2024 CVEs (page 382)
Page 382 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-0528 | Medium | 5.5 | 2024-01-15 | A vulnerability, which was classified as critical, was found in CXBSoft Post-Office 1.0. Affected is an unknown function of the file /admin/pages/update_go.php… |
CVE-2024-0527 | Medium | 6.3 | 2024-01-15 | A vulnerability, which was classified as critical, has been found in CXBSoft Url-shorting up to 1.3.1. This issue affects some unknown processing of the file /… |
CVE-2024-0526 | Medium | 5.5 | 2024-01-15 | A vulnerability classified as critical was found in CXBSoft Url-shorting up to 1.3.1. This vulnerability affects unknown code of the file /pages/short_to_long… |
CVE-2024-0525 | Medium | 5.5 | 2024-01-15 | A vulnerability classified as critical has been found in CXBSoft Url-shorting up to 1.3.1. This affects an unknown part of the file /pages/long_s_short.php of… |
CVE-2024-0524 | Medium | 5.5 | 2024-01-15 | A vulnerability was found in CXBSoft Url-shorting up to 1.3.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2024-0523 | Medium | 6.3 | 2024-01-14 | A vulnerability was found in CmsEasy up to 7.7.7. It has been declared as critical. Affected by this vulnerability is the function getslide_child_action in the… |
CVE-2024-0522 | Medium | 4.3 | 2024-01-14 | A vulnerability was found in Allegro RomPager 4.01. It has been classified as problematic. Affected is an unknown function of the file usertable.htm?action=del… |
CVE-2024-0510 | High | 7.3 | 2024-01-13 | A vulnerability, which was classified as critical, has been found in HaoKeKeJi YiQiNiu up to 3.1. Affected by this issue is the function http_post of the file… |
CVE-2024-0505 | Medium | 5.5 | 2024-01-13 | A vulnerability was found in ZhongFuCheng3y Austin 1.0 and classified as critical. This issue affects the function getFile of the file com/java3y/austin/web/co… |
CVE-2024-0504 | Low | 3.5 | 2024-01-13 | A vulnerability has been found in code-projects Simple Online Hotel Reservation System 1.0 and classified as problematic. This vulnerability affects unknown co… |
CVE-2024-0503 | Low | 3.5 | 2024-01-13 | A vulnerability was found in code-projects Online FIR System 1.0. It has been classified as problematic. This affects an unknown part of the file registercompl… |
CVE-2024-0502 | Medium | 4.7 | 2024-01-13 | A vulnerability was found in SourceCodester House Rental Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality… |
CVE-2024-0501 | Low | 2.4 | 2024-01-13 | A vulnerability has been found in SourceCodester House Rental Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown… |
CVE-2024-0500 | Low | 2.4 | 2024-01-13 | A vulnerability, which was classified as problematic, was found in SourceCodester House Rental Management System 1.0. Affected is an unknown function of the co… |
CVE-2024-0499 | Low | 2.4 | 2024-01-13 | A vulnerability, which was classified as problematic, has been found in SourceCodester House Rental Management System 1.0. This issue affects some unknown proc… |
CVE-2024-0498 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in Project Worlds Lawyer Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functi… |
CVE-2024-0497 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in Campcodes Student Information System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes… |
CVE-2024-0496 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in Kashipara Billing Software 1.0 and classified as critical. This issue affects some unknown processing of the file item_list_edit.p… |
CVE-2024-0495 | Medium | 6.3 | 2024-01-13 | A vulnerability has been found in Kashipara Billing Software 1.0 and classified as critical. This vulnerability affects unknown code of the file party_submit.p… |
CVE-2024-0494 | Medium | 6.3 | 2024-01-13 | A vulnerability, which was classified as critical, was found in Kashipara Billing Software 1.0. This affects an unknown part of the file material_bill.php of t… |
CVE-2024-0493 | Medium | 6.3 | 2024-01-13 | A vulnerability, which was classified as critical, has been found in Kashipara Billing Software 1.0. Affected by this issue is some unknown functionality of th… |
CVE-2024-0492 | Medium | 6.3 | 2024-01-13 | A vulnerability classified as critical was found in Kashipara Billing Software 1.0. Affected by this vulnerability is an unknown functionality of the file buye… |
