# CVEs published 2024-04-16

243 CVEs were published on April 16, 2024: 19 critical, 77 high. Days are UTC.

- [CVE-2024-31452](https://cve.now/CVE-2024-31452.md): OpenFGA Authorization Bypass (CVSS 8.1, openfga · github.com/openfga/openfga)
- [CVE-2024-27086](https://cve.now/CVE-2024-27086.md): MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service (CVSS 3.9, AzureAD microsoft-authentication-library-for-dotnet · Micro…)
- [CVE-2024-21121](https://cve.now/CVE-2024-21121.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2024-21120](https://cve.now/CVE-2024-21120.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 5.3, Oracle Outside In Technology)
- [CVE-2024-21119](https://cve.now/CVE-2024-21119.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 5.3, Oracle Outside In Technology)
- [CVE-2024-21118](https://cve.now/CVE-2024-21118.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 5.3, Oracle Outside In Technology)
- [CVE-2024-21117](https://cve.now/CVE-2024-21117.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 5.3, Oracle Outside In Technology)
- [CVE-2024-21116](https://cve.now/CVE-2024-21116.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.8, Oracle VM VirtualBox)
- [CVE-2024-21115](https://cve.now/CVE-2024-21115.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.8, Oracle VM VirtualBox)
- [CVE-2024-21114](https://cve.now/CVE-2024-21114.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.8, Oracle VM VirtualBox)
- [CVE-2024-21113](https://cve.now/CVE-2024-21113.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.8, Oracle VM VirtualBox)
- [CVE-2024-21112](https://cve.now/CVE-2024-21112.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.8, Oracle VM VirtualBox)
- [CVE-2024-21111](https://cve.now/CVE-2024-21111.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.8, Oracle VM VirtualBox)
- [CVE-2024-21110](https://cve.now/CVE-2024-21110.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.3, Oracle VM VirtualBox)
- [CVE-2024-21109](https://cve.now/CVE-2024-21109.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.9, Oracle VM VirtualBox)
- [CVE-2024-21108](https://cve.now/CVE-2024-21108.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 3.3, Oracle VM VirtualBox)
- [CVE-2024-21107](https://cve.now/CVE-2024-21107.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.7, Oracle VM VirtualBox)
- [CVE-2024-21106](https://cve.now/CVE-2024-21106.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2024-21105](https://cve.now/CVE-2024-21105.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). (CVSS 2.0, Oracle Solaris Operating System)
- [CVE-2024-21104](https://cve.now/CVE-2024-21104.md): Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). (CVSS 6.5, Oracle Sun ZFS Storage Appliance Kit (AK) Software)
- [CVE-2024-21103](https://cve.now/CVE-2024-21103.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.8, Oracle VM VirtualBox)
- [CVE-2024-21102](https://cve.now/CVE-2024-21102.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). (CVSS 4.9, Oracle MySQL NDB Cluster · Oracle MySQL Server)
- [CVE-2024-21101](https://cve.now/CVE-2024-21101.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.2, Oracle MySQL NDB Cluster)
- [CVE-2024-21100](https://cve.now/CVE-2024-21100.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Platform). (CVSS 4.0, Oracle Commerce Platform)
- [CVE-2024-21099](https://cve.now/CVE-2024-21099.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Data Visualization). (CVSS 4.3, Oracle Business Intelligence Enterprise Edition)
- [CVE-2024-21098](https://cve.now/CVE-2024-21098.md): Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). (CVSS 3.7, Oracle GraalVM)
- [CVE-2024-21097](https://cve.now/CVE-2024-21097.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). (CVSS 4.9, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2024-21096](https://cve.now/CVE-2024-21096.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-21095](https://cve.now/CVE-2024-21095.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Acc (CVSS 8.2, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2024-21094](https://cve.now/CVE-2024-21094.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot (CVSS 3.7, Oracle Java SE JDK and JRE)
