CVEs published April 4, 2024
139 CVEs were published on April 4, 2024: 9 critical, 56 high. 2 are now in CISA KEV.
- Published
- 139
- Critical
- 9
- High
- 56
- Medium
- 55
- Low
- 4
- Unrated
- 15
- Now in CISA KEV
- 2
- Fix available
- 53
Most affected products
- Linux
- 32
- Esri Portal for ArcGIS
- 10
- Ivanti Connect Secure · Ivanti Policy Secure
- 4
- AlexxIT go2rtc · github.com/AlexxIT/go2rtc
- 3
- Apache Software Foundation Apache CloudStack
- 3
- Apache Software Foundation Apache HTTP Server
- 3
- SourceCodester Computer Laboratory Management System
- 3
- D-Link DNS-320L · D-Link DNS-325 +2
- 2
- Dassault Systèmes eDrawings
- 2
- envoyproxy envoy
- 2
Critical 9
- CVE-2024-27981A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.0.28 and eaUbiquiti UniFi Network Application
- CVE-2024-25693Portal for ArcGIS has a directory traversal vulnerability.Esri Portal for ArcGIS
- CVE-2024-26800tls: fix use-after-free on failed backlog decryptionLinux
- CVE-2024-26782mptcp: fix double-free on socket dismantleLinux
- CVE-2024-29006Apache CloudStack: x-forwarded-for HTTP header parsed by defaultApache Software Foundation Apache CloudStack
- CVE-2024-2692SiYuan 3.0.3 - RCE via Server Side XSSSiYuan
- CVE-2024-3272D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentialsD-Link DNS-320L · D-Link DNS-325 +2
- CVE-2023-36645SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow component in customer funct
- CVE-2024-29375CSV Injection vulnerability in Addactis IBNRS v.3.10.3.107 allows a remote attacker to execute arbitrary code via a crafted .ibnrs file to t
High 56
- CVE-2024-31210PHP file upload bypass via Plugin installerwordpress-develop
- CVE-2024-21894A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malIvanti Connect Secure · Ivanti Policy Secure
- CVE-2024-31206Use of Unencrypted HTTP Request in dectalk-ttsJstnMcBrd dectalk-tts · dectalk-tts
- CVE-2023-45288HTTP/2 CONTINUATION flood in net/httpGo standard library net/http · golang.org/x/net/http2 +3
- CVE-2024-30264typebot.io: `GHSL-2024-040`baptisteArno typebot.io
- CVE-2024-22053A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an unauthenticated malIvanti Connect Secure · Ivanti Policy Secure
- CVE-2024-22052A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenIvanti Connect Secure · Ivanti Policy Secure
- CVE-2024-27316Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation framesApache Software Foundation Apache HTTP Server
- CVE-2023-38709Apache HTTP Server: HTTP response splittingApache Software Foundation Apache HTTP Server
- CVE-2024-30249Cloudburst Network DoS in RakNet connection handlingCloudburstMC Network
- CVE-2024-25007Ericsson Network Manager - Improper Neutralization of Formula Elements VulnerabilityEricsson Network Manager
- CVE-2024-29192GHSL-2023-206 gotortc Cross-Site Request Forgery vulnerabilityAlexxIT go2rtc · github.com/AlexxIT/go2rtc
- CVE-2024-25699Portal for ArcGIS has an invalid authentication vulnerabilityEsri Portal for ArcGIS
- CVE-2024-25695concatenated errors resulting in cross site scripting and frame injection issues.Esri Portal for ArcGIS
- CVE-2024-28787IBM Security Verify Access information disclosureIBM Security Verify Access Container · IBM Security Veri… +1
- CVE-2023-3454Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary codBrocade Fabric OS
- CVE-2024-30263The PDF Viewer macro can be used to view PDF attachments with restricted accessxwikisas macro-pdfviewer
- CVE-2024-3299Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the SLDDRW and SLDPRT file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024Dassault Systèmes eDrawings
- CVE-2024-3298Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the DWG and DXF file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024Dassault Systèmes eDrawings
- CVE-2024-3116Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4pgadmin.org pgAdmin · pgadmin4
