CVEs published May 7, 2024
186 CVEs were published on May 7, 2024: 21 critical, 76 high.
- Published
- 186
- Critical
- 21
- High
- 76
- Medium
- 69
- Low
- 20
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 28
Most affected products
- Google Android
- 16
- Foxit PDF Editor
- 15
- Foxit PDF Reader
- 14
- Samsung Mobile Devices
- 13
- DedeCMS
- 10
- OpenHarmony
- 6
- Bentley View
- 5
- D-Link DAP-2622
- 4
- Faraday GM8181 · Faraday GM828x
- 3
- OISF suricata
- 3
Critical 21
- CVE-2024-23708In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has bGoogle Android
- CVE-2024-23705In multiple locations, there is a possible failure to persist or enforce user restrictions due to improper input validation.Google Android
- CVE-2024-4346Startklar Elementor Addons <= 1.7.13 - Unauthenticated Arbitrary File Deletionwshberlin Startklar Elementor Addons
- CVE-2024-4345Startklar Elementor Addons <= 1.7.13 - Unauthenticated Arbitrary File Uploadwshberlin Startklar Elementor Addons
- CVE-2024-4186Edwiser Bridge <= 3.0.5 - Authentication Bypass due to Missing Empty Value Checkwisdmlabs Edwiser Bridge – WordPress Moodle Integration
- CVE-2023-46012Buffer Overflow vulnerability LINKSYS EA7500 3.0.1.207964 allows a remote attacker to execute arbitrary code via an HTTP request to the IGD
- CVE-2024-25507RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the email_attach_id parameter at /LHMail/AttachDown.as
- CVE-2024-25508RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /bulletin/bulletin_template_show.a
- CVE-2024-25509RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkFlow/wf_file
- CVE-2024-25510RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/address_public_show.a
- CVE-2024-25511RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/address_public_new.as
- CVE-2024-25514RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id parameter at /SysManage/wf_template_ch
- CVE-2024-32370An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafte
- CVE-2024-33120Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload() function.
- CVE-2024-33124Roothub v2.6 was discovered to contain a SQL injection vulnerability via the nodeTitle parameter in the parentNode() function..
- CVE-2024-33146J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the export function.
- CVE-2024-33153J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the commentList() function.
- CVE-2024-33155J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the getDeptList() function.
- CVE-2024-33164J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authUserList() function.
- CVE-2024-33434An issue in tiagorlampert CHAOS v5.0.1 before 1b451cf62582295b7225caf5a7b506f0bad56f6b and 24c9e109b5be34df7b2bce8368eae669c481ed5e allows agithub.com/tiagorlampert/CHAOS
- CVE-2024-33857An issue was discovered in Logpoint before 7.4.0.
High 76
- CVE-2023-40490Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution VulnerabilityMaxon Cinema
- CVE-2023-35757D-Link DAP-2622 DDP Set Date-Time NTP Server Stack-based Buffer Overflow Remote Code Execution VulnerabilityD-Link DAP-2622
- CVE-2023-35749D-Link DAP-2622 DDP Firmware Upgrade Filename Stack-based Buffer Overflow Remote Code Execution VulnerabilityD-Link DAP-2622
- CVE-2023-35748D-Link DAP-2622 DDP Firmware Upgrade Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution VulnerabilityD-Link DAP-2622
- CVE-2023-27321OPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service VulnerabilityOPC Foundation UA .NET Standard · OPCFoundation.NetStandard…
- CVE-2022-43655Bentley View FBX File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityBentley View
- CVE-2022-43654NETGEAR CAX30S SSO Command Injection Remote Code Execution VulnerabilityNETGEAR CAX30S
- CVE-2022-43653Bentley View SKP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityBentley View
- CVE-2022-43651Bentley View SKP File Parsing Use-After-Free Remote Code Execution VulnerabilityBentley View
- CVE-2022-0369Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution VulnerabilityTriangle MicroWorks SCADA Data Gateway
- CVE-2021-35002BMC Track-It! Unrestricted File Upload Remote Code Execution VulnerabilityBMC Track-It!
