2024 CVEs (page 352)
Page 352 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-2319 | Medium | 5.4 | 2024-03-08 | Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript paylo… |
CVE-2024-2318 | Medium | 4.3 | 2024-03-08 | A vulnerability was found in ZKTeco ZKBio Media 2.0.0_x64_2024-01-29-1028. It has been classified as problematic. Affected is an unknown function of the file /… |
CVE-2024-2317 | Low | 3.8 | 2024-03-08 | A vulnerability was found in Bdtask Hospital AutoManager up to 20240227 and classified as problematic. This issue affects some unknown processing of the file /… |
CVE-2024-2316 | Medium | 4.3 | 2024-03-08 | A vulnerability has been found in Bdtask Hospital AutoManager up to 20240227 and classified as problematic. This vulnerability affects unknown code of the file… |
CVE-2024-2298 | Medium | 4.3 | 2024-03-08 | The affiliate-toolkit – WordPress Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the atkp_impo… |
CVE-2024-1851 | Medium | 6.3 | 2024-03-08 | The affiliate-toolkit – WordPress Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the atkp_crea… |
CVE-2024-27613 | High | 7.3 | 2024-03-08 | Numbas editor before 7.3 mishandles reading of themes and extensions. |
CVE-2024-27612 | Medium | 6.2 | 2024-03-08 | Numbas editor before 7.3 mishandles editing of themes and extensions. |
CVE-2024-1987 | Medium | 6.4 | 2024-03-08 | The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and inc… |
CVE-2024-2285 | Low | 3.5 | 2024-03-08 | A vulnerability, which was classified as problematic, has been found in boyiddha Automated-Mess-Management-System 1.0. Affected by this issue is some unknown f… |
CVE-2024-2284 | Low | 3.5 | 2024-03-08 | A vulnerability classified as problematic was found in boyiddha Automated-Mess-Management-System 1.0. Affected by this vulnerability is an unknown functionalit… |
CVE-2024-2283 | Medium | 6.3 | 2024-03-08 | A vulnerability classified as critical has been found in boyiddha Automated-Mess-Management-System 1.0. Affected is an unknown function of the file /member/vie… |
CVE-2024-2282 | High | 7.3 | 2024-03-08 | A vulnerability was found in boyiddha Automated-Mess-Management-System 1.0. It has been rated as critical. This issue affects some unknown processing of the fi… |
CVE-2024-2281 | Medium | 6.3 | 2024-03-08 | A vulnerability was found in boyiddha Automated-Mess-Management-System 1.0. It has been declared as critical. This vulnerability affects unknown code of the fi… |
CVE-2024-2277 | Medium | 4.3 | 2024-03-08 | A vulnerability was found in Bdtask G-Prescription Gynaecology & OBS Consultation Software 1.0 and classified as problematic. Affected by this issue is some un… |
CVE-2024-26313 | High | 7.3 | 2024-03-08 | Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a stored cross-site scripting (XSS) vulnerability. A remote authenticated malicious Archer user co… |
CVE-2024-26309 | Medium | 5.3 | 2024-03-08 | Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a sensitive information disclosure vulnerability. An unauthenticated attacker could potentially ob… |
CVE-2024-25849 | Critical | 9.8 | 2024-03-08 | In the module "Make an offer" (makeanoffer) <= 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::checkUserExistingOffe… |
CVE-2024-25848 | Medium | 5.9 | 2024-03-08 | In the module "Ever Ultimate SEO" (everpsseo) <= 8.1.2 from Team Ever for PrestaShop, a guest can perform SQL injection in affected versions. |
CVE-2024-25845 | Critical | 9.8 | 2024-03-08 | In the module "CD Custom Fields 4 Orders" (cdcustomfields4orders) <= 1.0.0 from Cleanpresta.com for PrestaShop, a guest can perform SQL injection in affected v… |
CVE-2024-23297 | Medium | 5.5 | 2024-03-08 | The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4, tvOS 17.4, watchOS 10.4. A malicious application may be able to… |
CVE-2024-23295 | Medium | 5.5 | 2024-03-08 | A permissions issue was addressed to help ensure Personas are always protected. This issue is fixed in visionOS 1.1. An unauthenticated user may be able to use… |
CVE-2024-23294 | High | 7.8 | 2024-03-08 | This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.4. Processing malicious input may lead to code execution. |
CVE-2024-23293 | Medium | 4.6 | 2024-03-08 | This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An att… |
CVE-2024-23292 | Low | 3.3 | 2024-03-08 | This issue was addressed with improved data protection. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to access inform… |
CVE-2024-23291 | Low | 3.3 | 2024-03-08 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17… |
CVE-2024-23290 | Medium | 5.5 | 2024-03-08 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may… |
CVE-2024-23289 | Low | 3.3 | 2024-03-08 | A lock screen issue was addressed with improved state management. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 1… |
CVE-2024-23288 | High | 7.8 | 2024-03-08 | This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app m… |
