CVEs published April 29, 2024
150 CVEs were published on April 29, 2024: 27 critical, 54 high.
- Published
- 150
- Critical
- 27
- High
- 54
- Medium
- 66
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 28
Most affected products
- MailCleaner
- 6
- Ofofonobs HubBank
- 5
- Piotnet Addons For Elementor Pro
- 5
- 8theme XStore Core
- 4
- HGiga iSherlock
- 4
- PHP Group PHP
- 4
- AA-Team WZone
- 3
- 8theme XStore
- 2
- Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect
- 2
- codeSavory Knowledge Base documentation & wiki plugin – Bas…
- 2
Critical 27
- CVE-2024-4306Unrestricted Upload of File with Dangerous Type vulnerability in HubBankOfofonobs HubBank
- CVE-2024-3375Broken Access Control in Havelsan's DialogueHavelsan Dialogue
- CVE-2024-33566WordPress OrderConvo plugin <= 12.4 - Unauthenticated API Access to Arbitrary File Upload vulnerabilityN-Media OrderConvo
- CVE-2024-33553WordPress XStore Core plugin <= 5.3.5 - Unauthenticated PHP Object Injection vulnerability8theme XStore Core
- CVE-2024-3191MailCleaner Email os command injectionMailCleaner
- CVE-2024-33544WordPress WZone plugin <= 14.0.10 - Unauthenticated SQL Injection vulnerabilityAA-Team WZone
- CVE-2024-33546WordPress WZone plugin <= 14.0.10 - Arbitrary SQL Update Execution vulnerabilityAA-Team WZone
- CVE-2024-33551WordPress XStore Core plugin <= 5.3.5 - Unauthenticated SQL Injection vulnerability8theme XStore Core
- CVE-2024-33559WordPress XStore theme <= 9.3.5 - Unauthenticated SQL Injection vulnerability8theme XStore
- CVE-2024-1874Command injection via array-ish $command parameter of proc_open()PHP Group PHP
- CVE-2024-4300E-WEBInformationCo. FS-EZViewer(Web) - Sensitive Data ExposureE-WEBInformationCo. FS-EZViewer
- CVE-2023-50434emdns_resolve_raw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based b
- CVE-2024-31705An issue in Infotel Conseil GLPI v.10.X.X and after allows a remote attacker to execute arbitrary code via the insufficient validation of us
- CVE-2024-31820An issue in Ecommerce-CodeIgniter-Bootstrap commit v.
- CVE-2024-31822An issue in Ecommerce-CodeIgniter-Bootstrap commit v.
- CVE-2024-31823An issue in Ecommerce-CodeIgniter-Bootstrap commit v.
- CVE-2024-32491An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in user can upload a file
- CVE-2024-33266SQL Injection vulnerability in Helloshop deliveryorderautoupdate v.2.8.1 and before allows an attacker to run arbitrary SQL commands via the
- CVE-2024-33268SQL Injection vulnerability in Digincube mdgiftproduct before 1.4.1 allows an attacker to run arbitrary SQL commands via the MdGiftRule::add
- CVE-2024-33269SQL Injection vulnerability in Prestaddons flashsales 1.9.7 and before allows an attacker to run arbitrary SQL commands via the FsModel::get
- CVE-2024-33276SQL Injection vulnerability in FME Modules preorderandnotication v.3.1.0 and before allows a remote attacker to run arbitrary SQL commands v
- CVE-2024-33350Directory Traversal vulnerability in TaoCMS v.3.0.2 allows a remote attacker to execute arbitrary code and obtain sensitive information via
- CVE-2024-33435Insecure Permissions vulnerability in Guangzhou Yingshi Electronic Technology Co.
- CVE-2024-33444SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.p
- CVE-2024-33445An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter
- CVE-2024-33449An SSRF issue in the PDFMyURL service allows a remote attacker to obtain sensitive information and execute arbitrary code via a POST request
- CVE-2024-34048O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.