- CVE-2021-34982NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution VulnerabilityNETGEAR Multiple Routers
- CVE-2021-34981Linux Kernel Bluetooth CMTP Module Double Free Privilege Escalation VulnerabilityLinux Kernel
- CVE-2021-34975Foxit PDF Reader transitionToState Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2021-34974Foxit PDF Reader Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2021-34971Foxit PDF Reader JPG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2021-34968Foxit PDF Editor transitionToState Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Editor
- CVE-2021-34967Foxit PDF Editor Line Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Editor
- CVE-2021-34966Foxit PDF Editor FileAttachment Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Editor
- CVE-2021-34965Foxit PDF Editor Squiggly Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Editor
- CVE-2021-34964Foxit PDF Editor Polygon Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Editor
- CVE-2021-34963Foxit PDF Editor PolyLine Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Editor
- CVE-2021-34962Foxit PDF Editor Caret Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Editor
- CVE-2021-34961Foxit PDF Editor Ink Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Editor
- CVE-2021-34960Foxit PDF Editor Circle Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Editor
- CVE-2021-34959Foxit PDF Editor Square Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Editor
- CVE-2021-34958Foxit PDF Editor Text Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Editor
- CVE-2021-34957Foxit PDF Editor Highlight Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Editor
- CVE-2021-34956Foxit PDF Editor Underline Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Editor
- CVE-2021-34955Foxit PDF Editor Stamp Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Editor
- CVE-2021-34954Foxit PDF Editor StrikeOut Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Editor
- CVE-2021-34953Foxit PDF Reader Annotation Use of Uninitialized Variable Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2021-34952Foxit PDF Reader Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2021-34950Foxit PDF Reader Annotation Out-Of-Bounds Read Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2021-34948Foxit PDF Reader Square Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2021-34947NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution VulnerabilityNETGEAR R7800
- CVE-2024-23707In multiple locations, there is a possible permissions bypass due to improper input validation.Google Android
- CVE-2024-23706In multiple locations, there is a possible bypass of health data permissions due to an improper input validation.Google Android
- CVE-2024-0043In multiple locations, there is a possible notification listener grant to an app running in the work profile due to a logic error in the codGoogle Android
- CVE-2024-0025In sendIntentSender of ActivityManagerService.java, there is a possible background activity launch due to a logic error.Google Android
- CVE-2024-0024In multiple methods of UserManagerService.java, there is a possible failure to persist or enforce user restrictions due to improper input vaGoogle Android
- CVE-2024-4030tempfile.mkdtemp() may be readable and writeable by all users on WindowsPython Software Foundation CPython
- CVE-2024-34346Deno contains a permission escalation via open of privileged files with missing `--deny` flagdenoland deno · deno
- CVE-2024-23713In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications settings due to impropGoogle Android
- CVE-2024-23710In assertPackageWithSharedUserIdIsPrivileged of InstallPackageHelper.java, there is a possible execution of arbitrary app code as a privilegGoogle Android
- CVE-2024-23704In onCreate of WifiDialogActivity.java, there is a possible way to bypass the DISALLOW_ADD_WIFI_CONFIG restriction due to a missing permissiGoogle Android
- CVE-2024-27273IBM AIX privilege escalationIBM AIX
- CVE-2024-4559Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption vGoogle Chrome
- CVE-2024-4558Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2024-29207An Improper Certificate Validation could allow a malicious actor with access to an adjacent network to take control of the system.Ubiquiti UniFi Connect Application · Ubiquiti UniFi Conn… +1
- CVE-2024-32663Suricata 's http2 parser contains an improper compressed header handling can lead to resource starvationOISF suricata
- CVE-2024-34342react-pdf's PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDFwojtekmaj react-pdf · react-pdf
- CVE-2024-34084Minder's Github Webhook Handler vulnerable to denial of service from un-validated requestsstacklok minder · github.com/stacklok/minder
- CVE-2024-31456GLPI contains an authenticated SQL injectionglpi-project glpi
- CVE-2024-29889GLPI contains an SQL injection through the saved searchesglpi-project glpi
- CVE-2024-4538IDOR vulnerability in Janto Ticketing SoftwareImpronta Janto Ticketing Software
- CVE-2024-4537IDOR vulnerability in Janto Ticketing SoftwareImpronta Janto Ticketing Software
- CVE-2024-4600Cross-Site Request Forgery vulnerability in Socomec Net VisionSocomec Net vision
- CVE-2024-4582Faraday GM8181/GM828x NTP Service os command injectionFaraday GM8181 · Faraday GM828x
- CVE-2024-4599Denial of service vulnerability in LAN MessengerLAN Messenger
- CVE-2024-22472Long S0 frames received by 500 series Z-Wave devices may cause buffer overflowSilicon Labs Z-Wave SDK
- CVE-2024-25512RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attach_id parameter at /Bulletin/AttachDownLoad.as
- CVE-2024-25513RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /CorporateCulture/kaizen_down
- CVE-2024-29149An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.0
- CVE-2024-29150An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.0
- CVE-2024-32371An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a regular user account to escalate their privileges and gain a
- CVE-2024-33139J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findpage function.
