# CVEs published 2024-04-04

139 CVEs were published on April 4, 2024: 9 critical, 56 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2024-31212](https://cve.now/CVE-2024-31212.md): SQL injection in index\_chart\_data action (CVSS 6.7, instantsoft icms2)
- [CVE-2024-31211](https://cve.now/CVE-2024-31211.md): Remote Code Execution in \`WP\_HTML\_Token\` (CVSS 5.5, wordpress-develop)
- [CVE-2024-31210](https://cve.now/CVE-2024-31210.md): PHP file upload bypass via Plugin installer (CVSS 7.7, wordpress-develop)
- [CVE-2024-27981](https://cve.now/CVE-2024-27981.md): A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.0.28 and ea (CVSS 9.8, Ubiquiti UniFi Network Application)
- [CVE-2024-21894](https://cve.now/CVE-2024-21894.md): A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated mal (CVSS 8.2, Ivanti Connect Secure · Ivanti Policy Secure)
- [CVE-2024-31206](https://cve.now/CVE-2024-31206.md): Use of Unencrypted HTTP Request in dectalk-tts (CVSS 8.2, JstnMcBrd dectalk-tts · dectalk-tts)
- [CVE-2024-29049](https://cve.now/CVE-2024-29049.md): Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability (CVSS 4.1, Microsoft Edge (Chromium-based) Extended Stable · Microsoft…)
- [CVE-2024-29981](https://cve.now/CVE-2024-29981.md): Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 4.3, Microsoft Edge)
- [CVE-2024-3316](https://cve.now/CVE-2024-3316.md): SourceCodester Computer Laboratory Management System view\_category.php sql injection (CVSS 6.3, SourceCodester Computer Laboratory Management System)
- [CVE-2024-3315](https://cve.now/CVE-2024-3315.md): SourceCodester Computer Laboratory Management System user.php sql injection (CVSS 6.3, SourceCodester Computer Laboratory Management System)
- [CVE-2024-3314](https://cve.now/CVE-2024-3314.md): SourceCodester Computer Laboratory Management System Users.php sql injection (CVSS 6.3, SourceCodester Computer Laboratory Management System)
- [CVE-2024-31204](https://cve.now/CVE-2024-31204.md): mailcow Cross-site Scripting Vulnerability via Exception Handler (CVSS 6.1, mailcow-dockerized)
- [CVE-2023-45288](https://cve.now/CVE-2023-45288.md): HTTP/2 CONTINUATION flood in net/http (CVSS 7.5, Go standard library net/http · golang.org/x/net/http2 +3)
- [CVE-2024-3311](https://cve.now/CVE-2024-3311.md): Dreamer CMS ThemesController.java ZipUtils.unZipFiles path traversal (CVSS 6.3, Dreamer CMS)
- [CVE-2024-30270](https://cve.now/CVE-2024-30270.md): mailcow Path Traversal and Arbitrary Code Execution Vulnerability (CVSS 6.2, mailcow-dockerized)
- [CVE-2024-30264](https://cve.now/CVE-2024-30264.md): typebot.io: \`GHSL-2024-040\` (CVSS 8.1, baptisteArno typebot.io)
- [CVE-2024-22053](https://cve.now/CVE-2024-22053.md): A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an unauthenticated mal (CVSS 8.2, Ivanti Connect Secure · Ivanti Policy Secure)
- [CVE-2024-22052](https://cve.now/CVE-2024-22052.md): A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthen (CVSS 7.5, Ivanti Connect Secure · Ivanti Policy Secure)
- [CVE-2024-22023](https://cve.now/CVE-2024-22023.md): An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unaut (CVSS 5.3, Ivanti Connect Secure · Ivanti Policy Secure)
- [CVE-2024-30255](https://cve.now/CVE-2024-30255.md): HTTP/2: CPU exhaustion due to CONTINUATION frame flood (CVSS 5.3, envoyproxy envoy)
