2024 CVEs (page 376)
Page 376 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-23739 | Critical | 9.8 | 2024-01-28 | An issue in Discord for macOS version 0.0.291 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments… |
CVE-2024-23743 | Low | 3.3 | 2024-01-28 | Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: the vendor states "the attacker must lau… |
CVE-2024-23738 | Critical | 9.8 | 2024-01-28 | An issue in Postman version 10.22 and before on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments se… |
CVE-2024-0962 | Medium | 6.3 | 2024-01-27 | A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function get_split_entry of the file src/coap_osc… |
CVE-2024-0960 | Medium | 5.0 | 2024-01-27 | A vulnerability was found in flink-extended ai-flow 0.3.1. It has been declared as critical. Affected by this vulnerability is the function cloudpickle.loads o… |
CVE-2024-0959 | Medium | 5.0 | 2024-01-27 | A vulnerability was found in StanfordVL GibsonEnv 0.3.1. It has been classified as critical. Affected is the function cloudpickle.load of the file gibson\utils… |
CVE-2024-22861 | High | 7.5 | 2024-01-27 | Integer overflow vulnerability in FFmpeg before n6.1, allows attackers to cause a denial of service (DoS) via the avcodec/osq module. |
CVE-2024-22862 | Critical | 9.8 | 2024-01-27 | Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser. |
CVE-2024-22860 | Critical | 9.8 | 2024-01-27 | Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxl_anim_read_packet component in the JPEG X… |
CVE-2024-0958 | Low | 3.5 | 2024-01-27 | A vulnerability was found in CodeAstro Stock Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /index… |
CVE-2024-0618 | Medium | 4.4 | 2024-01-27 | The Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting v… |
CVE-2024-0824 | Medium | 6.4 | 2024-01-27 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Link Anything functionality in all versions up to… |
CVE-2024-0697 | Medium | 6.5 | 2024-01-27 | The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.3 via the… |
CVE-2024-0667 | Medium | 5.4 | 2024-01-27 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up… |
CVE-2024-0664 | Medium | 4.4 | 2024-01-27 | The Meks Smart Social Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Meks Smart Social Widget in all versions up to, and incl… |
CVE-2024-23506 | High | 7.7 | 2024-01-27 | Insertion of Sensitive Information Into Sent Data vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through… |
CVE-2024-22283 | High | 8.5 | 2024-01-27 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Delhivery Delhivery Logistics Courier.This issue affects… |
CVE-2024-22147 | High | 7.6 | 2024-01-27 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce… |
CVE-2024-0948 | Low | 2.4 | 2024-01-26 | ** DISPUTED ** A vulnerability, which was classified as problematic, has been found in NetBox up to 3.7.0. This issue affects some unknown processing of the fi… |
CVE-2024-0946 | High | 7.3 | 2024-01-26 | A vulnerability classified as critical was found in 60IndexPage up to 1.8.5. This vulnerability affects unknown code of the file /apply/index.php of the compon… |
CVE-2024-0945 | High | 7.3 | 2024-01-26 | A vulnerability classified as critical has been found in 60IndexPage up to 1.8.5. This affects an unknown part of the file /include/file.php of the component P… |
CVE-2024-0944 | Low | 3.7 | 2024-01-26 | A vulnerability was found in Totolink T8 4.1.5cu.833_20220905. It has been rated as problematic. Affected by this issue is some unknown functionality of the fi… |
CVE-2024-0943 | Low | 3.7 | 2024-01-26 | A vulnerability was found in Totolink N350RT 9.3.5u.6255. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of th… |
CVE-2024-0942 | Low | 3.7 | 2024-01-26 | A vulnerability was found in Totolink N200RE V5 9.3.5u.6255_B20211224. It has been classified as problematic. Affected is an unknown function of the file /cgi-… |
CVE-2024-0941 | Medium | 5.5 | 2024-01-26 | A vulnerability was found in Novel-Plus 4.3.0-RC1 and classified as critical. This issue affects some unknown processing of the file /novel/bookComment/list. T… |
CVE-2024-0939 | Medium | 6.3 | 2024-01-26 | A vulnerability has been found in Byzoro Smart S210 Management Platform up to 20240117 and classified as critical. This vulnerability affects unknown code of t… |
CVE-2024-21336 | Low | 2.5 | 2024-01-26 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2024-20305 | Medium | 4.8 | 2024-01-26 | A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to conduct a cross-site scripting… |
CVE-2024-20263 | Medium | 5.8 | 2024-01-26 | A vulnerability with the access control list (ACL) management within a stacked switch configuration of Cisco Business 250 Series Smart Switches and Business 35… |
CVE-2024-20253 | Critical | 9.9 | 2024-01-26 | A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbit… |
CVE-2024-0938 | Medium | 5.5 | 2024-01-26 | A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file /general/email/inbox/delete… |
CVE-2024-0937 | Medium | 6.3 | 2024-01-26 | A vulnerability, which was classified as critical, has been found in van_der_Schaar LAB synthcity 0.2.9. Affected by this issue is the function load_from_file… |
CVE-2024-23820 | Medium | 5.3 | 2024-01-26 | OpenFGA, an authorization/permission engine, is vulnerable to a denial of service attack in versions prior to 1.4.3. In some scenarios that depend on the model… |
CVE-2024-0936 | Medium | 6.3 | 2024-01-26 | A vulnerability classified as critical was found in van_der_Schaar LAB TemporAI 0.0.3. Affected by this vulnerability is the function load_from_file of the com… |
CVE-2024-0933 | Medium | 6.3 | 2024-01-26 | A vulnerability was found in Niushop B2B2C V5 and classified as critical. Affected by this issue is some unknown functionality of the file \app\model\Upload.ph… |
CVE-2024-0932 | Medium | 4.7 | 2024-01-26 | A vulnerability, which was classified as critical, has been found in Tenda AC10U 15.03.06.49_multi_TDE01. This issue affects the function setSmartPowerManageme… |
CVE-2024-0931 | Medium | 4.7 | 2024-01-26 | A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49_multi_TDE01. This vulnerability affects the function saveParentControlInfo. The man… |
