CVE-2024-23604 | Medium | 6.1 | 2024-03-18 | Cross-site scripting vulnerability exists in FitNesse all releases, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web… |
CVE-2024-22475 | Medium | 6.1 | 2024-03-18 | Cross-site request forgery vulnerability in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. allows a r… |
CVE-2024-21824 | Medium | 5.3 | 2024-03-18 | Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. If… |
CVE-2024-29156 | Medium | 6.5 | 2024-03-18 | In OpenStack Murano through 16.0.0, when YAQL before 3.0.0 is used, the Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied… |
CVE-2024-29154 | High | 7.4 | 2024-03-18 | danielmiessler fabric through 1.3.0 allows installer/client/gui/static/js/index.js XSS because of innerHTML mishandling, such as in htmlToPlainText. |
CVE-2024-29151 | Critical | 9.1 | 2024-03-18 | Rocket.Chat.Audit through 5ad78e8 depends on filecachetools, which does not exist in PyPI. |
CVE-2024-28745 | Low | 3.3 | 2024-03-18 | Improper export of Android application components issue exists in 'ABEMA' App for Android prior to 10.65.0 allowing another app installed on the user's device… |
CVE-2024-27757 | Medium | 6.1 | 2024-03-18 | flusity CMS through 2.45 allows tools/addons_model.php Gallery Name XSS. The reporter indicates that this product "ceased its development as of February 2024." |
CVE-2024-2581 | High | 8.8 | 2024-03-18 | A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function fromSetRouteStatic of the file /goform/SetStati… |
CVE-2024-2577 | High | 7.3 | 2024-03-18 | A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. This vulnerability affects unknown code of the… |
CVE-2024-24539 | Medium | 5.3 | 2024-03-18 | FusionPBX before 5.2.0 does not validate a session. |
CVE-2024-2576 | High | 7.3 | 2024-03-18 | A vulnerability, which was classified as critical, was found in SourceCodester Employee Task Management System 1.0. This affects an unknown part of the file /u… |
CVE-2024-2575 | High | 7.3 | 2024-03-18 | A vulnerability, which was classified as critical, has been found in SourceCodester Employee Task Management System 1.0. Affected by this issue is some unknown… |
CVE-2024-2574 | High | 7.3 | 2024-03-18 | A vulnerability classified as critical was found in SourceCodester Employee Task Management System 1.0. Affected by this vulnerability is an unknown functional… |
CVE-2024-24230 | High | 7.5 | 2024-03-18 | Komm.One CMS 10.4.2.14 has a Server-Side Template Injection (SSTI) vulnerability via the Velocity template engine. It allows remote attackers to execute arbitr… |
CVE-2024-2573 | High | 7.3 | 2024-03-18 | A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file /task-… |
CVE-2024-2572 | High | 7.3 | 2024-03-18 | A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of t… |
CVE-2024-2571 | High | 7.3 | 2024-03-18 | A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of t… |
CVE-2024-2570 | High | 7.3 | 2024-03-18 | A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file /… |
CVE-2024-2569 | High | 7.3 | 2024-03-18 | A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionalit… |
CVE-2024-23139 | High | 7.8 | 2024-03-18 | A maliciously crafted ABC file, when parsed through Autodesk FBX, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerabi… |
CVE-2024-23138 | High | 7.8 | 2024-03-18 | A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulne… |
CVE-2024-2568 | Medium | 4.7 | 2024-03-17 | A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /a… |
CVE-2024-2567 | Low | 1.8 | 2024-03-17 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, was found in jurecapuder AndroidWeatherApp 1.0.0 on Android. Affected is… |
CVE-2024-27961 | High | 7.1 | 2024-03-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codekraft AntiSpam for Contact Form 7 allows Reflected XS… |
CVE-2024-27960 | High | 7.1 | 2024-03-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Solution Email Subscription Popup allows S… |
CVE-2024-27959 | High | 7.1 | 2024-03-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpexpertsio WC Shop Sync – Integrate Square and WooCommer… |
CVE-2024-27958 | High | 7.1 | 2024-03-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Visualizer allows Reflected XSS.This issue affe… |
CVE-2024-27957 | Critical | 10.0 | 2024-03-17 | Unrestricted Upload of File with Dangerous Type vulnerability in Pie Register.This issue affects Pie Register: from n/a through 3.8.3.1. |
CVE-2024-25903 | Medium | 5.3 | 2024-03-17 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in N-Media Frontend File Manager.This issue affects Frontend File Manager: from n/a th… |
CVE-2024-25591 | Medium | 5.3 | 2024-03-17 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Benjamin Rojas WP Editor.This issue affects WP Editor: from n/a through 1.2.7. |
CVE-2024-25933 | Medium | 5.3 | 2024-03-17 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Inv… |
CVE-2024-24867 | Medium | 5.3 | 2024-03-17 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Osamaesh WP Visitor Statistics (Real Time Traffic).This issue affects WP Visitor St… |
