# CVEs published 2024-04-30

74 CVEs were published on April 30, 2024: 9 critical, 39 high. Days are UTC.

- [CVE-2024-4369](https://cve.now/CVE-2024-4369.md): Cluster-image-registry-operator: exposes a secret via env variable in pod definition on azure (CVSS 6.8, cluster-image-registry-operator · Red Hat OpenShift Contain…)
- [CVE-2024-4192](https://cve.now/CVE-2024-4192.md): Stack-based Buffer Overflow vulnerability in Delta Electronics CNCSoft-G2 DOPSoft (CVSS 7.8, Delta Electronics CNCSoft-G2 DOPSoft)
- [CVE-2024-4349](https://cve.now/CVE-2024-4349.md): SourceCodester Pisay Online E-Learning System controller.php unrestricted upload (CVSS 7.3, SourceCodester Pisay Online E-Learning System)
- [CVE-2024-32970](https://cve.now/CVE-2024-32970.md): Cross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex (CVSS 7.1, phlex-ruby phlex · phlex)
- [CVE-2024-4348](https://cve.now/CVE-2024-4348.md): osCommerce all-products cross site scripting (CVSS 4.3, osCommerce)
- [CVE-2024-3746](https://cve.now/CVE-2024-3746.md): Measuresoft ScadaPro Improper Access Control (CVSS 5.5, Measuresoft ScadaPro)
- [CVE-2024-3411](https://cve.now/CVE-2024-3411.md): Insufficient Randomness When Validating an IPMI Authenticated Session (CVSS 9.1, Dell iDRAC8 · Intel IPMI)
- [CVE-2024-23463](https://cve.now/CVE-2024-23463.md): Anti-Tampering bypass via Repair App functionality (CVSS 8.8, Zscaler Client Connector)
- [CVE-2024-2877](https://cve.now/CVE-2024-2877.md): Vault Enterprise Leaks Sensitive HTTP Request Headers in the Audit Log When Deployed With a Performance Standby Node (CVSS 5.5, HashiCorp Vault Enterprise)
- [CVE-2023-38002](https://cve.now/CVE-2023-38002.md): IBM Storage Scale session fixation (CVSS 5.0, IBM Storage Scale)
- [CVE-2024-25938](https://cve.now/CVE-2024-25938.md): A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget. (CVSS 8.8, Foxit Reader)
- [CVE-2024-25648](https://cve.now/CVE-2024-25648.md): A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. (CVSS 8.8, Foxit Reader)
- [CVE-2024-25575](https://cve.now/CVE-2024-25575.md): A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. (CVSS 8.8, Foxit Reader)
- [CVE-2024-4340](https://cve.now/CVE-2024-4340.md): Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError. (CVSS 7.5, sqlparse)
- [CVE-2024-2378](https://cve.now/CVE-2024-2378.md): A vulnerability exists in the web-authentication component of the SDM600. (CVSS 8.0, Hitachi Energy SDM600)
- [CVE-2024-2617](https://cve.now/CVE-2024-2617.md): A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update, if secure update feature (CVSS 7.2, Hitachi Energy RTU500 series CMU firmware)
- [CVE-2024-2377](https://cve.now/CVE-2024-2377.md): A vulnerability exists in the too permissive HTTP response header web server settings of the SDM600. (CVSS 7.6, Hitachi Energy SDM600)
- [CVE-2024-22405](https://cve.now/CVE-2024-22405.md): XADMaster may not apply quarantine attribute correctly to extracted files (CVSS 5.5, MacPaw XADMaster)
- [CVE-2024-4336](https://cve.now/CVE-2024-4336.md): Múltiple vulnerabilities on Adive Framework (CVSS 7.6, Adive Framework)
- [CVE-2024-4337](https://cve.now/CVE-2024-4337.md): Múltiple vulnerabilities on Adive Framework (CVSS 7.6, Adive Framework)
- [CVE-2024-2663](https://cve.now/CVE-2024-2663.md): ZD YouTube FLV Player \<= 1.2.6 - Server-Side Request Forgery (CVSS 8.3, websmokers ZD YouTube FLV Player)
- [CVE-2024-4185](https://cve.now/CVE-2024-4185.md): Customer Email Verification for WooCommerce \<= 2.7.4 - Email Verification and Authentication Bypass due to Insufficient Randomness (CVSS 8.1, wpcodefactory Customer Email Verification for WooCommerce)
- [CVE-2024-3072](https://cve.now/CVE-2024-3072.md): ACF Front End Editor \<= 2.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Update (CVSS 4.3, horiondigital ACF Front End Editor)
- [CVE-2024-1895](https://cve.now/CVE-2024-1895.md): Event Monster \<= 1.3.9 - Authenticated(Contributor+) PHP Object Injection via Custom Meta (CVSS 7.5, awordpresslife Event Monster – Manager & Ticket Booking)
- [CVE-2024-4225](https://cve.now/CVE-2024-4225.md): NGDIN\_ST v2.0D.0062 - Multiple Vulnerabilities (CVSS 7.6, DPS Telecom NetGuardian DIN Remote Telemetry Unit)
