# CVEs published 2024-04-29

150 CVEs were published on April 29, 2024: 27 critical, 54 high. Days are UTC.

- [CVE-2024-33522](https://cve.now/CVE-2024-33522.md): Privilege escalation in Calico CNI install binary (CVSS 6.7, Tigera Calico · github.com/projectcalico/calico +1)
- [CVE-2024-0840](https://cve.now/CVE-2024-0840.md): Grandstream UCM Series IP PBX HTTP Parameter Injection (CVSS 8.8, Grandstream UCM Series)
- [CVE-2024-34011](https://cve.now/CVE-2024-34011.md): Local privilege escalation due to insecure folder permissions. (CVSS 6.8, Acronis Cyber Protect Cloud Agent)
- [CVE-2024-34010](https://cve.now/CVE-2024-34010.md): Local privilege escalation due to unquoted search path vulnerability. (CVSS 8.2, Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect +1)
- [CVE-2023-48684](https://cve.now/CVE-2023-48684.md): Sensitive information disclosure and manipulation due to missing authorization. (CVSS 7.1, Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect)
- [CVE-2023-48683](https://cve.now/CVE-2023-48683.md): Sensitive information disclosure and manipulation due to missing authorization. (CVSS 7.1, Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect)
- [CVE-2024-1969](https://cve.now/CVE-2024-1969.md): Heap buffer overflow (CVSS 8.2, Secomea GateManager)
- [CVE-2024-1579](https://cve.now/CVE-2024-1579.md): Insufficient seeding of random number generator (CVSS 8.1, Secomea GateManager)
- [CVE-2024-27322](https://cve.now/CVE-2024-27322.md): Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not includ (CVSS 8.8, The R Project R)
- [CVE-2024-33585](https://cve.now/CVE-2024-33585.md): WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin \<= 2.12.1 - Broken Access Control vulnerability (CVSS 4.3, Tyche Softwares Payment Gateway Based Fees and Discounts fo…)
- [CVE-2024-33586](https://cve.now/CVE-2024-33586.md): WordPress Photo Gallery by 10Web plugin \<= 1.8.20 - Broken Access Control vulnerability (CVSS 5.3, Photo Gallery Team Photo Gallery by 10Web)
- [CVE-2024-33587](https://cve.now/CVE-2024-33587.md): WordPress Secure Copy Content Protection and Content Locking plugin \<= 3.9.0 - Broken Access Control vulnerability (CVSS 5.3, Copy Content Protection Team Secure Copy Content Protection…)
- [CVE-2024-33588](https://cve.now/CVE-2024-33588.md): WordPress basepress plugin \<= 2.16.1 - Broken Access Control vulnerability (CVSS 5.4, codeSavory Knowledge Base documentation & wiki plugin – Bas…)
- [CVE-2024-4310](https://cve.now/CVE-2024-4310.md): Cross-site Scripting (XSS) vulnerability in HubBank (CVSS 6.3, Ofofonobs HubBank)
- [CVE-2024-4309](https://cve.now/CVE-2024-4309.md): SQL injection vulnerability in HubBank (CVSS 8.1, Ofofonobs HubBank)
- [CVE-2024-4307](https://cve.now/CVE-2024-4307.md): SQL injection vulnerability in HubBank (CVSS 8.1, Ofofonobs HubBank)
- [CVE-2024-4308](https://cve.now/CVE-2024-4308.md): SQL injection vulnerability in HubBank (CVSS 8.1, Ofofonobs HubBank)
- [CVE-2024-4306](https://cve.now/CVE-2024-4306.md): Unrestricted Upload of File with Dangerous Type vulnerability in HubBank (CVSS 9.9, Ofofonobs HubBank)
- [CVE-2024-4304](https://cve.now/CVE-2024-4304.md): Vulnerability on SWAL platform from GT3 Soluciones (CVSS 5.4, GT3 Soluciones SWAL)
- [CVE-2024-33589](https://cve.now/CVE-2024-33589.md): WordPress KB Support plugin \<= 1.6.0 - Broken Access Control vulnerability (CVSS 6.5, WPOmnia KB Support)
- [CVE-2024-33590](https://cve.now/CVE-2024-33590.md): WordPress basepress plugin \<= 2.16.1 - Server Side Request Forgery (SSRF) vulnerability (CVSS 5.0, codeSavory Knowledge Base documentation & wiki plugin – Bas…)
- [CVE-2024-33591](https://cve.now/CVE-2024-33591.md): WordPress Easy Accept Payments for PayPal plugin \<= 4.9.10 - Broken Access Control vulnerability (CVSS 7.5, Tips and Tricks HQ Easy Accept Payments)
- [CVE-2024-33593](https://cve.now/CVE-2024-33593.md): WordPress Smart Forms plugin \<= 2.6.91 - Broken Access Control vulnerability (CVSS 4.3, RedNao Smart Forms)
- [CVE-2024-33594](https://cve.now/CVE-2024-33594.md): WordPress Leaky Paywall plugin \<= 4.20.8 - Price Manipulation vulnerability (CVSS 7.5, Leaky Paywall)
- [CVE-2024-33595](https://cve.now/CVE-2024-33595.md): WordPress Master Addons for Elementor plugin \<= 2.0.5.4.1 - Broken Access Control on Duplicate Post vulnerability (CVSS 4.3, Jewel Theme Master Addons for Elementor)
- [CVE-2024-3375](https://cve.now/CVE-2024-3375.md): Broken Access Control in Havelsan's Dialogue (CVSS 9.4, Havelsan Dialogue)
- [CVE-2024-33596](https://cve.now/CVE-2024-33596.md): WordPress Five Star Restaurant Reservations plugin \<= 2.6.16 - Broken Access Control vulnerability (CVSS 5.3, Five Star Plugins Five Star Restaurant Reservations)
- [CVE-2024-28961](https://cve.now/CVE-2024-28961.md): Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability. (CVSS 6.3, Dell OpenManage Enterprise)
- [CVE-2024-33597](https://cve.now/CVE-2024-33597.md): WordPress SSU plugin \<= 1.5.0 - Broken Access Control vulnerability (CVSS 7.5, ProFaceOff SSU)
- [CVE-2024-33635](https://cve.now/CVE-2024-33635.md): WordPress Piotnet Addons For Elementor Pro plugin \<= 7.1.17 - Unauthenticated Arbitrary Post/Page Deletion vulnerability (CVSS 7.5, Piotnet Addons For Elementor Pro)
- [CVE-2024-33636](https://cve.now/CVE-2024-33636.md): WordPress WP Page Post Widget Clone plugin \<= 1.0.1 - Broken Access Control vulnerability (CVSS 5.4, Mahesh Vora WP Page Post Widget Clone)
- [CVE-2024-33684](https://cve.now/CVE-2024-33684.md): WordPress Save as PDF plugin by Pdfcrowd plugin \<= 3.2.0 - Broken Access Control to Stored XSS vulnerability (CVSS 6.5, Save as PDF plugin by Pdfcrowd)
- [CVE-2024-33558](https://cve.now/CVE-2024-33558.md): WordPress XStore Core plugin \<= 5.3.5 - Limited Arbitrary File Download vulnerability (CVSS 6.5, 8theme XStore Core)
- [CVE-2024-33652](https://cve.now/CVE-2024-33652.md): WordPress Client Dash plugin \<= 2.2.1 - Broken Access Control vulnerability (CVSS 5.3, Real Big Plugins Client Dash)
- [CVE-2024-33566](https://cve.now/CVE-2024-33566.md): WordPress OrderConvo plugin \<= 12.4 - Unauthenticated API Access to Arbitrary File Upload vulnerability (CVSS 10.0, N-Media OrderConvo)
- [CVE-2024-33538](https://cve.now/CVE-2024-33538.md): WordPress Assistant – Every Day Productivity Apps plugin \<= 1.4.9.1 - Sensitive Data Exposure vulnerability (CVSS 5.3, Fastline Media Assistant – Every Day Productivity Apps)
- [CVE-2024-33575](https://cve.now/CVE-2024-33575.md): WordPress User Meta plugin \<= 3.0 - Sensitive Data Exposure vulnerability (CVSS 5.3, User Meta)
- [CVE-2024-33637](https://cve.now/CVE-2024-33637.md): WordPress Solid Affiliate plugin \<= 1.9.1 - Sensitive Data Exposure via Log File vulnerability (CVSS 7.5, Solid Plugins Solid Affiliate)
- [CVE-2024-33634](https://cve.now/CVE-2024-33634.md): WordPress Piotnet Addons For Elementor Pro plugin \<= 7.1.17 - Unauthenticated Server Side Request Forgery (SSRF) vulnerability (CVSS 5.4, Piotnet Addons For Elementor Pro)
- [CVE-2024-33629](https://cve.now/CVE-2024-33629.md): WordPress Auto Featured Image (Auto Post Thumbnail) plugin \<= 4.0.0 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.4, Creative Motion Auto Featured Image)
- [CVE-2024-33627](https://cve.now/CVE-2024-33627.md): WordPress AGCA – Custom Dashboard & Login Page plugin \<= 7.2.2 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.4, Cusmin Absolutely Glamorous Custom Admin)
- [CVE-2024-33584](https://cve.now/CVE-2024-33584.md): WordPress Video Conferencing with Zoom plugin \<= 4.4.4 - Open Redirection vulnerability (CVSS 4.7, Deepen Bajracharya Video Conferencing with Zoom)
- [CVE-2024-33553](https://cve.now/CVE-2024-33553.md): WordPress XStore Core plugin \<= 5.3.5 - Unauthenticated PHP Object Injection vulnerability (CVSS 9.0, 8theme XStore Core)
- [CVE-2024-33641](https://cve.now/CVE-2024-33641.md): WordPress Custom field finder plugin \<= 0.3 - PHP Object Injection vulnerability (CVSS 5.4, Team Yoast Custom field finder)
- [CVE-2024-3196](https://cve.now/CVE-2024-3196.md): MailCleaner SOAP Service dumpConfiguration os command injection (CVSS 6.7, MailCleaner)
- [CVE-2024-3195](https://cve.now/CVE-2024-3195.md): MailCleaner Admin Endpoints path traversal (CVSS 4.7, MailCleaner)
- [CVE-2024-3194](https://cve.now/CVE-2024-3194.md): MailCleaner Log File Endpoint cross site scripting (CVSS 4.3, MailCleaner)
- [CVE-2024-3193](https://cve.now/CVE-2024-3193.md): MailCleaner Admin Endpoints os command injection (CVSS 8.8, MailCleaner)
- [CVE-2024-3192](https://cve.now/CVE-2024-3192.md): MailCleaner Admin Interface cross site scripting (CVSS 4.3, MailCleaner)
- [CVE-2024-3191](https://cve.now/CVE-2024-3191.md): MailCleaner Email os command injection (CVSS 9.8, MailCleaner)
- [CVE-2024-33544](https://cve.now/CVE-2024-33544.md): WordPress WZone plugin \<= 14.0.10 - Unauthenticated SQL Injection vulnerability (CVSS 9.3, AA-Team WZone)
- [CVE-2024-33546](https://cve.now/CVE-2024-33546.md): WordPress WZone plugin \<= 14.0.10 - Arbitrary SQL Update Execution vulnerability (CVSS 9.6, AA-Team WZone)
- [CVE-2024-33551](https://cve.now/CVE-2024-33551.md): WordPress XStore Core plugin \<= 5.3.5 - Unauthenticated SQL Injection vulnerability (CVSS 9.3, 8theme XStore Core)
- [CVE-2024-33559](https://cve.now/CVE-2024-33559.md): WordPress XStore theme \<= 9.3.5 - Unauthenticated SQL Injection vulnerability (CVSS 9.3, 8theme XStore)
- [CVE-2024-33542](https://cve.now/CVE-2024-33542.md): WordPress Crelly Slider plugin \<= 1.4.5 - Insecure Direct Object References (IDOR) vulnerability (CVSS 4.3, Fabio Rinaldi Crelly Slider)
- [CVE-2024-33681](https://cve.now/CVE-2024-33681.md): WordPress Regenerate post permalink plugin \<= 1.0.3 - Cross Site Request Forgery (CSRF) leading to XSS vulnerability (CVSS 7.1, Sandor Kovacs Regenerate post permalink)
- [CVE-2024-2505](https://cve.now/CVE-2024-2505.md): GamiPress \< 6.8.9 - Broken Access Control (CVSS 8.1, GamiPress)
- [CVE-2024-1905](https://cve.now/CVE-2024-1905.md): Smart Forms \< 2.6.96 - Admin+ Stored XSS (CVSS 5.9, Smart Forms)
- [CVE-2024-33632](https://cve.now/CVE-2024-33632.md): WordPress Piotnet Addons For Elementor Pro plugin \<= 7.1.17 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4, Piotnet Addons For Elementor Pro)
- [CVE-2024-4303](https://cve.now/CVE-2024-4303.md): ArmorX Android APP - MFA Bypass (CVSS 8.8, ArmorX APP)
- [CVE-2024-33686](https://cve.now/CVE-2024-33686.md): Broken Access Control vulnerability affecting multiple WordPress themes by Extend Themes (CVSS 4.3, Extend Themes Pathway · Extend Themes Hugo WP +5)
- [CVE-2024-4302](https://cve.now/CVE-2024-4302.md): Super 8 livechat SDK - Cross-site Scripting (CVSS 6.1, Super 8 livechat SDK)
- [CVE-2024-33537](https://cve.now/CVE-2024-33537.md): WordPress WP Portfolio theme \<= 2.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Theme Horse WP Portfolio)
- [CVE-2024-33539](https://cve.now/CVE-2024-33539.md): WordPress WPZOOM Addons for Elementor plugin \<= 1.1.35 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WPZOOM Addons for Elementor)
- [CVE-2024-33540](https://cve.now/CVE-2024-33540.md): WordPress ColorNews theme \<= 1.2.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, ThemeGrill ColorNews)
- [CVE-2024-33548](https://cve.now/CVE-2024-33548.md): WordPress WZone plugin \<= 14.0.10 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, AA-Team WZone)
- [CVE-2024-33554](https://cve.now/CVE-2024-33554.md): WordPress XStore Core plugin \<= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, 8theme XStore Core)
- [CVE-2024-33562](https://cve.now/CVE-2024-33562.md): WordPress XStore theme \<= 9.3.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, 8theme XStore)
- [CVE-2024-33571](https://cve.now/CVE-2024-33571.md): WordPress VOD Infomaniak plugin \<= 1.5.6 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Infomaniak Network VOD Infomaniak)
- [CVE-2024-33630](https://cve.now/CVE-2024-33630.md): WordPress Piotnet Addons For Elementor plugin \<= 2.4.26 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Piotnet Addons For Elementor)
- [CVE-2024-33631](https://cve.now/CVE-2024-33631.md): WordPress Piotnet Addons For Elementor Pro plugin \<= 7.1.17 - Authenticated Stored Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Piotnet Addons For Elementor Pro)
- [CVE-2024-33633](https://cve.now/CVE-2024-33633.md): WordPress Piotnet Addons For Elementor Pro plugin \<= 7.1.17 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Piotnet Addons For Elementor Pro)
- [CVE-2024-33640](https://cve.now/CVE-2024-33640.md): WordPress Pretty Google Calendar plugin \<= 1.7.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, LBell Pretty Google Calendar)
- [CVE-2024-33643](https://cve.now/CVE-2024-33643.md): WordPress Advanced Most Recent Posts Mod plugin \<= 1.6.5.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Kailey Lampert Advanced Most Recent Posts Mod)
- [CVE-2024-33645](https://cve.now/CVE-2024-33645.md): WordPress Easy Set Favicon plugin \<= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Eftakhairul Islam & Sirajus Salayhin Easy Set Favicon)
- [CVE-2024-33646](https://cve.now/CVE-2024-33646.md): WordPress Sticky Anything plugin \<= 2.1.5 - Broken Access Control to XSS vulnerability (CVSS 7.1, Toast Plugins Sticky Anything)
- [CVE-2024-33648](https://cve.now/CVE-2024-33648.md): WordPress Recencio Book Reviews plugin \<= 1.66.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Kemory Grubb Recencio Book Reviews)
- [CVE-2024-33649](https://cve.now/CVE-2024-33649.md): WordPress Opal Widgets For Elementor plugin \<= 1.6.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WpOpal Opal Widgets For Elementor)
- [CVE-2024-4301](https://cve.now/CVE-2024-4301.md): N-Reporter and N-Cloud from N-Partner - Os Command Injection (CVSS 8.8, N-Partner N-Reporter firmware · N-Partner N-Cloud firmware)
- [CVE-2024-1874](https://cve.now/CVE-2024-1874.md): Command injection via array-ish $command parameter of proc\_open() (CVSS 9.4, PHP Group PHP)
- [CVE-2024-2757](https://cve.now/CVE-2024-2757.md): PHP mb\_encode\_mimeheader runs endlessly for some inputs (CVSS 7.5, PHP Group PHP)
- [CVE-2024-3096](https://cve.now/CVE-2024-3096.md): PHP function password\_verify can erroneously return true when argument contains NUL (CVSS 6.5, PHP Group PHP)
- [CVE-2024-2756](https://cve.now/CVE-2024-2756.md): \_\_Host-/\_\_Secure- cookie bypass due to partial CVE-2022-31629 fix (CVSS 6.5, PHP Group PHP)
- [CVE-2024-4300](https://cve.now/CVE-2024-4300.md): E-WEBInformationCo. FS-EZViewer(Web) - Sensitive Data Exposure (CVSS 9.8, E-WEBInformationCo. FS-EZViewer)
- [CVE-2024-4299](https://cve.now/CVE-2024-4299.md): HGiga iSherlock - Command Injection (CVSS 7.2, HGiga iSherlock)
- [CVE-2024-4298](https://cve.now/CVE-2024-4298.md): HGiga iSherlock - Command Injection (CVSS 7.2, HGiga iSherlock)
- [CVE-2024-4297](https://cve.now/CVE-2024-4297.md): HGiga iSherlock - Arbitrary File Download (CVSS 4.9, HGiga iSherlock)
- [CVE-2024-4296](https://cve.now/CVE-2024-4296.md): HGiga iSherlock - Arbitrary File Download (CVSS 4.9, HGiga iSherlock)
- [CVE-2023-31889](https://cve.now/CVE-2023-31889.md): An issue discovered in httpd in ASUS RT-AC51U with firmware version up to and including 3.0.0.4.380.8591 allows local attackers to cause a d (CVSS 5.5)
- [CVE-2023-46270](https://cve.now/CVE-2023-46270.md): MacPaw The Unarchiver before 4.3.6 contains vulnerability related to missing quarantine attributes for extracted items. (CVSS 3.3)
- [CVE-2023-46565](https://cve.now/CVE-2023-46565.md): Buffer Overflow vulnerability in osrg gobgp commit 419c50dfac578daa4d11256904d0dc182f1a9b22 allows a remote attacker to cause a denial of se (CVSS 7.5, github.com/osrg/gobgp/v3)
- [CVE-2023-46566](https://cve.now/CVE-2023-46566.md): Buffer Overflow vulnerability in msoulier tftpy commit 467017b844bf6e31745138a30e2509145b0c529c allows a remote attacker to cause a denial o (CVSS 7.5)
- [CVE-2023-46960](https://cve.now/CVE-2023-46960.md): Buffer Overflow vulnerability in PyPXE v.1.8.4 allows a remote attacker to cause a denial of service via the handle function in the tftp mod (CVSS 8.6, pypxe)
- [CVE-2023-50432](https://cve.now/CVE-2023-50432.md): simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service (daemon crash) by sending a DHCP packet without any (CVSS 5.3)
- [CVE-2023-50433](https://cve.now/CVE-2023-50433.md): marshall in dhcp\_packet.c in simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service by sending a malicious (CVSS 6.5)
- [CVE-2023-50434](https://cve.now/CVE-2023-50434.md): emdns\_resolve\_raw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\\0' terminated, leading to a stack-based b (CVSS 9.8)
- [CVE-2023-51254](https://cve.now/CVE-2023-51254.md): Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the frien (CVSS 6.1)
- [CVE-2023-51710](https://cve.now/CVE-2023-51710.md): EMS SQL Manager 3.6.2 (build 55333) for Oracle allows DLL hijacking: a user can trigger the execution of arbitrary code every time the produ (CVSS 4.2)
- [CVE-2023-52080](https://cve.now/CVE-2023-52080.md): IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT-\>GetVariable() function. (CVSS 7.7)
- [CVE-2023-52723](https://cve.now/CVE-2023-52723.md): In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is acciden (CVSS 7.1)
- [CVE-2023-52724](https://cve.now/CVE-2023-52724.md): Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function. (CVSS 8.1)
- [CVE-2023-52725](https://cve.now/CVE-2023-52725.md): Open Networking Foundation SD-RAN ONOS onos-kpimon 0.4.7 allows blocking of the errCh channel within the Start function of the monitoring pa (CVSS 6.5)
- [CVE-2023-52726](https://cve.now/CVE-2023-52726.md): Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error (in the Subscribe fun (CVSS 6.5)
- [CVE-2023-52727](https://cve.now/CVE-2023-52727.md): Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in parseAlignBits. (CVSS 8.1)
- [CVE-2023-52728](https://cve.now/CVE-2023-52728.md): Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString. (CVSS 5.5)
- [CVE-2024-23995](https://cve.now/CVE-2024-23995.md): Cross Site Scripting (XSS) in Beekeeper Studio 4.1.13 and earlier allows remote attackers to execute arbitrary code in the column name of a (CVSS 6.1)
- [CVE-2024-27518](https://cve.now/CVE-2024-27518.md): An issue in SUPERAntiSyware Professional X 10.0.1262 and 10.0.1264 allows unprivileged attackers to escalate privileges via a restore of a c (CVSS 7.8)
- [CVE-2024-28294](https://cve.now/CVE-2024-28294.md): Limbas up to v5.2.14 was discovered to contain a SQL injection vulnerability via the ftid parameter. (CVSS 6.5)
- [CVE-2024-28320](https://cve.now/CVE-2024-28320.md): Insecure Direct Object References (IDOR) vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for (CVSS 7.6)
- [CVE-2024-31621](https://cve.now/CVE-2024-31621.md): An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 c (CVSS 7.6, flowise)
- [CVE-2024-31705](https://cve.now/CVE-2024-31705.md): An issue in Infotel Conseil GLPI v.10.X.X and after allows a remote attacker to execute arbitrary code via the insufficient validation of us (CVSS 9.8)
- [CVE-2024-31747](https://cve.now/CVE-2024-31747.md): An issue in Yealink VP59 Microsoft Teams Phone firmware 91.15.0.118 (fixed in 122.15.0.142) allows a physically proximate attacker to disabl (CVSS 2.1)
- [CVE-2024-31801](https://cve.now/CVE-2024-31801.md): Directory Traversal vulnerability in NEXSYS-ONE before v.Rev.15320 allows a remote attacker to obtain sensitive information via a crafted re (CVSS 7.5)
- [CVE-2024-31820](https://cve.now/CVE-2024-31820.md): An issue in Ecommerce-CodeIgniter-Bootstrap commit v. (CVSS 9.8)
- [CVE-2024-31821](https://cve.now/CVE-2024-31821.md): SQL Injection vulnerability in Ecommerce-CodeIgniter-Bootstrap commit v. (CVSS 8.0)
- [CVE-2024-31822](https://cve.now/CVE-2024-31822.md): An issue in Ecommerce-CodeIgniter-Bootstrap commit v. (CVSS 9.8)
- [CVE-2024-31823](https://cve.now/CVE-2024-31823.md): An issue in Ecommerce-CodeIgniter-Bootstrap commit v. (CVSS 9.8)
- [CVE-2024-32268](https://cve.now/CVE-2024-32268.md): An issue in Tuya Smart camera U6N v.3.2.5 allows a remote attacker to cause a denial of service via a crafted packet to the network connecti (CVSS 3.3)
- [CVE-2024-32269](https://cve.now/CVE-2024-32269.md): An issue in Yonganda YAD-LOJ V3.0.561 allows a remote attacker to cause a denial of service via a crafted packet. (CVSS 7.5)
- [CVE-2024-32491](https://cve.now/CVE-2024-32491.md): An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in user can upload a file (CVSS 9.8)
- [CVE-2024-32492](https://cve.now/CVE-2024-32492.md): An issue was discovered in Znuny 7.0.1 through 7.0.16 where the ticket detail view in the customer front allows the execution of external Ja (CVSS 7.1)
- [CVE-2024-32493](https://cve.now/CVE-2024-32493.md): An issue was discovered in Znuny LTS 6.5.1 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in agent is able to inject SQL in the (CVSS 8.8)
- [CVE-2024-33266](https://cve.now/CVE-2024-33266.md): SQL Injection vulnerability in Helloshop deliveryorderautoupdate v.2.8.1 and before allows an attacker to run arbitrary SQL commands via the (CVSS 9.8)
- [CVE-2024-33268](https://cve.now/CVE-2024-33268.md): SQL Injection vulnerability in Digincube mdgiftproduct before 1.4.1 allows an attacker to run arbitrary SQL commands via the MdGiftRule::add (CVSS 9.8)
- [CVE-2024-33269](https://cve.now/CVE-2024-33269.md): SQL Injection vulnerability in Prestaddons flashsales 1.9.7 and before allows an attacker to run arbitrary SQL commands via the FsModel::get (CVSS 9.8)
- [CVE-2024-33271](https://cve.now/CVE-2024-33271.md): An issue in FME Modules eventsmanager before 4.4.0 allows an attacker to obtain sensitive information from the ps\_customer component. (CVSS 7.5)
- [CVE-2024-33272](https://cve.now/CVE-2024-33272.md): SQL injection vulnerability in KnowBand for PrestaShop autosuggest before 2.0.0 allows an attacker to run arbitrary SQL commands via the Aut (CVSS 6.8)
- [CVE-2024-33276](https://cve.now/CVE-2024-33276.md): SQL Injection vulnerability in FME Modules preorderandnotication v.3.1.0 and before allows a remote attacker to run arbitrary SQL commands v (CVSS 9.8)
- [CVE-2024-33338](https://cve.now/CVE-2024-33338.md): Cross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain sensitive information via a crafted article public (CVSS 7.3)
- [CVE-2024-33345](https://cve.now/CVE-2024-33345.md): D-Link DIR-823G A1V1.0.2B05 was found to contain a Null-pointer dereference in the main function of upload\_firmware.cgi, which allows remote (CVSS 6.5)
- [CVE-2024-33350](https://cve.now/CVE-2024-33350.md): Directory Traversal vulnerability in TaoCMS v.3.0.2 allows a remote attacker to execute arbitrary code and obtain sensitive information via (CVSS 9.8)
- [CVE-2024-33401](https://cve.now/CVE-2024-33401.md): Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter. (CVSS 4.4)
- [CVE-2024-33435](https://cve.now/CVE-2024-33435.md): Insecure Permissions vulnerability in Guangzhou Yingshi Electronic Technology Co. (CVSS 9.8)
- [CVE-2024-33438](https://cve.now/CVE-2024-33438.md): File Upload vulnerability in CubeCart before 6.5.5 allows an authenticated user to execute arbitrary code via a crafted .phar file. (CVSS 8.0)
- [CVE-2024-33443](https://cve.now/CVE-2024-33443.md): An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted script to the AddonsController.class.php compone (CVSS 7.1)
- [CVE-2024-33444](https://cve.now/CVE-2024-33444.md): SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.p (CVSS 9.8)
- [CVE-2024-33445](https://cve.now/CVE-2024-33445.md): An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter (CVSS 9.8)
- [CVE-2024-33449](https://cve.now/CVE-2024-33449.md): An SSRF issue in the PDFMyURL service allows a remote attacker to obtain sensitive information and execute arbitrary code via a POST request (CVSS 9.8)
- [CVE-2024-33903](https://cve.now/CVE-2024-33903.md): In CARLA through 0.9.15.2, the collision sensor mishandles some situations involving pedestrians or bicycles, in part because the collision (CVSS 5.9)
- [CVE-2024-33904](https://cve.now/CVE-2024-33904.md): In plugins/HookSystem.cpp in Hyprland through 0.39.1 (before 28c8561), through a race condition, a local attacker can cause execution of arb (CVSS 7.0)
- [CVE-2024-33905](https://cve.now/CVE-2024-33905.md): In Telegram WebK before 2.0.0 (488), a crafted Mini Web App allows XSS via the postMessage web\_app\_open\_link event type. (CVSS 4.6)
- [CVE-2024-34020](https://cve.now/CVE-2024-34020.md): A stack-based buffer overflow was found in the putSDN() function of mail.c in hcode through 2.1. (CVSS 6.5)
- [CVE-2024-34043](https://cve.now/CVE-2024-34043.md): O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message. (CVSS 5.3)
- [CVE-2024-34044](https://cve.now/CVE-2024-34044.md): The O-RAN E2T I-Release buildPrometheusList function can have a NULL pointer dereference because peerInfo can be NULL. (CVSS 5.3)
- [CVE-2024-34045](https://cve.now/CVE-2024-34045.md): The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-\>counters\[IN\_INITI\]\[MSG\_COUNTE (CVSS 7.5)
- [CVE-2024-34046](https://cve.now/CVE-2024-34046.md): The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-\>sctpParams-\>e2tCounters\[IN\_SU (CVSS 7.5)
- [CVE-2024-34047](https://cve.now/CVE-2024-34047.md): O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler. (CVSS 4.3)
- [CVE-2024-34048](https://cve.now/CVE-2024-34048.md): O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler. (CVSS 9.8)
- [CVE-2024-34049](https://cve.now/CVE-2024-34049.md): Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return plmnIdString\[0:3\], plmnIdString\[3: (CVSS 7.5)
- [CVE-2024-34050](https://cve.now/CVE-2024-34050.md): Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return uint64(b\[2\])\<\<16 | uint64(b\[1\])\<\<8 (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-04-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.