- [CVE-2024-27316](https://cve.now/CVE-2024-27316.md): Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames (CVSS 7.5, Apache Software Foundation Apache HTTP Server)
- [CVE-2024-24795](https://cve.now/CVE-2024-24795.md): Apache HTTP Server: HTTP Response Splitting in multiple modules (CVSS 6.3, Apache Software Foundation Apache HTTP Server)
- [CVE-2023-38709](https://cve.now/CVE-2023-38709.md): Apache HTTP Server: HTTP response splitting (CVSS 7.3, Apache Software Foundation Apache HTTP Server)
- [CVE-2024-30254](https://cve.now/CVE-2024-30254.md): Directory traversal allowing overwriting arbitrary files (CVSS 5.8, JCWasmx86 mesonlsp)
- [CVE-2024-30252](https://cve.now/CVE-2024-30252.md): GitHub Security Lab (GHSL) Vulnerability Report, livemarks: \`GHSL-2024-015\` (CVSS 2.6, nt1m livemarks)
- [CVE-2024-30249](https://cve.now/CVE-2024-30249.md): Cloudburst Network DoS in RakNet connection handling (CVSS 8.6, CloudburstMC Network)
- [CVE-2024-29193](https://cve.now/CVE-2024-29193.md): GHSL-2023-207 gotortc DOM-based Cross-site Scripting vulnerability (CVSS 6.1, AlexxIT go2rtc · github.com/AlexxIT/go2rtc)
- [CVE-2024-25007](https://cve.now/CVE-2024-25007.md): Ericsson Network Manager - Improper Neutralization of Formula Elements Vulnerability (CVSS 7.1, Ericsson Network Manager)
- [CVE-2024-29192](https://cve.now/CVE-2024-29192.md): GHSL-2023-206 gotortc Cross-Site Request Forgery vulnerability (CVSS 8.8, AlexxIT go2rtc · github.com/AlexxIT/go2rtc)
- [CVE-2024-25699](https://cve.now/CVE-2024-25699.md): Portal for ArcGIS has an invalid authentication vulnerability (CVSS 8.5, Esri Portal for ArcGIS)
- [CVE-2024-25705](https://cve.now/CVE-2024-25705.md): Cross site scripting issue in embed widget (CVSS 5.4, Esri Portal for ArcGIS)
- [CVE-2024-25706](https://cve.now/CVE-2024-25706.md): HTMLi at createFolder Content Injection (CVSS 6.1, Esri Portal for ArcGIS)
- [CVE-2024-2660](https://cve.now/CVE-2024-2660.md): Vault TLS Cert Auth Method Did Not Correctly Validate OCSP Responses (CVSS 6.4, HashiCorp Vault · github.com/hashicorp/vault)
- [CVE-2024-25709](https://cve.now/CVE-2024-25709.md): Self-XSS style in move item dialog (CVSS 6.1, Esri Portal for ArcGIS)
- [CVE-2024-25700](https://cve.now/CVE-2024-25700.md): Persistent XSS in URL added to a shared map (CVSS 4.8, Esri ArcGIS Enterprise Builder)
- [CVE-2024-25698](https://cve.now/CVE-2024-25698.md): Reflected XSS in Portal for ArcGIS (CVSS 6.1, Esri Portal for ArcGIS)
- [CVE-2024-25693](https://cve.now/CVE-2024-25693.md): Portal for ArcGIS has a directory traversal vulnerability. (CVSS 9.9, Esri Portal for ArcGIS)
- [CVE-2024-25695](https://cve.now/CVE-2024-25695.md): concatenated errors resulting in cross site scripting and frame injection issues. (CVSS 7.2, Esri Portal for ArcGIS)
- [CVE-2024-25696](https://cve.now/CVE-2024-25696.md): Stored XSS in Portal for ArcGIS (CVSS 4.8, Esri Portal for ArcGIS)
- [CVE-2024-25697](https://cve.now/CVE-2024-25697.md): Stored XSS in Portal for ArcGIS (CVSS 5.4, Esri Portal for ArcGIS)
- [CVE-2024-25690](https://cve.now/CVE-2024-25690.md): HTML injection in ArcGIS Web AppBuilder (CVSS 4.7, Esri ArcGIS Enterprise Web App Builder)
