# CVEs published 2024-03-11

91 CVEs were published on March 11, 2024: 7 critical, 47 high. Days are UTC.

- [CVE-2023-49785](https://cve.now/CVE-2023-49785.md): NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting (CVSS 9.1, ChatGPTNextWeb NextChat · nextchat)
- [CVE-2024-28199](https://cve.now/CVE-2024-28199.md): Cross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex (CVSS 7.1, phlex-ruby phlex · phlex)
- [CVE-2024-25114](https://cve.now/CVE-2024-25114.md): Sensitive Information Disclosure (JailID) to users in Collabora Online (CVSS 2.6, CollaboraOnline online)
- [CVE-2024-1400](https://cve.now/CVE-2024-1400.md): Mollie Forms \<= 2.6.3 - Missing Authorization to Arbitrary Post Duplication (CVSS 4.3, ndijkstra Mollie Forms)
- [CVE-2024-1645](https://cve.now/CVE-2024-1645.md): Mollie Forms \<= 2.6.3 - Missing Authorization (CVSS 4.3, ndijkstra Mollie Forms)
- [CVE-2024-27297](https://cve.now/CVE-2024-27297.md): Nix Corruption of fixed-output derivations (CVSS 6.3, NixOS nix)
- [CVE-2024-27938](https://cve.now/CVE-2024-27938.md): SMTP Smuggling in Postal (CVSS 5.3, postalserver postal)
- [CVE-2024-28120](https://cve.now/CVE-2024-28120.md): API key leak in codeium-chrome (CVSS 6.5, Exafunction codeium-chrome)
- [CVE-2024-28187](https://cve.now/CVE-2024-28187.md): OS Command Injection Vulnerability in SOY CMS (CVSS 7.2, inunosinsi soycms)
- [CVE-2024-28197](https://cve.now/CVE-2024-28197.md): Account Takeover via Session Fixation in Zitadel \[Bypassing MFA\] (CVSS 7.5, zitadel · github.com/zitadel/zitadel)
- [CVE-2024-2357](https://cve.now/CVE-2024-2357.md): IKEv2 misconfiguration can cause libreswan to abort and restart (CVSS 6.5, The Libreswan Project (www.libreswan.org) libreswan)
- [CVE-2024-28198](https://cve.now/CVE-2024-28198.md): XML external entity (XXE) injection in OpenOLAT (CVSS 4.6, OpenOLAT)
- [CVE-2024-27237](https://cve.now/CVE-2024-27237.md): In wipe\_ns\_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic error in the code. (CVSS 5.5, Google Android)
- [CVE-2024-27236](https://cve.now/CVE-2024-27236.md): In aoc\_unlocked\_ioctl of aoc.c, there is a possible memory corruption due to type confusion. (CVSS 8.4, Google Android)
- [CVE-2024-27235](https://cve.now/CVE-2024-27235.md): In plugin\_extern\_func of , there is a possible out of bounds read due to a missing bounds check. (CVSS 5.5, Google Android)
- [CVE-2024-27234](https://cve.now/CVE-2024-27234.md): In fvp\_set\_target of fvp.c, there is a possible out of bounds read due to a missing bounds check. (CVSS 5.9, Google Android)
- [CVE-2024-27233](https://cve.now/CVE-2024-27233.md): In ppcfw\_init\_secpolicy of ppcfw.c, there is a possible permission bypass due to uninitialized data. (CVSS 7.8, Google Android)
- [CVE-2024-27230](https://cve.now/CVE-2024-27230.md): In ProtocolPsKeepAliveStatusAdapter::getCode() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds chec (CVSS 5.1, Google Android)
- [CVE-2024-27229](https://cve.now/CVE-2024-27229.md): In ss\_SendCallBarringPwdRequiredIndMsg of ss\_CallBarring.c, there is a possible null pointer deref due to a missing null check. (CVSS 7.5, Google Android)
- [CVE-2024-27228](https://cve.now/CVE-2024-27228.md): there is a possible out of bounds write due to a heap buffer overflow. (CVSS 9.8, Google Android)
- [CVE-2024-27227](https://cve.now/CVE-2024-27227.md): A malicious DNS response can trigger a number of OOB reads, writes, and other memory issues (CVSS 9.8, Google Android)
- [CVE-2024-27226](https://cve.now/CVE-2024-27226.md): In tmu\_config\_gov\_params of , there is a possible out of bounds write due to a missing bounds check. (CVSS 8.4, Google Android)
- [CVE-2024-27225](https://cve.now/CVE-2024-27225.md): In sendHciCommand of bluetooth\_hci.cc, there is a possible out of bounds read due to a heap buffer overflow. (CVSS 4.4, Google Android)