- [CVE-2024-1371](https://cve.now/CVE-2024-1371.md): LeadConnector \<= 1.7 - Missing Authorization to Unauthenticated Arbitrary Post Deletion (CVSS 6.5, varunvairavanlc LeadConnector)
- [CVE-2024-0216](https://cve.now/CVE-2024-0216.md): Google Doc Embedder \<= 2.6.4 - Authenticated (Contributor+) Blind Server Side Request Forgery (CVSS 6.4, levertechadmin Google Doc Embedder)
- [CVE-2024-4226](https://cve.now/CVE-2024-4226.md): It was identified that in certain versions of Octopus Server, that a user created with no permissions could view all users, user roles and p (CVSS 3.5, Octopus Deploy Octopus Server)
- [CVE-2024-4327](https://cve.now/CVE-2024-4327.md): Apryse WebViewer PDF Document cross site scripting (CVSS 3.5, Apryse WebViewer)
- [CVE-2019-19751](https://cve.now/CVE-2019-19751.md): easyMINE before 2019-12-05 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes iden (CVSS 5.6)
- [CVE-2019-19752](https://cve.now/CVE-2019-19752.md): nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification (CVSS 9.8)
- [CVE-2019-19753](https://cve.now/CVE-2019-19753.md): SimpleMiningOS through v1259 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes id (CVSS 9.1)
- [CVE-2019-19754](https://cve.now/CVE-2019-19754.md): HiveOS through 0.6-102@191212 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes i (CVSS 5.7)
- [CVE-2019-19755](https://cve.now/CVE-2019-19755.md): ethOS through 1.3.3 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identificat (CVSS 9.1)
- [CVE-2020-27478](https://cve.now/CVE-2020-27478.md): Cross Site Scripting vulnerability found in Simplcommerce v.40734964b0811f3cbaf64b6dac261683d256f961 thru 3103357200c70b4767986544e01b19dbf1 (CVSS 7.1)
- [CVE-2020-5200](https://cve.now/CVE-2020-5200.md): Minerbabe through V4.16 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identif (CVSS 5.9)
- [CVE-2023-45385](https://cve.now/CVE-2023-45385.md): ProQuality pqprintshippinglabels before v.4.15.0 is vulnerable to Directory Traversal via the pqprintshippinglabels module. (CVSS 7.5)
- [CVE-2023-46304](https://cve.now/CVE-2023-46304.md): modules/Users/models/Module.php in Vtiger CRM 7.5.0 allows a remote authenticated attacker to run arbitrary PHP code because an unprotected (CVSS 8.1)
- [CVE-2023-49473](https://cve.now/CVE-2023-49473.md): Shenzhen JF6000 Cloud Media Collaboration Processing Platform firmware version V1.2.0 and software version V2.0.0 build 6245 is vulnerable t (CVSS 9.8)
- [CVE-2023-50053](https://cve.now/CVE-2023-50053.md): An issue in Foundation.app Foundation platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication proc (CVSS 7.6)
- [CVE-2023-50059](https://cve.now/CVE-2023-50059.md): An issue ingalxe.com Galxe platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication process of Galx (CVSS 5.3)
- [CVE-2023-50914](https://cve.now/CVE-2023-50914.md): A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy (Beta) 2.0.67.2 through v2.0.71.2 allows authentic (CVSS 6.7)
- [CVE-2023-50915](https://cve.now/CVE-2023-50915.md): An issue exists in GalaxyClientService.exe in GOG Galaxy (Beta) 2.0.67.2 through 2.0.71.2 that could allow authenticated users to overwrite (CVSS 6.5)
- [CVE-2024-22546](https://cve.now/CVE-2024-22546.md): TRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the do\_setNTP function. (CVSS 6.4)
- [CVE-2024-23772](https://cve.now/CVE-2024-23772.md): An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. (CVSS 6.6)
- [CVE-2024-23773](https://cve.now/CVE-2024-23773.md): An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. (CVSS 7.8)
- [CVE-2024-23774](https://cve.now/CVE-2024-23774.md): An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. (CVSS 7.8)
- [CVE-2024-26331](https://cve.now/CVE-2024-26331.md): ReCrystallize Server 5.10.0.0 uses a authorization mechanism that relies on the value of a cookie, but it does not bind the cookie value to (CVSS 7.5)
- [CVE-2024-28269](https://cve.now/CVE-2024-28269.md): ReCrystallize Server 5.10.0.0 allows administrators to upload files to the server. (CVSS 7.2)
- [CVE-2024-28716](https://cve.now/CVE-2024-28716.md): An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component. (CVSS 7.5)
- [CVE-2024-29320](https://cve.now/CVE-2024-29320.md): Wallos before 1.15.3 is vulnerable to SQL Injection via the category and payment parameters to /subscriptions/get.php. (CVSS 8.1)