- [CVE-2024-25708](https://cve.now/CVE-2024-25708.md): Persistent XSS when creating new application using Web App Builder (CVSS 4.8, Esri ArcGIS Enterprise Web App Builder)
- [CVE-2024-25692](https://cve.now/CVE-2024-25692.md): BUG-000154722 - Cross-site request forgery (CSRF) issue in Portal for ArcGIS (CVSS 5.4, Esri Portal for ArcGIS)
- [CVE-2024-28787](https://cve.now/CVE-2024-28787.md): IBM Security Verify Access information disclosure (CVSS 8.7, IBM Security Verify Access Container · IBM Security Veri… +1)
- [CVE-2024-27268](https://cve.now/CVE-2024-27268.md): IBM WebSphere Application Server Liberty denial of service (CVSS 5.9, IBM WebSphere Application Server Liberty)
- [CVE-2023-3454](https://cve.now/CVE-2023-3454.md): Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary cod (CVSS 8.6, Brocade Fabric OS)
- [CVE-2024-30263](https://cve.now/CVE-2024-30263.md): The PDF Viewer macro can be used to view PDF attachments with restricted access (CVSS 7.7, xwikisas macro-pdfviewer)
- [CVE-2024-31215](https://cve.now/CVE-2024-31215.md): Mobile Security Framework (MobSF) vulnerable to Server-Side Request Forgery (SSRF) in firebase database check (CVSS 6.3, Mobile-Security-Framework-MobSF · mobsf)
- [CVE-2024-31209](https://cve.now/CVE-2024-31209.md): OpenID Connect client Atom Exhaustion in provider configuration worker ets table location (CVSS 5.3, erlef oidcc)
- [CVE-2024-31207](https://cve.now/CVE-2024-31207.md): Vite's \`server.fs.deny\` did not deny requests for patterns with directories (CVSS 5.9, vitejs vite · vite)
- [CVE-2024-30266](https://cve.now/CVE-2024-30266.md): Wasmtime vulnerable to panic when using a dropped extenref-typed element segment (CVSS 3.3, bytecodealliance wasmtime · wasmtime)
- [CVE-2024-2103](https://cve.now/CVE-2024-2103.md): Inclusion of Undocumented Features (CVSS 6.5, Schweitzer Engineering Laboratories SEL-700BT Motor Bus… +4)
- [CVE-2024-30260](https://cve.now/CVE-2024-30260.md): Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline (CVSS 3.9, nodejs undici · undici)
- [CVE-2024-3299](https://cve.now/CVE-2024-3299.md): Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the SLDDRW and SLDPRT file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024 (CVSS 7.8, Dassault Systèmes eDrawings)
- [CVE-2024-3298](https://cve.now/CVE-2024-3298.md): Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the DWG and DXF file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024 (CVSS 7.8, Dassault Systèmes eDrawings)
- [CVE-2024-30261](https://cve.now/CVE-2024-30261.md): Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect (CVSS 2.6, nodejs undici · undici)
- [CVE-2024-3116](https://cve.now/CVE-2024-3116.md): Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4 (CVSS 7.4, pgadmin.org pgAdmin · pgadmin4)
- [CVE-2024-30250](https://cve.now/CVE-2024-30250.md): In Astro-Shield, setting a correct \`integrity\` attribute to injected code allows to bypass the allow-lists (CVSS 7.5, kindspells astro-shield · @kindspells/astro-shield)
- [CVE-2024-29191](https://cve.now/CVE-2024-29191.md): GHSL-2023-205 gotortc DOM-based Cross-site Scripting vulnerability (CVSS 6.1, AlexxIT go2rtc · github.com/AlexxIT/go2rtc)
- [CVE-2024-29182](https://cve.now/CVE-2024-29182.md): Collabora Online Stored Cross-Site-Scripting vulnerability via tooltip (CVSS 6.1, CollaboraOnline online)
