# CVEs published 2024-05-11 28 CVEs were published on May 11, 2024: 2 critical, 5 high. Days are UTC. - [CVE-2024-4790](https://cve.now/CVE-2024-4790.md): DedeCMS path traversal (CVSS 5.3, DedeCMS) - [CVE-2023-47711](https://cve.now/CVE-2023-47711.md): IBM Security Guardium denial of service (CVSS 2.7, IBM Security Guardium) - [CVE-2023-47712](https://cve.now/CVE-2023-47712.md): IBM Security Guardium privilege escalation (CVSS 7.8, IBM Security Guardium) - [CVE-2023-47709](https://cve.now/CVE-2023-47709.md): IBM Security Guardium command injection (CVSS 9.1, IBM Security Guardium) - [CVE-2024-28760](https://cve.now/CVE-2024-28760.md): IBM App Connect Enterprise denial of service (CVSS 4.3, IBM App Connect Enterprise) - [CVE-2024-28761](https://cve.now/CVE-2024-28761.md): IBM App Connect Enterprise HTML injection (CVSS 5.4, IBM App Connect Enterprise) - [CVE-2023-52721](https://cve.now/CVE-2023-52721.md): The WindowManager module has a vulnerability in permission control. (CVSS 6.2, Huawei HarmonyOS · Huawei EMUI) - [CVE-2024-4046](https://cve.now/CVE-2024-4046.md): Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability. (CVSS 6.4, Huawei HarmonyOS · Huawei EMUI) - [CVE-2024-32999](https://cve.now/CVE-2024-32999.md): Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability. (CVSS 6.8, Huawei HarmonyOS · Huawei EMUI) - [CVE-2024-32998](https://cve.now/CVE-2024-32998.md): NULL pointer access vulnerability in the clock module Impact: Successful exploitation of this vulnerability will affect availability. (CVSS 5.9, Huawei HarmonyOS · Huawei EMUI) - [CVE-2023-52720](https://cve.now/CVE-2023-52720.md): Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affect availability. (CVSS 4.1, Huawei HarmonyOS · Huawei EMUI) - [CVE-2024-32997](https://cve.now/CVE-2024-32997.md): Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability. (CVSS 8.4, Huawei HarmonyOS · Huawei EMUI) - [CVE-2024-32996](https://cve.now/CVE-2024-32996.md): Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect availability. (CVSS 6.2, Huawei HarmonyOS · Huawei EMUI) - [CVE-2024-32995](https://cve.now/CVE-2024-32995.md): Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability. (CVSS 6.2, Huawei HarmonyOS · Huawei EMUI) - [CVE-2023-52719](https://cve.now/CVE-2023-52719.md): Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnerability may affect service confidentialit (CVSS 7.1, Huawei HarmonyOS · Huawei EMUI) - [CVE-2024-32993](https://cve.now/CVE-2024-32993.md): Out-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect availability. (CVSS 5.6, Huawei HarmonyOS · Huawei EMUI) - [CVE-2023-52384](https://cve.now/CVE-2023-52384.md): Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability. (CVSS 4.7, Huawei HarmonyOS · Huawei EMUI) - [CVE-2023-52383](https://cve.now/CVE-2023-52383.md): Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability. (CVSS 4.7, Huawei HarmonyOS · Huawei EMUI) - [CVE-2024-32992](https://cve.now/CVE-2024-32992.md): Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availabilit (CVSS 7.5, Huawei HarmonyOS · Huawei EMUI) - [CVE-2024-32991](https://cve.now/CVE-2024-32991.md): Permission verification vulnerability in the wpa\_supplicant module Impact: Successful exploitation of this vulnerability will affect availab (CVSS 7.5, Huawei HarmonyOS · Huawei EMUI) - [CVE-2024-32990](https://cve.now/CVE-2024-32990.md): Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect (CVSS 6.1, Huawei HarmonyOS · Huawei EMUI) - [CVE-2024-32989](https://cve.now/CVE-2024-32989.md): Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affec (CVSS 3.3, Huawei HarmonyOS · Huawei EMUI) - [CVE-2024-4487](https://cve.now/CVE-2024-4487.md): Blocksy Companion \<= 2.0.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Uploads (CVSS 6.4, creativethemeshq Blocksy Companion) - [CVE-2024-4329](https://cve.now/CVE-2024-4329.md): Thim Elementor Kit \<= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter (CVSS 6.4, thimpress Thim Kit for Elementor – Pre-built Templates & Wi…) - [CVE-2024-4560](https://cve.now/CVE-2024-4560.md): Kognetiks Chatbot for WordPress \<= 1.9.9 - Unauthenticated Arbitrary File Upload via chatbot\_chatgpt\_upload\_file\_to\_assistant Function (CVSS 9.8, Kognetiks Chatbot for WordPress) - [CVE-2024-4630](https://cve.now/CVE-2024-4630.md): Starter Templates — Elementor, WordPress & Beaver Builder Templates \<= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, brainstormforce Starter Templates – AI-Powered Templates fo…) - [CVE-2023-5447](https://cve.now/CVE-2023-5447.md): Use-After-Free in Service for Hardware Support App for Fingerprint Driver (CVSS 5.5, Synaptics Fingerprint Driver) - [CVE-2024-4209](https://cve.now/CVE-2024-4209.md): Gutenberg Blocks by Kadence Blocks – Page Builder Features \<= 3.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer (CVSS 6.4, stellarwp Kadence Blocks — Page Builder Toolkit for Gutenbe…) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2024-05-11 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.