High 54
- CVE-2024-0840Grandstream UCM Series IP PBX HTTP Parameter InjectionGrandstream UCM Series
- CVE-2024-34010Local privilege escalation due to unquoted search path vulnerability.Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect +1
- CVE-2023-48684Sensitive information disclosure and manipulation due to missing authorization.Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect
- CVE-2023-48683Sensitive information disclosure and manipulation due to missing authorization.Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect
- CVE-2024-1969Heap buffer overflowSecomea GateManager
- CVE-2024-1579Insufficient seeding of random number generatorSecomea GateManager
- CVE-2024-27322Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not includThe R Project R
- CVE-2024-4309SQL injection vulnerability in HubBankOfofonobs HubBank
- CVE-2024-4307SQL injection vulnerability in HubBankOfofonobs HubBank
- CVE-2024-4308SQL injection vulnerability in HubBankOfofonobs HubBank
- CVE-2024-33591WordPress Easy Accept Payments for PayPal plugin <= 4.9.10 - Broken Access Control vulnerabilityTips and Tricks HQ Easy Accept Payments
- CVE-2024-33594WordPress Leaky Paywall plugin <= 4.20.8 - Price Manipulation vulnerabilityLeaky Paywall
- CVE-2024-33597WordPress SSU plugin <= 1.5.0 - Broken Access Control vulnerabilityProFaceOff SSU
- CVE-2024-33635WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Unauthenticated Arbitrary Post/Page Deletion vulnerabilityPiotnet Addons For Elementor Pro
- CVE-2024-33637WordPress Solid Affiliate plugin <= 1.9.1 - Sensitive Data Exposure via Log File vulnerabilitySolid Plugins Solid Affiliate
- CVE-2024-3193MailCleaner Admin Endpoints os command injectionMailCleaner
- CVE-2024-33681WordPress Regenerate post permalink plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) leading to XSS vulnerabilitySandor Kovacs Regenerate post permalink
- CVE-2024-2505GamiPress < 6.8.9 - Broken Access ControlGamiPress
- CVE-2024-4303 ArmorX Android APP - MFA BypassArmorX APP
- CVE-2024-33548WordPress WZone plugin <= 14.0.10 - Reflected Cross Site Scripting (XSS) vulnerabilityAA-Team WZone
- CVE-2024-33554WordPress XStore Core plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability8theme XStore Core
- CVE-2024-33562WordPress XStore theme <= 9.3.5 - Reflected Cross Site Scripting (XSS) vulnerability8theme XStore
- CVE-2024-33571WordPress VOD Infomaniak plugin <= 1.5.6 - Reflected Cross Site Scripting (XSS) vulnerabilityInfomaniak Network VOD Infomaniak
- CVE-2024-33633WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Reflected Cross Site Scripting (XSS) vulnerabilityPiotnet Addons For Elementor Pro
- CVE-2024-33645WordPress Easy Set Favicon plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerabilityEftakhairul Islam & Sirajus Salayhin Easy Set Favicon
- CVE-2024-33646WordPress Sticky Anything plugin <= 2.1.5 - Broken Access Control to XSS vulnerabilityToast Plugins Sticky Anything
- CVE-2024-4301N-Reporter and N-Cloud from N-Partner - Os Command InjectionN-Partner N-Reporter firmware · N-Partner N-Cloud firmware
- CVE-2024-2757PHP mb_encode_mimeheader runs endlessly for some inputsPHP Group PHP
- CVE-2024-4299HGiga iSherlock - Command InjectionHGiga iSherlock
- CVE-2024-4298HGiga iSherlock - Command InjectionHGiga iSherlock
- CVE-2023-46565Buffer Overflow vulnerability in osrg gobgp commit 419c50dfac578daa4d11256904d0dc182f1a9b22 allows a remote attacker to cause a denial of segithub.com/osrg/gobgp/v3
- CVE-2023-46566Buffer Overflow vulnerability in msoulier tftpy commit 467017b844bf6e31745138a30e2509145b0c529c allows a remote attacker to cause a denial o
- CVE-2023-46960Buffer Overflow vulnerability in PyPXE v.1.8.4 allows a remote attacker to cause a denial of service via the handle function in the tftp modpypxe
- CVE-2023-52080IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT->GetVariable() function.