- [CVE-2024-28871](https://cve.now/CVE-2024-28871.md): Excessive CPU used on malformed traffic (CVSS 7.5, OISF libhtp)
- [CVE-2024-28182](https://cve.now/CVE-2024-28182.md): Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage (CVSS 5.3, nghttp2)
- [CVE-2024-27919](https://cve.now/CVE-2024-27919.md): HTTP/2: memory exhaustion due to CONTINUATION frame flood (CVSS 7.5, envoyproxy envoy)
- [CVE-2024-3250](https://cve.now/CVE-2024-3250.md): It was discovered that Canonical's Pebble service manager read-file API and the associated pebble pull command, before v1.10.2, allowed unpr (CVSS 6.5, Canonical Pebble · github.com/canonical/pebble)
- [CVE-2024-22189](https://cve.now/CVE-2024-22189.md): QUIC's Connection ID Mechanism vulnerable to Memory Exhaustion Attack (CVSS 7.5, quic-go · github.com/quic-go/quic-go)
- [CVE-2024-31082](https://cve.now/CVE-2024-31082.md): Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap (CVSS 7.3, xorg-server · Red Hat Enterprise Linux)
- [CVE-2024-31081](https://cve.now/CVE-2024-31081.md): Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice (CVSS 7.3, xorg-server · Red Hat Enterprise Linux 6 Extended Lifecy… +1)
- [CVE-2024-31080](https://cve.now/CVE-2024-31080.md): Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents (CVSS 7.3, xorg-server · Red Hat Enterprise Linux 6 Extended Lifecy… +1)
- [CVE-2024-3296](https://cve.now/CVE-2024-3296.md): Rust-openssl: timing based side-channel can lead to a bleichenbacher style attack (CVSS 5.9, rust-openssl · Red Hat Enterprise Linux)
- [CVE-2024-2700](https://cve.now/CVE-2024-2700.md): Quarkus-core: leak of local configuration properties into quarkus applications (CVSS 7.0, quarkus-core · HawtIO 4.0.0 for Red Hat build of Apache… +13)
- [CVE-2024-2759](https://cve.now/CVE-2024-2759.md): Improper access control in Apaczka plugin for PrestaShop (CVSS 7.5, Alsendo Sp. z o. o. Apaczka)
- [CVE-2024-26809](https://cve.now/CVE-2024-26809.md): netfilter: nft\_set\_pipapo: release elements in clone only from destroy path (CVSS 7.8, Linux)
- [CVE-2024-26808](https://cve.now/CVE-2024-26808.md): netfilter: nft\_chain\_filter: handle NETDEV\_UNREGISTER for inet/ingress basechain (CVSS 7.8, Linux)
- [CVE-2024-3262](https://cve.now/CVE-2024-3262.md): Information exposure vulnerability in Request Tracker (RT) (CVSS 5.5, Best Practical Solutions Request Tracker)
- [CVE-2024-20800](https://cve.now/CVE-2024-20800.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26807](https://cve.now/CVE-2024-26807.md): spi: cadence-qspi: fix pointer reference in runtime PM hooks (CVSS 7.8, Linux)
- [CVE-2024-26806](https://cve.now/CVE-2024-26806.md): spi: cadence-qspi: remove system-wide suspend helper calls from runtime PM hooks (no CVSS, Linux)
- [CVE-2024-26805](https://cve.now/CVE-2024-26805.md): netlink: Fix kernel-infoleak-after-free in \_\_skb\_datagram\_iter (no CVSS, Linux)
- [CVE-2024-26804](https://cve.now/CVE-2024-26804.md): net: ip\_tunnel: prevent perpetual headroom growth (CVSS 7.8, Linux)
- [CVE-2024-26803](https://cve.now/CVE-2024-26803.md): net: veth: clear GRO when clearing XDP even when down (no CVSS, Linux)
- [CVE-2024-26802](https://cve.now/CVE-2024-26802.md): stmmac: Clear variable when destroying workqueue (CVSS 7.8, Linux)