- [CVE-2024-21093](https://cve.now/CVE-2024-21093.md): Vulnerability in the Java VM component of Oracle Database Server. (CVSS 5.3, Oracle Database - Enterprise Edition)
- [CVE-2024-21092](https://cve.now/CVE-2024-21092.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 8.1, Oracle Agile Product Lifecycle Management for Process)
- [CVE-2024-21091](https://cve.now/CVE-2024-21091.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Data Import). (CVSS 6.5, Oracle Agile Product Lifecycle Management for Process)
- [CVE-2024-21090](https://cve.now/CVE-2024-21090.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). (CVSS 7.5, Oracle MySQL Connectors)
- [CVE-2024-21089](https://cve.now/CVE-2024-21089.md): Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling). (CVSS 6.5, Oracle Concurrent Processing)
- [CVE-2024-21088](https://cve.now/CVE-2024-21088.md): Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Import Utility). (CVSS 7.5, Oracle Production Scheduling)
- [CVE-2024-21087](https://cve.now/CVE-2024-21087.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-21086](https://cve.now/CVE-2024-21086.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 4.3, Oracle CRM Technical Foundation)
- [CVE-2024-21085](https://cve.now/CVE-2024-21085.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency). (CVSS 3.7, Oracle Java SE JDK and JRE)
- [CVE-2024-21084](https://cve.now/CVE-2024-21084.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Service Gateway). (CVSS 5.8, Oracle BI Publisher)
- [CVE-2024-21083](https://cve.now/CVE-2024-21083.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Script Engine). (CVSS 7.2, Oracle BI Publisher)
- [CVE-2024-21082](https://cve.now/CVE-2024-21082.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services). (CVSS 9.8, Oracle BI Publisher)
- [CVE-2024-21081](https://cve.now/CVE-2024-21081.md): Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Attribute Admin Setup). (CVSS 4.7, Oracle Partner Management)
- [CVE-2024-21080](https://cve.now/CVE-2024-21080.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: REST Services). (CVSS 6.5, Oracle Applications Framework)
- [CVE-2024-21079](https://cve.now/CVE-2024-21079.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Campaign LOV). (CVSS 7.5, Oracle Marketing)
- [CVE-2024-21078](https://cve.now/CVE-2024-21078.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Campaign LOV). (CVSS 7.5, Oracle Marketing)
- [CVE-2024-21077](https://cve.now/CVE-2024-21077.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accounts LOV). (CVSS 7.5, Oracle Trade Management)
- [CVE-2024-21076](https://cve.now/CVE-2024-21076.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Offer LOV). (CVSS 7.5, Oracle Trade Management)
- [CVE-2024-21075](https://cve.now/CVE-2024-21075.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim Line LOV). (CVSS 7.5, Oracle Trade Management)
- [CVE-2024-21074](https://cve.now/CVE-2024-21074.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Finance LOV). (CVSS 7.5, Oracle Trade Management)
- [CVE-2024-21073](https://cve.now/CVE-2024-21073.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). (CVSS 7.5, Oracle Trade Management)
- [CVE-2024-21072](https://cve.now/CVE-2024-21072.md): Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Data Provider UI). (CVSS 6.1, Oracle Installed Base)
- [CVE-2024-21071](https://cve.now/CVE-2024-21071.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens and Grants UI). (CVSS 9.1, Oracle Workflow)
- [CVE-2024-21070](https://cve.now/CVE-2024-21070.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework). (CVSS 5.4, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2024-21069](https://cve.now/CVE-2024-21069.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-21068](https://cve.now/CVE-2024-21068.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot (CVSS 3.7, Oracle Java SE JDK and JRE)
- [CVE-2024-21067](https://cve.now/CVE-2024-21067.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management). (CVSS 8.8, Oracle Enterprise Manager Base Platform)
- [CVE-2024-21066](https://cve.now/CVE-2024-21066.md): Vulnerability in the RDBMS component of Oracle Database Server. (CVSS 4.2, Oracle Database - Enterprise Edition)