- CVE-2023-52723In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is acciden
- CVE-2023-52724Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function.
- CVE-2023-52727Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in parseAlignBits.
- CVE-2024-27518An issue in SUPERAntiSyware Professional X 10.0.1262 and 10.0.1264 allows unprivileged attackers to escalate privileges via a restore of a c
- CVE-2024-28320Insecure Direct Object References (IDOR) vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for
- CVE-2024-31621An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 cflowise
- CVE-2024-31801Directory Traversal vulnerability in NEXSYS-ONE before v.Rev.15320 allows a remote attacker to obtain sensitive information via a crafted re
- CVE-2024-31821SQL Injection vulnerability in Ecommerce-CodeIgniter-Bootstrap commit v.
- CVE-2024-32269An issue in Yonganda YAD-LOJ V3.0.561 allows a remote attacker to cause a denial of service via a crafted packet.
- CVE-2024-32492An issue was discovered in Znuny 7.0.1 through 7.0.16 where the ticket detail view in the customer front allows the execution of external Ja
- CVE-2024-32493An issue was discovered in Znuny LTS 6.5.1 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in agent is able to inject SQL in the
- CVE-2024-33271An issue in FME Modules eventsmanager before 4.4.0 allows an attacker to obtain sensitive information from the ps_customer component.
- CVE-2024-33338Cross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain sensitive information via a crafted article public
- CVE-2024-33438File Upload vulnerability in CubeCart before 6.5.5 allows an authenticated user to execute arbitrary code via a crafted .phar file.
- CVE-2024-33443An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted script to the AddonsController.class.php compone
- CVE-2024-33904In plugins/HookSystem.cpp in Hyprland through 0.39.1 (before 28c8561), through a race condition, a local attacker can cause execution of arb
- CVE-2024-34045The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo->counters[IN_INITI][MSG_COUNTE
- CVE-2024-34046The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo->sctpParams->e2tCounters[IN_SU
- CVE-2024-34049Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return plmnIdString[0:3], plmnIdString[3:
- CVE-2024-34050Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return uint64(b[2])<<16 | uint64(b[1])<<8
Medium, low and unrated 69
- CVE-2024-33522Privilege escalation in Calico CNI install binaryTigera Calico · github.com/projectcalico/calico +1
- CVE-2024-34011Local privilege escalation due to insecure folder permissions.Acronis Cyber Protect Cloud Agent
- CVE-2024-33585WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 2.12.1 - Broken Access Control vulnerabilityTyche Softwares Payment Gateway Based Fees and Discounts fo…
- CVE-2024-33586WordPress Photo Gallery by 10Web plugin <= 1.8.20 - Broken Access Control vulnerabilityPhoto Gallery Team Photo Gallery by 10Web
- CVE-2024-33587WordPress Secure Copy Content Protection and Content Locking plugin <= 3.9.0 - Broken Access Control vulnerabilityCopy Content Protection Team Secure Copy Content Protection…
- CVE-2024-33588WordPress basepress plugin <= 2.16.1 - Broken Access Control vulnerabilitycodeSavory Knowledge Base documentation & wiki plugin – Bas…
- CVE-2024-4310Cross-site Scripting (XSS) vulnerability in HubBankOfofonobs HubBank
- CVE-2024-4304Vulnerability on SWAL platform from GT3 SolucionesGT3 Soluciones SWAL
- CVE-2024-33589WordPress KB Support plugin <= 1.6.0 - Broken Access Control vulnerabilityWPOmnia KB Support
- CVE-2024-33590WordPress basepress plugin <= 2.16.1 - Server Side Request Forgery (SSRF) vulnerabilitycodeSavory Knowledge Base documentation & wiki plugin – Bas…