- [CVE-2024-29384](https://cve.now/CVE-2024-29384.md): An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information via the content.js and parseCSSRules funct (CVSS 7.5)
- [CVE-2024-29466](https://cve.now/CVE-2024-29466.md): Directory Traversal vulnerability in lsgwr spring boot online exam v.0.9 allows an attacker to execute arbitrary code via the FileTransUtil. (CVSS 8.8)
- [CVE-2024-31837](https://cve.now/CVE-2024-31837.md): DMitry (Deepmagic Information Gathering Tool) 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938. (CVSS 8.4)
- [CVE-2024-33101](https://cve.now/CVE-2024-33101.md): A stored cross-site scripting (XSS) vulnerability in the component /action/anti.php of ThinkSAAS v3.7.0 allows attackers to execute arbitrar (CVSS 6.1)
- [CVE-2024-33102](https://cve.now/CVE-2024-33102.md): A stored cross-site scripting (XSS) vulnerability in the component /pubs/counter.php of ThinkSAAS v3.7.0 allows attackers to execute arbitra (CVSS 5.4)
- [CVE-2024-33103](https://cve.now/CVE-2024-33103.md): An arbitrary file upload vulnerability in the Media Manager component of DokuWiki 2024-02-06a allows attackers to execute arbitrary code by (CVSS 6.1)
- [CVE-2024-33267](https://cve.now/CVE-2024-33267.md): SQL Injection vulnerability in Hero hfheropayment v.1.2.5 and before allows an attacker to escalate privileges via the HfHeropaymentGatewayB (CVSS 9.8)
- [CVE-2024-33270](https://cve.now/CVE-2024-33270.md): An issue in FME Modules fileuploads v.2.0.3 and before and fixed in v2.0.4 allows a remote attacker to obtain sensitive information via the (CVSS 7.5)
- [CVE-2024-33273](https://cve.now/CVE-2024-33273.md): SQL injection vulnerability in shipup before v.3.3.0 allows a remote attacker to escalate privileges via the getShopID function. (CVSS 9.8)
- [CVE-2024-33274](https://cve.now/CVE-2024-33274.md): Directory Traversal vulnerability in FME Modules customfields v.2.2.7 and before allows a remote attacker to obtain sensitive information vi (CVSS 7.5)
- [CVE-2024-33275](https://cve.now/CVE-2024-33275.md): SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super News (CVSS 9.8)
- [CVE-2024-33308](https://cve.now/CVE-2024-33308.md): An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Eme (CVSS 9.1)
- [CVE-2024-33309](https://cve.now/CVE-2024-33309.md): An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to obtain sensitive information vi (CVSS 7.5)
- [CVE-2024-33332](https://cve.now/CVE-2024-33332.md): An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant (CVSS 7.5)
- [CVE-2024-33371](https://cve.now/CVE-2024-33371.md): Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute arbitrary code via the typeid parameter in the m (CVSS 6.1)
- [CVE-2024-33383](https://cve.now/CVE-2024-33383.md): Arbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to obtain sensitive information via a crafted GET (CVSS 7.5)
- [CVE-2024-33436](https://cve.now/CVE-2024-33436.md): An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information due to missing support for CSS variables (CVSS 5.3)
- [CVE-2024-33437](https://cve.now/CVE-2024-33437.md): An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information due to missing support for CSS Style Rules (CVSS 7.5)
- [CVE-2024-33465](https://cve.now/CVE-2024-33465.md): Cross Site Scripting vulnerability in MajorDoMo before v.0662e5e allows an attacker to escalate privileges via the the thumb/thumb.php compo (CVSS 7.1)
- [CVE-2024-33831](https://cve.now/CVE-2024-33831.md): A stored cross-site scripting (XSS) vulnerability in the Advanced Expectation - Response module of yapi v1.10.2 allows attackers to execute (CVSS 7.4)
- [CVE-2024-33832](https://cve.now/CVE-2024-33832.md): OneNav v0.9.35-20240318 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /index.php?c=api&method=get\_link\_in (CVSS 6.3)
- [CVE-2024-34088](https://cve.now/CVE-2024-34088.md): In FRRouting (FRR) through 9.1, it is possible for the get\_edge() function in ospf\_te.c in the OSPF daemon to return a NULL pointer. (CVSS 7.5)
- [CVE-2024-34149](https://cve.now/CVE-2024-34149.md): In Bitcoin Core through 27.0 and Bitcoin Knots before 25.1.knots20231115, tapscript lacks a policy size limit check, a different issue than (CVSS 6.3)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-04-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.