- CVE-2024-33144J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findApplyedTasksPage function in
- CVE-2024-33147J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authRoleList function.
- CVE-2024-33148J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the list function.
- CVE-2024-33149J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the myProcessList function.
- CVE-2024-33781MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function octetStream::get_bytes in /Tools/octetStream.cpp.
- CVE-2024-33782MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function OTExtensionWithMatrix::extend in /OT/OTExtensionWithMatrix.cpp.
- CVE-2024-34314CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the file_get_contents function in the fetch_action method
- CVE-2024-34315CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the file_get_contents function in the fckedit_action meth
- CVE-2024-34523AChecker 1.5 allows remote attackers to read the contents of arbitrary files via the download.php path parameter by using Unauthenticated Pa
Medium, low and unrated 89
- CVE-2023-37325D-Link DAP-2622 DDP Set SSID List Missing Authentication VulnerabilityD-Link DAP-2622
- CVE-2022-43656Bentley View FBX File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityBentley View
- CVE-2022-43652Bentley View SKP File Parsing Use-After-Free Information Disclosure VulnerabilityBentley View
- CVE-2021-35001BMC Track-It! GetData Missing Authorization Information Disclosure VulnerabilityBMC Track-It!
- CVE-2021-35000OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure VulnerabilityOpenBSD Kernel
- CVE-2021-34999OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure VulnerabilityOpenBSD Kernel
- CVE-2021-34983NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure VulnerabilityNETGEAR Multiple Routers
- CVE-2021-34976Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure VulnerabilityFoxit PDF Reader
- CVE-2021-34973Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure VulnerabilityFoxit PDF Reader
- CVE-2021-34972Foxit PDF Reader AcroForm Use-After-Free Information Disclosure VulnerabilityFoxit PDF Reader
- CVE-2021-34970Foxit PDF Reader print Method Use of Externally-Controlled Format String Information Disclosure VulnerabilityFoxit PDF Reader
- CVE-2021-34969Foxit PDF Reader Annotation Use-After-Free Information Disclosure VulnerabilityFoxit PDF Reader
- CVE-2021-34951Foxit PDF Reader Annotation Use of Uninitialized Variable Information Disclosure VulnerabilityFoxit PDF Reader
- CVE-2021-34949Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityFoxit PDF Reader
- CVE-2024-23551HCL BigFix Compliance is potentially affected by Oracle database credentials stored at endpointHCL Software BigFix Compliance
- CVE-2023-40694IBM Watson CP4D Data Stores information disclosureIBM Watson CP4D Data Stores
- CVE-2024-23709In multiple locations, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2024-23712In multiple functions of AppOpsService.java, there is a possible way to saturate the content of /data/system/appops_accesses.xml due to resoGoogle Android
- CVE-2024-0042In TBD of TBD, there is a possible confusion of OEM and DRM certificates due to improperly used crypto.Google Android
- CVE-2024-0027In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to resource exhaustion.Google Android
- CVE-2024-0026In multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due to resource exhaustion.Google Android
- CVE-2024-0022In multiple functions of CompanionDeviceManagerService.java, there is a possible launch NotificationAccessConfirmationActivity of another usGoogle Android
- CVE-2024-29209A medium severity vulnerability has been identified in the update mechanism of the Phish Alert Button for Outlook, which could allow an attaKnowBe4 Phish Alert Button (PAB) for Outlook · KnowBe4 S… +1
