# CVEs published 2024-04-23

63 CVEs were published on April 23, 2024: 4 critical, 20 high. Days are UTC.

- [CVE-2024-4075](https://cve.now/CVE-2024-4075.md): Kashipara Online Furniture Shopping Ecommerce Website login.php cross site scripting (CVSS 3.5, Kashipara Online Furniture Shopping Ecommerce Website)
- [CVE-2024-4074](https://cve.now/CVE-2024-4074.md): Kashipara Online Furniture Shopping Ecommerce Website prodInfo.php cross site scripting (CVSS 3.5, Kashipara Online Furniture Shopping Ecommerce Website)
- [CVE-2024-4073](https://cve.now/CVE-2024-4073.md): Kashipara Online Furniture Shopping Ecommerce Website prodList.php cross site scripting (CVSS 3.5, Kashipara Online Furniture Shopping Ecommerce Website)
- [CVE-2024-4072](https://cve.now/CVE-2024-4072.md): Kashipara Online Furniture Shopping Ecommerce Website search.php cross site scripting (CVSS 3.5, Kashipara Online Furniture Shopping Ecommerce Website)
- [CVE-2024-4071](https://cve.now/CVE-2024-4071.md): Kashipara Online Furniture Shopping Ecommerce Website prodInfo.php sql injection (CVSS 6.3, Kashipara Online Furniture Shopping Ecommerce Website)
- [CVE-2024-4070](https://cve.now/CVE-2024-4070.md): Kashipara Online Furniture Shopping Ecommerce Website prodList.php sql injection (CVSS 6.3, Kashipara Online Furniture Shopping Ecommerce Website)
- [CVE-2024-4069](https://cve.now/CVE-2024-4069.md): Kashipara Online Furniture Shopping Ecommerce Website search.php sql injection (CVSS 6.3, Kashipara Online Furniture Shopping Ecommerce Website)
- [CVE-2024-32866](https://cve.now/CVE-2024-32866.md): Conform contains Prototype Pollution Vulnerability in \`parseWith...\` function (CVSS 8.6, edmundhung conform · @conform-to/dom +2)
- [CVE-2024-4066](https://cve.now/CVE-2024-4066.md): Tenda AC8 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflow (CVSS 8.8, Tenda AC8)
- [CVE-2024-32875](https://cve.now/CVE-2024-32875.md): Hugo doesn't escape markdown title in internal render hooks (CVSS 6.1, gohugoio hugo · github.com/gohugoio/hugo)
- [CVE-2024-32869](https://cve.now/CVE-2024-32869.md): Hono vulnerable to Restricted Directory Traversal in serveStatic with deno (CVSS 5.3, honojs hono · hono)
- [CVE-2024-32662](https://cve.now/CVE-2024-32662.md): FreeRDP rdp\_redirection\_read\_base64\_wchar out of bound read (CVSS 7.5, FreeRDP)
- [CVE-2024-32661](https://cve.now/CVE-2024-32661.md): FreeRDP rdp\_write\_logon\_info\_v1 NULL access (CVSS 7.5, FreeRDP)
- [CVE-2024-32660](https://cve.now/CVE-2024-32660.md): FreeRDP zgfx\_decompress out of memory vulnerability (CVSS 7.5, FreeRDP)
- [CVE-2024-4065](https://cve.now/CVE-2024-4065.md): Tenda AC8 SetRebootTimer formSetRebootTimer stack-based overflow (CVSS 8.8, Tenda AC8)
- [CVE-2024-4064](https://cve.now/CVE-2024-4064.md): Tenda AC8 execCommand R7WebsSecurityHandler stack-based overflow (CVSS 8.8, Tenda AC8)
- [CVE-2024-32659](https://cve.now/CVE-2024-32659.md): freerdp\_image\_copy out of bound read (CVSS 9.8, FreeRDP)
- [CVE-2024-4063](https://cve.now/CVE-2024-4063.md): EZVIZ CS-C6-21WFR-8 Davinci Application certificate validation (CVSS 3.7, EZVIZ CS-C6-21WFR-8)
- [CVE-2024-4062](https://cve.now/CVE-2024-4062.md): Hualai Xiaofang iSC5 certificate validation (CVSS 3.7, Hualai Xiaofang iSC5)
- [CVE-2024-32658](https://cve.now/CVE-2024-32658.md): FreeRDP ExtractRunLengthRegular\* out of bound read (CVSS 9.8, FreeRDP)
- [CVE-2024-32482](https://cve.now/CVE-2024-32482.md): Tillitis TKey Signer possible RAM disclosure vulnerability (CVSS 2.2, tillitis tkey-device-signer)
- [CVE-2024-31208](https://cve.now/CVE-2024-31208.md): Synapse's V2 state resolution weakness allows DoS from remote room members (CVSS 6.5, element-hq synapse · matrix-synapse)
- [CVE-2024-21979](https://cve.now/CVE-2024-21979.md): An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed (CVSS 5.3, AMD Software: Adrenalin Edition · AMD Software: PRO Edition)
