CVEs published April 26, 2024
138 CVEs were published on April 26, 2024: 15 critical, 40 high.
- Published
- 138
- Critical
- 15
- High
- 40
- Medium
- 77
- Low
- 5
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 37
Most affected products
- Mattermost · github.com/mattermost/mattermost-server
- 6
- QNAP Systems QTS · QNAP Systems QuTS hero +1
- 5
- Tenda W9
- 5
- QNAP Systems QTS · QNAP Systems QuTS hero
- 4
- ENL Newsletter
- 3
- Salon booking system
- 3
- Tenda AX1806
- 3
- Claris FileMaker Server
- 2
- Hanwha Vision Co. HRX-1620
- 2
- MM-email2image
- 2
Critical 15
- CVE-2024-32881Unauthorized access to GET/SET of Slack Bot Tokens in Danswerdanswer-ai danswer
- CVE-2024-32880pyLoad allows upload to arbitrary folder lead to RCEpyload · pyload-ng
- CVE-2023-47222Media Streaming add-onQNAP Systems Media Streaming add-on
- CVE-2024-32764myQNAPcloud LinkQNAP Systems myQNAPcloud Link
- CVE-2024-32766QTS, QuTS hero, QuTScloudQNAP Systems QTS · QNAP Systems QuTS hero +1
- CVE-2024-0740Eclipse Target Management <= 4.5.500 Command InjectionEclipse Foundation Eclipse Target Management
- CVE-2024-3962Product Addons & Fields for WooCommerce <= 32.0.18 - Unauthenticated Arbitrary File Upload via ppom_upload_filethemeisle PPOM – Product Addons & Custom Fields for WooComm…
- CVE-2024-22632Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 was discovered to contain a remote code execution (RCE) vulnerability v
- CVE-2024-22633Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 was discovered to contain a remote code execution (RCE) vulnerability v
- CVE-2024-25343Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords.
- CVE-2024-28322SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run
- CVE-2024-30804An issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v.10013 allows an attacker to execute arbitrary code via craft
- CVE-2024-31601An issue in Beijing Panabit Network Software Co., Ltd Panalog big data analysis platform v.
- CVE-2024-33344D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of upload_firmware.cgi, which allows remote attackers to e
- CVE-2024-33668An issue was discovered in Zammad before 6.3.0.
High 40
- CVE-2024-4244Tenda W9 DhcpSetSer fromDhcpSetSer stack-based overflowTenda W9
- CVE-2024-4243Tenda W9 wifiSSIDset formwrlSSIDset stack-based overflowTenda W9
- CVE-2024-3052Z/IP Gateway S2 Nonce Get Denial of Service Vulnerabilitysilabs.com Z/IP Gateway SDK
- CVE-2024-3051Z/IP Gateway Device Reset Locally Denial of Service Vulnerabilitysilabs.com Z/IP Gateway SDK
- CVE-2024-32883MCUboot Injection attack of unprotected TLV valuesmcu-tools mcuboot · github.com/mcu-tools/mcuboot
- CVE-2024-4242Tenda W9 wifiSSIDget formwrlSSIDget stack-based overflowTenda W9
- CVE-2024-4241Tenda W9 formQosManageDouble_auto stack-based overflowTenda W9
- CVE-2024-32878 Use of Uninitialized Variable Vulnerability in llama.cppggerganov llama.cpp
- CVE-2024-4240Tenda W9 formQosManageDouble_user stack-based overflowTenda W9
- CVE-2024-4239Tenda AX1806 SetRebootTimer formSetRebootTimer stack-based overflowTenda AX1806
- CVE-2024-4238Tenda AX1806 SetOnlineDevName formSetDeviceName stack-based overflowTenda AX1806
- CVE-2022-48611A logic issue was addressed with improved checks.Apple iTunes for Windows
- CVE-2024-4237Tenda AX1806 execCommand R7WebsSecurityHandler stack-based overflowTenda AX1806
- CVE-2024-4236Tenda AX1803 SetDDNSCfg formSetSysToolDDNS stack-based overflowTenda AX1803
- CVE-2024-27790Claris International has resolved an issue of potentially allowing unauthorized access to records stored in databases hosted on FileMaker SeClaris FileMaker Server
- CVE-2023-50363QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2023-51364QTS, QuTS hero, QuTScloudQNAP Systems QTS · QNAP Systems QuTS hero +1
- CVE-2023-51365QTS, QuTS hero, QuTScloudQNAP Systems QTS · QNAP Systems QuTS hero +1
- CVE-2024-27124QTS, QuTS hero, QuTScloudQNAP Systems QTS · QNAP Systems QuTS hero +1