- [CVE-2024-21065](https://cve.now/CVE-2024-21065.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Workflow). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2024-21064](https://cve.now/CVE-2024-21064.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Answers). (CVSS 5.4, Oracle Business Intelligence Enterprise Edition)
- [CVE-2024-21063](https://cve.now/CVE-2024-21063.md): Vulnerability in the PeopleSoft Enterprise HCM Benefits Administration product of Oracle PeopleSoft (component: Benefits Administration). (CVSS 6.1, Oracle PeopleSoft Enterprise HCM Benefits Administration)
- [CVE-2024-21062](https://cve.now/CVE-2024-21062.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-21061](https://cve.now/CVE-2024-21061.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-21060](https://cve.now/CVE-2024-21060.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-21059](https://cve.now/CVE-2024-21059.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). (CVSS 7.8, Oracle Solaris Operating System)
- [CVE-2024-21058](https://cve.now/CVE-2024-21058.md): Vulnerability in the Unified Audit component of Oracle Database Server. (CVSS 4.9, Oracle Database - Enterprise Edition)
- [CVE-2024-21057](https://cve.now/CVE-2024-21057.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-21056](https://cve.now/CVE-2024-21056.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-21055](https://cve.now/CVE-2024-21055.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-21054](https://cve.now/CVE-2024-21054.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-21053](https://cve.now/CVE-2024-21053.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-21052](https://cve.now/CVE-2024-21052.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-21051](https://cve.now/CVE-2024-21051.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-21050](https://cve.now/CVE-2024-21050.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-21049](https://cve.now/CVE-2024-21049.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-21048](https://cve.now/CVE-2024-21048.md): Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: XML input). (CVSS 4.3, Oracle Web Applications Desktop Integrator)
- [CVE-2024-21047](https://cve.now/CVE-2024-21047.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-21046](https://cve.now/CVE-2024-21046.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21045](https://cve.now/CVE-2024-21045.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21044](https://cve.now/CVE-2024-21044.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21043](https://cve.now/CVE-2024-21043.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21042](https://cve.now/CVE-2024-21042.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21041](https://cve.now/CVE-2024-21041.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21040](https://cve.now/CVE-2024-21040.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21039](https://cve.now/CVE-2024-21039.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21038](https://cve.now/CVE-2024-21038.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21037](https://cve.now/CVE-2024-21037.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21036](https://cve.now/CVE-2024-21036.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21035](https://cve.now/CVE-2024-21035.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21034](https://cve.now/CVE-2024-21034.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21033](https://cve.now/CVE-2024-21033.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21032](https://cve.now/CVE-2024-21032.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21031](https://cve.now/CVE-2024-21031.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21030](https://cve.now/CVE-2024-21030.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21029](https://cve.now/CVE-2024-21029.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21028](https://cve.now/CVE-2024-21028.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21027](https://cve.now/CVE-2024-21027.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21026](https://cve.now/CVE-2024-21026.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21025](https://cve.now/CVE-2024-21025.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21024](https://cve.now/CVE-2024-21024.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21023](https://cve.now/CVE-2024-21023.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21022](https://cve.now/CVE-2024-21022.