- [CVE-2024-26801](https://cve.now/CVE-2024-26801.md): Bluetooth: Avoid potential use-after-free in hci\_error\_reset (CVSS 8.8, Linux)
- [CVE-2024-26800](https://cve.now/CVE-2024-26800.md): tls: fix use-after-free on failed backlog decryption (CVSS 9.8, Linux)
- [CVE-2024-26799](https://cve.now/CVE-2024-26799.md): ASoC: qcom: Fix uninitialized pointer dmactl (CVSS 7.0, Linux)
- [CVE-2024-26798](https://cve.now/CVE-2024-26798.md): fbcon: always restore the old font data in fbcon\_do\_set\_font() (no CVSS, Linux)
- [CVE-2024-26797](https://cve.now/CVE-2024-26797.md): drm/amd/display: Prevent potential buffer overflow in map\_hw\_resources (CVSS 7.8, Linux)
- [CVE-2024-26796](https://cve.now/CVE-2024-26796.md): drivers: perf: ctr\_get\_width function for legacy is not defined (no CVSS, Linux)
- [CVE-2024-26795](https://cve.now/CVE-2024-26795.md): riscv: Sparse-Memory/vmemmap out-of-bounds fix (CVSS 7.8, Linux)
- [CVE-2024-26793](https://cve.now/CVE-2024-26793.md): gtp: fix use-after-free and null-ptr-deref in gtp\_newlink() (CVSS 7.8, Linux)
- [CVE-2024-26792](https://cve.now/CVE-2024-26792.md): btrfs: fix double free of anonymous device after snapshot creation failure (CVSS 7.8, Linux)
- [CVE-2024-26791](https://cve.now/CVE-2024-26791.md): btrfs: dev-replace: properly validate device names (no CVSS, Linux)
- [CVE-2024-26790](https://cve.now/CVE-2024-26790.md): dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read (no CVSS, Linux)
- [CVE-2024-26789](https://cve.now/CVE-2024-26789.md): crypto: arm64/neonbs - fix out-of-bounds access on short input (CVSS 7.8, Linux)
- [CVE-2024-26788](https://cve.now/CVE-2024-26788.md): dmaengine: fsl-qdma: init irq after reg initialization (no CVSS, Linux)
- [CVE-2024-26787](https://cve.now/CVE-2024-26787.md): mmc: mmci: stm32: fix DMA API overlapping mappings warning (no CVSS, Linux)
- [CVE-2024-26786](https://cve.now/CVE-2024-26786.md): iommufd: Fix iopt\_access\_list\_id overwrite bug (CVSS 7.8, Linux)
- [CVE-2024-26785](https://cve.now/CVE-2024-26785.md): iommufd: Fix protection fault in iommufd\_test\_syz\_conv\_iova (CVSS 5.5, Linux)
- [CVE-2024-26784](https://cve.now/CVE-2024-26784.md): pmdomain: arm: Fix NULL dereference on scmi\_perf\_domain removal (no CVSS, Linux)
- [CVE-2024-26783](https://cve.now/CVE-2024-26783.md): mm/vmscan: fix a bug calling wakeup\_kswapd() with a wrong zone index (no CVSS, Linux)
- [CVE-2024-26782](https://cve.now/CVE-2024-26782.md): mptcp: fix double-free on socket dismantle (CVSS 9.8, Linux)
- [CVE-2024-26781](https://cve.now/CVE-2024-26781.md): mptcp: fix possible deadlock in subflow diag (no CVSS, Linux)
- [CVE-2024-26780](https://cve.now/CVE-2024-26780.md): af\_unix: Fix task hung while purging oob\_skb in GC. (no CVSS, Linux)
- [CVE-2024-26750](https://cve.now/CVE-2024-26750.md): af\_unix: Drop oob\_skb ref before purging queue in GC. (no CVSS, Linux)
- [CVE-2024-26746](https://cve.now/CVE-2024-26746.md): dmaengine: idxd: Ensure safe user copy of completion record (no CVSS, Linux)
- [CVE-2024-26745](https://cve.now/CVE-2024-26745.md): powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (CVSS 4.4, Linux)
