CVEs published April 25, 2024
94 CVEs were published on April 25, 2024: 12 critical, 30 high.
- Published
- 94
- Critical
- 12
- High
- 30
- Medium
- 51
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 35
Most affected products
- vyperlang vyper · vyper
- 6
- GitLab
- 5
- Tenda 4G300
- 5
- mirror-registry · mirror registry for Red Hat OpenShift
- 4
- Brocade SANnav
- 3
- Grassroot DICOM
- 3
- bigbluebutton greenlight
- 2
- glpi-project glpi-agent
- 2
- Hyperion Web Server
- 2
- keycloak · Red Hat build of Keycloak +2
- 2
Critical 12
- CVE-2024-32651Server Side Template Injection in Jinja2 allows Remote Command Executiondgtlmoon changedetection.io · changedetection-io
- CVE-2024-0916Unauthenticated Remote Code Execution in UvDesk CommunityWebkul Software UvDesk Community
- CVE-2022-36029BigBlueButton Greenlight Open Redirect vulnerabilitybigbluebutton greenlight
- CVE-2022-36028BigBlueButton Greenlight Open Redirect vulnerabilitybigbluebutton greenlight
- CVE-2024-31266WordPress Advanced Order Export For WooCommerce plugin <= 3.4.4 - Remote Code Execution (RCE) vulnerabilityAlgolPlus Advanced Order Export For WooCommerce
- CVE-2024-30560WordPress DX-Watermark plugin <= 1.0.4 - CSRF to Arbitrary File Upload and XSS vulnerability大侠WP DX-Watermark
- CVE-2024-22144WordPress Anti-Malware Security and Brute-Force Firewall plugin <= 4.21.96 - Unauthenticated Predictable Nonce Brute-Force Leading to RCE vulnerabilityEli Scheetz Anti-Malware Security and Brute-Force Firewall
- CVE-2023-51484WordPress Login as User or Customer plugin <= 3.8 - Unauthenticated Account Takeover vulnerabilitywp-buy Login as User or Customer
- CVE-2023-51482WordPress Eazy Plugin Manager plugin <= 4.1.2 - Auth. Arbitrary Options Update lead to RCE vulnerabilityEazyPlugins Eazy Plugin Manager
- CVE-2023-51478WordPress Build App Online plugin <= 1.0.19 - Unauthenticated Account Takeover vulnerabilityAbdul Hakeem Build App Online
- CVE-2024-31615ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php.
- CVE-2024-33661Portainer before 2.20.0 allows redirects when the target is not index.yaml.
High 30
- CVE-2024-3624Mirror-registry: database user and password stored in plain-textmirror-registry · mirror registry for Red Hat OpenShift
- CVE-2024-3625Mirror-registry: redis password stored in plain-textmirror-registry · mirror registry for Red Hat OpenShift
- CVE-2024-3622Mirror-registry: plain-text default csrf secret keymirror-registry · mirror registry for Red Hat OpenShift
- CVE-2024-28241GlPI-Agent MSI package installation doesn't update folder security profile when using non default installation folderglpi-project glpi-agent
- CVE-2024-28240GLPI-Agent's MSI package installation permits local users to change Agent configurationglpi-project glpi-agent
- CVE-2024-1657Platform: insecure websocket used when interacting with eda serveransible · Red Hat Ansible Automation Platform 2.4 for RHEL
- CVE-2024-1139Cluster-monitoring-operator: credentials leakcluster-monitoring-operator · Red Hat OpenShift Containe… +2
- CVE-2023-6596Openshift: incomplete fix for rapid reset (cve-2023-44487/cve-2023-39325)openshift · Red Hat OpenShift Container Platform
- CVE-2024-22391A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroot DICOM 3.0.23.Grassroot DICOM
- CVE-2024-22373An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3Grassroot DICOM
- CVE-2024-4171Tenda W30E WizardHandle fromWizardHandle stack-based overflowTenda W30E
- CVE-2024-4024Authentication Bypass by Assumed-Immutable Data in GitLabGitLab
- CVE-2024-4170Tenda 4G300 sub_429A30 stack-based overflowTenda 4G300
- CVE-2024-4169Tenda 4G300 sub_4279CC stack-based overflowTenda 4G300
- CVE-2024-4168Tenda 4G300 sub_4260F0 stack-based overflowTenda 4G300
- CVE-2024-4167Tenda 4G300 sub_422AA4 stack-based overflowTenda 4G300
- CVE-2024-4166Tenda 4G300 sub_41E858 stack-based overflowTenda 4G300
- CVE-2024-4165Tenda G3 modifyDhcpRule stack-based overflowTenda G3
- CVE-2024-2434Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabGitLab
- CVE-2024-2829Inefficient Regular Expression Complexity in GitLabGitLab
- CVE-2024-4164Tenda G3 ModifyPppAuthWhiteMac formModifyPppAuthWhiteMac stack-based overflowTenda G3
- CVE-2024-25583Crafted responses can lead to a denial of service in Recursor if recursive forwarding is configuredPowerDNS Recursor
- CVE-2024-4077WordPress UDesign theme <= 4.7.3 - Reflected Cross Site Scripting (XSS) vulnerabilityAndonDesign UDesign
- CVE-2024-25917WordPress WP Setup Wizard plugin <= 1.0.8.1 - Auth. Full Database Download VulnerabilityCodeRevolution WP Setup Wizard
- CVE-2024-4173SANnav versions exposes Kafka in the wan interface.Brocade SANnav
- CVE-2024-4161Syslog traffic sent in clear-textBrocade SANnav
- CVE-2024-31609Cross Site Scripting (XSS) vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields
- CVE-2024-32324Buffer Overflow vulnerability in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v.3.2 allows a local attacker to execute arbitrary code
- CVE-2024-32358An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in module function, a
- CVE-2024-33247Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin-manage-user.php.
Medium, low and unrated 52
- CVE-2024-32868ZITADEL's Improper Lockout Mechanism Leads to MFA Bypasszitadel · github.com/zitadel/zitadel
- CVE-2024-3265WP Advanced Search <= 1.1.6 - Admin+ SQL InjectionAdvanced Search
- CVE-2024-32649vyper performs double eval of the argument of sqrtvyperlang vyper · vyper
- CVE-2024-32648vyper default functions don't respect nonreentrancy keysvyperlang vyper · vyper
- CVE-2024-3623Mirror-registry: default database secret key stored in plain-text on initial configuration filemirror-registry · mirror registry for Red Hat OpenShift
- CVE-2024-3508Bzip2: compressed content bomb leads to denial of service of bombastic apibzip2 · Red Hat Trusted Profile Analyzer
- CVE-2024-2905Rpm-ostree: world-readable /etc/shadow filerpm-ostree · Red Hat Enterprise Linux +1
- CVE-2024-32647vyper performs double eval of raw_args in create_from_blueprintvyperlang vyper · vyper
- CVE-2024-32646vyper performs double eval of the slice args when buffer from adhoc locationsvyperlang vyper · vyper
- CVE-2024-32645vyper performs incorrect topic logging in raw_logvyperlang vyper · vyper
- CVE-2024-32481vyper's range(start, start + N) reverts for negative numbersvyperlang vyper · vyper
- CVE-2024-32467Meteraphsere vulnerable to unauthorized viewing by workspace membersmetersphere
- CVE-2024-2467Perl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)perl-Crypt-OpenSSL-RSA · Red Hat Enterprise Linux
- CVE-2024-25624iris-web vulnerable to Server Side Template Injection in reportsdfir-iris iris-web
- CVE-2024-1726Quarkus: security checks for some inherited endpoints performed after serialization in resteasy reactive may trigger a denial of servicequarkus-resteasy-reactive · Red Hat build of Quarkus 3.2… +2
- CVE-2024-1102Jberet: jberet-core logging database credentialsjberet · Red Hat JBoss Enterprise Application Platform +6
- CVE-2024-0874Coredns: cd bit response is cached and served latercoredns · Red Hat OpenShift Container Platform +3
- CVE-2023-6787Keycloak: session hijacking via re-authenticationkeycloak · Red Hat build of Keycloak +2
- CVE-2023-6717Keycloak: xss via assertion consumer service url in saml post-binding flowkeycloak · Red Hat AMQ Broker +16
- CVE-2023-6544Keycloak: authorization bypassorg.keycloak:keycloak-services · Red Hat build of Keyclo… +3
- CVE-2023-6484Keycloak: log injection during webauthn authentication or registrationkeycloak · Red Hat build of Keycloak +4
