# CVEs published 2024-03-25

120 CVEs were published on March 25, 2024: 13 critical, 39 high. Days are UTC.

- [CVE-2024-0901](https://cve.now/CVE-2024-0901.md): SEGV and out of bounds memory read from malicious packet (CVSS 7.5, wolfSSL)
- [CVE-2024-2873](https://cve.now/CVE-2024-2873.md): User authentication bypass in wolfSSH server (CVSS 9.1, wolfSSL wolfSSH)
- [CVE-2024-1973](https://cve.now/CVE-2024-1973.md): Elevation of privileges vulnerability (CVSS 8.5, OpenText Secure Content Manager)
- [CVE-2024-21914](https://cve.now/CVE-2024-21914.md): Rockwell Automation - FactoryTalk® View ME on PanelView™ Plus 7 Boot Terminal lack Security Protections (CVSS 5.3, Rockwell Automation FactoryTalk® View ME)
- [CVE-2024-29179](https://cve.now/CVE-2024-29179.md): phpMyFAQ Stored Cross-site Scripting at File Attachments (CVSS 4.3, thorsten phpMyFAQ · phpmyfaq/phpmyfaq)
- [CVE-2024-2427](https://cve.now/CVE-2024-2427.md): Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527 (CVSS 7.5, Rockwell Automation PowerFlex®)
- [CVE-2024-29041](https://cve.now/CVE-2024-29041.md): Express.js Open Redirect in malformed URLs (CVSS 6.1, expressjs express · express)
- [CVE-2024-2426](https://cve.now/CVE-2024-2426.md): Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527 (CVSS 7.5, Rockwell Automation PowerFlex®)
- [CVE-2024-2425](https://cve.now/CVE-2024-2425.md): Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527 (CVSS 7.5, Rockwell Automation PowerFlex®)
- [CVE-2024-29025](https://cve.now/CVE-2024-29025.md): Netty HttpPostRequestDecoder can OOM (CVSS 5.3, netty · io.netty:netty-codec-http)
- [CVE-2024-28246](https://cve.now/CVE-2024-28246.md): KaTeX is missing normalization of the protocol in URLs allows bypassing forbidden protocols (CVSS 5.5, KaTeX)
- [CVE-2024-28245](https://cve.now/CVE-2024-28245.md): KaTeX's \\includegraphics does not escape filename (CVSS 6.3, KaTeX)
- [CVE-2024-28244](https://cve.now/CVE-2024-28244.md): KaTeX's maxExpand bypassed by Unicode sub/superscripts (CVSS 6.5, KaTeX)
- [CVE-2024-28243](https://cve.now/CVE-2024-28243.md): KaTeX's maxExpand bypassed by \\edef (CVSS 6.5, KaTeX)
- [CVE-2024-28850](https://cve.now/CVE-2024-28850.md): WP Crontrol possible RCE when combined with a pre-condition (CVSS 8.2, johnbillion wp-crontrol · johnbillion/wp-crontrol)
- [CVE-2024-28108](https://cve.now/CVE-2024-28108.md): phpMyFAQ Stored HTML Injection at contentLink (CVSS 4.7, thorsten phpMyFAQ · phpmyfaq/phpmyfaq)
- [CVE-2024-28107](https://cve.now/CVE-2024-28107.md): phpMyFAQ SQL injections at insertentry & saveentry (CVSS 8.8, thorsten phpMyFAQ · phpmyfaq/phpmyfaq)
- [CVE-2024-28106](https://cve.now/CVE-2024-28106.md): phpMyFAQ Stored XSS at FAQ News Content (CVSS 4.3, thorsten phpMyFAQ · phpmyfaq/phpmyfaq)
- [CVE-2024-28105](https://cve.now/CVE-2024-28105.md): phpMyFAQ's File Upload Bypass at Category Image Leads to RCE (CVSS 7.2, thorsten phpMyFAQ · phpmyfaq/phpmyfaq)
- [CVE-2024-27300](https://cve.now/CVE-2024-27300.md): phpMyFAQ Stored XSS at user email (CVSS 5.5, thorsten phpMyFAQ · phpmyfaq/phpmyfaq)