- [CVE-2024-21972](https://cve.now/CVE-2024-21972.md): An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed (CVSS 5.3, AMD Software: Adrenalin Edition · AMD Software: PRO Edition)
- [CVE-2024-28130](https://cve.now/CVE-2024-28130.md): An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI\_PList::createFromImage functionality of OFFIS DCMTK 3.6.8. (CVSS 7.5, OFFIS DCMTK)
- [CVE-2024-32679](https://cve.now/CVE-2024-32679.md): WordPress Shared Files plugin \<= 1.7.16 - Broken Access Control vulnerability (CVSS 5.3, Anssi Laitila Shared Files)
- [CVE-2024-2477](https://cve.now/CVE-2024-2477.md): wpDiscuz \<= 7.6.15 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative Text (CVSS 6.4, advancedcoding Comments – wpDiscuz)
- [CVE-2024-26922](https://cve.now/CVE-2024-26922.md): drm/amdgpu: validate the parameters of bo mapping operations more clearly (CVSS 7.8, Linux)
- [CVE-2023-47731](https://cve.now/CVE-2023-47731.md): IBM QRadar Suite Software cross-site scripting (CVSS 5.4, IBM QRadar Suite Software · IBM Cloud Pak for Security)
- [CVE-2024-3911](https://cve.now/CVE-2024-3911.md): Welotec: Clickjacking Vulnerability in WebUI (CVSS 6.5, Welotec SMART EMS · Welotec VPN Security Suite)
- [CVE-2024-3491](https://cve.now/CVE-2024-3491.md): Schema & Structured Data for WP & AMP \<= 1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via How To and FAQ Blocks (CVSS 6.4, magazine3 Schema & Structured Data for WP & AMP)
- [CVE-2024-3732](https://cve.now/CVE-2024-3732.md): GeoDirectory – WordPress Business Directory Plugin, or Classified Directory \<= 2.3.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd\_single\_tabs' Shortcode (CVSS 6.4, paoltaia GeoDirectory – WP Business Directory Plugin and Cl…)
- [CVE-2024-3665](https://cve.now/CVE-2024-3665.md): Rank Math SEO with AI SEO Tools \<= 1.0.216 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleWrapper' (CVSS 6.4, rankmath Rank Math SEO – AI SEO Tools to Dominate SEO Ranki…)
- [CVE-2024-3185](https://cve.now/CVE-2024-3185.md): Rapid7 Insight Agent Sensitive Key Exposed To Local Users (CVSS 6.8, Rapid7 Insight Agent)
- [CVE-2024-0900](https://cve.now/CVE-2024-0900.md): Elespare – Build Your Blog, News & Magazine Websites with Expert-Designed Template Kits. One Click Import: No Coding Skills Required! \<= 2.1.2 - Missing Authorization to Subscriber+ Arbitrary Post Creation (CVSS 4.3, EleSpare – News, Magazine and Blog Addons for Elementor)
- [CVE-2024-3664](https://cve.now/CVE-2024-3664.md): Quick Featured Images \<= 13.7.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Thumbnail Deletion/Setting (CVSS 4.3, kybernetikservices Quick Featured Images)
- [CVE-2024-4031](https://cve.now/CVE-2024-4031.md): MEVO WEBCAM APP Windows Unquoted Service Path Vulnerability (CVSS 4.4, Logitech MEVO WEBCAM APP)
- [CVE-2024-2493](https://cve.now/CVE-2024-2493.md): Session Hijacking Vulnerability in Hitachi Ops Center Analyzer (CVSS 7.5, Hitachi Ops Center Analyzer)
- [CVE-2023-6833](https://cve.now/CVE-2023-6833.md): Information Exposure Vulnerability in Hitachi Ops Center Administrator (CVSS 4.4, Hitachi Ops Center Administrator)
- [CVE-2024-3889](https://cve.now/CVE-2024-3889.md): Royal Elementor Addons and Templates \<= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Accordion Title Tags (CVSS 6.4, wproyal Royal Addons for Elementor – Addons and Templates K…)
- [CVE-2024-2798](https://cve.now/CVE-2024-2798.md): Royal Elementor Addons and Templates \<= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (CVSS 6.4, wproyal Royal Addons for Elementor – Addons and Templates K…)
- [CVE-2024-2799](https://cve.now/CVE-2024-2799.md): Royal Elementor Addons and Templates \<= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags (CVSS 6.4, wproyal Royal Addons for Elementor – Addons and Templates K…)