CVE-2024-21985 | High | 7.6 | 2024-01-26 | ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10 and 9.13.1P4 are susceptible to a vulnerability which could allow an authenticated user w… |
CVE-2024-0930 | Medium | 4.7 | 2024-01-26 | A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49_multi_TDE01. This affects the function fromSetWirelessRepeat. The manipulation… |
CVE-2024-0929 | Medium | 4.7 | 2024-01-26 | A vulnerability was found in Tenda AC10U 15.03.06.49_multi_TDE01. It has been rated as critical. Affected by this issue is the function fromNatStaticSetting. T… |
CVE-2024-0928 | Medium | 4.7 | 2024-01-26 | A vulnerability was found in Tenda AC10U 15.03.06.49_multi_TDE01. It has been declared as critical. Affected by this vulnerability is the function fromDhcpList… |
CVE-2024-22551 | Medium | 6.1 | 2024-01-26 | WhatACart v2.0.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /site/default/search. |
CVE-2024-22550 | Medium | 6.1 | 2024-01-26 | An arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi of ShopSite v14.0 allows attackers to execute arbitrary code via uploading a cra… |
CVE-2024-0927 | Medium | 4.7 | 2024-01-26 | A vulnerability was found in Tenda AC10U 15.03.06.49_multi_TDE01. It has been classified as critical. Affected is the function fromAddressNat. The manipulation… |
CVE-2024-0926 | Medium | 4.7 | 2024-01-26 | A vulnerability was found in Tenda AC10U 15.03.06.49_multi_TDE01 and classified as critical. This issue affects the function formWifiWpsOOB. The manipulation o… |
CVE-2024-0925 | Medium | 4.7 | 2024-01-26 | A vulnerability has been found in Tenda AC10U 15.03.06.49_multi_TDE01 and classified as critical. This vulnerability affects the function formSetVirtualSer. Th… |
CVE-2024-0924 | Medium | 4.7 | 2024-01-26 | A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49_multi_TDE01. This affects the function formSetPPTPServer. The manipulat… |
CVE-2024-0923 | Medium | 4.7 | 2024-01-26 | A vulnerability, which was classified as critical, has been found in Tenda AC10U 15.03.06.49_multi_TDE01. Affected by this issue is the function formSetDeviceN… |
CVE-2024-0922 | Medium | 4.7 | 2024-01-26 | A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49_multi_TDE01. Affected by this vulnerability is the function formQuickIndex. The man… |
CVE-2024-0921 | Medium | 4.7 | 2024-01-26 | A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown functionality of the fil… |
CVE-2024-23896 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23894 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23893 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23892 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23891 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23890 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23889 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23888 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23887 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23886 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23885 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23884 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23883 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23882 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23881 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23880 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23879 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23878 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23877 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23876 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23875 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23874 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23873 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23872 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23871 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23870 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23869 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23868 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23867 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23866 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23865 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23864 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23863 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23862 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23861 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23860 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23859 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23858 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23857 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-23856 | High | 8.2 | 2024-01-26 | A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a… |
CVE-2024-0920 | High | 7.2 | 2024-01-26 | A vulnerability was found in TRENDnet TEW-822DRE 1.03B02. It has been declared as critical. This vulnerability affects unknown code of the file /admin_ping.htm… |
CVE-2024-0919 | High | 8.8 | 2024-01-26 | A vulnerability was found in TRENDnet TEW-815DAP 1.0.2.0. It has been classified as critical. This affects the function do_setNTP of the component POST Request… |
CVE-2024-0918 | High | 7.2 | 2024-01-26 | A vulnerability was found in TRENDnet TEW-800MB 1.0.1.0 and classified as critical. Affected by this issue is some unknown functionality of the component POST… |
CVE-2024-0727 | Medium | 5.5 | 2024-01-26 | Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applic… |
CVE-2024-22545 | High | 7.8 | 2024-01-26 | An issue was discovered in TRENDnet TEW-824DRU version 1.04b01, allows unauthenticated attackers to execute arbitrary code via the system.ntp.server parameter… |
CVE-2024-23388 | Medium | 6.1 | 2024-01-26 | Improper authorization in handler for custom URL scheme issue in "Mercari" App for Android prior to version 5.78.0 allows a remote attacker to lead a user to a… |
CVE-2024-21387 | Medium | 5.3 | 2024-01-26 | Microsoft Edge for Android Spoofing Vulnerability |
CVE-2024-21385 | High | 8.3 | 2024-01-26 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2024-21383 | Low | 3.3 | 2024-01-26 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2024-21382 | Medium | 4.3 | 2024-01-26 | Microsoft Edge for Android Information Disclosure Vulnerability |