- [CVE-2024-27299](https://cve.now/CVE-2024-27299.md): phpMyFAQ SQL Injection at "Save News" (CVSS 8.8, thorsten phpMyFAQ · phpmyfaq/phpmyfaq)
- [CVE-2023-48296](https://cve.now/CVE-2023-48296.md): OroPlatform's storefront user can access history and most viewed data from matching back-office user with the same ID (CVSS 4.3, oroinc orocommerce · oro/customer-portal)
- [CVE-2023-45824](https://cve.now/CVE-2023-45824.md): OroPlatform's pinned entity creation form shows pages of other users (CVSS 4.3, oroinc platform · oro/platform)
- [CVE-2024-28183](https://cve.now/CVE-2024-28183.md): Anti Rollback bypass with physical access and TOCTOU attack (CVSS 6.1, espressif esp-idf)
- [CVE-2024-25002](https://cve.now/CVE-2024-25002.md): Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows unauthorized users full access to the device. (CVSS 8.8, Bosch Network Synchronizer Enterprise · Bosch Network Synch…)
- [CVE-2024-2865](https://cve.now/CVE-2024-2865.md): SQLi in Mergen Soft Quality Management System (CVSS 9.8, Mergen Software Quality Management System)
- [CVE-2023-25039](https://cve.now/CVE-2023-25039.md): WordPress Google Maps CP plugin \<= 1.0.43 - Missing Authorization Leading To Feedback Submission Vulnerability (CVSS 4.3, CodePeople Google Maps CP)
- [CVE-2022-38057](https://cve.now/CVE-2022-38057.md): WordPress TH Advance Product Search plugin \<= 1.2.1 - Unauthenticated Plugin Settings Reset vulnerability (CVSS 6.5, ThemeHunk Advance WordPress Search Plugin)
- [CVE-2023-22699](https://cve.now/CVE-2023-22699.md): WordPress MainWP Wordfence Extension Plugin \<= 4.0.7 - Subscriber+ Arbitrary Plugin Activation Vulnerability (CVSS 5.4, MainWP Wordfence Extension)
- [CVE-2022-45851](https://cve.now/CVE-2022-45851.md): WordPress ShareThis Dashboard for Google Analytics plugin \<= 3.1.4 - Broken Access Control vulnerability (CVSS 5.4, ShareThis Dashboard for Google Analytics)
- [CVE-2022-45356](https://cve.now/CVE-2022-45356.md): WordPress Betheme premium theme \<= 26.6.1 - Broken Access Control vulnerability (CVSS 5.4, Muffingroup Betheme)
- [CVE-2022-45352](https://cve.now/CVE-2022-45352.md): WordPress Betheme premium theme \<= 26.6.1 - Broken Access Control vulnerability (CVSS 5.4, Muffingroup Betheme)
- [CVE-2022-45351](https://cve.now/CVE-2022-45351.md): WordPress Betheme premium theme \<= 26.6.1 - Broken Access Control vulnerability (CVSS 5.4, Muffingroup Betheme)
- [CVE-2022-45349](https://cve.now/CVE-2022-45349.md): WordPress Betheme premium theme \<= 26.6.1 - Broken Access Control vulnerability (CVSS 4.3, Muffingroup Betheme)
- [CVE-2022-44626](https://cve.now/CVE-2022-44626.md): WordPress Squirrly SEO (Peaks) plugin \<= 12.1.20 - Broken Access Control vulnerability (CVSS 6.3, SEO Plugin by Squirrly SEO)
- [CVE-2023-27608](https://cve.now/CVE-2023-27608.md): WordPress Points and Rewards for WooCommerce plugin \<= 1.5.0 - Broken Access Control vulnerability (CVSS 6.5, WP Swings Points and Rewards for WooCommerce)