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21021](https://cve.now/CVE-2024-21021.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21020](https://cve.now/CVE-2024-21020.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21019](https://cve.now/CVE-2024-21019.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21018](https://cve.now/CVE-2024-21018.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21017](https://cve.now/CVE-2024-21017.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21016](https://cve.now/CVE-2024-21016.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.1, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2024-21015](https://cve.now/CVE-2024-21015.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 5.5, Oracle MySQL Server)
- [CVE-2024-21014](https://cve.now/CVE-2024-21014.md): Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server). (CVSS 9.8, Oracle Hospitality Simphony)
- [CVE-2024-21013](https://cve.now/CVE-2024-21013.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2024-21012](https://cve.now/CVE-2024-21012.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Network (CVSS 3.7, Oracle Java SE JDK and JRE)
- [CVE-2024-21011](https://cve.now/CVE-2024-21011.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot (CVSS 3.7, Oracle Java SE JDK and JRE)
- [CVE-2024-21010](https://cve.now/CVE-2024-21010.md): Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server). (CVSS 9.9, Oracle Hospitality Simphony)
- [CVE-2024-21009](https://cve.now/CVE-2024-21009.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-21008](https://cve.now/CVE-2024-21008.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2024-21007](https://cve.now/CVE-2024-21007.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle WebLogic Server)
- [CVE-2024-21006](https://cve.now/CVE-2024-21006.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle WebLogic Server)
- [CVE-2024-21005](https://cve.now/CVE-2024-21005.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). (CVSS 3.1, Oracle Java SE JDK and JRE)
- [CVE-2024-21004](https://cve.now/CVE-2024-21004.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). (CVSS 2.5, Oracle Java SE JDK and JRE)
- [CVE-2024-21003](https://cve.now/CVE-2024-21003.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). (CVSS 3.1, Oracle Java SE JDK and JRE)
- [CVE-2024-21002](https://cve.now/CVE-2024-21002.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). (CVSS 2.5, Oracle Java SE JDK and JRE)
- [CVE-2024-21001](https://cve.now/CVE-2024-21001.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). (CVSS 5.4, Oracle Business Intelligence Enterprise Edition)
- [CVE-2024-21000](https://cve.now/CVE-2024-21000.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 3.8, Oracle MySQL Server)
- [CVE-2024-20999](https://cve.now/CVE-2024-20999.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Zones). (CVSS 8.2, Oracle Solaris Operating System)
- [CVE-2024-20998](https://cve.now/CVE-2024-20998.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-20997](https://cve.now/CVE-2024-20997.md): Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server). (CVSS 9.9, Oracle Hospitality Simphony)
- [CVE-2024-20995](https://cve.now/CVE-2024-20995.md): Vulnerability in the Oracle Database Sharding component of Oracle Database Server. (CVSS 2.4, Oracle Database - Enterprise Edition)
- [CVE-2024-20994](https://cve.now/CVE-2024-20994.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). (CVSS 5.3, Oracle MySQL Server)
- [CVE-2024-20993](https://cve.now/CVE-2024-20993.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2024-20992](https://cve.now/CVE-2024-20992.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Content integration). (CVSS 4.4, Oracle WebCenter Portal)
- [CVE-2024-20991](https://cve.now/CVE-2024-20991.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). (CVSS 5.3, Oracle HTTP Server)
- [CVE-2024-20990](https://cve.now/CVE-2024-20990.md): Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite (component: Templates). (CVSS 5.3, Oracle E-Business Suite Technology Stack)
- [CVE-2024-20989](https://cve.now/CVE-2024-20989.md): Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony POS). (CVSS 7.0, Oracle Hospitality Simphony)