- [CVE-2024-27224](https://cve.now/CVE-2024-27224.md): In strncpy of strncpy.c, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, Google Android)
- [CVE-2024-27223](https://cve.now/CVE-2024-27223.md): In EUTRAN\_LCS\_DecodeFacilityInformationElement of LPP\_LcsManagement.c, there is a possible out of bounds read due to a missing bounds check. (CVSS 5.1, Google Android)
- [CVE-2024-27222](https://cve.now/CVE-2024-27222.md): In onSkipButtonClick of FaceEnrollFoldPage.java, there is a possible way to access the file the app cannot access due to Intent Redirect GR (CVSS 7.8, Google Android)
- [CVE-2024-27221](https://cve.now/CVE-2024-27221.md): In update\_policy\_data of , there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, Google Android)
- [CVE-2024-27220](https://cve.now/CVE-2024-27220.md): In lpm\_req\_handler of , there is a possible out of bounds memory access due to a missing bounds check. (CVSS 8.4, Google Android)
- [CVE-2024-27219](https://cve.now/CVE-2024-27219.md): In tmu\_set\_pi of tmu.c, there is a possible out of bounds write due to a missing bounds check. (CVSS 8.4, Google Android)
- [CVE-2024-27218](https://cve.now/CVE-2024-27218.md): In update\_freq\_data of , there is a possible out of bounds read due to a missing bounds check. (CVSS 6.2, Google Android)
- [CVE-2024-27213](https://cve.now/CVE-2024-27213.md): In BroadcastSystemMessage of servicemgr.cpp, there is a possible Remote Code Execution due to a use after free. (CVSS 8.4, Google Android)
- [CVE-2024-27212](https://cve.now/CVE-2024-27212.md): In init\_data of , there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, Google Android)
- [CVE-2024-27211](https://cve.now/CVE-2024-27211.md): In AtiHandleAPOMsgType of ati\_Main.c, there is a possible OOB write due to a missing null check. (CVSS 7.7, Google Android)
- [CVE-2024-27210](https://cve.now/CVE-2024-27210.md): In policy\_check of fvp.c, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, Google Android)
- [CVE-2024-27209](https://cve.now/CVE-2024-27209.md): there is a possible out of bounds write due to a heap buffer overflow. (CVSS 8.4, Google Android)
- [CVE-2024-27208](https://cve.now/CVE-2024-27208.md): there is a possible out of bounds write due to a missing bounds check. (CVSS 8.4, Google Android)
- [CVE-2024-27207](https://cve.now/CVE-2024-27207.md): Exported broadcast receivers allowing malicious apps to bypass broadcast protection. (CVSS 9.1, Google Android)
- [CVE-2024-27206](https://cve.now/CVE-2024-27206.md): there is a possible out of bounds read due to a missing bounds check. (CVSS 7.5, Google Android)
- [CVE-2024-27205](https://cve.now/CVE-2024-27205.md): there is a possible memory corruption due to a use after free. (CVSS 8.4, Google Android)
- [CVE-2024-27204](https://cve.now/CVE-2024-27204.md): In tmu\_set\_gov\_active of tmu.c, there is a possible out of bounds write due to a missing bounds check. (CVSS 8.4, Google Android)
- [CVE-2024-25993](https://cve.now/CVE-2024-25993.md): In tmu\_reset\_tmu\_trip\_counter of , there is a possible out of bounds write due to a missing bounds check. (CVSS 8.4, Google Android)
- [CVE-2024-25992](https://cve.now/CVE-2024-25992.md): In tmu\_tz\_control of tmu.c, there is a possible out of bounds read due to a missing bounds check. (CVSS 7.8, Google Android)
- [CVE-2024-25991](https://cve.now/CVE-2024-25991.md): In acpm\_tmu\_ipc\_handler of tmu\_plugin.c, there is a possible out of bounds read due to a missing bounds check. (CVSS 3.3, Google Android)
- [CVE-2024-25990](https://cve.now/CVE-2024-25990.md): In pktproc\_perftest\_gen\_rx\_packet\_sktbuf\_mode of link\_rx\_pktproc.c, there is a possible out of bounds write due to a race condition. (CVSS 6.4, Google Android)
