# CVEs published 2024-01-24

76 CVEs were published on January 24, 2024: 11 critical, 23 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2024-23646](https://cve.now/CVE-2024-23646.md): Pimcore Admin Classic Bundle SQL Injection in Admin download files as zip (CVSS 8.8, pimcore admin-ui-classic-bundle · pimcore/admin-ui-classic-…)
- [CVE-2024-23644](https://cve.now/CVE-2024-23644.md): trillium-http and trillium-client vulnerable to HTTP Request/Response Splitting (CVSS 6.8, trillium-rs trillium · trillium-http +1)
- [CVE-2024-23649](https://cve.now/CVE-2024-23649.md): Any authenticated user may obtain private message details from other users on the same instance (CVSS 7.5, LemmyNet lemmy · lemmy\_server)
- [CVE-2024-23648](https://cve.now/CVE-2024-23648.md): Pimcore Admin Classic Bundle host header injection in the password reset (CVSS 8.8, pimcore admin-ui-classic-bundle · pimcore/admin-ui-classic-…)
- [CVE-2024-23905](https://cve.now/CVE-2024-23905.md): Jenkins Red Hat Dependency Analytics Plugin 0.7.1 and earlier programmatically disables Content-Security-Policy protection for user-generate (CVSS 5.4, Jenkins Project Jenkins Red Hat Dependency Analytics Plugin…)
- [CVE-2024-23904](https://cve.now/CVE-2024-23904.md): Jenkins Log Command Plugin 1.0.2 and earlier does not disable a feature of its command parser that replaces an '@' character followed by a f (CVSS 7.5, Jenkins Project Jenkins Log Command Plugin · org.jenkins-ci…)
- [CVE-2024-23903](https://cve.now/CVE-2024-23903.md): Jenkins GitLab Branch Source Plugin 684.vea\_fa\_7c1e2fe3 and earlier uses a non-constant time comparison function when checking whether the p (CVSS 5.3, Jenkins Project Jenkins GitLab Branch Source Plugin · io.je…)
- [CVE-2024-23902](https://cve.now/CVE-2024-23902.md): A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Branch Source Plugin 684.vea\_fa\_7c1e2fe3 and earlier allows attackers to (CVSS 4.3, Jenkins Project Jenkins GitLab Branch Source Plugin · io.je…)
- [CVE-2024-23901](https://cve.now/CVE-2024-23901.md): Jenkins GitLab Branch Source Plugin 684.vea\_fa\_7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured o (CVSS 6.5, Jenkins Project Jenkins GitLab Branch Source Plugin · io.je…)
- [CVE-2024-23900](https://cve.now/CVE-2024-23900.md): Jenkins Matrix Project Plugin 822.v01b\_8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects, allo (CVSS 4.3, Jenkins Project Jenkins Matrix Project Plugin · org.jenkins…)
- [CVE-2024-23899](https://cve.now/CVE-2024-23899.md): Jenkins Git server Plugin 99.va\_0826a\_b\_cdfa\_d and earlier does not disable a feature of its command parser that replaces an '@' character f (CVSS 6.5, Jenkins Project Jenkins Git server Plugin · org.jenkins-ci.…)
- [CVE-2024-23898](https://cve.now/CVE-2024-23898.md): Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin validation of requests ma (CVSS 8.8, Jenkins Project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2024-23897](https://cve.now/CVE-2024-23897.md): Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character follo (CVSS 9.8, KEV, Jenkins Project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2024-23641](https://cve.now/CVE-2024-23641.md): Sending a GET or HEAD request with a body crashes SvelteKit (CVSS 7.5, sveltejs kit · @sveltejs/kit +1)
- [CVE-2024-22229](https://cve.now/CVE-2024-22229.md): Dell Unity, versions prior to 5.4, contain a vulnerability whereby log messages can be spoofed by an authenticated attacker. (CVSS 3.1, Dell Unity)
- [CVE-2023-44281](https://cve.now/CVE-2023-44281.md): Dell Pair Installer version prior to 1.2.1 contains an elevation of privilege vulnerability. (CVSS 6.6, Dell Pair)