- CVE-2024-33593WordPress Smart Forms plugin <= 2.6.91 - Broken Access Control vulnerabilityRedNao Smart Forms
- CVE-2024-33595WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on Duplicate Post vulnerabilityJewel Theme Master Addons for Elementor
- CVE-2024-33596WordPress Five Star Restaurant Reservations plugin <= 2.6.16 - Broken Access Control vulnerabilityFive Star Plugins Five Star Restaurant Reservations
- CVE-2024-28961Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability.Dell OpenManage Enterprise
- CVE-2024-33636WordPress WP Page Post Widget Clone plugin <= 1.0.1 - Broken Access Control vulnerabilityMahesh Vora WP Page Post Widget Clone
- CVE-2024-33684WordPress Save as PDF plugin by Pdfcrowd plugin <= 3.2.0 - Broken Access Control to Stored XSS vulnerabilitySave as PDF plugin by Pdfcrowd
- CVE-2024-33558WordPress XStore Core plugin <= 5.3.5 - Limited Arbitrary File Download vulnerability8theme XStore Core
- CVE-2024-33652WordPress Client Dash plugin <= 2.2.1 - Broken Access Control vulnerabilityReal Big Plugins Client Dash
- CVE-2024-33538WordPress Assistant – Every Day Productivity Apps plugin <= 1.4.9.1 - Sensitive Data Exposure vulnerabilityFastline Media Assistant – Every Day Productivity Apps
- CVE-2024-33575WordPress User Meta plugin <= 3.0 - Sensitive Data Exposure vulnerabilityUser Meta
- CVE-2024-33634WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Unauthenticated Server Side Request Forgery (SSRF) vulnerabilityPiotnet Addons For Elementor Pro
- CVE-2024-33629WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 4.0.0 - Server Side Request Forgery (SSRF) vulnerabilityCreative Motion Auto Featured Image
- CVE-2024-33627WordPress AGCA – Custom Dashboard & Login Page plugin <= 7.2.2 - Server Side Request Forgery (SSRF) vulnerabilityCusmin Absolutely Glamorous Custom Admin
- CVE-2024-33584WordPress Video Conferencing with Zoom plugin <= 4.4.4 - Open Redirection vulnerabilityDeepen Bajracharya Video Conferencing with Zoom
- CVE-2024-33641WordPress Custom field finder plugin <= 0.3 - PHP Object Injection vulnerabilityTeam Yoast Custom field finder
- CVE-2024-3196MailCleaner SOAP Service dumpConfiguration os command injectionMailCleaner
- CVE-2024-3195MailCleaner Admin Endpoints path traversalMailCleaner
- CVE-2024-3194MailCleaner Log File Endpoint cross site scriptingMailCleaner
- CVE-2024-3192MailCleaner Admin Interface cross site scriptingMailCleaner
- CVE-2024-33542WordPress Crelly Slider plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerabilityFabio Rinaldi Crelly Slider
- CVE-2024-1905Smart Forms < 2.6.96 - Admin+ Stored XSSSmart Forms
- CVE-2024-33632WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Cross Site Request Forgery (CSRF) vulnerabilityPiotnet Addons For Elementor Pro
- CVE-2024-33686Broken Access Control vulnerability affecting multiple WordPress themes by Extend ThemesExtend Themes Pathway · Extend Themes Hugo WP +5
- CVE-2024-4302Super 8 livechat SDK - Cross-site ScriptingSuper 8 livechat SDK
- CVE-2024-33537WordPress WP Portfolio theme <= 2.4 - Cross Site Scripting (XSS) vulnerabilityTheme Horse WP Portfolio
- CVE-2024-33539WordPress WPZOOM Addons for Elementor plugin <= 1.1.35 - Cross Site Scripting (XSS) vulnerabilityWPZOOM Addons for Elementor
- CVE-2024-33540WordPress ColorNews theme <= 1.2.6 - Cross Site Scripting (XSS) vulnerabilityThemeGrill ColorNews
- CVE-2024-33630WordPress Piotnet Addons For Elementor plugin <= 2.4.26 - Cross Site Scripting (XSS) vulnerabilityPiotnet Addons For Elementor
- CVE-2024-33631WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Authenticated Stored Cross Site Scripting (XSS) vulnerabilityPiotnet Addons For Elementor Pro