CVE-2024-23287 | Medium | 5.5 | 2024-03-08 | A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An a… |
CVE-2024-23286 | High | 7.8 | 2024-03-08 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monte… |
CVE-2024-23285 | Medium | 5.5 | 2024-03-08 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma 14.4. An app may be able to create symlinks to protected regio… |
CVE-2024-23284 | Medium | 6.5 | 2024-03-08 | A logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS S… |
CVE-2024-23283 | Medium | 5.5 | 2024-03-08 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4… |
CVE-2024-23281 | Medium | 5.5 | 2024-03-08 | This issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.4. An app may be able to access sensitive user data. |
CVE-2024-23280 | Medium | 6.5 | 2024-03-08 | An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS… |
CVE-2024-23279 | Medium | 5.5 | 2024-03-08 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user… |
CVE-2024-23278 | High | 8.6 | 2024-03-08 | The issue was addressed with improved checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, macOS Ventura 1… |
CVE-2024-23277 | Medium | 5.9 | 2024-03-08 | The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An attacker in a privileged network position… |
CVE-2024-23276 | High | 7.8 | 2024-03-08 | A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to… |
CVE-2024-23275 | Medium | 4.7 | 2024-03-08 | A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be… |
CVE-2024-23274 | High | 7.8 | 2024-03-08 | An injection issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app… |
CVE-2024-23273 | Medium | 4.3 | 2024-03-08 | This issue was addressed through improved state management. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Private Browsing t… |
CVE-2024-23272 | Medium | 5.5 | 2024-03-08 | A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An attacker may gain a… |
CVE-2024-23270 | High | 7.8 | 2024-03-08 | The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura… |
CVE-2024-23269 | Medium | 5.5 | 2024-03-08 | A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Monterey 12.7.4, ma… |
CVE-2024-23268 | High | 7.8 | 2024-03-08 | An injection issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app… |
CVE-2024-23267 | Medium | 5.5 | 2024-03-08 | The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to bypa… |
CVE-2024-23266 | Medium | 5.5 | 2024-03-08 | The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to modi… |
CVE-2024-23265 | High | 7.8 | 2024-03-08 | A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Mon… |
CVE-2024-23264 | Medium | 5.5 | 2024-03-08 | A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Montere… |
CVE-2024-23263 | Medium | 6.5 | 2024-03-08 | A logic issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma… |
CVE-2024-23262 | Low | 3.3 | 2024-03-08 | This issue was addressed with additional entitlement checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, visionOS 1.1. An ap… |
CVE-2024-23260 | Medium | 5.5 | 2024-03-08 | This issue was addressed by removing additional entitlements. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data. |
CVE-2024-23259 | Medium | 6.5 | 2024-03-08 | The issue was addressed with improved checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Processing web… |
CVE-2024-23258 | High | 7.8 | 2024-03-08 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.4, visionOS 1.1. Processing an image may lead to arb… |
CVE-2024-23257 | Low | 3.3 | 2024-03-08 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ven… |
CVE-2024-23255 | Low | 2.4 | 2024-03-08 | An authentication issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Photos in the Hidden… |
CVE-2024-23254 | Medium | 6.5 | 2024-03-08 | The issue was addressed with improved UI handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, wa… |
CVE-2024-23253 | Low | 3.3 | 2024-03-08 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to access a user's Photos Library. |
CVE-2024-23250 | Medium | 5.5 | 2024-03-08 | An access issue was addressed with improved access restrictions. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. A… |
CVE-2024-23249 | High | 7.1 | 2024-03-08 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4. Processing a file may lead to a denial-of-service or potential… |
CVE-2024-23248 | High | 7.1 | 2024-03-08 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4. Processing a file may lead to a denial-of-service or potential… |
CVE-2024-23247 | High | 7.8 | 2024-03-08 | The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. Processing a file… |
CVE-2024-23246 | High | 8.6 | 2024-03-08 | This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvO… |
CVE-2024-23245 | Low | 3.3 | 2024-03-08 | This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5… |
CVE-2024-23244 | High | 7.8 | 2024-03-08 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4. An app from a standard user account ma… |