- [CVE-2024-22141](https://cve.now/CVE-2024-22141.md): WordPress Profile Builder Pro Plugin \<= 3.10.0 is vulnerable to Sensitive Data Exposure (CVSS 6.5, Cozmoslabs Profile Builder Pro)
- [CVE-2023-6697](https://cve.now/CVE-2023-6697.md): WP Go Maps (formerly WP Google Maps) \<= 9.0.28 - Reflected Cross-Site Scripting (CVSS 6.1, wpgmaps WP Go Maps)
- [CVE-2023-50944](https://cve.now/CVE-2023-50944.md): Apache Airflow: Bypass permission verification to read code of other dags (CVSS 6.5, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2023-50943](https://cve.now/CVE-2023-50943.md): Apache Airflow: Potential pickle deserialization vulnerability in XComs (CVSS 7.5, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2023-51702](https://cve.now/CVE-2023-51702.md): Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service (CVSS 6.5, Apache Software Foundation Apache Airflow CNCF Kubernete… +2)
- [CVE-2024-22154](https://cve.now/CVE-2024-22154.md): WordPress SalesKing Plugin \<= 1.6.15 is vulnerable to Sensitive Data Exposure (CVSS 7.5, SNP Digital SalesKing)
- [CVE-2024-22294](https://cve.now/CVE-2024-22294.md): WordPress Download IP2Location Country Blocker Plugin \<= 2.33.3 is vulnerable to Sensitive Data Exposure (CVSS 5.3, IP2Location Country Blocker)
- [CVE-2024-22301](https://cve.now/CVE-2024-22301.md): WordPress Albo Pretorio Online Plugin \<= 4.6.6 is vulnerable to Sensitive Data Exposure (CVSS 5.3, Ignazio Scimone Albo Pretorio On line)
- [CVE-2024-22308](https://cve.now/CVE-2024-22308.md): WordPress Simple Membership Plugin \<= 4.4.1 is vulnerable to Open Redirection (CVSS 3.4, smp7, wp.insider Simple Membership)
- [CVE-2023-52221](https://cve.now/CVE-2023-52221.md): WordPress Barcode Scanner with Inventory & Order Manager Plugin \<= 1.5.1 is vulnerable to Arbitrary File Upload (CVSS 10.0, UkrSolution Barcode Scanner and Inventory manager)
- [CVE-2024-22135](https://cve.now/CVE-2024-22135.md): WordPress Order Export & Order Import for WooCommerce Plugin \<= 2.4.3 is vulnerable to Arbitrary File Upload (CVSS 8.0, WebToffee Order Export & Order Import for WooCommerce)
- [CVE-2024-22152](https://cve.now/CVE-2024-22152.md): WordPress Product Import Export for WooCommerce Plugin \<= 2.3.7 is vulnerable to Arbitrary File Upload (CVSS 8.0, WebToffee Product Import Export for WooCommerce)
- [CVE-2024-22284](https://cve.now/CVE-2024-22284.md): WordPress Asgaros Forum Plugin \<= 2.7.2 is vulnerable to PHP Object Injection (CVSS 8.7, Thomas Belser Asgaros Forum)
- [CVE-2024-22309](https://cve.now/CVE-2024-22309.md): WordPress ChatBot Plugin \<= 5.1.0 is vulnerable to PHP Object Injection (CVSS 8.7, QuantumCloud ChatBot with AI)
- [CVE-2024-22134](https://cve.now/CVE-2024-22134.md): WordPress Contact Form 7 Extension For Mailchimp Plugin \<= 0.5.70 is vulnerable to Server Side Request Forgery (SSRF) (CVSS 4.9, Renzo Johnson Contact Form 7 Extension For Mailchimp)
- [CVE-2024-0854](https://cve.now/CVE-2024-0854.md): URL redirection to untrusted site ('Open Redirect') vulnerability in file access component in Synology DiskStation Manager (DSM) before 6.2. (CVSS 5.4, Synology DiskStation Manager)
- [CVE-2024-0665](https://cve.now/CVE-2024-0665.md): WP Customer Area \<= 8.2.2 - Reflected Cross-Site Scripting (CVSS 6.1, aguilatechnologies WP Customer Area)
- [CVE-2024-22372](https://cve.now/CVE-2024-22372.md): OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to exe (CVSS 6.8, ELECOM CO. WRC-X1500GS-B · ELECOM CO. WRC-X1500GSA-B +13)
- [CVE-2024-22366](https://cve.now/CVE-2024-22366.md): Active debug code exists in Yamaha wireless LAN access point devices. (CVSS 6.8, Yamaha WLX222 · Yamaha WLX413 +3)
