CVEs published March 29, 2024
156 CVEs were published on March 29, 2024: 22 critical, 45 high.
- Published
- 156
- Critical
- 22
- High
- 45
- Medium
- 87
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 15
Most affected products
- jumpserver
- 4
- wedevs ERP: Complete HR, Accounting & CRM Suite with WooCom…
- 4
- Apache Software Foundation Apache Fineract
- 3
- CRM Perks Forms
- 3
- Metagauss ProfileGrid
- 3
- andy_moyle Church Admin
- 2
- backie WP-Eggdrop
- 2
- easyappointments Easy Appointments
- 2
- kstover Ninja Forms – The Contact Form Builder That Grows W…
- 2
- marubon Pocket News Generator
- 2
Critical 22
- CVE-2024-3094Xz: malicious code in distributed sourcexz · Red Hat Enterprise Linux +1
- CVE-2024-30247Command Injection as root in NextCloudPi web panelnextcloudpi
- CVE-2024-29202JumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celeryjumpserver
- CVE-2024-29201JumpServer's insecure Ansible playbook validation leads to RCE in Celeryjumpserver
- CVE-2024-23538Apache Fineract: Under certain system configurations, the sqlSearch parameter was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database queries.Apache Software Foundation Apache Fineract
- CVE-2024-30502WordPress WP Travel Engine plugin <= 5.7.9 - Unauth. Blind SQL Injection vulnerabilityWP Travel Engine
- CVE-2024-30498WordPress CRM Perks Forms plugin <= 1.1.4 - Unauthenticated SQL Injection vulnerabilityCRM Perks Forms
- CVE-2024-30490WordPress ProfileGrid plugin <= 5.7.8 - SQL Injection vulnerabilityMetagauss ProfileGrid
- CVE-2024-30510WordPress Salon booking system plugin <= 9.5 - Arbitrary File Upload vulnerabilitySalon booking system
- CVE-2024-30500WordPress CubeWP plugin <= 1.1.12 - Arbitrary File Upload vulnerabilityCubeWP – All-in-One Dynamic Content Framework
- CVE-2023-6191SQLi in WebPDKSEgehan Security WebPDKS
- CVE-2024-2411MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modalstylemix MasterStudy LMS WordPress Plugin – for Online Cour…
- CVE-2024-2409MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Actionstylemix MasterStudy LMS WordPress Plugin – for Online Cour…
- CVE-2023-49231An authentication bypass vulnerability was found in Stilog Visual Planning 8.
- CVE-2023-49232An authentication bypass vulnerability was found in Stilog Visual Planning 8.
- CVE-2024-29640An issue in aliyundrive-webdav v.2.3.3 and before allows a remote attacker to execute arbitrary code via a crafted payload to the sid paramealiyundrive-webdav
- CVE-2024-29667SQL Injection vulnerability in Tongtianxing Technology Co., Ltd CMSV6 v.7.31.0.2 through v.7.31.0.3 allows a remote attacker to escalate pri
- CVE-2024-30622Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the mitInterface parameter from fromAddressNat function.
- CVE-2024-30628Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the page parameter from fromAddressNat function.
- CVE-2024-30630Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the time parameter from saveParentControlInfo function.
- CVE-2024-30635Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability located in the funcpara1 parameter in the formSetCfm function.