- [CVE-2024-2864](https://cve.now/CVE-2024-2864.md): WordPress Youzify - Buddypress Moderation plugin \<= 1.2.5 - Unauthenticated Cross Site Scripting (XSS) vulnerability (CVSS 7.3, KaineLabs Youzify - Buddypress Moderation)
- [CVE-2021-47180](https://cve.now/CVE-2021-47180.md): NFC: nci: fix memory leak in nci\_allocate\_device (no CVSS, Linux)
- [CVE-2021-47179](https://cve.now/CVE-2021-47179.md): NFSv4: Fix a NULL pointer dereference in pnfs\_mark\_matching\_lsegs\_return() (CVSS 7.5, Linux)
- [CVE-2021-47178](https://cve.now/CVE-2021-47178.md): scsi: target: core: Avoid smp\_processor\_id() in preemptible code (CVSS 7.5, Linux)
- [CVE-2021-47177](https://cve.now/CVE-2021-47177.md): iommu/vt-d: Fix sysfs leak in alloc\_iommu() (no CVSS, Linux)
- [CVE-2021-47176](https://cve.now/CVE-2021-47176.md): s390/dasd: add missing discipline function (no CVSS, Linux)
- [CVE-2021-47175](https://cve.now/CVE-2021-47175.md): net/sched: fq\_pie: fix OOB access in the traffic path (CVSS 7.8, Linux)
- [CVE-2021-47174](https://cve.now/CVE-2021-47174.md): netfilter: nft\_set\_pipapo\_avx2: Add irq\_fpu\_usable() check, fallback to non-AVX2 version (no CVSS, Linux)
- [CVE-2021-47173](https://cve.now/CVE-2021-47173.md): misc/uss720: fix memory leak in uss720\_probe (no CVSS, Linux)
- [CVE-2021-47172](https://cve.now/CVE-2021-47172.md): iio: adc: ad7124: Fix potential overflow due to non sequential channel numbers (CVSS 5.5, Linux)
- [CVE-2021-47171](https://cve.now/CVE-2021-47171.md): net: usb: fix memory leak in smsc75xx\_bind (no CVSS, Linux)
- [CVE-2021-47170](https://cve.now/CVE-2021-47170.md): USB: usbfs: Don't WARN about excessively large memory allocations (no CVSS, Linux)
- [CVE-2021-47169](https://cve.now/CVE-2021-47169.md): serial: rp2: use 'request\_firmware' instead of 'request\_firmware\_nowait' (no CVSS, Linux)
- [CVE-2021-47168](https://cve.now/CVE-2021-47168.md): NFS: fix an incorrect limit in filelayout\_decode\_layout() (CVSS 9.8, Linux)
- [CVE-2021-47167](https://cve.now/CVE-2021-47167.md): NFS: Fix an Oopsable condition in \_\_nfs\_pageio\_add\_request() (no CVSS, Linux)
- [CVE-2021-47166](https://cve.now/CVE-2021-47166.md): NFS: Don't corrupt the value of pg\_bytes\_written in nfs\_do\_recoalesce() (no CVSS, Linux)
- [CVE-2021-47165](https://cve.now/CVE-2021-47165.md): drm/meson: fix shutdown crash when component not probed (no CVSS, Linux)
- [CVE-2021-47164](https://cve.now/CVE-2021-47164.md): net/mlx5e: Fix null deref accessing lag dev (no CVSS, Linux)
- [CVE-2021-47163](https://cve.now/CVE-2021-47163.md): tipc: wait and exit until all work queues are done (CVSS 7.8, Linux)
- [CVE-2021-47162](https://cve.now/CVE-2021-47162.md): tipc: skb\_linearize the head skb when reassembling msgs (CVSS 9.8, Linux)
- [CVE-2021-47161](https://cve.now/CVE-2021-47161.md): spi: spi-fsl-dspi: Fix a resource leak in an error handling path (CVSS 5.5, Linux)
- [CVE-2021-47160](https://cve.now/CVE-2021-47160.md): net: dsa: mt7530: fix VLAN traffic leaks (CVSS 8.1, Linux)
- [CVE-2021-47159](https://cve.now/CVE-2021-47159.md): net: dsa: fix a crash if -\>get\_sset\_count() fails (CVSS 7.8, Linux)
- [CVE-2021-47158](https://cve.now/CVE-2021-47158.md): net: dsa: sja1105: add error handling in sja1105\_setup() (CVSS 7.8, Linux)
- [CVE-2021-47153](https://cve.now/CVE-2021-47153.md): i2c: i801: Don't generate an interrupt on bus reset (CVSS 7.8, Linux)
- [CVE-2021-47152](https://cve.now/CVE-2021-47152.md): mptcp: fix data stream corruption (CVSS 7.8, Linux)
- [CVE-2021-47151](https://cve.now/CVE-2021-47151.md): interconnect: qcom: bcm-voter: add a missing of\_node\_put() (no CVSS, Linux)
- [CVE-2021-47150](https://cve.now/CVE-2021-47150.md): net: fec: fix the potential memory leak in fec\_enet\_init() (no CVSS, Linux)
- [CVE-2021-47149](https://cve.now/CVE-2021-47149.md): net: fujitsu: fix potential null-ptr-deref (no CVSS, Linux)
- [CVE-2021-47148](https://cve.now/CVE-2021-47148.md): octeontx2-pf: fix a buffer overflow in otx2\_set\_rxfh\_context() (CVSS 7.8, Linux)
- [CVE-2021-47147](https://cve.now/CVE-2021-47147.md): ptp: ocp: Fix a resource leak in an error handling path (CVSS 6.2, Linux)
- [CVE-2021-47146](https://cve.now/CVE-2021-47146.md): mld: fix panic in mld\_newpack() (no CVSS, Linux)
- [CVE-2021-47145](https://cve.now/CVE-2021-47145.md): btrfs: do not BUG\_ON in link\_to\_fixup\_dir (no CVSS, Linux)
- [CVE-2021-47143](https://cve.now/CVE-2021-47143.md): net/smc: remove device from smcd\_dev\_list after failed device\_add() (no CVSS, Linux)
- [CVE-2021-47142](https://cve.now/CVE-2021-47142.md): drm/amdgpu: Fix a use-after-free (CVSS 7.8, Linux)
- [CVE-2021-47141](https://cve.now/CVE-2021-47141.md): gve: Add NULL pointer checks when freeing irqs. (no CVSS, Linux)
- [CVE-2021-47140](https://cve.now/CVE-2021-47140.md): iommu/amd: Clear DMA ops when switching domain (CVSS 5.3, Linux)
- [CVE-2021-47139](https://cve.now/CVE-2021-47139.md): net: hns3: put off calling register\_netdev() until client initialize complete (no CVSS, Linux)
- [CVE-2021-47138](https://cve.now/CVE-2021-47138.md): cxgb4: avoid accessing registers when clearing filters (no CVSS, Linux)
- [CVE-2021-47137](https://cve.now/CVE-2021-47137.md): net: lantiq: fix memory corruption in RX ring (CVSS 9.8, Linux)
- [CVE-2021-47136](https://cve.now/CVE-2021-47136.md): net: zero-initialize tc skb extension on allocation (CVSS 8.6, Linux)
- [CVE-2024-25964](https://cve.now/CVE-2024-25964.md): Dell PowerScale OneFS 9.5.0.x through 9.7.0.x contain a covert timing channel vulnerability. (CVSS 5.3, Dell PowerScale OneFS)
- [CVE-2024-24892](https://cve.now/CVE-2024-24892.md): Unauthorized RCE in migration-tools (CVSS 8.1, openEuler migration-tools)
- [CVE-2024-24899](https://cve.now/CVE-2024-24899.md): Command injection in aops-zeus (CVSS 7.2, openEuler aops-zeus)
- [CVE-2024-24897](https://cve.now/CVE-2024-24897.md): Remote command execution in A-Tune-Collector (CVSS 8.1, openEuler A-Tune-Collector)
- [CVE-2024-24890](https://cve.now/CVE-2024-24890.md): Command injection in ioprobe of gala-gopher (CVSS 7.8, openEuler gala-gopher)
- [CVE-2020-36826](https://cve.now/CVE-2020-36826.md): AwesomestCode LiveBot parseMessage.js parseSend cross site scripting (CVSS 3.5, AwesomestCode LiveBot)