- CVE-2023-5675Quarkus: authorization flaw in quarkus resteasy reactive and classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used.quarkus-resteasy-reactive · Red Hat build of Quarkus 2.… +13
- CVE-2024-33592WordPress Radio Player plugin <= 2.0.73 - Server Side Request Forgery (SSRF) vulnerabilitySoftLab Radio Player
- CVE-2024-25569An out-of-bounds read vulnerability exists in the RAWCodec::DecodeBytes functionality of Mathieu Malaterre Grassroot DICOM 3.0.23.Grassroot DICOM
- CVE-2024-4172idcCMS cross-site request forgeryidcCMS
- CVE-2024-4006Incorrect Authorization in GitLabGitLab
- CVE-2023-3597Keycloak: secondary factor bypass in step-up authenticationkeycloak · Red Hat build of Keycloak +2
- CVE-2024-25026IBM WebSphere Application Server denial of serviceIBM WebSphere Application Server
- CVE-2024-4175Improper Input Validation vulnerability in Hyperion Web ServerHyperion Web Server
- CVE-2024-4174Cross-Site Scripting (XSS) vulnerability in Hyperion Web ServerHyperion Web Server
- CVE-2024-1347Authentication Bypass by Spoofing in GitLabGitLab
- CVE-2024-3730Simple Membership <= 4.4.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcodewpinsider-1 Simple Membership
- CVE-2024-32676WordPress LoginPress Pro plugin < 3.0.0 - Captcha Bypass vulnerabilityLoginPress Pro
- CVE-2023-52220WordPress MonsterInsights plugin <= 8.21.0 - Broken Access Control vulnerabilityMonsterInsights Google Analytics by Monster Insights
- CVE-2024-3994Tutor LMS – eLearning and online course solution <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tutor_instructor_list' Shortcodethemeum Tutor LMS – eLearning and online course solution
- CVE-2024-4035Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery <= 2.7.7.21 - Authenticated (Author+) Cross-Site Scriptinggt3themes Photo Gallery – GT3 Image Gallery & Gutenberg Blo…
- CVE-2024-32961WordPress Blocksy theme <= 2.0.33 - Cross Site Scripting (XSS) vulnerabilitycreativethemeshq Blocksy
- CVE-2024-3733Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Information Exposurewpdevteam Essential Addons for Elementor – Popular Elemento…
- CVE-2024-3893Classified Listing – Classified ads & Business Directory Plugin <= 3.0.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletiontechlabpro1 Classified Listing – AI-Powered Classified ads…
- CVE-2024-3988Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Sina Fancy Text Widgetshaonsina Sina Extension for Elementor
- CVE-2024-3929Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Post Overlaypt-guy Content Views – Post Grid & Filter, Recent Posts, Ca…
- CVE-2023-6237Excessive time spent checking invalid RSA public keysOpenSSL
- CVE-2024-2907AGCA – Custom Dashboard & Login Page < 7.2.2 - Admin+ Stored XSS via Image URLAGCA
- CVE-2024-4159Protection mechanismsBrocade SANnav
- CVE-2024-29660Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary code via a crafted payload to the stepselec
- CVE-2024-30890Cross Site Scripting vulnerability in ED01-CMS v.1.0 allows an attacker to obtain sensitive information via the categories.php component.
- CVE-2024-30939An issue discovered in Yealink VP59 Teams Editions with firmware version 91.15.0.118 allows a physically proximate attacker to gain control
- CVE-2024-31574Cross Site Scripting vulnerability in TWCMS v.2.6 allows a local attacker to execute arbitrary code via a crafted script
- CVE-2024-31610File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attac
- CVE-2024-32236An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php compo
- CVE-2024-33663python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats.python-jose
- CVE-2024-33664python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryppython-jose