- CVE-2024-31032An issue in Huashi Private Cloud CDN Live Streaming Acceleration Server hgateway-sixport v.1.1.2 allows a remote attacker to execute arbitra
High 45
- CVE-2024-30431WordPress Mang Board WP plugin <= 1.8.0 - Reflected Cross Site Scripting (XSS) vulnerabilityHometory Mang Board WP
- CVE-2024-30435WordPress Nexter Blocks plugin <= 3.2.5 - Reflected Cross Site Scripting (XSS) vulnerabilityPOSIMYTH Nexter Blocks
- CVE-2024-30439WordPress Limit Attempts by BestWebSoft plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerabilityLimit Attempts by BestWebSoft
- CVE-2024-30441WordPress Combo Blocks plugin <= 2.2.74 - Reflected Cross Site Scripting (XSS) vulnerabilityPickPlugins Post Grid
- CVE-2024-30447WordPress Creative Image Slider plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerabilityCreative Solutions Creative Image Slider – Responsive Slide…
- CVE-2024-30449WordPress Booking Activities plugin <= 1.15.19 - Cross Site Scripting (XSS) vulnerabilityBooking Activities Team Booking Activities
- CVE-2024-30246Tuleap deleting or moving an artifact can delete values from unrelated artifactsEnalean tuleap
- CVE-2024-29904CodeIgniter4 Language class DoS VulnerabilityCodeIgniter4 · codeigniter4/framework
- CVE-2024-29900@electron/packager's build process memory potentially leaked into final executableelectron packager · @electron/packager
- CVE-2024-29890Remote code execution in datalens-uidatalens-tech datalens
- CVE-2024-23537Apache Fineract: Under certain circumstances, this vulnerability allowed users, without specific permissions, to escalate their privileges to any role.Apache Software Foundation Apache Fineract
- CVE-2024-23539Apache Fineract: Under certain system configurations, the sqlSearch parameter for specific endpoints was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database queries.Apache Software Foundation Apache Fineract
- CVE-2024-30506WordPress All In One Redirection plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerabilityVsourz Digital All In One Redirection
- CVE-2024-30504WordPress WP Travel Engine plugin <= 5.7.9 - SQL Injection vulnerabilityWP Travel Engine
- CVE-2024-30501WordPress Download Monitor theme <= 4.9.4 - Auth. SQL Injection vulnerabilityWPChill Download Monitor
- CVE-2024-30499WordPress CRM Perks Forms plugin <= 1.1.4 - SQL Injection vulnerabilityCRM Perks Forms
- CVE-2024-30497WordPress WP Responsive Tabs horizontal vertical and accordion Tabs plugin <= 1.1.17 - SQL Injection vulnerabilityI Thirteen Web Solution WP Responsive Tabs horizontal verti…
- CVE-2024-30496WordPress Element Pack Lite plugin <= 5.5.3 - SQL Injection vulnerabilityBdThemes Element Pack Elementor Addons
- CVE-2024-30495WordPress Falang multilanguage for WordPress plugin <= 1.3.47 - SQL Injection vulnerabilityFaboba Falang multilanguage
- CVE-2024-30494WordPress OSS Aliyun plugin <= 1.4.10 - SQL Injection vulnerability沈唁 OSS Aliyun
- CVE-2024-30491WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.8 - SQL Injection vulnerabilityMetagauss ProfileGrid
- CVE-2024-30488WordPress Zotpress plugin <= 7.3.7 - SQL Injection vulnerabilityKatie Zotpress
- CVE-2024-30487WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.1 - Broken Access Control vulnerabilitySonaar Music MP3 Audio Player for Music, Radio & Podcast by…
- CVE-2024-30486WordPress Media Library Folders plugin <= 8.1.7 - Auth. SQL Injection vulnerabilityMax Foundry Media Library Folders
- CVE-2024-30478WordPress Announcement & Notification Banner – Bulletin plugin <= 3.8.5 - SQL Injection vulnerabilityWordPress Announcement & Notification Banner Plugin – Bulle…
- CVE-2024-30428WordPress Contest Gallery plugin <= 24.0.3 - Reflected Cross Site Scripting (XSS) vulnerabilityWasiliy Strecker / ContestGallery developer Contest Gallery
- CVE-2022-47153WordPress Jobeleon theme <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerabilityWPJobBoard Jobeleon Theme
- CVE-2024-30503WordPress Mailster plugin <= 4.0.6 - Reflected Cross Site Scripting (XSS) vulnerabilityEverPress Mailster
- CVE-2024-2848Responsive <= 5.0.2 - Missing Authorization to HTML Injectioncyberchimps Responsive
- CVE-2024-3061HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.2 - Authenticated (Admin+) Local File Inclusionrealmag777 HUSKY – Products Filter Professional for WooComm…
- CVE-2023-52629sh: push-switch: Reorder cleanup operations to avoid use-after-free bugLinux
- CVE-2024-1872Button <= 1.1.27 - Authenticated (Contributor+) PHP Object Injection in button_shortcodeburgersoftware Button
- CVE-2024-0609WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Unauthenticated Stored Cross-Site Scriptingwedevs ERP: Complete HR, Accounting & CRM Suite with WooCom…
- CVE-2024-0913WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injectionwedevs ERP: Complete HR, Accounting & CRM Suite with WooCom…
- CVE-2024-27619Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow.
- CVE-2024-28405SEMCMS 4.8 is vulnerable to Incorrect Access Control.
- CVE-2024-28960An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto.
- CVE-2024-29686Server-side Template Injection (SSTI) vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary code via a crafted pwintercms/winter
- CVE-2024-30624Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the urls parameter from saveParentControlInfo function.
- CVE-2024-30625Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the entrys parameter from fromAddressNat function.
- CVE-2024-30626Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the schedEndTime parameter from setSchedWifi function.
- CVE-2024-30627Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the deviceId parameter from saveParentControlInfo function.
- CVE-2024-30634Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the mitInterface parameter in the fromAddressNat function.
- CVE-2024-30637Tenda F1202 v1.2.0.20(408) has a command injection vulnerablility in the formWriteFacMac function in the mac parameter.
- CVE-2024-30645Tenda AC15V1.0 V15.03.20_multi has a command injection vulnerability via the deviceName parameter.
Medium, low and unrated 89
- CVE-2024-30432WordPress B Slider plugin <= 1.1.12 - Cross Site Scripting (XSS) vulnerabilitybPlugins B Slider - Slider for your block editor
- CVE-2024-30433WordPress MultiVendorX Marketplace plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerabilityMultiVendorX WC Marketplace
- CVE-2024-30434WordPress WP-CRM System plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerabilityWP-CRM System
- CVE-2024-30436WordPress Collect.chat plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerabilityCollect.chat Collectchat
- CVE-2024-30437WordPress Webinar and Video Conference with Jitsi Meet plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerabilityWPPOOL Webinar and Video Conference with Jitsi Meet
- CVE-2024-30438WordPress Print Page block plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerabilitybPlugins Print Page block
- CVE-2024-30440WordPress Themify Event Post plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerabilityThemify Event Post
- CVE-2024-30442WordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerabilityBoldThemes Bold Page Builder
- CVE-2024-30443WordPress GS Testimonial Slider plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerabilityGS Plugins GS Testimonial Slider
- CVE-2024-30444WordPress WordPress Page Builder – Zion Builder plugin <= 3.6.9 - Cross Site Scripting (XSS) vulnerabilityzionbuilder.io WordPress Page Builder – Zion Builder
- CVE-2024-30445WordPress Web Icons plugin <= 1.0.0.10 - Cross Site Scripting (XSS) vulnerabilityGhozyLab Web Icons
- CVE-2024-30446WordPress CRM Perks Forms plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerabilityCRM Perks Forms
- CVE-2024-30448WordPress Slider by Supsystic plugin <= 1.8.10 - Cross Site Scripting (XSS) vulnerabilitySlider by Supsystic
- CVE-2024-30450WordPress OpenStreetMap for Gutenberg and WPBakery Page Builder plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerabilityStep-Byte-Service OpenStreetMap for Gutenberg and WPBakery…
- CVE-2024-30451WordPress Geo Controller plugin <= 8.6.4 - Cross Site Scripting (XSS) vulnerabilityINFINITUM FORM Geo Controller
- CVE-2024-30452WordPress Landing Page Builder plugin <= 1.5.1.7 - Cross Site Scripting (XSS) vulnerabilityPluginOps Landing Page Builder
- CVE-2024-30453WordPress Brave plugin <= 0.6.5 - Server Side Request Forgery (SSRF) vulnerabilityBrave Popup Builder
- CVE-2024-30455WordPress GamiPress plugin <= 6.8.5 - Cross Site Request Forgery (CSRF) vulnerabilityGamiPress
- CVE-2024-30460WordPress Tumult Hype Animations plugin <= 1.9.11 - Cross Site Request Forgery (CSRF) vulnerabilityTumult Hype Animations
- CVE-2024-30454WordPress WP SMS plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) vulnerabilityVeronaLabs WP SMS
- CVE-2024-25944Dell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability.Dell OpenManage Enterprise
- CVE-2024-30462WordPress HUSKY plugin <= 1.3.5.1 - Cross Site Request Forgery (CSRF) vulnerabilityrealmag777 HUSKY – Products Filter for WooCommerce
- CVE-2024-30463WordPress BEAR plugin <= 1.1.4.3 - Broken Access Control vulnerabilityrealmag777 BEAR
- CVE-2024-30468WordPress All-In-One Security (AIOS) – Security and Firewall plugin <= 5.2.6 - Cross Site Request Forgery (CSRF) vulnerabilityAll In One WP Security & Firewall Team All In One WP Securi…
- CVE-2024-30477WordPress Klarna Payments for WooCommerce plugin <= 3.2.4 - Broken Access Control vulnerabilityKlarna Payments for WooCommerce
- CVE-2024-30482WordPress Simple Revisions Delete plugin <= 1.5.3 - Cross Site Request Forgery (CSRF) vulnerabilityBrice CAPOBIANCO Simple Revisions Delete