- [CVE-2024-25989](https://cve.now/CVE-2024-25989.md): In gpu\_slc\_liveness\_update of pixel\_gpu\_slc.c, there is a possible out of bounds read due to a missing bounds check. (CVSS 5.9, Google Android)
- [CVE-2024-25988](https://cve.now/CVE-2024-25988.md): In SAEMM\_DiscloseGuti of SAEMM\_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. (CVSS 8.4, Google Android)
- [CVE-2024-25987](https://cve.now/CVE-2024-25987.md): In pt\_sysctl\_command of pt.c, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 6.7, Google Android)
- [CVE-2024-25986](https://cve.now/CVE-2024-25986.md): In ppmp\_unprotect\_buf of drm\_fw.c, there is a possible compromise of protected memory due to a logic error in the code. (CVSS 7.8, Google Android)
- [CVE-2024-25985](https://cve.now/CVE-2024-25985.md): In bigo\_unlocked\_ioctl of bigo.c, there is a possible UAF due to a missing bounds check. (CVSS 8.4, Google Android)
- [CVE-2024-25984](https://cve.now/CVE-2024-25984.md): In dumpBatteryDefend of dump\_power.cpp, there is a possible out of bounds read due to a heap buffer overflow. (CVSS 6.2, Google Android)
- [CVE-2024-22011](https://cve.now/CVE-2024-22011.md): In ss\_ProcessRejectComponent of ss\_MmConManagement.c, there is a possible out of bounds read due to a missing bounds check. (CVSS 7.5, Google Android)
- [CVE-2024-22010](https://cve.now/CVE-2024-22010.md): In dvfs\_plugin\_caller of fvp.c, there is a possible out of bounds read due to a missing bounds check. (CVSS 5.5, Google Android)
- [CVE-2024-22009](https://cve.now/CVE-2024-22009.md): In init\_data of , there is a possible out of bounds write due to a missing bounds check. (CVSS 7.1, Google Android)
- [CVE-2024-22008](https://cve.now/CVE-2024-22008.md): In config\_gov\_time\_windows of tmu.c, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, Google Android)
- [CVE-2024-22007](https://cve.now/CVE-2024-22007.md): In constraint\_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. (CVSS 6.2, Google Android)
- [CVE-2024-22006](https://cve.now/CVE-2024-22006.md): OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device. (CVSS 5.3, Google Android)
- [CVE-2024-22005](https://cve.now/CVE-2024-22005.md): there is a possible Authentication Bypass due to improperly used crypto. (CVSS 8.4, Google Android)
- [CVE-2024-1487](https://cve.now/CVE-2024-1487.md): Photos and Files Contest Gallery \< 21.3.1 - Author+ Stored Cross Site Scripting (CVSS 5.4, Photos and Files Contest Gallery)
- [CVE-2024-0561](https://cve.now/CVE-2024-0561.md): Ultimate Posts Widget \< 2.3.1 - Admin+ Stored XSS (CVSS 5.4, Ultimate Posts Widget)
- [CVE-2024-1279](https://cve.now/CVE-2024-1279.md): Paid Memberships Pro \< 2.12.9 - Contributor+ Arbitrary User Custom Field Disclosure (CVSS 4.3, Paid Memberships Pro)
- [CVE-2023-7247](https://cve.now/CVE-2023-7247.md): Login as User or Customer \<= 3.8 - Admin Account Takeover (CVSS 4.9, Login as User or Customer)
- [CVE-2024-1290](https://cve.now/CVE-2024-1290.md): Formidable Registration \< 2.12 - Contributor+ Arbitrary User Password Reset To Account Takeover (CVSS 6.5, User Registration)
- [CVE-2024-1068](https://cve.now/CVE-2024-1068.md): 404 Solution \< 2.35.8 - Admin+ SQL Injection (CVSS 7.2, 404 Solution)
- [CVE-2024-1273](https://cve.now/CVE-2024-1273.md): Starbox \< 3.5.0 - Contributor+ Stored XSS (CVSS 6.1, Starbox)
- [CVE-2024-0559](https://cve.now/CVE-2024-0559.md): Enhanced Text Widget \< 1.6.6 - Admin+ Stored XSS (CVSS 6.5, Enhanced Text Widget)
- [CVE-2023-6444](https://cve.now/CVE-2023-6444.md): Seriously Simple Podcasting \< 3.0.0 - Unauthenticated Administrator Email Disclosure (CVSS 5.3, Seriously Simple Podcasting)
- [CVE-2024-1696](https://cve.now/CVE-2024-1696.md): Santesoft Sante FFT Imaging Out-of-bounds Write (CVSS 7.8, Santesoft Sante FFT Imaging)