- [CVE-2024-20954](https://cve.now/CVE-2024-20954.md): Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). (CVSS 3.7, Oracle GraalVM)
- [CVE-2024-31887](https://cve.now/CVE-2024-31887.md): IBM Security Verify Privilege information disclosure (CVSS 7.5, IBM Security Verify Privilege)
- [CVE-2024-3660](https://cve.now/CVE-2024-3660.md): Arbitrary code injection vulnerability in Keras framework \< 2.13 (CVSS 9.8, tensorflow keras · keras)
- [CVE-2024-30380](https://cve.now/CVE-2024-30380.md): Junos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLV (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2024-30378](https://cve.now/CVE-2024-30378.md): Junos OS: MX Series: bbe-smgd process crash upon execution of specific CLI commands (CVSS 5.5, Juniper Networks Junos OS)
- [CVE-2024-3882](https://cve.now/CVE-2024-3882.md): Tenda W30E fromRouteStatic stack-based overflow (CVSS 8.8, Tenda W30E)
- [CVE-2022-24810](https://cve.now/CVE-2022-24810.md): net-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference. (CVSS 6.5, net-snmp)
- [CVE-2022-24809](https://cve.now/CVE-2022-24809.md): net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference (CVSS 6.5, net-snmp)
- [CVE-2022-24808](https://cve.now/CVE-2022-24808.md): net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference (CVSS 6.5, net-snmp)
- [CVE-2022-24807](https://cve.now/CVE-2022-24807.md): net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access (CVSS 6.5, net-snmp)
- [CVE-2022-24806](https://cve.now/CVE-2022-24806.md): net-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously (CVSS 6.5, net-snmp)
- [CVE-2022-24805](https://cve.now/CVE-2022-24805.md): net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. (CVSS 6.5, net-snmp)
- [CVE-2024-3881](https://cve.now/CVE-2024-3881.md): Tenda W30E frmL7ProtForm frmL7PlotForm stack-based overflow (CVSS 8.8, Tenda W30E)
- [CVE-2024-31446](https://cve.now/CVE-2024-31446.md): OpenComputers Denial of Service using xpcall (CVSS 7.7, MightyPirates OpenComputers)
- [CVE-2023-51391](https://cve.now/CVE-2023-51391.md): Micrium OS Network uC-HTTP server header parsing invalid pointer dereference vulnerability (CVSS 7.5, silabs.com Gecko SDK)
- [CVE-2024-3880](https://cve.now/CVE-2024-3880.md): Tenda W30E WriteFacMac formWriteFacMac os command injection (CVSS 6.3, Tenda W30E)
- [CVE-2024-3879](https://cve.now/CVE-2024-3879.md): Tenda W30E setcfm formSetCfm stack-based overflow (CVSS 8.8, Tenda W30E)
- [CVE-2024-32455](https://cve.now/CVE-2024-32455.md): WordPress Fatal Error Notify plugin \<= 1.5.2 - Broken Access Control vulnerability (CVSS 4.3, Very Good Plugins Fatal Error Notify)
- [CVE-2024-25911](https://cve.now/CVE-2024-25911.md): WordPress MoveTo plugin \<= 6.2 - Unauthenticated Arbitrary File Deletion vulnerability (CVSS 8.6, Skymoon Labs MoveTo)
- [CVE-2024-3878](https://cve.now/CVE-2024-3878.md): Tenda F1202 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflow (CVSS 8.8, Tenda F1202)
- [CVE-2024-3877](https://cve.now/CVE-2024-3877.md): Tenda F1202 fromqossetting stack-based overflow (CVSS 8.8, Tenda F1202)
- [CVE-2024-3876](https://cve.now/CVE-2024-3876.md): Tenda F1202 VirtualSer fromVirtualSer stack-based overflow (CVSS 8.8, Tenda F1202)
- [CVE-2024-3875](https://cve.now/CVE-2024-3875.md): Tenda F1202 Natlimit fromNatlimit stack-based overflow (CVSS 8.8, Tenda F1202)
- [CVE-2023-45000](https://cve.now/CVE-2023-45000.md): WordPress LiteSpeed Cache plugin \<= 5.7 - Unauthenticated Broken Access Control on API vulnerability (CVSS 8.2, LiteSpeed Technologies LiteSpeed Cache)
- [CVE-2023-40000](https://cve.now/CVE-2023-40000.md): WordPress LiteSpeed Cache plugin \<= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability (CVSS 8.3, LiteSpeed Technologies LiteSpeed Cache)
- [CVE-2024-32086](https://cve.now/CVE-2024-32086.md): WordPress Citadela Listing plugin \<= 5.18.1 - Unauth. Sensitive Data Exposure vulnerability (CVSS 7.5, AitThemes Citadela Listing)
- [CVE-2024-3874](https://cve.now/CVE-2024-3874.md): Tenda W20E SetRemoteWebManage formSetRemoteWebManage stack-based overflow (CVSS 8.8, Tenda W20E)
- [CVE-2024-3873](https://cve.now/CVE-2024-3873.md): SMI SMI-EX-5414W Web Interface cross-site request forgery (CVSS 4.3, SMI-EX-5414W)
- [CVE-2024-3865](https://cve.now/CVE-2024-3865.md): Memory safety bugs present in Firefox 124. (CVSS 8.1, Mozilla Firefox)