CVE-2024-0491 | Medium | 5.3 | 2024-01-13 | A vulnerability classified as problematic has been found in Huaxia ERP up to 3.1. Affected is an unknown function of the file src/main/java/com/jsh/erp/control… |
CVE-2024-0490 | Medium | 5.3 | 2024-01-13 | A vulnerability was found in Huaxia ERP up to 3.1. It has been rated as problematic. This issue affects some unknown processing of the file /user/getAllList. T… |
CVE-2024-0489 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of t… |
CVE-2024-0488 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been classified as critical. This affects an unknown part of the file /… |
CVE-2024-0487 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this issue is some unknown functionalit… |
CVE-2024-0486 | Medium | 6.3 | 2024-01-13 | A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown f… |
CVE-2024-0485 | Medium | 6.3 | 2024-01-13 | A vulnerability, which was classified as critical, was found in code-projects Fighting Cock Information System 1.0. Affected is an unknown function of the file… |
CVE-2024-0484 | Medium | 6.3 | 2024-01-13 | A vulnerability, which was classified as critical, has been found in code-projects Fighting Cock Information System 1.0. This issue affects some unknown proces… |
CVE-2024-0483 | Medium | 6.3 | 2024-01-13 | A vulnerability classified as critical was found in Taokeyun up to 1.0.5. This vulnerability affects the function index of the file application/index/controlle… |
CVE-2024-0482 | Medium | 6.3 | 2024-01-13 | A vulnerability classified as critical has been found in Taokeyun up to 1.0.5. This affects the function index of the file application/index/controller/app/Vid… |
CVE-2024-0481 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in Taokeyun up to 1.0.5. It has been rated as critical. Affected by this issue is the function shopGoods of the file application/inde… |
CVE-2024-22209 | Medium | 6.4 | 2024-01-13 | Open edX Platform is a service-oriented platform for authoring and delivering online learning. A user with a JWT and more limited scopes could call endpoints e… |
CVE-2024-21640 | Medium | 5.4 | 2024-01-13 | Chromium Embedded Framework (CEF) is a simple framework for embedding Chromium-based browsers in other applications.`CefVideoConsumerOSR::OnFrameCaptured` does… |
CVE-2024-0480 | High | 7.3 | 2024-01-13 | A vulnerability was found in Taokeyun up to 1.0.5. It has been declared as critical. Affected by this vulnerability is the function index of the file applicati… |
CVE-2024-0251 | Medium | 6.1 | 2024-01-13 | The Advanced Woo Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search parameter in all versions up to, and including, 2.9… |
CVE-2024-0479 | High | 7.3 | 2024-01-13 | A vulnerability was found in Taokeyun up to 1.0.5. It has been classified as critical. Affected is the function login of the file application/index/controller/… |
CVE-2024-0478 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. This issue affects some unknown processing of the f… |
CVE-2024-0477 | Medium | 6.3 | 2024-01-13 | A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. This vulnerability affects unknown code of the… |
CVE-2024-0476 | Low | 2.4 | 2024-01-13 | A vulnerability, which was classified as problematic, was found in Blood Bank & Donor Management 1.0. This affects an unknown part of the file request-received… |
CVE-2024-22142 | High | 7.1 | 2024-01-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Profile Builder Pro allows Reflected XSS.This… |
CVE-2024-22137 | Medium | 6.5 | 2024-01-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MailMunch Constant Contact Forms by MailMunch allows Stor… |
CVE-2024-0475 | Medium | 6.3 | 2024-01-13 | A vulnerability, which was classified as critical, has been found in code-projects Dormitory Management System 1.0. Affected by this issue is some unknown func… |
CVE-2024-23301 | Medium | 5.5 | 2024-01-12 | Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local attackers to gain access to system secrets… |
CVE-2024-0474 | High | 7.3 | 2024-01-12 | A vulnerability classified as critical was found in code-projects Dormitory Management System 1.0. Affected by this vulnerability is an unknown functionality o… |