- CVE-2024-30518WordPress Custom WooCommerce Checkout Fields Editor plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerabilityThemeLocation Custom WooCommerce Checkout Fields Editor
- CVE-2024-30521WordPress Landingi Landing Pages plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) vulnerabilityLandingi Landing Pages
- CVE-2024-30513WordPress ProfileGrid plugin <= 5.7.2 - Insecure Direct Object References (IDOR) vulnerabilityMetagauss ProfileGrid
- CVE-2024-30469WordPress Wholesale For WooCommerce plugin <= 2.3.0 - Unauthenticated Sensitive Data Exposure vulnerabilityWPExperts Wholesale For WooCommerce
- CVE-2024-30511WordPress FG PrestaShop to WooCommerce plugin <= 4.45.1 - Sensitive Data Exposure via Log File vulnerabilityFrédéric GILLES FG PrestaShop to WooCommerce
- CVE-2024-30514WordPress Paid Memberships Pro – Payfast Gateway Add On plugin <= 1.4.1 - Sensitive Data Exposure via Log File vulnerabilityPaid Memberships Pro – Payfast Gateway Add On
- CVE-2024-30492WordPress Export and Import Users and Customers plugin <= 2.5.2 - Path Traversal vulnerabilityWebToffee Import Export WordPress Users
- CVE-2024-29901@workos-inc/authkit-nextjs session replay vulnerabilityworkos authkit-nextjs · @workos-inc/authkit-nextjs
- CVE-2024-29893Uncontrolled Resource Consumption vulnerability in ArgoCD's repo serverargoproj argo-cd · github.com/argoproj/argo-cd/v2
- CVE-2024-29020JumpServer allows nn authorized attacker to get sensitive information in playbook files when playbook_id is leakedjumpserver
- CVE-2024-29024JumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionalityjumpserver
- CVE-2024-3081EasyCorp EasyAdmin Autocomplete autocomplete.js cross site scriptingEasyCorp EasyAdmin
- CVE-2024-28867Swift Prometheus un-sanitized metric name or labels can be used to take over exported metricsswift-server swift-prometheus
- CVE-2024-30508WordPress WP Hotel Booking plugin <= 2.0.9.2 - Broken Access Control vulnerabilityThimPress WP Hotel Booking
- CVE-2024-30507WordPress Molongui Authorship plugin <= 4.7.7 - Insecure Direct Object References (IDOR) vulnerabilityMolongui
- CVE-2024-30505WordPress Church Admin plugin <= 4.1.18 - Broken Access Control vulnerabilityandy_moyle Church Admin
- CVE-2024-30493WordPress Church Admin plugin <= 4.1.7 - Cross Site Request Forgery (CSRF) vulnerabilityandy_moyle Church Admin
- CVE-2024-30430WordPress FluentCRM plugin <= 2.8.44 - Cross Site Scripting (XSS) vulnerabilityWP Email Newsletter Team - FluentCRM Fluent CRM
- CVE-2024-30429WordPress wp-forecast plugin <= 9.2 - Cross Site Scripting (XSS) vulnerabilityHans Matzen wp-forecast
- CVE-2024-30427WordPress Spiffy Calendar plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerabilitySpiffy Plugins Spiffy Calendar
- CVE-2024-30426WordPress Hash Elements plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerabilityHashThemes Hash Elements
- CVE-2024-30425WordPress Beaver Builder plugin <= 2.7.4.4 - Cross Site Scripting (XSS) vulnerabilityBeaver Builder
- CVE-2024-30423WordPress Better Elementor Addons plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerabilityBetterAddons Better Elementor Addons
- CVE-2024-30456WordPress WPCS – WordPress Currency Switcher Professional plugin <=1.2.0.1 - Cross Site Request Forgery (CSRF) vulnerabilityrealmag777 WPCS
- CVE-2024-30457WordPress MDTF plugin <= 1.3.3.1 - Cross Site Request Forgery (CSRF) vulnerabilityrealmag777 WordPress Meta Data and Taxonomies Filter
- CVE-2024-30458WordPress FOX – Currency Switcher Professional for WooCommerce plugin <= 1.4.1.7 - Cross Site Request Forgery (CSRF) vulnerabilityrealmag777 WOOCS – WooCommerce Currency Switcher
- CVE-2024-30483WordPress Sponsors plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerabilitySimple Sponsorships Sponsors
- CVE-2024-30519WordPress Lordicon Animated Icons plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerabilityLordicon Animated Icons
- CVE-2024-30520WordPress Carousel Anything For WPBakery Page Builder plugin <= 2.1 - Cross Site Scripting (XSS) vulnerabilityLabib Ahmed Carousel Anything For WPBakery Page Builder
- CVE-2024-3078Qdrant Full Snapshot REST API snapshots.rs path traversalQdrant