- [CVE-2024-29008](https://cve.now/CVE-2024-29008.md): Apache CloudStack: The extraconfig feature can be abused to load hypervisor resources on a VM instance (CVSS 6.4, Apache Software Foundation Apache CloudStack)
- [CVE-2024-29007](https://cve.now/CVE-2024-29007.md): Apache CloudStack: When downloading templates or ISOs, the management server and SSVM follow HTTP redirects with potentially dangerous consequences (CVSS 7.3, Apache Software Foundation Apache CloudStack)
- [CVE-2024-29006](https://cve.now/CVE-2024-29006.md): Apache CloudStack: x-forwarded-for HTTP header parsed by default (CVSS 9.8, Apache Software Foundation Apache CloudStack)
- [CVE-2024-1418](https://cve.now/CVE-2024-1418.md): CGC Maintenance Mode \<= 1.2 - Sensitive Information Exposure (CVSS 5.3, mordauk CGC Maintenance Mode)
- [CVE-2024-2008](https://cve.now/CVE-2024-2008.md): Modal Popup Box – Popup Builder, Show Offers And News in Popup \<= 1.5.2 - Authenticated (Contributor+) PHP Object Injection in awl\_modal\_popup\_box\_shortcode (CVSS 8.8, awordpresslife Modal Popup Box)
- [CVE-2024-2919](https://cve.now/CVE-2024-2919.md): Gutenberg Blocks by Kadence Blocks – Page Builder Features \<= 3.2.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via CountUp Widget (CVSS 6.4, stellarwp Kadence Blocks — Page Builder Toolkit for Gutenbe…)
- [CVE-2024-2830](https://cve.now/CVE-2024-2830.md): WordPress Tag and Category Manager – AI Autotagger \<= 3.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, stevejburge Tag, Category, and Taxonomy Manager – AI Autota…)
- [CVE-2024-2803](https://cve.now/CVE-2024-2803.md): ElementsKit Elementor addons \<= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget (CVSS 6.4, roxnor ElementsKit Elementor Addons – Advanced Widgets & Te…)
- [CVE-2024-3030](https://cve.now/CVE-2024-3030.md): Announce from the Dashboard \<= 1.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, gqevu6bsiz Announce from the Dashboard)
- [CVE-2024-2868](https://cve.now/CVE-2024-2868.md): ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) \<= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout (CVSS 6.4, devitemsllc ShopLentor – All-in-One WooCommerce Growth & St…)
- [CVE-2024-3022](https://cve.now/CVE-2024-3022.md): BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin \<= 1.0.87 - Authenticated (Admin+) Arbitrary File Upload (CVSS 7.2, reputeinfosystems Appointment Booking Calendar Plugin and S…)
- [CVE-2024-3274](https://cve.now/CVE-2024-3274.md): D-Link DNS-320L/DNS-320LW/DNS-327L HTTP GET Request info.cgi information disclosure (CVSS 5.3, D-Link DNS-320L · D-Link DNS-320LW +1)
- [CVE-2024-2692](https://cve.now/CVE-2024-2692.md): SiYuan 3.0.3 - RCE via Server Side XSS (CVSS 9.0, SiYuan)
- [CVE-2024-3273](https://cve.now/CVE-2024-3273.md): D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas\_sharing.cgi command injection (CVSS 7.3, KEV, D-Link DNS-320L · D-Link DNS-325 +2)
- [CVE-2024-3272](https://cve.now/CVE-2024-3272.md): D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas\_sharing.cgi hard-coded credentials (CVSS 9.8, KEV, D-Link DNS-320L · D-Link DNS-325 +2)
- [CVE-2024-29225](https://cve.now/CVE-2024-29225.md): ELECOM wireless LAN routers allow a network-adjacent unauthenticated attacker to obtain the configuration file containing sensitive informat (CVSS 4.3, ELECOM CO. WRC-X3200GST3-B · ELECOM CO. WRC-G01-W +3)