CVE-2024-0230 | Low | 2.4 | 2024-01-12 | A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to… |
CVE-2024-21639 | Medium | 5.3 | 2024-01-12 | CEF (Chromium Embedded Framework ) is a simple framework for embedding Chromium-based browsers in other applications. `CefLayeredWindowUpdaterOSR::OnAllocatedS… |
CVE-2024-0473 | Medium | 6.3 | 2024-01-12 | A vulnerability classified as critical has been found in code-projects Dormitory Management System 1.0. Affected is an unknown function of the file comment.php… |
CVE-2024-0472 | Low | 3.5 | 2024-01-12 | A vulnerability was found in code-projects Dormitory Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the… |
CVE-2024-21655 | Medium | 4.3 | 2024-01-12 | Discourse is a platform for community discussion. For fields that are client editable, limits on sizes are not imposed. This allows a malicious actor to cause… |
CVE-2024-21654 | Medium | 4.8 | 2024-01-12 | Rubygems.org is the Ruby community's gem hosting service. Rubygems.org users with MFA enabled would normally be protected from account takeover in the case of… |
CVE-2024-0471 | Medium | 6.3 | 2024-01-12 | A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been declared as critical. This vulnerability affects unknown code of t… |
CVE-2024-0470 | Medium | 6.3 | 2024-01-12 | A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been classified as critical. This affects an unknown part of the file /… |
CVE-2024-0469 | Medium | 6.3 | 2024-01-12 | A vulnerability was found in code-projects Human Resource Integrated System 1.0 and classified as critical. Affected by this issue is some unknown functionalit… |
CVE-2024-0468 | Medium | 6.3 | 2024-01-12 | A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown f… |
CVE-2024-22206 | Critical | 9.0 | 2024-01-12 | Clerk helps developers build user management. Unauthorized access or privilege escalation due to a logic flaw in auth() in the App Router or getAuth() in the P… |
CVE-2024-0467 | Low | 3.5 | 2024-01-12 | A vulnerability, which was classified as problematic, was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the… |
CVE-2024-0466 | Medium | 5.5 | 2024-01-12 | A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0. This issue affects some unknown proc… |
CVE-2024-0465 | Low | 3.5 | 2024-01-12 | A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the fil… |
CVE-2024-0464 | Medium | 6.3 | 2024-01-12 | A vulnerability classified as critical has been found in code-projects Online Faculty Clearance 1.0. This affects an unknown part of the file delete_faculty.ph… |
CVE-2024-0463 | Medium | 6.3 | 2024-01-12 | A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of… |
CVE-2024-0462 | Medium | 6.3 | 2024-01-12 | A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functio… |
CVE-2024-21887 | Critical | 9.1 | 2024-01-12 | A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administ… |
CVE-2024-0461 | Medium | 6.3 | 2024-01-12 | A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been classified as critical. Affected is an unknown function of the file deacti… |
CVE-2024-22494 | Medium | 5.4 | 2024-01-12 | A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attackers to inject arbitrary web script or… |
CVE-2024-22493 | Medium | 5.4 | 2024-01-12 | A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web script or… |
CVE-2024-22492 | Medium | 5.4 | 2024-01-12 | A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or… |
CVE-2024-0460 | Medium | 6.3 | 2024-01-12 | A vulnerability was found in code-projects Faculty Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ad… |
CVE-2024-0459 | Medium | 4.7 | 2024-01-12 | A vulnerability has been found in Blood Bank & Donor Management 5.6 and classified as critical. This vulnerability affects unknown code of the file /admin/requ… |
CVE-2024-22027 | Medium | 6.5 | 2024-01-12 | Improper input validation vulnerability in WordPress Quiz Maker Plugin prior to 6.5.0.6 allows a remote authenticated attacker to perform a Denial of Service (… |
CVE-2024-23179 | Medium | 6.1 | 2024-01-12 | An issue was discovered in the GlobalBlocking extension in MediaWiki before 1.40.2. For a Special:GlobalBlock?uselang=x-xss URI, i18n-based XSS can occur via t… |
CVE-2024-23178 | Medium | 5.4 | 2024-01-12 | An issue was discovered in the Phonos extension in MediaWiki before 1.40.2. PhonosButton.js allows i18n-based XSS via the phonos-purge-needed-error message. |
CVE-2024-23177 | Medium | 6.1 | 2024-01-12 | An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter. |
CVE-2024-23174 | Medium | 5.4 | 2024-01-12 | An issue was discovered in the PageTriage extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. XSS can occur v… |
CVE-2024-23173 | Medium | 6.1 | 2024-01-12 | An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:Drilldow… |
CVE-2024-23172 | Medium | 5.4 | 2024-01-12 | An issue was discovered in the CheckUser extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. XSS can occur vi… |
CVE-2024-23171 | Medium | 5.4 | 2024-01-12 | An issue was discovered in the CampaignEvents extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special… |
CVE-2024-0454 | Medium | 6.0 | 2024-01-12 | ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows… |
CVE-2024-21617 | Medium | 6.5 | 2024-01-12 | An Incomplete Cleanup vulnerability in Nonstop active routing (NSR) component of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cau… |
CVE-2024-21616 | High | 7.5 | 2024-01-12 | An Improper Validation of Syntactic Correctness of Input vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticate… |
CVE-2024-21614 | High | 7.5 | 2024-01-12 | An Improper Check for Unusual or Exceptional Conditions vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allow… |
CVE-2024-21613 | Medium | 6.5 | 2024-01-12 | A Missing Release of Memory after Effective Lifetime vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a… |
CVE-2024-21612 | High | 7.5 | 2024-01-12 | An Improper Handling of Syntactically Invalid Structure vulnerability in Object Flooding Protocol (OFP) service of Juniper Networks Junos OS Evolved allow… |
CVE-2024-21611 | High | 7.5 | 2024-01-12 | A Missing Release of Memory after Effective Lifetime vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allo… |
CVE-2024-21607 | Medium | 5.3 | 2024-01-12 | An Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on MX Series and EX9200 Series allows an unauthenticated, network-based attacker t… |
CVE-2024-21606 | High | 7.5 | 2024-01-12 | A Double Free vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker… |
CVE-2024-21604 | High | 7.5 | 2024-01-12 | An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-ba… |
CVE-2024-21603 | Medium | 6.5 | 2024-01-12 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Network Junos OS on MX Series allows a network based attacker w… |
CVE-2024-21602 | High | 7.5 | 2024-01-12 | A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS Evolved on ACX7024, ACX7100-32C and ACX7100-48L allows an unauthenticated, network-based… |
CVE-2024-21601 | Medium | 5.9 | 2024-01-12 | A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the Flow-processing Daemon (flowd) of Juniper N… |
CVE-2024-21600 | Medium | 6.5 | 2024-01-12 | An Improper Neutralization of Equivalent Special Elements vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on PTX Series allow… |
CVE-2024-21599 | Medium | 6.5 | 2024-01-12 | A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows an a… |
CVE-2024-21597 | Medium | 5.3 | 2024-01-12 | An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows an unauthenticate… |
CVE-2024-21596 | Medium | 5.3 | 2024-01-12 | A Heap-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, n… |
CVE-2024-21595 | High | 7.5 | 2024-01-12 | An Improper Validation of Syntactic Correctness of Input vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a network-bas… |
CVE-2024-21594 | Medium | 5.5 | 2024-01-12 | A Heap-based Buffer Overflow vulnerability in the Network Services Daemon (NSD) of Juniper Networks Junos OS allows authenticated, low privileged, local attac… |
CVE-2024-21591 | Critical | 9.8 | 2024-01-12 | An Out-of-bounds Write vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based attacker to ca… |
CVE-2024-21589 | High | 7.4 | 2024-01-12 | An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated network-based attacker to a… |
CVE-2024-21587 | Medium | 6.5 | 2024-01-12 | An Improper Handling of Exceptional Conditions vulnerability in the broadband edge subscriber management daemon (bbe-smgd) of Juniper Networks Junos OS on MX… |