- CVE-2023-6047Reflected XSS in Algoritim E-commerce SoftwareAlgoritim E-commerce Software
- CVE-2024-23449Elasticsearch Uncaught ExceptionElasticsearch · org.elasticsearch:elasticsearch
- CVE-2024-2250130+ Widgets | Best Addons For Elementor – FREE <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingXpro Addons — 140+ Widgets for Elementor
- CVE-2024-2280Better Elementor Addons <= 1.4.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget linkswpdive Better Addons for Elementor
- CVE-2024-0956WP ERP <= 1.13.0 - Authenticated (AccountingManager+) SQL Injectionwedevs ERP: Complete HR, Accounting & CRM Suite with WooCom…
- CVE-2024-2964Pocket News Generator <= 0.2.0 - Cross-Site Request Forgery to Settings Updatemarubon Pocket News Generator
- CVE-2024-0608WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (Subscriber+) SQL Injectionwedevs ERP: Complete HR, Accounting & CRM Suite with WooCom…
- CVE-2024-2108Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Authenticated (Author+) Stored Cross-Site Scriptingkstover Ninja Forms – The Contact Form Builder That Grows W…
- CVE-2024-2476OceanWP <= 3.5.4 - Missing Authorization to Sensitive Information Exposure via Limited Local File InclusionOceanWP
- CVE-2024-1858Lightbox slider – Responsive Lightbox Gallery <= 1.9.9 - Authenticated (Contributor+) PHP Object Injectionweblizar Lightbox slider – Responsive Lightbox Gallery
- CVE-2024-2116Christmas Greetings <= 1.2.5 - Reflected Cross-Site Scriptingtechnocrackers Christmas Greetings
- CVE-2024-2113Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Cross-Site Request Forgery to Publicly Accessible Form Submission Exportkstover Ninja Forms – The Contact Form Builder That Grows W…
- CVE-2024-2970News Wall <= 1.1.0 - Cross-Site Request Forgery to Plugin Settings Updatetsina News Wall
- CVE-2024-2969WP-Eggdrop <= 0.1 - Cross-Site Request Forgery to Settings Updatebackie WP-Eggdrop
- CVE-2024-2963Pocket News Generator <= 0.2.0 - Authenticated (Admin+) Stored Cross-Site Scriptingmarubon Pocket News Generator
- CVE-2024-2968WP-Eggdrop <= 0.1 - Authenticated (Admin+) Stored Cross-Site Scriptingbackie WP-Eggdrop
- CVE-2024-2844Easy Appointments <= 3.11.18 - Insufficient Authorizationeasyappointments Easy Appointments
- CVE-2024-2842Easy Appointments <= 3.11.18 - Authenticated (Contributor+) Stored Cross-Site Scriptingeasyappointments Easy Appointments
- CVE-2024-2936Sydney Toolbox <= 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via _idsmub Sydney Toolbox
- CVE-2024-3077Bluetooth: integer underflow in gatt_find_info_rspzephyrproject-rtos Zephyr
- CVE-2024-1729Timing Attack Vulnerability in gradio-app/gradiogradio-app/gradio · gradio
- CVE-2024-2841Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scriptingthemeisle Otter Blocks – Gutenberg Blocks, Page Builder for…
- CVE-2024-2475Media Library Assistant <= 3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery Shortcodedglingren Media Library Assistant
- CVE-2023-49234An XML external entity (XXE) vulnerability was found in Stilog Visual Planning 8.
- CVE-2024-30613Tenda AC15 v15.03.05.18 has a stack overflow vulnerability in the time parameter from the setSmartPowerManagement function.
- CVE-2024-30623Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the page parameter from fromDhcpListClient function.
- CVE-2024-30629Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the list1 parameter from fromDhcpListClient function.
- CVE-2024-30631Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the schedStartTime parameter from setSchedWifi function.
- CVE-2024-30632Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the security_5g parameter from formWifiBasicSet function.
- CVE-2024-30633Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the security parameter from the formWifiBasicSet function.
- CVE-2024-30636Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the PPPOEPassword parameter in the formQuickIndex function.
- CVE-2024-30638Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the entrys parameter in the fromAddressNat function.
- CVE-2024-30639Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability in the page parameter of fromAddressNat function.