CVE-2024-23242 | Low | 3.3 | 2024-03-08 | A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to… |
CVE-2024-23241 | Medium | 5.5 | 2024-03-08 | This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4. An app may be able t… |
CVE-2024-23240 | Low | 2.4 | 2024-03-08 | The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4. Shake-to-undo may allow a deleted photo to be re-surfaced withou… |
CVE-2024-23239 | Medium | 4.7 | 2024-03-08 | A race condition was addressed with improved state handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An ap… |
CVE-2024-23238 | Low | 3.3 | 2024-03-08 | An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to edit NVRAM variables. |
CVE-2024-23235 | Medium | 4.7 | 2024-03-08 | A race condition was addressed with additional validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tv… |
CVE-2024-23234 | Medium | 6.7 | 2024-03-08 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6… |
CVE-2024-23233 | High | 7.8 | 2024-03-08 | This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. Entitlements and privacy permissions granted to this app may be used b… |
CVE-2024-23232 | Low | 3.3 | 2024-03-08 | A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14.4. An app may be able to capture a user's scree… |
CVE-2024-23231 | Medium | 5.5 | 2024-03-08 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17… |
CVE-2024-23230 | Medium | 5.5 | 2024-03-08 | This issue was addressed with improved file handling. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able… |
CVE-2024-23227 | Low | 3.3 | 2024-03-08 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6… |
CVE-2024-23226 | High | 8.8 | 2024-03-08 | The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10… |
CVE-2024-23220 | Medium | 5.5 | 2024-03-08 | The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.4 and iPadOS 17.4, visionOS 1.1. An app may be able to fingerprint the… |
CVE-2024-23216 | High | 7.1 | 2024-03-08 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may… |
CVE-2024-23205 | Medium | 5.5 | 2024-03-08 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app… |
CVE-2024-23201 | Medium | 5.5 | 2024-03-08 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.4, macOS Sonoma 14.3, macO… |
CVE-2024-0258 | High | 8.6 | 2024-03-08 | The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may… |
CVE-2024-2276 | Low | 2.4 | 2024-03-08 | A vulnerability has been found in Bdtask G-Prescription Gynaecology & OBS Consultation Software 1.0 and classified as problematic. Affected by this vulnerabili… |
CVE-2024-2275 | Low | 2.4 | 2024-03-08 | A vulnerability, which was classified as problematic, was found in Bdtask G-Prescription Gynaecology & OBS Consultation Software 1.0. Affected is an unknown fu… |
CVE-2024-2274 | Low | 2.4 | 2024-03-08 | A vulnerability, which was classified as problematic, has been found in Bdtask G-Prescription Gynaecology & OBS Consultation Software 1.0. This issue affects s… |
CVE-2024-2272 | Medium | 6.3 | 2024-03-08 | A vulnerability classified as critical was found in keerti1924 Online-Book-Store-Website 1.0. This vulnerability affects unknown code of the file /home.php of… |
CVE-2024-2271 | Medium | 6.3 | 2024-03-08 | A vulnerability classified as critical has been found in keerti1924 Online-Book-Store-Website 1.0. This affects an unknown part of the file /shop.php of the co… |
CVE-2024-25729 | High | 8.8 | 2024-03-08 | Arris SBG6580 devices have predictable default WPA2 security passwords that could lead to unauthorized remote access. (They use the first 6 characters of the S… |
CVE-2024-25327 | Medium | 6.1 | 2024-03-08 | Cross Site Scripting (XSS) vulnerability in Justice Systems FullCourt Enterprise v.8.2 allows a remote attacker to execute arbitrary code via the formatCaseNum… |
CVE-2024-2270 | Medium | 4.3 | 2024-03-07 | A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality o… |
CVE-2024-2269 | Medium | 6.3 | 2024-03-07 | A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functiona… |
CVE-2024-2268 | Medium | 4.7 | 2024-03-07 | A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been classified as critical. Affected is an unknown function of the file /product… |
CVE-2024-2267 | Medium | 4.3 | 2024-03-07 | A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /sh… |
CVE-2024-2266 | Low | 3.5 | 2024-03-07 | A vulnerability has been found in keerti1924 Secret-Coder-PHP-Project 1.0 and classified as problematic. This vulnerability affects unknown code of the file /l… |
CVE-2024-2265 | Medium | 5.3 | 2024-03-07 | A vulnerability, which was classified as problematic, was found in keerti1924 PHP-MYSQL-User-Login-System 1.0. This affects an unknown part of the file login.s… |
CVE-2024-2264 | High | 7.3 | 2024-03-07 | A vulnerability, which was classified as critical, has been found in keerti1924 PHP-MYSQL-User-Login-System 1.0. Affected by this issue is some unknown functio… |
CVE-2024-2044 | Critical | 9.9 | 2024-03-07 | pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Wind… |