- CVE-2024-30250In Astro-Shield, setting a correct `integrity` attribute to injected code allows to bypass the allow-listskindspells astro-shield · @kindspells/astro-shield
- CVE-2024-28871Excessive CPU used on malformed trafficOISF libhtp
- CVE-2024-27919HTTP/2: memory exhaustion due to CONTINUATION frame floodenvoyproxy envoy
- CVE-2024-22189QUIC's Connection ID Mechanism vulnerable to Memory Exhaustion Attackquic-go · github.com/quic-go/quic-go
- CVE-2024-31082Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmapxorg-server · Red Hat Enterprise Linux
- CVE-2024-31081Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicexorg-server · Red Hat Enterprise Linux 6 Extended Lifecy… +1
- CVE-2024-31080Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsxorg-server · Red Hat Enterprise Linux 6 Extended Lifecy… +1
- CVE-2024-2700Quarkus-core: leak of local configuration properties into quarkus applicationsquarkus-core · HawtIO 4.0.0 for Red Hat build of Apache… +13
- CVE-2024-2759Improper access control in Apaczka plugin for PrestaShopAlsendo Sp. z o. o. Apaczka
- CVE-2024-26809netfilter: nft_set_pipapo: release elements in clone only from destroy pathLinux
- CVE-2024-26808netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechainLinux
- CVE-2024-26807spi: cadence-qspi: fix pointer reference in runtime PM hooksLinux
- CVE-2024-26804net: ip_tunnel: prevent perpetual headroom growthLinux
- CVE-2024-26802stmmac: Clear variable when destroying workqueueLinux
- CVE-2024-26801Bluetooth: Avoid potential use-after-free in hci_error_resetLinux
- CVE-2024-26799ASoC: qcom: Fix uninitialized pointer dmactlLinux
- CVE-2024-26797drm/amd/display: Prevent potential buffer overflow in map_hw_resourcesLinux
- CVE-2024-26795riscv: Sparse-Memory/vmemmap out-of-bounds fixLinux
- CVE-2024-26793gtp: fix use-after-free and null-ptr-deref in gtp_newlink()Linux
- CVE-2024-26792btrfs: fix double free of anonymous device after snapshot creation failureLinux
- CVE-2024-26789crypto: arm64/neonbs - fix out-of-bounds access on short inputLinux
- CVE-2024-26786iommufd: Fix iopt_access_list_id overwrite bugLinux
- CVE-2024-29007Apache CloudStack: When downloading templates or ISOs, the management server and SSVM follow HTTP redirects with potentially dangerous consequencesApache Software Foundation Apache CloudStack
- CVE-2024-2008Modal Popup Box – Popup Builder, Show Offers And News in Popup <= 1.5.2 - Authenticated (Contributor+) PHP Object Injection in awl_modal_popup_box_shortcodeawordpresslife Modal Popup Box
- CVE-2024-3022BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.87 - Authenticated (Admin+) Arbitrary File Uploadreputeinfosystems Appointment Booking Calendar Plugin and S…
- CVE-2024-3273D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injectionD-Link DNS-320L · D-Link DNS-325 +2
- CVE-2024-25568OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to execute arbitrary OSELECOM CO. WRC-X3200GST3-B · ELECOM CO. WRC-G01-W +1
- CVE-2024-29167SVR-116 firmware version 1.6.0.30028871 allows a remote authenticated attacker with an administrative privilege to execute arbitrary OS commSEEnergy SVR-116
- CVE-2020-25730Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate priv
- CVE-2023-36643Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the online shop via oordershow compon
- CVE-2023-36644Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations from the online shop via the
- CVE-2024-27575INOTEC Sicherheitstechnik WebServer CPS220/64 3.3.19 allows a remote attacker to read arbitrary files via absolute path traversal, such as w
- CVE-2024-29387projeqtor up to 11.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /view/print.php.
- CVE-2024-30565An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php.
- CVE-2024-31025SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component.