- CVE-2024-33640WordPress Pretty Google Calendar plugin <= 1.7.2 - Cross Site Scripting (XSS) vulnerabilityLBell Pretty Google Calendar
- CVE-2024-33643WordPress Advanced Most Recent Posts Mod plugin <= 1.6.5.2 - Cross Site Scripting (XSS) vulnerabilityKailey Lampert Advanced Most Recent Posts Mod
- CVE-2024-33648WordPress Recencio Book Reviews plugin <= 1.66.0 - Cross Site Scripting (XSS) vulnerabilityKemory Grubb Recencio Book Reviews
- CVE-2024-33649WordPress Opal Widgets For Elementor plugin <= 1.6.9 - Cross Site Scripting (XSS) vulnerabilityWpOpal Opal Widgets For Elementor
- CVE-2024-3096PHP function password_verify can erroneously return true when argument contains NULPHP Group PHP
- CVE-2024-2756__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fixPHP Group PHP
- CVE-2024-4297HGiga iSherlock - Arbitrary File DownloadHGiga iSherlock
- CVE-2024-4296HGiga iSherlock - Arbitrary File DownloadHGiga iSherlock
- CVE-2023-31889An issue discovered in httpd in ASUS RT-AC51U with firmware version up to and including 3.0.0.4.380.8591 allows local attackers to cause a d
- CVE-2023-46270MacPaw The Unarchiver before 4.3.6 contains vulnerability related to missing quarantine attributes for extracted items.
- CVE-2023-50432simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service (daemon crash) by sending a DHCP packet without any
- CVE-2023-50433marshall in dhcp_packet.c in simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service by sending a malicious
- CVE-2023-51254Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the frien
- CVE-2023-51710EMS SQL Manager 3.6.2 (build 55333) for Oracle allows DLL hijacking: a user can trigger the execution of arbitrary code every time the produ
- CVE-2023-52725Open Networking Foundation SD-RAN ONOS onos-kpimon 0.4.7 allows blocking of the errCh channel within the Start function of the monitoring pa
- CVE-2023-52726Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error (in the Subscribe fun
- CVE-2023-52728Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString.
- CVE-2024-23995Cross Site Scripting (XSS) in Beekeeper Studio 4.1.13 and earlier allows remote attackers to execute arbitrary code in the column name of a
- CVE-2024-28294Limbas up to v5.2.14 was discovered to contain a SQL injection vulnerability via the ftid parameter.
- CVE-2024-31747An issue in Yealink VP59 Microsoft Teams Phone firmware 91.15.0.118 (fixed in 122.15.0.142) allows a physically proximate attacker to disabl
- CVE-2024-32268An issue in Tuya Smart camera U6N v.3.2.5 allows a remote attacker to cause a denial of service via a crafted packet to the network connecti
- CVE-2024-33272SQL injection vulnerability in KnowBand for PrestaShop autosuggest before 2.0.0 allows an attacker to run arbitrary SQL commands via the Aut
- CVE-2024-33345D-Link DIR-823G A1V1.0.2B05 was found to contain a Null-pointer dereference in the main function of upload_firmware.cgi, which allows remote
- CVE-2024-33401Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter.
- CVE-2024-33903In CARLA through 0.9.15.2, the collision sensor mishandles some situations involving pedestrians or bicycles, in part because the collision
- CVE-2024-33905In Telegram WebK before 2.0.0 (488), a crafted Mini Web App allows XSS via the postMessage web_app_open_link event type.
- CVE-2024-34020A stack-based buffer overflow was found in the putSDN() function of mail.c in hcode through 2.1.
- CVE-2024-34043O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message.
- CVE-2024-34044The O-RAN E2T I-Release buildPrometheusList function can have a NULL pointer dereference because peerInfo can be NULL.
- CVE-2024-34047O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler.