2024 CVEs (page 383)
Page 383 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-21585 | Medium | 5.9 | 2024-01-12 | An Improper Handling of Exceptional Conditions vulnerability in BGP session processing of Juniper Networks Junos OS and Junos OS Evolved allows an unauthentic… |
CVE-2024-21982 | Medium | 4.8 | 2024-01-12 | ONTAP versions 9.4 and higher are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information to unpri… |
CVE-2024-0443 | Medium | 5.5 | 2024-01-12 | A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading to a cgroup blkio memory leakage problem. When a cgroup is be… |
CVE-2024-21337 | Medium | 5.2 | 2024-01-11 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2024-20675 | Medium | 6.3 | 2024-01-11 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2024-0426 | Medium | 6.3 | 2024-01-11 | A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. This issue affects some unknown processing of the file admin/cm… |
CVE-2024-22198 | High | 7.1 | 2024-01-11 | Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to arbitrary command execution by abusing the configuration settings. The `Home >… |
CVE-2024-22196 | High | 7.0 | 2024-01-11 | Nginx-UI is an online statistics for Server Indicators Monitor CPU usage, memory usage, load average, and disk usage in real-time. This issue may lead to inf… |
CVE-2024-0425 | Medium | 5.3 | 2024-01-11 | A vulnerability classified as critical was found in ForU CMS up to 2020-06-23. This vulnerability affects unknown code of the file /admin/index.php?act=reset_a… |
CVE-2024-0424 | Low | 3.5 | 2024-01-11 | A vulnerability classified as problematic has been found in CodeAstro Simple Banking System 1.0. This affects an unknown part of the file createuser.php of the… |
CVE-2024-0423 | Low | 3.5 | 2024-01-11 | A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality… |
CVE-2024-0422 | Low | 3.5 | 2024-01-11 | A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unkno… |
CVE-2024-0419 | Medium | 5.3 | 2024-01-11 | A vulnerability was found in Jasper httpdx up to 1.5.4 and classified as problematic. This issue affects some unknown processing of the component HTTP POST Req… |
CVE-2024-22199 | Critical | 9.3 | 2024-01-11 | This package provides universal methods to use multiple template engines with the Fiber web framework using the Views interface. This vulnerability specificall… |
CVE-2024-22197 | High | 7.7 | 2024-01-11 | Nginx-ui is online statistics for Server Indicators Monitor CPU usage, memory usage, load average, and disk usage in real-time. The `Home > Preference` page… |
CVE-2024-0418 | Medium | 5.3 | 2024-01-11 | A vulnerability has been found in iSharer and upRedSun File Sharing Wizard up to 1.5.0 and classified as problematic. This vulnerability affects unknown code o… |
CVE-2024-0417 | Medium | 5.4 | 2024-01-11 | A vulnerability, which was classified as critical, was found in DeShang DSShop up to 2.1.5. This affects an unknown part of the file application/home/controlle… |
CVE-2024-0416 | Medium | 5.4 | 2024-01-11 | A vulnerability, which was classified as critical, has been found in DeShang DSMall up to 5.0.3. Affected by this issue is some unknown functionality of the fi… |
CVE-2024-0415 | Medium | 6.3 | 2024-01-11 | A vulnerability classified as critical was found in DeShang DSMall up to 6.1.0. Affected by this vulnerability is an unknown functionality of the file applicat… |
CVE-2024-0414 | Medium | 5.3 | 2024-01-11 | A vulnerability classified as problematic has been found in DeShang DSCMS up to 3.1.2/7.1. Affected is an unknown function of the file public/install.php. The… |
CVE-2024-0413 | Medium | 5.3 | 2024-01-11 | A vulnerability was found in DeShang DSKMS up to 3.1.2. It has been rated as problematic. This issue affects some unknown processing of the file public/install… |
CVE-2024-0412 | Medium | 5.3 | 2024-01-11 | A vulnerability was found in DeShang DSShop up to 3.1.0. It has been declared as problematic. This vulnerability affects unknown code of the file public/instal… |
CVE-2024-0411 | Medium | 5.3 | 2024-01-11 | A vulnerability was found in DeShang DSMall up to 6.1.0. It has been classified as problematic. This affects an unknown part of the file public/install.php of… |
CVE-2024-23061 | Critical | 9.8 | 2024-01-11 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the minute parameter in the setScheduleCfg function. |
CVE-2024-23060 | Critical | 9.8 | 2024-01-11 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDmzCfg function. |
CVE-2024-23059 | Critical | 9.8 | 2024-01-11 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the username parameter in the setDdnsCfg function. |
CVE-2024-23058 | Critical | 9.8 | 2024-01-11 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pass parameter in the setTr069Cfg function. |
CVE-2024-23057 | Critical | 9.8 | 2024-01-11 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the tz parameter in the setNtpCfg function. |