- [CVE-2024-23717](https://cve.now/CVE-2024-23717.md): In access\_secure\_service\_from\_temp\_bond of btm\_sec.cc, there is a possible way to achieve keystroke injection due to improper input validati (CVSS 9.1, Google Android)
- [CVE-2024-0053](https://cve.now/CVE-2024-0053.md): In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy. (CVSS 3.3, Google Android)
- [CVE-2024-0052](https://cve.now/CVE-2024-0052.md): In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a missing permission check. (CVSS 6.2, Google Android)
- [CVE-2024-0051](https://cve.now/CVE-2024-0051.md): In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow. (CVSS 7.8, Google Android)
- [CVE-2024-0050](https://cve.now/CVE-2024-0050.md): In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. (CVSS 7.1, Google Android)
- [CVE-2024-0049](https://cve.now/CVE-2024-0049.md): In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. (CVSS 7.8, Google Android)
- [CVE-2024-0048](https://cve.now/CVE-2024-0048.md): In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of nu (CVSS 8.4, Google Android)
- [CVE-2024-0047](https://cve.now/CVE-2024-0047.md): In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag due to a logic error in the code. (CVSS 5.5, Google Android)
- [CVE-2024-0046](https://cve.now/CVE-2024-0046.md): In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the cod (CVSS 7.8, Google Android)
- [CVE-2024-0045](https://cve.now/CVE-2024-0045.md): In smp\_proc\_sec\_req of smp\_act.cc, there is a possible out of bounds read due to improper input validation. (CVSS 7.5, Google Android)
- [CVE-2024-0044](https://cve.now/CVE-2024-0044.md): In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. (CVSS 7.8, Google Android)
- [CVE-2024-0039](https://cve.now/CVE-2024-0039.md): In attp\_build\_value\_cmd of att\_protocol.cc, there is a possible out of bounds write due to a missing bounds check. (CVSS 9.8, Google Android)
- [CVE-2024-23612](https://cve.now/CVE-2024-23612.md): Improper Error Handling Issue in LabVIEW (CVSS 7.8, NI LabVIEW)
- [CVE-2024-23609](https://cve.now/CVE-2024-23609.md): Improper Error Handling Issue in LabVIEW (CVSS 7.8, NI LabVIEW)
- [CVE-2024-23611](https://cve.now/CVE-2024-23611.md): Out of Bounds Write Due to Missing Bounds Check in LabVIEW (CVSS 7.8, NI LabVIEW)
- [CVE-2024-23610](https://cve.now/CVE-2024-23610.md): Out of Bounds Write Due to Missing Bounds Check in LabVIEW (CVSS 7.8, NI LabVIEW)
- [CVE-2024-23608](https://cve.now/CVE-2024-23608.md): Out of Bounds Write Due to Missing Bounds Check in LabVIEW (CVSS 7.8, NI LabVIEW)
- [CVE-2024-0670](https://cve.now/CVE-2024-0670.md): Privilege escalation in windows agent (CVSS 8.8, Checkmk)
- [CVE-2024-1441](https://cve.now/CVE-2024-1441.md): Libvirt: off-by-one error in udevlistinterfacesbystatus() (CVSS 5.5, libvirt · Red Hat Enterprise Linux)
- [CVE-2024-2184](https://cve.now/CVE-2024-2184.md): Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(\*) which may allo (CVSS 9.8, Canon Color imageCLASS MF740C Series · Canon Color imag… +24)
- [CVE-2022-46070](https://cve.now/CVE-2022-46070.md): GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path. (CVSS 7.5)
- [CVE-2024-25854](https://cve.now/CVE-2024-25854.md): Cross Site Scripting (XSS) vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbitrary code via the Su (CVSS 6.1)
- [CVE-2024-28816](https://cve.now/CVE-2024-28816.md): Student Information Chatbot a0196ab allows SQL injection via the username to the login function in index.php. (CVSS 7.1)
- [CVE-2024-28823](https://cve.now/CVE-2024-28823.md): Amazon AWS aws-js-s3-explorer (aka AWS JavaScript S3 Explorer) 1.0.0 allows XSS via a crafted S3 bucket name to index.html. (CVSS 6.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-03-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.