- [CVE-2024-26258](https://cve.now/CVE-2024-26258.md): OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials to execute arbitrary O (CVSS 6.8, ELECOM CO. WRC-X3200GST3-B · ELECOM CO. WRC-G01-W +5)
- [CVE-2024-25568](https://cve.now/CVE-2024-25568.md): OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to execute arbitrary OS (CVSS 8.8, ELECOM CO. WRC-X3200GST3-B · ELECOM CO. WRC-G01-W +1)
- [CVE-2024-29167](https://cve.now/CVE-2024-29167.md): SVR-116 firmware version 1.6.0.30028871 allows a remote authenticated attacker with an administrative privilege to execute arbitrary OS comm (CVSS 7.2, SEEnergy SVR-116)
- [CVE-2020-25730](https://cve.now/CVE-2020-25730.md): Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate priv (CVSS 8.2)
- [CVE-2023-25199](https://cve.now/CVE-2023-25199.md): A reflected cross-site scripting (XSS) vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 that enables a remote (CVSS 5.4)
- [CVE-2023-25200](https://cve.now/CVE-2023-25200.md): An HTML injection vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 that enables a remote attacker to render m (CVSS 4.7)
- [CVE-2023-36643](https://cve.now/CVE-2023-36643.md): Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the online shop via oordershow compon (CVSS 7.5)
- [CVE-2023-36644](https://cve.now/CVE-2023-36644.md): Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations from the online shop via the (CVSS 7.5)
- [CVE-2023-36645](https://cve.now/CVE-2023-36645.md): SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow component in customer funct (CVSS 9.1)
- [CVE-2024-25503](https://cve.now/CVE-2024-25503.md): Cross Site Scripting (XSS) vulnerability in Advanced REST Client v.17.0.9 allows a remote attacker to execute arbitrary code and obtain sens (CVSS 4.7)
- [CVE-2024-27575](https://cve.now/CVE-2024-27575.md): INOTEC Sicherheitstechnik WebServer CPS220/64 3.3.19 allows a remote attacker to read arbitrary files via absolute path traversal, such as w (CVSS 7.5)
- [CVE-2024-28520](https://cve.now/CVE-2024-28520.md): File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an at (CVSS 6.5)
- [CVE-2024-29375](https://cve.now/CVE-2024-29375.md): CSV Injection vulnerability in Addactis IBNRS v.3.10.3.107 allows a remote attacker to execute arbitrary code via a crafted .ibnrs file to t (CVSS 9.8)
- [CVE-2024-29386](https://cve.now/CVE-2024-29386.md): projeqtor up to 11.2.0 was discovered to contain a SQL injection vulnerability via the component /view/criticalResourceExport.php. (CVSS 5.4)
- [CVE-2024-29387](https://cve.now/CVE-2024-29387.md): projeqtor up to 11.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /view/print.php. (CVSS 8.8)
- [CVE-2024-30565](https://cve.now/CVE-2024-30565.md): An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php. (CVSS 8.8)
- [CVE-2024-31025](https://cve.now/CVE-2024-31025.md): SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component. (CVSS 7.5)
- [CVE-2024-31498](https://cve.now/CVE-2024-31498.md): Yubico ykman-gui (aka YubiKey Manager GUI) before 1.2.6 on Windows, when Edge is not used, allows privilege escalation because browser windo (CVSS 8.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-04-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.