- CVE-2024-29210A local privilege escalation (LPE) vulnerability has been identified in Phish Alert Button for Outlook (PAB), specifically within its configKnowBe4 Phish Alert Button (PAB) for Outlook · KnowBe4 P… +2
- CVE-2024-29206An Improper Access Control could allow a malicious actor authenticated in the API to enable Android Debug Bridge (ADB) and make unsupported Ubiquiti UniFi Connect EV Station · Ubiquiti UniFi Acces… +3
- CVE-2024-27982The team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to NodeJS Node
- CVE-2024-29208An Unverified Password Change could allow a malicious actor with API access to the device to change the system password without knowing the Ubiquiti Update UniFi Connect EV Station · Ubiquiti Update…
- CVE-2024-4596Kimai Session information disclosureKimai · kimai/kimai
- CVE-2024-34341The Trix Editor Contains an Arbitrary Code Execution Vulnerabilitybasecamp trix · trix +1
- CVE-2024-32867Suricata's defrag contains various issues leading to policy bypassOISF suricata
- CVE-2024-4595SEMCMS function.php locate sql injectionSEMCMS
- CVE-2024-32664Suricata's base64 contains an out of bounds writeOISF suricata
- CVE-2024-4594DedeCMS sys_safe.php cross-site request forgeryDedeCMS
- CVE-2024-4593DedeCMS sys_multiserv.php cross-site request forgeryDedeCMS
- CVE-2024-4592DedeCMS sys_group_edit.php cross-site request forgeryDedeCMS
- CVE-2024-28148Apache Superset: Incorrect datasource authorization on explore REST API Apache Software Foundation Apache Superset · apache-superset
- CVE-2024-4591DedeCMS sys_group_add.php cross-site request forgeryDedeCMS
- CVE-2024-4590DedeCMS sys_info.php cross-site request forgeryDedeCMS
- CVE-2024-4536Eclipse EDC: OAuth2 Credential Exfiltration VulnerabilityEclipse Foundation EDC · org.eclipse.edc:connector-core
- CVE-2023-7240Broken Access Control leading to SSRF in NetIQ Identity ConsoleOpenText NetIQ Identity Console
- CVE-2023-31234WordPress Tilda Publishing plugin <= 0.3.23 - Broken Access Control vulnerabilityTilda Publishing
- CVE-2024-4589DedeCMS mytag_edit.php cross-site request forgeryDedeCMS
- CVE-2024-4588DedeCMS mytag_add.php cross-site request forgeryDedeCMS
- CVE-2024-4587DedeCMS tpl.php cross-site request forgeryDedeCMS
- CVE-2024-4586DedeCMS shops_delivery.php cross-site request forgeryDedeCMS
- CVE-2024-4585DedeCMS member_type.php cross-site request forgeryDedeCMS
- CVE-2024-4601Improper Authentication vulnerability in Socomec Net VisionSocomec Net vision
- CVE-2024-4584Faraday GM8181/GM828x command_port.ini information disclosureFaraday GM8181 · Faraday GM828x
- CVE-2024-4583Faraday GM8181/GM828x Request information disclosureFaraday GM8181 · Faraday GM828x
- CVE-2023-6810ClickCease Click Fraud Protection <= 3.2.4 - Improper Authorization to sensitive information exposure via get_settingseranfl ClickCease Click Fraud Protection
- CVE-2024-3759Hmdfs has a use after free vulnerabilityOpenHarmony
- CVE-2024-3758Hmdfs has a heap buffer overflow vulnerabilityOpenHarmony
- CVE-2024-3757Arkcompiler runtime has an integer overflow vulnerabilityOpenHarmony
- CVE-2024-31078Bluetooth Service has a use after free vulnerabilityOpenHarmony
- CVE-2024-23808Arkcompiler ets frontend has an out-of-bounds read vulnerabilityOpenHarmony
- CVE-2024-27217MSDP has a use after free vulnerabilityOpenHarmony
- CVE-2024-3628EasyEvent <= 1.0.0 - Admin+ Stored XSSEasyEvent
- CVE-2024-20855Improper access control vulnerability in multitasking framework prior to SMR May-2024 Release 1 allows physical attackers to access unlockedSamsung Mobile Devices
- CVE-2024-20872Improper handling of insufficient privileges vulnerability in TalkbackSE prior to version Android 14 allows local attackers to modify settinSamsung Mobile TalkbackSE
- CVE-2024-20871Improper authorization vulnerability in Samsung Keyboard prior to version One UI 5.1.1 allows physical attackers to partially bypass the facSamsung Mobile Samsung Keyboard
- CVE-2024-20870Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.71.8 allows local attackers to writSamsung Mobile Galaxy Store
- CVE-2024-20869Improper privilege management vulnerability in Samsung Internet prior to version 25.0.0.41 allows local attackers to bypass protection for cSamsung Mobile Samsung Internet
- CVE-2024-20868Improper input validation in Samsung Notes prior to version 4.4.15 allows local attackers to delete files with Samsung Notes privilege underSamsung Mobile Samsung Notes
- CVE-2024-20867Improper privilege management vulnerability in Samsung Email prior to version 6.1.91.14 allows local attackers to access sensitive informatiSamsung Mobile Samsung Email
- CVE-2024-20866Authentication bypass vulnerability in Setupwizard prior to SMR May-2024 Release 1 allows physical attackers to skip activation step.Samsung Mobile Devices
- CVE-2024-20865Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images.Samsung Mobile Devices
- CVE-2024-20864Improper access control vulnerability in DarManagerService prior to SMR May-2024 Release 1 allows local attackers to monitor system resourceSamsung Mobile Devices
- CVE-2024-20863Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary codeSamsung Mobile Devices
- CVE-2024-20862Out-of-bounds write in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code.Samsung Mobile Devices
- CVE-2024-20861Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause memory corruption.Samsung Mobile Devices
- CVE-2024-20860Improper export of android application components vulnerability in TelephonyUI prior to SMR May-2024 Release 1 allows local attackers to rebSamsung Mobile Devices
- CVE-2024-20859Improper access control vulnerability in FactoryCamera prior to SMR May-2024 Release 1 allows local attackers to take pictures without priviSamsung Mobile Devices
- CVE-2024-20858Improper access control vulnerability in setCocktailHostCallbacks of CocktailBarService prior to SMR May-2024 Release 1 allows local attackeSamsung Mobile Devices
- CVE-2024-20857Improper access control vulnerability in startListening of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to acceSamsung Mobile Devices
- CVE-2024-20856Improper Authentication vulnerability in Secure Folder prior to SMR May-2024 Release 1 allows physical attackers to access Secure Folder witSamsung Mobile Devices
- CVE-2024-20821A vulnerability possible to reconfigure OTP allows local attackers to transit RMA(Return Merchandise Authorization) mode, which disables secSamsung Mobile Devices
- CVE-2023-42757Process Explorer before 17.04 allows attackers to make it functionally unavailable (a denial of service for analysis) by renaming an executa
- CVE-2024-32369SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive infor
- CVE-2024-33122Roothub v2.6 was discovered to contain a SQL injection vulnerability via the topic parameter in the list() function.
- CVE-2024-33161J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the unallocatedList() function.
- CVE-2024-33748Cross-site scripting (XSS) vulnerability in the search function in Maven net.mingsoft MS Basic 2.1.13.4 and earlier.net.mingsoft:ms-basic
- CVE-2024-33780MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::copyOut at /Tools/SilentPprf.cpp.
- CVE-2024-33783MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::SilentMultiPprfReceiver::expand in /Tools/Sile
- CVE-2024-33856An issue was discovered in Logpoint before 7.4.0.
- CVE-2024-33858An issue was discovered in Logpoint before 7.4.0.
- CVE-2024-33859An issue was discovered in Logpoint before 7.4.0.
- CVE-2024-33860An issue was discovered in Logpoint before 7.4.0.
- CVE-2024-34397An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1.
- CVE-2024-34517The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin acceNeo4j · org.neo4j:neo4j-cypher