- [CVE-2024-3864](https://cve.now/CVE-2024-3864.md): Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-3302](https://cve.now/CVE-2024-3302.md): There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. (CVSS 3.7, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-3863](https://cve.now/CVE-2024-3863.md): The executable file warning was not presented when downloading .xrm-ms files. (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-3862](https://cve.now/CVE-2024-3862.md): The MarkStack assignment operator, part of the JavaScript engine, could access uninitialized memory if it were used in a self-assignment. (CVSS 5.3, Mozilla Firefox)
- [CVE-2024-3861](https://cve.now/CVE-2024-3861.md): If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and later use-after-free. (CVSS 4.0, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-3860](https://cve.now/CVE-2024-3860.md): An out-of-memory condition during object initialization could result in an empty shape list. (CVSS 6.2, Mozilla Firefox)
- [CVE-2024-3859](https://cve.now/CVE-2024-3859.md): On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenTyp (CVSS 5.9, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-3858](https://cve.now/CVE-2024-3858.md): It was possible to mutate a JavaScript object so that the JIT could crash while tracing it. (CVSS 7.5, Mozilla Firefox)
- [CVE-2024-3857](https://cve.now/CVE-2024-3857.md): The JIT created incorrect code for arguments in certain cases. (CVSS 7.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-3856](https://cve.now/CVE-2024-3856.md): A use-after-free could occur during WASM execution if garbage collection ran during the creation of an array. (CVSS 8.8, Mozilla Firefox)
- [CVE-2024-3855](https://cve.now/CVE-2024-3855.md): In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. (CVSS 6.5, Mozilla Firefox)
- [CVE-2024-3854](https://cve.now/CVE-2024-3854.md): In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads. (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-3853](https://cve.now/CVE-2024-3853.md): A use-after-free could result if a JavaScript realm was in the process of being initialized when a garbage collection started. (CVSS 7.5, Mozilla Firefox)
- [CVE-2024-3852](https://cve.now/CVE-2024-3852.md): GetBoundName could return the wrong version of an object when JIT optimizations were applied. (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-32022](https://cve.now/CVE-2024-32022.md): Kohya\_ss is vulnerable to a command injection in basic\_caption\_gui.py (GHSL-2024-019) (CVSS 9.1, bmaltais kohya\_ss)
- [CVE-2024-32027](https://cve.now/CVE-2024-32027.md): Kohya\_ss is vulnerable to a command injection in \`finetune\_gui.py\` (\`GHSL-2024-022\`) (CVSS 9.1, bmaltais kohya\_ss)
- [CVE-2024-32026](https://cve.now/CVE-2024-32026.md): Kohya\_ss is vulnerable to a command injection in \`git\_caption\_gui.py\` (\`GHSL-2024-020\`) (CVSS 9.1, bmaltais kohya\_ss)
- [CVE-2024-32025](https://cve.now/CVE-2024-32025.md): Kohya\_ss is vulnerable to a command injection in \`group\_images\_gui.py\` (\`GHSL-2024-021\`) (CVSS 9.1, bmaltais kohya\_ss)
- [CVE-2024-32024](https://cve.now/CVE-2024-32024.md): Kohya\_ss vulenrable to path injection in \`common\_gui.py\` \`add\_pre\_postfix\` function (\`GHSL-2024-023\`) (CVSS 6.5, bmaltais kohya\_ss)
- [CVE-2024-32023](https://cve.now/CVE-2024-32023.md): Kohya\_ss vulnerable to path injection in \`common\_gui.py\` \`find\_and\_replace\` function (\`GHSL-2024-024\`) (CVSS 6.5, bmaltais kohya\_ss)
- [CVE-2024-31451](https://cve.now/CVE-2024-31451.md): Limited file write in routes.py (GHSL-2023-250) (CVSS 5.3, arc53 DocsGPT)
- [CVE-2024-30256](https://cve.now/CVE-2024-30256.md): Open WebUI vulnerable to server-side request forgery in utils.py (CVSS 6.4, open-webui)
- [CVE-2024-3672](https://cve.now/CVE-2024-3672.md): BA Book Everything \<= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, bookingalgorithms BA Book Everything)
- [CVE-2024-3243](https://cve.now/CVE-2024-3243.md): Customer Reviews for WooCommerce \<= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending (CVSS 4.3, ivole Customer Reviews for WooCommerce)
- [CVE-2024-3869](https://cve.now/CVE-2024-3869.md): Customer Reviews for WooCommerce \<= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Search (CVSS 4.3, ivole Customer Reviews for WooCommerce)