- [CVE-2023-31037](https://cve.now/CVE-2023-31037.md): NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injection by a network ca (CVSS 7.2, NVIDIA Bluefield 2 DPU BMC, BlueField 3 DPU BMC)
- [CVE-2024-21796](https://cve.now/CVE-2024-21796.md): Electronic Deliverables Creation Support Tool (Construction Edition) prior to Ver1.0.4 and Electronic Deliverables Creation Support Tool (De (CVSS 5.5, Ministry of Defense Electronic Deliverables Creation Suppor…)
- [CVE-2024-22380](https://cve.now/CVE-2024-22380.md): Electronic Delivery Check System (Ministry of Agriculture, Forestry and Fisheries The Agriculture and Rural Development Project Version) Mar (CVSS 5.5, Electronic Delivery Check System (Ministry of Agriculture,…)
- [CVE-2024-21765](https://cve.now/CVE-2024-21765.md): Electronic Delivery Check System (Doboku) Ver.18.1.0 and earlier, Electronic Delivery Check System (Dentsu) Ver.12.1.0 and earlier, Electron (CVSS 5.5, Ministry of Land, Infrastructure, Transport and Tourism, Ja…)
- [CVE-2022-4964](https://cve.now/CVE-2022-4964.md): Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set. (CVSS 5.5, Canonical Ubuntu pipewire-pulse)
- [CVE-2021-42143](https://cve.now/CVE-2021-42143.md): An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. (CVSS 9.1)
- [CVE-2021-42144](https://cve.now/CVE-2021-42144.md): Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive information via crafte (CVSS 7.5)
- [CVE-2021-42145](https://cve.now/CVE-2021-42145.md): An assertion failure discovered in in check\_certificate\_request() in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers to c (CVSS 7.5)
- [CVE-2021-42146](https://cve.now/CVE-2021-42146.md): An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. (CVSS 7.5)
- [CVE-2021-42147](https://cve.now/CVE-2021-42147.md): Buffer over-read vulnerability in the dtls\_sha256\_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attacke (CVSS 9.1)
- [CVE-2021-43584](https://cve.now/CVE-2021-43584.md): DOM-based Cross Site Scripting (XSS vulnerability in 'Tail Event Logs' functionality in Nagios Nagios Cross-Platform Agent (NCPA) before 2.4 (CVSS 4.8)
- [CVE-2023-24676](https://cve.now/CVE-2023-24676.md): An issue found in ProcessWire 3.0.210 allows attackers to execute arbitrary code and install a reverse shell via the download\_zip\_url parame (CVSS 7.2, processwire/processwire)
- [CVE-2023-43317](https://cve.now/CVE-2023-43317.md): An issue in Coign CRM Portal v.06.06 allows a remote attacker to escalate privileges via the userPermissionsList parameter in Session Storag (CVSS 8.8)
- [CVE-2023-43988](https://cve.now/CVE-2023-43988.md): An issue in nature fitness saijo mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channe (CVSS 5.4)
- [CVE-2023-43989](https://cve.now/CVE-2023-43989.md): An issue in mokumoku chohu mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel acce (CVSS 5.4)
- [CVE-2023-43990](https://cve.now/CVE-2023-43990.md): An issue in cherub-hair mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access (CVSS 5.4)
- [CVE-2023-43991](https://cve.now/CVE-2023-43991.md): An issue in PRIMA CLINIC mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access (CVSS 5.4)
- [CVE-2023-43992](https://cve.now/CVE-2023-43992.md): An issue in STOCKMAN GROUP mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel acce (CVSS 5.4)
- [CVE-2023-43993](https://cve.now/CVE-2023-43993.md): An issue in smaregi\_app\_market mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel (CVSS 5.4)