- CVE-2024-1789The WP SMTP plugin for WordPress is vulnerable to SQL Injection via the 'search' parameter in versions 1.2 to 1.2.6 due to insufficient escajack-kitterhing WP SMTP
- CVE-2023-6116Remote Code Execution without authentication using stack overflowHanwha Vision Co. XRN-420S
- CVE-2023-6096using a inappropriate encryption logicHanwha Vision Co. HRX-1620
- CVE-2023-6095Remote Code Execution without authentication using memory overflowHanwha Vision Co. HRX-1620
- CVE-2024-4056Denial of service condition in M-Files ServerM-Files Server
- CVE-2024-3075MM-email2image <= 0.2.5 - Contributor+ Stored XSSMM-email2image
- CVE-2024-3154Cri-o: arbitrary command injection via pod annotationcri-o · Red Hat OpenShift Container Platform +1
- CVE-2024-4163Privilege Escalation on Skylab IIoT Gateway (IGX)Skylab IIoT Gateway
- CVE-2023-51794Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/af_stere
- CVE-2024-28327Asus RT-N12+ B1 router stores user passwords in plaintext, which could allow local attackers to obtain unauthorized access and modify router
- CVE-2024-31502An issue in Insurance Management System v.1.0.0 and before allows a remote attacker to escalate privileges via a crafted POST request to /ad
- CVE-2024-31551Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via c
- CVE-2024-31755cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValues
- CVE-2024-32406Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via
- CVE-2024-33258Jerryscript commit ff9ff8f was discovered to contain a segmentation violation via the component vm_loop at jerry-core/vm/vm.c.
- CVE-2024-33342D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows remote attackers to e
- CVE-2024-33343D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers
- CVE-2024-33666An issue was discovered in Zammad before 6.3.0.
- CVE-2024-33671An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391.
- CVE-2024-33672An issue was discovered in Veritas NetBackup before 10.4.
- CVE-2024-33673An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391.
Medium, low and unrated 83
- CVE-2024-32887Reflected XSS in sidekiqsidekiq
- CVE-2024-32884gix-transport indirect code execution via malicious usernameByron gitoxide · gix-transport +2
- CVE-2024-4235Netgear DG834Gv5 Web Management Interface cleartext storageNetgear DG834Gv5
- CVE-2024-32730Missing authorization check in SAP Enable Now ManagerSAP_SE SAP Enable Now
- CVE-2023-42955Claris International has successfully resolved an issue of potentially exposing password information to front-end websites when signed in toClaris FileMaker Server
- CVE-2024-32476Denial of Service via malicious jqPathExpressions in ignoreDifferencesargoproj argo-cd · github.com/argoproj/argo-cd/v2 +1
- CVE-2023-41290QuFirewallQNAP Systems QuFirewall
- CVE-2023-41291QuFirewallQNAP Systems QuFirewall
- CVE-2023-50361QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2023-50362QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2023-50364QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2024-21905QTS, QuTS hero, QuTScloudQNAP Systems QTS · QNAP Systems QuTS hero +1
- CVE-2022-40975WordPress Post Slider plugin <= 1.6.7 - Broken Access Control vulnerabilityAazztech Post Slider
- CVE-2024-3076MM-email2image <= 0.2.5 - Stored XSS via CSRFMM-email2image
- CVE-2024-4234WordPress Filterable Portfolio plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerabilitySayful Islam Filterable Portfolio
- CVE-2024-33688WordPress Teluro theme <= 1.0.31 - Cross Site Request Forgery (CSRF) vulnerabilityExtend Themes Teluro
- CVE-2024-33689WordPress Radio Station plugin <= 2.5.7 - Cross Site Request Forgery (CSRF) vulnerabilityTony Zeoli Radio Station
- CVE-2024-33690WordPress Financio theme <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerabilityJegstudio Financio
- CVE-2024-33691WordPress Popup Builder by OptinMonster plugin <= 2.15.3 - Cross Site Request Forgery (CSRF) Notice Dismissal vulnerabilityOptinMonster Popup Builder Team OptinMonster
- CVE-2024-33692WordPress Smart Recent Posts Widget plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerabilitySatrya Smart Recent Posts Widget
- CVE-2024-33693WordPress Meks Smart Social Widget plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerabilityMeks Smart Social Widget
- CVE-2024-33694WordPress Meks ThemeForest Smart Widget plugin <= 1.5 - Cross Site Scripting (XSS) vulnerabilityMeks ThemeForest Smart Widget
- CVE-2024-33695WordPress Fan Page Widget by ThemeNcode plugin <= 2.0 - Cross Site Scripting (XSS) vulnerabilityFan Page Widget by ThemeNcode
- CVE-2024-33696WordPress WordPress Ad Widget plugin <= 2.20.0 - Cross Site Scripting (XSS) vulnerabilityBroadstreet XPRESS WordPress Ad Widget
- CVE-2024-33697WordPress CF7 File Download plugin <= 2.0 - Cross Site Scripting (XSS) vulnerabilityRimes Gold CF7 File Download – File Download for CF7
- CVE-2023-52646aio: fix mremap after fork null-derefLinux
- CVE-2024-32822WordPress Reviews Plus plugin <= 1.3.4 - Broken Access Control vulnerabilityimpleCode Reviews Plus
- CVE-2024-32826WordPress VK Block Patterns plugin <= 1.31.0 - Broken Access Control vulnerabilityVektor VK Block Patterns
- CVE-2024-32828WordPress Table Rate Shipping Method for WooCommerce by Flexible Shipping plugin <= 4.24.15 - Broken Access Control vulnerabilityOctolize Flexible Shipping
- CVE-2024-32829WordPress Data Tables Generator by Supsystic plugin <= 1.10.31 - Broken Access Control vulnerabilityData Tables Generator by Supsystic
- CVE-2024-32957WordPress Page Builder: Live Composer plugin <= 1.5.38 - Broken Access Control vulnerabilityLive Composer Team Page Builder: Live Composer
- CVE-2024-33677WordPress Contact Form 7 Extension For Mailchimp plugin <= 0.5.70 - Cross Site Request Forgery (CSRF) vulnerabilityRenzo Johnson Contact Form 7 Extension For Mailchimp
- CVE-2024-33678WordPress ClickCease Click Fraud Protection plugin <= 3.2.7 - Cross Site Request Forgery (CSRF) vulnerabilityeranfl ClickCease Click Fraud Protection
- CVE-2024-33679WordPress FameTheme Demo Importer plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerabilityFameThemes FameTheme Demo Importer
- CVE-2024-33680WordPress MainWP Child Reports plugin <= 2.1.1 - Cross Site Request Forgery (CSRF) vulnerabilityMainWP Child Reports
- CVE-2024-33682WordPress WP GDPR Compliance plugin <= 2.0.23 - Cross Site Request Forgery (CSRF) vulnerabilityCookie Information A/S WP GDPR Compliance
- CVE-2024-33683WordPress Hide Dashboard Notifications plugin <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerabilityWP Republic Hide Dashboard Notifications
- CVE-2024-3682WP STAGING <= 3.4.3 and WP STAGING Pro <= 5.4.3 - Sensitive Information Exposure via Log Filerenehermi WP STAGING – WordPress Backup, Restore & Migratio…
- CVE-2024-4198Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes which allows an attacker authentiMattermost · github.com/mattermost/mattermost-server
- CVE-2024-4195Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes, which allows an attacker authentMattermost · github.com/mattermost/mattermost-server
- CVE-2024-4183Mattermost versions 8.1.x before 8.1.12, 9.6.x before 9.6.1, 9.5.x before 9.5.3, 9.4.x before 9.4.5 fail to limit the number of active sessiMattermost · github.com/mattermost/mattermost-server
- CVE-2024-4182Mattermost versions 9.6.0, 9.5.x before 9.5.3, 9.4.x before 9.4.5, and 8.1.x before 8.1.12 fail to handle JSON parsing errors in custom statMattermost · github.com/mattermost/mattermost-server
- CVE-2024-32046Detailed error discloses full file path with dev mode offMattermost · github.com/mattermost/mattermost-server
- CVE-2024-22091Excessive resource consumption due to lack to request path size limitsMattermost · github.com/mattermost/mattermost-server
- CVE-2024-2920WP-Members Membership Plugin <= 3.4.9.3 - Unprotected Storage of Potentially Sensitive Filescbutlerjr WP-Members Membership Plugin