- [CVE-2021-33632](https://cve.now/CVE-2021-33632.md): TOCTOU Race Condition problem in iSulad (CVSS 7.0, openEuler iSulad)
- [CVE-2024-2863](https://cve.now/CVE-2024-2863.md): Path traversal via file upload on LG LED Assistant (CVSS 5.3, LG Electronics LG LED Assistant)
- [CVE-2024-2862](https://cve.now/CVE-2024-2862.md): Password reset vulnerability without authorization on LG LED Assistant (CVSS 9.1, LG Electronics LG LED Assistant)
- [CVE-2024-29216](https://cve.now/CVE-2024-29216.md): Exposed IOCTL with insufficient access control issue exists in cg6kwin2k.sys prior to 2.1.7.0. (CVSS 6.1, Sangoma Technologies cg6kwin2k.sys)
- [CVE-2022-36407](https://cve.now/CVE-2022-36407.md): Information Exposure Vulnerability in Hitachi Disk Array Systems (CVSS 9.9, Hitachi Virtual Storage Platform · Hitachi Unified Storage…)
- [CVE-2024-1962](https://cve.now/CVE-2024-1962.md): CM Download and File Manager \< 2.9.1 - Download Edit via CSRF (CVSS 8.8, CM Download Manager)
- [CVE-2024-1564](https://cve.now/CVE-2024-1564.md): Schema Pro \< 2.7.16 - Contributor+ Custom Field Access (CVSS 4.3, wp-schema-pro)
- [CVE-2024-1232](https://cve.now/CVE-2024-1232.md): CM Download Manager \< 2.9.0 - Download Deletion via CSRF (CVSS 4.8, CM Download Manager)
- [CVE-2024-1231](https://cve.now/CVE-2024-1231.md): CM Download and File Manager \< 2.9.0 - Download Unpublish via CSRF (CVSS 6.8, CM Download Manager)
- [CVE-2024-21505](https://cve.now/CVE-2024-21505.md): Versions of the package web3-utils before 4.2.1 are vulnerable to Prototype Pollution via the utility functions format and mergeDeep, due to (CVSS 7.5, web3-utils)
- [CVE-2023-30480](https://cve.now/CVE-2023-30480.md): WordPress Educenter theme \<= 1.5.5 - Broken Access Control (CVSS 4.3, Sparkle WP Educenter)
- [CVE-2023-33923](https://cve.now/CVE-2023-33923.md): Broken Access Control leading to Arbitrary Plugin Activation in multiple HashThemes themes (CVSS 4.3, HashThemes Viral News · HashThemes Viral +1)
- [CVE-2023-37885](https://cve.now/CVE-2023-37885.md): WordPress RealHomes theme \<= 4.0.2 - Broken Access Control vulnerability (CVSS 4.3, InspiryThemes RealHomes)
- [CVE-2023-37886](https://cve.now/CVE-2023-37886.md): WordPress RealHomes theme \<= 4.0.2 - Broken Access Control vulnerability (CVSS 5.4, InspiryThemes RealHomes)
- [CVE-2024-29009](https://cve.now/CVE-2024-29009.md): Cross-site request forgery (CSRF) vulnerability in easy-popup-show all versions allows a remote unauthenticated attacker to hijack the authe (CVSS 6.1, Ari Susanto easy-popup-show)
- [CVE-2024-21865](https://cve.now/CVE-2024-21865.md): HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. (CVSS 6.5, KDDI HGW BL1500HM)
- [CVE-2024-29071](https://cve.now/CVE-2024-29071.md): HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. (CVSS 8.8, KDDI HGW BL1500HM)
- [CVE-2024-28041](https://cve.now/CVE-2024-28041.md): HGW BL1500HM Ver 002.001.013 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary command. (CVSS 8.8, KDDI HGW BL1500HM)