- [CVE-2024-3067](https://cve.now/CVE-2024-3067.md): WooCommerce Google Feed Manager \<= 2.4.2 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting (CVSS 7.2, aukejomm WPMR Google Feed Manager for WooCommerce – Sell on…)
- [CVE-2024-3367](https://cve.now/CVE-2024-3367.md): Argument injection to runmqsc (CVSS 6.5, Checkmk)
- [CVE-2024-1357](https://cve.now/CVE-2024-1357.md): Shortcodes and extra features for Phlox theme \<= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux\_timeline' Shortcode (CVSS 6.4, averta Shortcodes and extra features for Phlox theme)
- [CVE-2024-3867](https://cve.now/CVE-2024-3867.md): Tainacan Interface \<= 2.7.2 - Reflected Cross-Site Scripting (CVSS 6.1, Tainacan Interface)
- [CVE-2024-3872](https://cve.now/CVE-2024-3872.md): Mattermost Mobile app versions 2.13.0 and earlier use a regular expression with polynomial complexity to parse certain deeplinks, which allo (CVSS 3.1, Mattermost)
- [CVE-2024-32625](https://cve.now/CVE-2024-32625.md): Uninitialized scalar field (CVSS 5.8, ASR Falcon/Crane)
- [CVE-2024-32634](https://cve.now/CVE-2024-32634.md): Logically dead code (CVSS 6.1, ASR Falcon)
- [CVE-2024-32633](https://cve.now/CVE-2024-32633.md): Unsigned compared against 0 (CVSS 4.0, ASR Falcon/Crane)
- [CVE-2024-32632](https://cve.now/CVE-2024-32632.md): Printf arg type mismatch in ATCMD (CVSS 6.6, ASR Falcon/Crane)
- [CVE-2024-32631](https://cve.now/CVE-2024-32631.md): Out-of-bounds read in telephony (CVSS 7.2, ASR Falcon/Crane)
- [CVE-2024-3871](https://cve.now/CVE-2024-3871.md): Authenticated Remote Command Injection in Delta Electronics DVW (CVSS 9.8, Deltra Electronics DVW-W02W2-E2)
- [CVE-2024-32557](https://cve.now/CVE-2024-32557.md): WordPress Exclusive Addons for Elementor plugin \<= 2.6.9.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Exclusive Addons Elementor)
- [CVE-2024-22262](https://cve.now/CVE-2024-22262.md): CVE-2024-22262: Spring Framework URL Parsing with Host Validation (CVSS 8.1, Spring Framework · org.springframework:spring-web)
- [CVE-2024-1561](https://cve.now/CVE-2024-1561.md): Arbitrary Local File Read via Component Method Invocation in gradio-app/gradio (CVSS 7.5, gradio-app/gradio · gradio)
- [CVE-2024-1961](https://cve.now/CVE-2024-1961.md): Path Traversal leading to Arbitrary File Write and RCE in vertaai/modeldb (CVSS 8.8, vertaai/modeldb)
- [CVE-2024-2083](https://cve.now/CVE-2024-2083.md): Directory Traversal in zenml-io/zenml (CVSS 9.9, zenml-io/zenml · zenml)
- [CVE-2024-1739](https://cve.now/CVE-2024-1739.md): Case Insensitive Email Address Validation Vulnerability in lunary-ai/lunary (CVSS 7.5, lunary-ai/lunary)
- [CVE-2024-3571](https://cve.now/CVE-2024-3571.md): Path Traversal in langchain-ai/langchain (CVSS 6.5, langchain-ai/langchain · langchain)
- [CVE-2024-2912](https://cve.now/CVE-2024-2912.md): Insecure Deserialization Leading to RCE in bentoml/bentoml (CVSS 10.0, bentoml/bentoml · bentoml)
- [CVE-2024-3574](https://cve.now/CVE-2024-3574.md): Authorization Header Leak During Cross-Domain Redirect in scrapy/scrapy (CVSS 7.5, scrapy/scrapy · scrapy)
- [CVE-2024-3271](https://cve.now/CVE-2024-3271.md): Command Injection in run-llama/llama\_index (CVSS 9.8, run-llama/llama\_index · llama-index-core)
- [CVE-2024-2260](https://cve.now/CVE-2024-2260.md): Session Fixation Vulnerability in zenml-io/zenml (CVSS 4.2, zenml-io/zenml · zenml)
- [CVE-2024-1135](https://cve.now/CVE-2024-1135.md): HTTP Request Smuggling in benoitc/gunicorn (CVSS 7.5, benoitc/gunicorn · gunicorn)
- [CVE-2024-1569](https://cve.now/CVE-2024-1569.md): Uncontrolled Resource Consumption in parisneo/lollms-webui (CVSS 5.3, parisneo/lollms-webui)
- [CVE-2024-3573](https://cve.now/CVE-2024-3573.md): Local File Inclusion (LFI) via Scheme Confusion in mlflow/mlflow (CVSS 9.3, mlflow/mlflow · mlflow)
- [CVE-2024-3029](https://cve.now/CVE-2024-3029.md): Improper Input Validation in mintplex-labs/anything-llm (CVSS 9.0, mintplex-labs/anything-llm)
- [CVE-2024-1558](https://cve.now/CVE-2024-1558.md): Path Traversal Vulnerability in mlflow/mlflow (CVSS 7.5, mlflow/mlflow · mlflow)
- [CVE-2024-1594](https://cve.now/CVE-2024-1594.md): Local File Read via Path Traversal in mlflow/mlflow (CVSS 7.5, mlflow/mlflow · mlflow)
- [CVE-2024-3572](https://cve.now/CVE-2024-3572.md): XML External Entity (XXE) Vulnerability in scrapy/scrapy (CVSS 7.5, scrapy/scrapy · scrapy)