CVE-2024-22942 | Critical | 9.8 | 2024-01-11 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the hostName parameter in the setWanCfg function. |
CVE-2024-0429 | High | 7.3 | 2024-01-11 | A denial service vulnerability has been found on Hex Workshop affecting version 6.7, an attacker could send a command line file arguments and control the Stru… |
CVE-2024-0252 | High | 8.8 | 2024-01-11 | ManageEngine ADSelfService Plus versions 6401 and below are vulnerable to the remote code execution due to the improper handling in the load balancer component… |
CVE-2024-21669 | Critical | 9.9 | 2024-01-11 | Hyperledger Aries Cloud Agent Python (ACA-Py) is a foundation for building decentralized identity applications and services running in non-mobile environments… |
CVE-2024-21637 | High | 7.6 | 2024-01-11 | Authentik is an open-source Identity Provider. Authentik is a vulnerable to a reflected Cross-Site Scripting vulnerability via JavaScript-URIs in OpenID Connec… |
CVE-2024-22195 | Medium | 5.4 | 2024-01-11 | Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary… |
CVE-2024-22194 | Low | 2.2 | 2024-01-11 | cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An informati… |
CVE-2024-22190 | High | 7.8 | 2024-01-11 | GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On Windows, GitPython uses an untrusted se… |
CVE-2024-21667 | Medium | 6.5 | 2024-01-11 | pimcore/customer-data-framework is the Customer Management Framework for management of customer data within Pimcore. An authenticated and unauthorized user can… |
CVE-2024-21666 | Medium | 6.5 | 2024-01-11 | The Customer Management Framework (CMF) for Pimcore adds functionality for customer data management, segmentation, personalization and marketing automation. An… |
CVE-2024-21665 | Medium | 4.3 | 2024-01-11 | ecommerce-framework-bundle is the Pimcore Ecommerce Framework Bundle. An authenticated and unauthorized user can access the back-office orders list and be able… |
CVE-2024-21833 | High | 8.8 | 2024-01-11 | Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. The affected device, w… |
CVE-2024-21821 | High | 8.0 | 2024-01-11 | Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS command… |
CVE-2024-21773 | High | 8.8 | 2024-01-11 | Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS comma… |
CVE-2024-21638 | Critical | 9.1 | 2024-01-10 | Azure IPAM (IP Address Management) is a lightweight solution developed on top of the Azure platform designed to help Azure customers manage their IP Address sp… |
CVE-2024-0333 | Medium | 5.3 | 2024-01-10 | Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious… |
CVE-2024-0389 | Medium | 6.3 | 2024-01-10 | A vulnerability, which was classified as critical, was found in SourceCodester Student Attendance System 1.0. Affected is an unknown function of the file atten… |
CVE-2024-20715 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20714 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20713 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20712 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20711 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20710 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-0310 | Medium | 6.1 | 2024-01-10 | A content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update 15 allows a remote attacker to alter the response header param… |
CVE-2024-21643 | High | 7.1 | 2024-01-10 | IdentityModel Extensions for .NET provide assemblies for web developers that wish to use federated identity providers for establishing the caller's identity. A… |
CVE-2024-0364 | Medium | 5.5 | 2024-01-10 | A vulnerability, which was classified as critical, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file admin/query… |
CVE-2024-0363 | Medium | 5.5 | 2024-01-10 | A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown function… |
CVE-2024-0362 | Medium | 5.5 | 2024-01-10 | A vulnerability classified as critical was found in PHPGurukul Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of th… |
CVE-2024-0361 | Medium | 5.5 | 2024-01-10 | A vulnerability classified as critical has been found in PHPGurukul Hospital Management System 1.0. Affected is an unknown function of the file admin/contact.p… |
CVE-2024-0360 | Medium | 5.5 | 2024-01-10 | A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file a… |
CVE-2024-0359 | High | 7.3 | 2024-01-10 | A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown cod… |
CVE-2024-0358 | Medium | 5.3 | 2024-01-10 | A vulnerability was found in DeShang DSO2O up to 4.1.0. It has been classified as critical. This affects an unknown part of the file /install/install.php. The… |
CVE-2024-0357 | Medium | 5.5 | 2024-01-10 | A vulnerability was found in coderd-repos Eva 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the file /system/traceL… |
CVE-2024-0356 | Medium | 4.3 | 2024-01-10 | A vulnerability has been found in Mandelo ssm_shiro_blog 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the f… |
CVE-2024-0355 | Medium | 5.5 | 2024-01-10 | A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System up to 1.1. Affected is an unknown function of the… |
CVE-2024-0354 | Medium | 5.3 | 2024-01-10 | A vulnerability, which was classified as critical, has been found in unknown-o download-station up to 1.1.8. This issue affects some unknown processing of the… |
CVE-2024-0352 | High | 7.3 | 2024-01-09 | A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the fil… |
CVE-2024-0351 | Low | 3.1 | 2024-01-09 | A vulnerability classified as problematic has been found in SourceCodester Engineers Online Portal 1.0. This affects an unknown part. The manipulation leads to… |
CVE-2024-0350 | Low | 3.1 | 2024-01-09 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality… |
CVE-2024-0349 | Low | 3.7 | 2024-01-09 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown func… |
CVE-2024-0348 | Medium | 4.3 | 2024-01-09 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as problematic. Affected is an unknown function of the componen… |
CVE-2024-0347 | Low | 3.7 | 2024-01-09 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as problematic. This issue affects some unknown processing of the file s… |
CVE-2024-0346 | Low | 3.5 | 2024-01-09 | A vulnerability has been found in CodeAstro Vehicle Booking System 1.0 and classified as problematic. This vulnerability affects unknown code of the file usr/u… |
CVE-2024-0345 | Medium | 4.3 | 2024-01-09 | A vulnerability, which was classified as problematic, was found in CodeAstro Vehicle Booking System 1.0. This affects an unknown part of the file usr/usr-regis… |
CVE-2024-0344 | Medium | 5.5 | 2024-01-09 | A vulnerability, which was classified as critical, has been found in soxft TimeMail up to 1.1. Affected by this issue is some unknown functionality of the file… |
CVE-2024-21664 | Medium | 4.3 | 2024-01-09 | jwx is a Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. Calling `jws.Parse` with a JSON serialized payload whe… |
CVE-2024-0343 | Medium | 4.3 | 2024-01-09 | A vulnerability classified as problematic was found in CodeAstro Simple House Rental System 5.6. Affected by this vulnerability is an unknown functionality of… |
CVE-2024-0342 | Medium | 6.3 | 2024-01-09 | A vulnerability classified as critical has been found in Inis up to 2.0.1. Affected is an unknown function of the file /app/api/controller/default/Sqlite.php… |
CVE-2024-21668 | Medium | 4.4 | 2024-01-09 | react-native-mmkv is a library that allows easy use of MMKV inside React Native applications. Before version 2.11.0, the react-native-mmkv logged the optional… |
CVE-2024-21319 | Medium | 6.8 | 2024-01-09 | Microsoft Identity Denial of service vulnerability |
CVE-2024-0341 | Low | 3.5 | 2024-01-09 | A vulnerability was found in Inis up to 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /app/api/controller/def… |
CVE-2024-21325 | High | 7.8 | 2024-01-09 | Microsoft Printer Metadata Troubleshooter Tool Remote Code Execution Vulnerability |
CVE-2024-21320 | Medium | 6.5 | 2024-01-09 | Windows Themes Spoofing Vulnerability |
CVE-2024-21318 | High | 8.8 | 2024-01-09 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2024-21316 | Medium | 6.1 | 2024-01-09 | Windows Server Key Distribution Service Security Feature Bypass |
CVE-2024-21314 | Medium | 6.5 | 2024-01-09 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2024-21313 | Medium | 5.3 | 2024-01-09 | Windows TCP/IP Information Disclosure Vulnerability |
CVE-2024-21312 | High | 7.5 | 2024-01-09 | .NET Framework Denial of Service Vulnerability |
CVE-2024-21311 | Medium | 5.5 | 2024-01-09 | Windows Cryptographic Services Information Disclosure Vulnerability |
CVE-2024-21310 | High | 7.8 | 2024-01-09 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2024-21309 | High | 7.8 | 2024-01-09 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-21307 | High | 7.5 | 2024-01-09 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2024-21306 | Medium | 5.7 | 2024-01-09 | Microsoft Bluetooth Driver Spoofing Vulnerability |
CVE-2024-21305 | Medium | 4.4 | 2024-01-09 | Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability |
CVE-2024-20700 | High | 7.5 | 2024-01-09 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2024-20699 | Medium | 5.5 | 2024-01-09 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-20698 | High | 7.8 | 2024-01-09 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-20697 | High | 7.3 | 2024-01-09 | Windows libarchive Remote Code Execution Vulnerability |
CVE-2024-20696 | High | 7.3 | 2024-01-09 | Windows libarchive Remote Code Execution Vulnerability |
CVE-2024-20694 | Medium | 5.5 | 2024-01-09 | Windows CoreMessaging Information Disclosure Vulnerability |
CVE-2024-20692 | Medium | 5.7 | 2024-01-09 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
CVE-2024-20691 | Medium | 4.7 | 2024-01-09 | Windows Themes Information Disclosure Vulnerability |