CVE-2024-2566 | High | 7.3 | 2024-03-17 | A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240313. It has been declared as critical. Affected by this vuln… |
CVE-2024-2565 | Medium | 6.3 | 2024-03-17 | A vulnerability was found in PandaXGO PandaX up to 20240310. It has been classified as critical. Affected is an unknown function of the file /apps/system/route… |
CVE-2024-2564 | Medium | 6.3 | 2024-03-17 | A vulnerability was found in PandaXGO PandaX up to 20240310 and classified as critical. This issue affects the function ExportUser of the file /apps/system/api… |
CVE-2024-2563 | Medium | 5.4 | 2024-03-17 | A vulnerability has been found in PandaXGO PandaX up to 20240310 and classified as critical. This vulnerability affects the function DeleteImage of the file /a… |
CVE-2024-2562 | Medium | 6.3 | 2024-03-17 | A vulnerability, which was classified as critical, was found in PandaXGO PandaX up to 20240310. This affects the function InsertRole of the file /apps/system/s… |
CVE-2024-2561 | Medium | 6.3 | 2024-03-17 | A vulnerability, which was classified as critical, has been found in 74CMS 3.28.0. Affected by this issue is the function sendCompanyLogo of the file /controll… |
CVE-2024-2560 | Medium | 4.3 | 2024-03-17 | A vulnerability classified as problematic was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the function fromSysToolRestoreSet of the file… |
CVE-2024-2559 | Medium | 4.3 | 2024-03-17 | A vulnerability classified as problematic has been found in Tenda AC18 15.03.05.05. Affected is the function fromSysToolReboot of the file /goform/SysToolReboo… |
CVE-2024-2558 | High | 8.8 | 2024-03-17 | A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formexeCommand of the file /goform/execComm… |
CVE-2024-2557 | Medium | 5.3 | 2024-03-17 | A vulnerability was found in kishor-23 Food Waste Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2024-2556 | Medium | 6.3 | 2024-03-17 | A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file a… |
CVE-2024-2555 | Medium | 6.3 | 2024-03-17 | A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionalit… |
CVE-2024-2554 | Medium | 6.3 | 2024-03-17 | A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown f… |
CVE-2024-2553 | Low | 3.5 | 2024-03-17 | A vulnerability, which was classified as problematic, was found in SourceCodester Product Review Rating System 1.0. Affected is an unknown function of the comp… |
CVE-2024-2547 | High | 8.8 | 2024-03-17 | A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function R7WebsSecurityHandler. The manipulation… |
CVE-2024-2546 | High | 8.8 | 2024-03-17 | A vulnerability has been found in Tenda AC18 15.13.07.09 and classified as critical. Affected by this vulnerability is the function fromSetWirelessRepeat. The… |
CVE-2024-2535 | Low | 3.5 | 2024-03-17 | A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as problematic. This vulnerability affects unknown… |
CVE-2024-2534 | Medium | 6.3 | 2024-03-17 | A vulnerability, which was classified as critical, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This affects an unknown part of th… |
CVE-2024-2533 | Low | 3.5 | 2024-03-16 | A vulnerability, which was classified as problematic, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this issue is… |
CVE-2024-2532 | Medium | 6.3 | 2024-03-16 | A vulnerability classified as critical was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this vulnerability is an unknown f… |
CVE-2024-2531 | Medium | 6.3 | 2024-03-16 | A vulnerability classified as critical has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected is an unknown function of the fi… |
CVE-2024-2530 | Low | 3.5 | 2024-03-16 | A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been rated as problematic. This issue affects some unknown pro… |
CVE-2024-2529 | Medium | 6.3 | 2024-03-16 | A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been declared as critical. This vulnerability affects unknown… |
CVE-2024-2528 | Medium | 6.3 | 2024-03-16 | A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been classified as critical. This affects an unknown part of t… |
CVE-2024-2527 | Medium | 6.3 | 2024-03-16 | A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as critical. Affected by this issue is some unknown fun… |
CVE-2024-2526 | Low | 3.5 | 2024-03-16 | A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as problematic. Affected by this vulnerability is… |
CVE-2024-2525 | Low | 3.5 | 2024-03-16 | A vulnerability, which was classified as problematic, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected is an unknown function… |
CVE-2024-2524 | Medium | 6.3 | 2024-03-16 | A vulnerability, which was classified as critical, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This issue affects some unkno… |
CVE-2024-2523 | Low | 3.5 | 2024-03-16 | A vulnerability classified as problematic was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This vulnerability affects unknown code of… |
CVE-2024-2522 | Medium | 6.3 | 2024-03-16 | A vulnerability classified as critical has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This affects an unknown part of the file… |
CVE-2024-2521 | Low | 3.5 | 2024-03-16 | A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been rated as problematic. Affected by this issue is some unkn… |