- [CVE-2024-21511](https://cve.now/CVE-2024-21511.md): Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone paramete (CVSS 9.8, mysql2)
- [CVE-2024-28890](https://cve.now/CVE-2024-28890.md): Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability. (CVSS 5.3, WPMU DEV Forminator)
- [CVE-2024-31077](https://cve.now/CVE-2024-31077.md): Forminator prior to 1.29.3 contains a SQL injection vulnerability. (CVSS 7.2, WPMU DEV Forminator)
- [CVE-2024-31857](https://cve.now/CVE-2024-31857.md): Forminator prior to 1.15.4 contains a cross-site scripting vulnerability. (CVSS 5.4, WPMU DEV Forminator)
- [CVE-2024-1241](https://cve.now/CVE-2024-1241.md): Watchdog Antivirus v1.6.415 - Denial of Service (CVSS 5.5, Watchdog Antivirus)
- [CVE-2024-2760](https://cve.now/CVE-2024-2760.md): Bkav Home v7816, build 2403161130 - Kernel Memory Leak (CVSS 5.5, Bkav Home)
- [CVE-2024-3293](https://cve.now/CVE-2024-3293.md): rtMedia for WordPress, BuddyPress and bbPress \<= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia\_gallery Shortcode (CVSS 8.8, rtcamp rtMedia for WordPress, BuddyPress and bbPress)
- [CVE-2023-48183](https://cve.now/CVE-2023-48183.md): QuickJS before c4cdd61 has a build\_for\_in\_iterator NULL pointer dereference because of an erroneous lexical scope of "this" with eval. (CVSS 7.5)
- [CVE-2023-48184](https://cve.now/CVE-2023-48184.md): QuickJS before 7414e5f has a quickjs.h JS\_FreeValueRT use-after-free because of incorrect garbage collection of async functions with closure (CVSS 3.9)
- [CVE-2024-28627](https://cve.now/CVE-2024-28627.md): An issue in Flipsnack v.18/03/2024 allows a local attacker to obtain sensitive information via the reader.gz.js file. (CVSS 7.5)
- [CVE-2024-30800](https://cve.now/CVE-2024-30800.md): PX4 Autopilot v.1.14 allows an attacker to fly the drone into no-fly zones by breaching the geofence using flaws in the function. (CVSS 5.6)
- [CVE-2024-30886](https://cve.now/CVE-2024-30886.md): A stored cross-site scripting (XSS) vulnerability in the remotelink function of HadSky v7.6.3 allows attackers to execute arbitrary web scri (CVSS 5.4)
- [CVE-2024-31616](https://cve.now/CVE-2024-31616.md): An issue discovered in RG-RSR10-01G-T(W)-S and RG-RSR10-01G-T(WA)-S routers with firmware version RSR10-01G-T-S\_RSR\_3.0(1)B9P2, Release(0715 (CVSS 8.8)
- [CVE-2024-31804](https://cve.now/CVE-2024-31804.md): An unquoted service path vulnerability in Terratec DMX\_6Fire USB v.1.23.0.02 allows a local attacker to escalate privileges via the Program. (CVSS 6.7)
- [CVE-2024-32258](https://cve.now/CVE-2024-32258.md): The network server of fceux 2.7.0 has a path traversal vulnerability, allowing attackers to overwrite any files on the server without authen (CVSS 8.8)
- [CVE-2024-33211](https://cve.now/CVE-2024-33211.md): Tenda FH1206 V1.2.0.8(8155)\_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter in ip/g (CVSS 7.3)
- [CVE-2024-33212](https://cve.now/CVE-2024-33212.md): Tenda FH1206 V1.2.0.8(8155)\_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter in ip/gofor (CVSS 8.8)
- [CVE-2024-33213](https://cve.now/CVE-2024-33213.md): Tenda FH1206 V1.2.0.8(8155)\_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/go (CVSS 6.5)
- [CVE-2024-33214](https://cve.now/CVE-2024-33214.md): Tenda FH1206 V1.2.0.8(8155)\_EN was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter in ip/goform/R (CVSS 7.5)
- [CVE-2024-33215](https://cve.now/CVE-2024-33215.md): Tenda FH1206 V1.2.0.8(8155)\_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/go (CVSS 9.8)
- [CVE-2024-33217](https://cve.now/CVE-2024-33217.md): Tenda FH1206 V1.2.0.8(8155)\_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter in ip/goform/add (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-04-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.