- CVE-2024-31498Yubico ykman-gui (aka YubiKey Manager GUI) before 1.2.6 on Windows, when Edge is not used, allows privilege escalation because browser windo
Medium, low and unrated 74
- CVE-2024-31212SQL injection in index_chart_data actioninstantsoft icms2
- CVE-2024-31211Remote Code Execution in `WP_HTML_Token`wordpress-develop
- CVE-2024-29049Microsoft Edge (Chromium-based) Webview2 Spoofing VulnerabilityMicrosoft Edge (Chromium-based) Extended Stable · Microsoft…
- CVE-2024-29981Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft Edge
- CVE-2024-3316SourceCodester Computer Laboratory Management System view_category.php sql injectionSourceCodester Computer Laboratory Management System
- CVE-2024-3315SourceCodester Computer Laboratory Management System user.php sql injectionSourceCodester Computer Laboratory Management System
- CVE-2024-3314SourceCodester Computer Laboratory Management System Users.php sql injectionSourceCodester Computer Laboratory Management System
- CVE-2024-31204mailcow Cross-site Scripting Vulnerability via Exception Handlermailcow-dockerized
- CVE-2024-3311Dreamer CMS ThemesController.java ZipUtils.unZipFiles path traversalDreamer CMS
- CVE-2024-30270mailcow Path Traversal and Arbitrary Code Execution Vulnerabilitymailcow-dockerized
- CVE-2024-22023An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unautIvanti Connect Secure · Ivanti Policy Secure
- CVE-2024-30255HTTP/2: CPU exhaustion due to CONTINUATION frame floodenvoyproxy envoy
- CVE-2024-24795Apache HTTP Server: HTTP Response Splitting in multiple modulesApache Software Foundation Apache HTTP Server
- CVE-2024-30254Directory traversal allowing overwriting arbitrary filesJCWasmx86 mesonlsp
- CVE-2024-30252GitHub Security Lab (GHSL) Vulnerability Report, livemarks: `GHSL-2024-015`nt1m livemarks
- CVE-2024-29193GHSL-2023-207 gotortc DOM-based Cross-site Scripting vulnerabilityAlexxIT go2rtc · github.com/AlexxIT/go2rtc
- CVE-2024-25705Cross site scripting issue in embed widgetEsri Portal for ArcGIS
- CVE-2024-25706HTMLi at createFolder Content InjectionEsri Portal for ArcGIS
- CVE-2024-2660Vault TLS Cert Auth Method Did Not Correctly Validate OCSP ResponsesHashiCorp Vault · github.com/hashicorp/vault
- CVE-2024-25709Self-XSS style in move item dialogEsri Portal for ArcGIS
- CVE-2024-25700Persistent XSS in URL added to a shared mapEsri ArcGIS Enterprise Builder
- CVE-2024-25698Reflected XSS in Portal for ArcGISEsri Portal for ArcGIS
- CVE-2024-25696Stored XSS in Portal for ArcGISEsri Portal for ArcGIS
- CVE-2024-25697Stored XSS in Portal for ArcGISEsri Portal for ArcGIS
- CVE-2024-25690HTML injection in ArcGIS Web AppBuilderEsri ArcGIS Enterprise Web App Builder
- CVE-2024-25708Persistent XSS when creating new application using Web App BuilderEsri ArcGIS Enterprise Web App Builder
- CVE-2024-25692BUG-000154722 - Cross-site request forgery (CSRF) issue in Portal for ArcGISEsri Portal for ArcGIS
- CVE-2024-27268IBM WebSphere Application Server Liberty denial of serviceIBM WebSphere Application Server Liberty
- CVE-2024-31215Mobile Security Framework (MobSF) vulnerable to Server-Side Request Forgery (SSRF) in firebase database checkMobile-Security-Framework-MobSF · mobsf
- CVE-2024-31209OpenID Connect client Atom Exhaustion in provider configuration worker ets table locationerlef oidcc
- CVE-2024-31207Vite's `server.fs.deny` did not deny requests for patterns with directoriesvitejs vite · vite
- CVE-2024-30266Wasmtime vulnerable to panic when using a dropped extenref-typed element segmentbytecodealliance wasmtime · wasmtime
- CVE-2024-2103Inclusion of Undocumented FeaturesSchweitzer Engineering Laboratories SEL-700BT Motor Bus… +4
- CVE-2024-30260Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipelinenodejs undici · undici
- CVE-2024-30261Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrectnodejs undici · undici
- CVE-2024-29191GHSL-2023-205 gotortc DOM-based Cross-site Scripting vulnerabilityAlexxIT go2rtc · github.com/AlexxIT/go2rtc
- CVE-2024-29182Collabora Online Stored Cross-Site-Scripting vulnerability via tooltipCollaboraOnline online
- CVE-2024-28182Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usagenghttp2
- CVE-2024-3250It was discovered that Canonical's Pebble service manager read-file API and the associated pebble pull command, before v1.10.2, allowed unprCanonical Pebble · github.com/canonical/pebble
- CVE-2024-3296Rust-openssl: timing based side-channel can lead to a bleichenbacher style attackrust-openssl · Red Hat Enterprise Linux
- CVE-2024-3262Information exposure vulnerability in Request Tracker (RT)Best Practical Solutions Request Tracker
- CVE-2024-20800Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26806spi: cadence-qspi: remove system-wide suspend helper calls from runtime PM hooksLinux
- CVE-2024-26805netlink: Fix kernel-infoleak-after-free in __skb_datagram_iterLinux
- CVE-2024-26803net: veth: clear GRO when clearing XDP even when downLinux
- CVE-2024-26798fbcon: always restore the old font data in fbcon_do_set_font()Linux
- CVE-2024-26796drivers: perf: ctr_get_width function for legacy is not definedLinux
- CVE-2024-26791btrfs: dev-replace: properly validate device namesLinux
- CVE-2024-26790dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned readLinux
- CVE-2024-26788dmaengine: fsl-qdma: init irq after reg initializationLinux
- CVE-2024-26787mmc: mmci: stm32: fix DMA API overlapping mappings warningLinux
- CVE-2024-26785iommufd: Fix protection fault in iommufd_test_syz_conv_iovaLinux
- CVE-2024-26784pmdomain: arm: Fix NULL dereference on scmi_perf_domain removalLinux
- CVE-2024-26783mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone indexLinux
- CVE-2024-26781mptcp: fix possible deadlock in subflow diagLinux
- CVE-2024-26780af_unix: Fix task hung while purging oob_skb in GC.Linux
- CVE-2024-26750af_unix: Drop oob_skb ref before purging queue in GC.Linux
- CVE-2024-26746dmaengine: idxd: Ensure safe user copy of completion recordLinux
- CVE-2024-26745powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOVLinux
- CVE-2024-29008Apache CloudStack: The extraconfig feature can be abused to load hypervisor resources on a VM instanceApache Software Foundation Apache CloudStack
- CVE-2024-1418CGC Maintenance Mode <= 1.2 - Sensitive Information Exposuremordauk CGC Maintenance Mode
- CVE-2024-2919Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via CountUp Widgetstellarwp Kadence Blocks — Page Builder Toolkit for Gutenbe…
- CVE-2024-2830WordPress Tag and Category Manager – AI Autotagger <= 3.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodestevejburge Tag, Category, and Taxonomy Manager – AI Autota…
- CVE-2024-2803ElementsKit Elementor addons <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widgetroxnor ElementsKit Elementor Addons – Advanced Widgets & Te…
- CVE-2024-3030Announce from the Dashboard <= 1.5.2 - Authenticated (Admin+) Stored Cross-Site Scriptinggqevu6bsiz Announce from the Dashboard
- CVE-2024-2868ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layoutdevitemsllc ShopLentor – All-in-One WooCommerce Growth & St…
- CVE-2024-3274D-Link DNS-320L/DNS-320LW/DNS-327L HTTP GET Request info.cgi information disclosureD-Link DNS-320L · D-Link DNS-320LW +1
- CVE-2024-29225ELECOM wireless LAN routers allow a network-adjacent unauthenticated attacker to obtain the configuration file containing sensitive informatELECOM CO. WRC-X3200GST3-B · ELECOM CO. WRC-G01-W +3
- CVE-2024-26258OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials to execute arbitrary OELECOM CO. WRC-X3200GST3-B · ELECOM CO. WRC-G01-W +5
- CVE-2023-25199A reflected cross-site scripting (XSS) vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 that enables a remote
- CVE-2023-25200An HTML injection vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 that enables a remote attacker to render m
- CVE-2024-25503Cross Site Scripting (XSS) vulnerability in Advanced REST Client v.17.0.9 allows a remote attacker to execute arbitrary code and obtain sens
- CVE-2024-28520File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an at
- CVE-2024-29386projeqtor up to 11.2.0 was discovered to contain a SQL injection vulnerability via the component /view/criticalResourceExport.php.