CVE-2024-2520 | Medium | 6.3 | 2024-03-16 | A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been declared as critical. Affected by this vulnerability is a… |
CVE-2024-2519 | Low | 3.5 | 2024-03-16 | A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been classified as problematic. Affected is an unknown functio… |
CVE-2024-2518 | Low | 3.5 | 2024-03-16 | A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as problematic. This issue affects some unknown process… |
CVE-2024-2517 | Medium | 6.3 | 2024-03-16 | A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as critical. This vulnerability affects unknown co… |
CVE-2024-2516 | Medium | 6.3 | 2024-03-16 | A vulnerability, which was classified as critical, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This affects an unknown part of th… |
CVE-2024-2515 | Low | 3.5 | 2024-03-16 | A vulnerability, which was classified as problematic, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this issue is… |
CVE-2024-1857 | Medium | 5.3 | 2024-03-16 | The Ultimate Gift Cards for WooCommerce – Create, Redeem & Manage Digital Gift Certificates with Personalized Templates plugin for WordPress is vulnerable to S… |
CVE-2024-22513 | Medium | 5.5 | 2024-03-16 | djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their ac… |
CVE-2024-28640 | High | 7.5 | 2024-03-16 | Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause a denial of service… |
CVE-2024-28639 | Critical | 9.8 | 2024-03-16 | Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and… |
CVE-2024-28070 | Medium | 6.8 | 2024-03-16 | A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a reflected… |
CVE-2024-28069 | High | 7.5 | 2024-03-16 | A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct an informat… |
CVE-2024-24156 | Medium | 6.1 | 2024-03-16 | Cross Site Scripting (XSS) vulnerability in Gnuboard g6 before Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5, allows remote attackers execute arbitrar… |
CVE-2024-1733 | Medium | 5.3 | 2024-03-16 | The Word Replacer Pro plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the word_replacer_ultra() fu… |
CVE-2024-1685 | High | 8.8 | 2024-03-16 | The Social Media Share Buttons plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.1.0 via deserialization of un… |
CVE-2024-24845 | Medium | 5.3 | 2024-03-16 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sewpafly Post Thumbnail Editor.This issue affects Post Thumbnail Editor: from n/a t… |
CVE-2024-23523 | Medium | 6.5 | 2024-03-16 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Elementor Pro.This issue affects Elementor Pro: from n/a through 3.19.2. |
CVE-2024-22259 | High | 8.1 | 2024-03-16 | Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform validation chec… |
CVE-2024-2042 | Medium | 6.4 | 2024-03-16 | The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all versions up to, and in… |
CVE-2024-1239 | Medium | 6.4 | 2024-03-16 | The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blog post read more button in all versions up to, an… |
CVE-2024-2308 | Medium | 6.4 | 2024-03-16 | The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button link in the EliSlider in all versions… |
CVE-2024-2294 | Medium | 4.9 | 2024-03-16 | The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.7 via the… |
CVE-2024-27197 | High | 7.1 | 2024-03-16 | Cross-Site Request Forgery (CSRF) vulnerability in Bee BeePress allows Stored XSS.This issue affects BeePress: from n/a through 6.9.8. |
CVE-2024-27195 | High | 7.1 | 2024-03-16 | Cross-Site Request Forgery (CSRF) vulnerability in sverde1 Watermark RELOADED watermark-reloaded allows Cross Site Request Forgery.This issue affects Watermark… |
CVE-2024-27194 | High | 7.1 | 2024-03-16 | Cross-Site Request Forgery (CSRF) vulnerability in Andrei Ivasiuc Fontific | Google Fonts allows Stored XSS.This issue affects Fontific | Google Fonts: from n/… |
CVE-2024-28862 | Medium | 5.3 | 2024-03-16 | The Ruby One Time Password library (ROTP) is an open source library for generating and validating one time passwords. Affected versions had overly permissive d… |
CVE-2024-2514 | High | 7.3 | 2024-03-15 | A vulnerability classified as critical was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this vulnerability is an unknown f… |
CVE-2024-28859 | Medium | 5.0 | 2024-03-15 | Symfony1 is a community fork of symfony 1.4 with DIC, form enhancements, latest Swiftmailer, better performance, composer compatible and PHP 8 support. Symfony… |
CVE-2024-23298 | Medium | 5.5 | 2024-03-15 | A logic issue was addressed with improved state management. This issue is fixed in Xcode 15.3. An app may bypass Gatekeeper checks. |
CVE-2024-28848 | High | 8.8 | 2024-03-15 | OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team c… |
CVE-2024-28847 | High | 8.8 | 2024-03-15 | OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team c… |
CVE-2024-28255 | Critical | 9.8 | 2024-03-15 | OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team c… |
CVE-2024-28254 | High | 8.8 | 2024-03-15 | OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team c… |