- [CVE-2023-43994](https://cve.now/CVE-2023-43994.md): An issue in Cleaning\_makotoya mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel a (CVSS 5.4)
- [CVE-2023-43995](https://cve.now/CVE-2023-43995.md): An issue in picot.golf mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access t (CVSS 5.4)
- [CVE-2023-43996](https://cve.now/CVE-2023-43996.md): An issue in Q co ltd mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access tok (CVSS 5.4)
- [CVE-2023-43997](https://cve.now/CVE-2023-43997.md): An issue in Yoruichi hobby base mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel (CVSS 5.4)
- [CVE-2023-43998](https://cve.now/CVE-2023-43998.md): An issue in Books-futaba mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access (CVSS 5.4)
- [CVE-2023-43999](https://cve.now/CVE-2023-43999.md): An issue in COLORFUL\_laundry mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel ac (CVSS 5.4)
- [CVE-2023-44000](https://cve.now/CVE-2023-44000.md): An issue in Otakara lapis totuka mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channe (CVSS 5.4)
- [CVE-2023-44001](https://cve.now/CVE-2023-44001.md): An issue in Ailand clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel acces (CVSS 5.4)
- [CVE-2023-51711](https://cve.now/CVE-2023-51711.md): An issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking: a user can trigger the execution of arbit (CVSS 7.8)
- [CVE-2023-51885](https://cve.now/CVE-2023-51885.md): Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX st (CVSS 9.8)
- [CVE-2023-51886](https://cve.now/CVE-2023-51886.md): Buffer Overflow vulnerability in the main() function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when u (CVSS 7.5)
- [CVE-2023-51887](https://cve.now/CVE-2023-51887.md): Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in applic (CVSS 9.8)
- [CVE-2023-51888](https://cve.now/CVE-2023-51888.md): Buffer Overflow vulnerability in the nomath() function in Mathtex v.1.05 and before allows a remote attacker to cause a denial of service vi (CVSS 7.5)
- [CVE-2023-51889](https://cve.now/CVE-2023-51889.md): Stack Overflow vulnerability in the validate() function in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via (CVSS 9.8)
- [CVE-2023-51890](https://cve.now/CVE-2023-51890.md): An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the ap (CVSS 7.5)
- [CVE-2023-52038](https://cve.now/CVE-2023-52038.md): An issue discovered in TOTOLINK X6000R v9.4.0cu.852\_B20230719 allows attackers to run arbitrary commands via the sub\_415C80 function. (CVSS 9.8)
- [CVE-2023-52039](https://cve.now/CVE-2023-52039.md): An issue discovered in TOTOLINK X6000R v9.4.0cu.852\_B20230719 allows attackers to run arbitrary commands via the sub\_415AA4 function. (CVSS 9.8)
- [CVE-2023-52040](https://cve.now/CVE-2023-52040.md): An issue discovered in TOTOLINK X6000R v9.4.0cu.852\_B20230719 allows attackers to run arbitrary commands via the sub\_41284C function. (CVSS 8.8)
- [CVE-2024-22651](https://cve.now/CVE-2024-22651.md): There is a command injection vulnerability in the ssdpcgi\_main function of cgibin binary in D-Link DIR-815 router firmware v1.04. (CVSS 9.8)
- [CVE-2024-22720](https://cve.now/CVE-2024-22720.md): Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature. (CVSS 4.8)
- [CVE-2024-22725](https://cve.now/CVE-2024-22725.md): Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting (XSS) vulnerability. (CVSS 6.1)
- [CVE-2024-22751](https://cve.now/CVE-2024-22751.md): D-Link DIR-882 DIR882A1\_FW130B06 was discovered to contain a stack overflow via the sub\_477AA0 function. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-01-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.