- [CVE-2023-47430](https://cve.now/CVE-2023-47430.md): Stack-buffer-overflow vulnerability in ReadyMedia (MiniDLNA) v1.3.3 allows attackers to cause a denial of service via via the SendContainer( (CVSS 6.5)
- [CVE-2024-25175](https://cve.now/CVE-2024-25175.md): An issue in Kickdler before v1.107.0 allows attackers to provide an XSS payload via a HTTP response splitting attack. (CVSS 6.1)
- [CVE-2024-28386](https://cve.now/CVE-2024-28386.md): An issue in Home-Made.io fastmagsync v.1.7.51 and before allows a remote attacker to execute arbitrary code via the getPhpBin() component. (CVSS 9.8)
- [CVE-2024-28387](https://cve.now/CVE-2024-28387.md): An issue in axonaut v.3.1.23 and before allows a remote attacker to obtain sensitive information via the log.txt component. (CVSS 7.5)
- [CVE-2024-28393](https://cve.now/CVE-2024-28393.md): SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFron (CVSS 9.8)
- [CVE-2024-28421](https://cve.now/CVE-2024-28421.md): SQL Injection vulnerability in Razor 0.8.0 allows a remote attacker to escalate privileges via the ChannelModel::updateapk method of the cha (CVSS 9.8)
- [CVE-2024-28434](https://cve.now/CVE-2024-28434.md): The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. (CVSS 7.6)
- [CVE-2024-28435](https://cve.now/CVE-2024-28435.md): The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload. (CVSS 5.4)
- [CVE-2024-29301](https://cve.now/CVE-2024-29301.md): SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-admin.php?admin\_id= (CVSS 7.5)
- [CVE-2024-29302](https://cve.now/CVE-2024-29302.md): SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee.php. (CVSS 7.5)
- [CVE-2024-29303](https://cve.now/CVE-2024-29303.md): The delete admin users function of SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection (CVSS 9.8)
- [CVE-2024-29515](https://cve.now/CVE-2024-29515.md): File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via uploading a crafted PHP fi (CVSS 8.8)
- [CVE-2024-29650](https://cve.now/CVE-2024-29650.md): An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe component (CVSS 9.8, @thi.ng/paths)
- [CVE-2024-29666](https://cve.now/CVE-2024-29666.md): Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through v.7.32.0.3 allows a remote attacker to esc (CVSS 9.8)
- [CVE-2024-30187](https://cve.now/CVE-2024-30187.md): Anope before 2.0.15 does not prevent resetting the password of a suspended account. (CVSS 5.3)
- [CVE-2024-30202](https://cve.now/CVE-2024-30202.md): In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. (CVSS 7.8)
- [CVE-2024-30203](https://cve.now/CVE-2024-30203.md): In Emacs before 29.3, Gnus treats inline MIME contents as trusted. (CVSS 5.5)
- [CVE-2024-30204](https://cve.now/CVE-2024-30204.md): In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments. (CVSS 2.8)
- [CVE-2024-30205](https://cve.now/CVE-2024-30205.md): In Emacs before 29.3, Org mode considers contents of remote files to be trusted. (CVSS 7.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-03-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.