- [CVE-2024-1626](https://cve.now/CVE-2024-1626.md): IDOR Vulnerability in lunary-ai/lunary (CVSS 9.1, lunary-ai/lunary)
- [CVE-2024-1738](https://cve.now/CVE-2024-1738.md): Incorrect Authorization in lunary-ai/lunary (CVSS 7.5, lunary-ai/lunary)
- [CVE-2024-1183](https://cve.now/CVE-2024-1183.md): SSRF Vulnerability in gradio-app/gradio (CVSS 6.5, gradio-app/gradio · gradio)
- [CVE-2024-1601](https://cve.now/CVE-2024-1601.md): SQL Injection in parisneo/lollms-webui (CVSS 7.5, parisneo/lollms-webui)
- [CVE-2024-1646](https://cve.now/CVE-2024-1646.md): Authentication Bypass in parisneo/lollms-webui (CVSS 8.2, parisneo/lollms-webui)
- [CVE-2024-0549](https://cve.now/CVE-2024-0549.md): Relative Path Traversal in mintplex-labs/anything-llm (CVSS 8.1, mintplex-labs/anything-llm)
- [CVE-2024-1593](https://cve.now/CVE-2024-1593.md): Path Traversal via Parameter Smuggling in mlflow/mlflow (CVSS 7.5, mlflow/mlflow · mlflow)
- [CVE-2024-3028](https://cve.now/CVE-2024-3028.md): Improper Input Validation in mintplex-labs/anything-llm (CVSS 7.2, mintplex-labs/anything-llm)
- [CVE-2024-1483](https://cve.now/CVE-2024-1483.md): Path Traversal Vulnerability in mlflow/mlflow (CVSS 7.5, mlflow/mlflow · mlflow)
- [CVE-2024-1666](https://cve.now/CVE-2024-1666.md): Unauthorized Radar Creation in lunary-ai/lunary (CVSS 7.5, lunary-ai/lunary)
- [CVE-2024-3575](https://cve.now/CVE-2024-3575.md): Cross-site Scripting (XSS) - Stored in mindsdb/mindsdb (CVSS 5.8, mindsdb/mindsdb · mindsdb)
- [CVE-2024-1560](https://cve.now/CVE-2024-1560.md): Path Traversal Vulnerability in mlflow/mlflow (CVSS 8.1, mlflow/mlflow · mlflow)
- [CVE-2024-1456](https://cve.now/CVE-2024-1456.md): S3 Bucket Takeover in h2oai/h2o-3 (CVSS 7.1, h2oai/h2o-3)
- [CVE-2024-0404](https://cve.now/CVE-2024-0404.md): Mass Assignment Vulnerability in mintplex-labs/anything-llm (CVSS 9.1, mintplex-labs/anything-llm)
- [CVE-2023-50872](https://cve.now/CVE-2023-50872.md): The API in Accredible Credential.net December 6th, 2023 allows an Insecure Direct Object Reference attack that discloses partial information (CVSS 7.5)
- [CVE-2024-29291](https://cve.now/CVE-2024-29291.md): An issue in Laravel Framework 8 through 11 might allow a remote attacker to discover database credentials in storage/logs/laravel.log. (no CVSS)
- [CVE-2024-29402](https://cve.now/CVE-2024-29402.md): cskefu v7 suffers from Insufficient Session Expiration, which allows attackers to exploit the old session for malicious activity. (CVSS 4.3)
- [CVE-2024-31503](https://cve.now/CVE-2024-31503.md): Incorrect access control in Dolibarr ERP CRM versions 19.0.0 and before, allows authenticated attackers to steal victim users' session cooki (CVSS 7.5, dolibarr/dolibarr)
- [CVE-2024-31634](https://cve.now/CVE-2024-31634.md): Cross Site Scripting (XSS) vulnerability in Xunruicms versions 4.6.3 and before, allows remote attacker to execute arbitrary code via the Se (CVSS 6.1)
- [CVE-2024-31680](https://cve.now/CVE-2024-31680.md): File Upload vulnerability in Shibang Communications Co., Ltd. (CVSS 8.8)
- [CVE-2024-31759](https://cve.now/CVE-2024-31759.md): An issue in sanluan PublicCMS v.4.0.202302.e allows an attacker to escalate privileges via the change password function. (CVSS 8.8)
- [CVE-2024-31760](https://cve.now/CVE-2024-31760.md): An issue in sanluan flipped-aurora gin-vue-admin 2.4.x allows an attacker to escalate privileges via the Session Expiration component. (CVSS 4.7)
- [CVE-2024-31783](https://cve.now/CVE-2024-31783.md): Cross Site Scripting (XSS) vulnerability in Typora v.1.6.7 and before, allows a local attacker to obtain sensitive information via a crafted (CVSS 6.1)
- [CVE-2024-31784](https://cve.now/CVE-2024-31784.md): An issue in Typora v.1.8.10 and before, allows a local attacker to obtain sensitive information and execute arbitrary code via a crafted pay (CVSS 6.1)
- [CVE-2024-32254](https://cve.now/CVE-2024-32254.md): Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via tms/admin/create-package.php. (CVSS 8.8)
- [CVE-2024-32256](https://cve.now/CVE-2024-32256.md): Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via /tms/admin/change-image.php. (CVSS 8.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-04-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.