- CVE-2024-3678Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposurepr-gateway Blog2Social: Social Media Auto Post & Scheduler
- CVE-2024-3890Happy Addons for Elementor <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendly Widgetthehappymonster Happy Addons for Elementor
- CVE-2024-33642WordPress Advanced Post List plugin <= 0.5.6.1 - Cross Site Scripting (XSS) vulnerabilityEkoJR Advanced Post List
- CVE-2024-33639WordPress PopupAlly plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerabilityAccessAlly PopupAlly
- CVE-2024-33598WordPress Annual Archive plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerabilityTwinpictures Annual Archive
- CVE-2024-33638WordPress Smart Maintenance Mode plugin <= 1.4.4 - Cross Site Request Forgery (CSRF) vulnerabilityBrijesh Kothari Smart Maintenance Mode
- CVE-2024-33650WordPress Serious Slider plugin <= 1.2.4 - Cross Site Request Forgery (CSRF) vulnerabilityCryout Creations Serious Slider
- CVE-2024-33651WordPress MF Gig Calendar plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerabilityMatthew Fries MF Gig Calendar
- CVE-2024-3188Shortcodes Ultimate < 7.1.0 - Contributor+ Stored XSSWP Shortcodes Plugin — Shortcodes Ultimate
- CVE-2024-3060ENL Newsletter <= 1.0.1 - Admin+ SQL InjectionENL Newsletter
- CVE-2024-3059ENL Newsletter <= 1.0.1 - Campaign Deletion via CSRFENL Newsletter
- CVE-2024-3058ENL Newsletter <= 1.0.1 - Stored XSS via CSRFENL Newsletter
- CVE-2024-3048Bannerlid <= 1.1.0 - Reflected XSSBannerlid
- CVE-2024-2908Call Now Button < 1.4.7 - Admin+ Stored XSSCall Now Button
- CVE-2024-2837WP Chat App < 3.6.4 - Admin+ Stored XSSWP Chat App
- CVE-2024-2603Salon booking system <= 9.6.5 - Editor+ Stored XSS via Email SettingsSalon booking system
- CVE-2024-2439Salon booking system <= 9.6.5 - Editor+ Stored XSSSalon booking system
- CVE-2024-2429Salon booking system <= 9.6.5 - Settings Update via CSRFSalon booking system
- CVE-2024-2310WP Google Review Slider < 13.6 - Admin+ Stored XSSWP Google Review Slider
- CVE-2024-2159Sassy Social Share < 3.3.61 - Contributor+ Stored XSSSocial Sharing Plugin
- CVE-2024-0905Fancy Product Designer < 6.1.8 - Reflected Cross Site ScriptingFancy Product Designer
- CVE-2022-48682In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink.
- CVE-2023-26603JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions.
- CVE-2023-47252An issue was discovered in PnpSmm in Insyde InsydeH2O with kernel 5.0 through 5.6.
- CVE-2024-28325Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to obtain unauthorized access and modify router se
- CVE-2024-28326Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART int
- CVE-2024-28328CSV Injection vulnerability in the Asus RT-N12+ router allows administrator users to inject arbitrary commands or formulas in the client nam
- CVE-2024-31741Cross Site Scripting vulnerability in MiniCMS v.1.11 allows a remote attacker to run arbitrary code via crafted string in the URL after logi
- CVE-2024-31828Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via lavalite/cms
- CVE-2024-32404Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via
- CVE-2024-33255Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p) in ecma_free_strin
- CVE-2024-33259Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component scanner_seek at jerry-core/parser/js/js-scan
- CVE-2024-33260Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component parser_parse_class at jerry-core/parser/js/j
- CVE-2024-33263QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime(JSRuntime *) at quickjs.c.
- CVE-2024-33665angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive.
- CVE-2024-33667An issue was discovered in Zammad before 6.3.0.
- CVE-2024-33669An issue was discovered in Passbolt Browser Extension before 4.6.2.passbolt-browser-extension
- CVE-2024-33670Passbolt API before 4.6.2 allows HTML injection in a URL parameter, resulting in custom content being displayed when a user visits the craftpassbolt/passbolt_api