# CVEs published 2024-05-20

123 CVEs were published on May 20, 2024: 8 critical, 50 high. Days are UTC.

- [CVE-2024-5145](https://cve.now/CVE-2024-5145.md): SourceCodester Vehicle Management System HTTP POST Request newdriver.php unrestricted upload (CVSS 5.3, SourceCodester Vehicle Management System)
- [CVE-2024-34710](https://cve.now/CVE-2024-34710.md): Wiki.js Stored XSS through Client Side Template Injection (CVSS 7.1, requarks wiki · github.com/requarks/wiki)
- [CVE-2024-4985](https://cve.now/CVE-2024-4985.md): An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single sign-on authentication (CVSS 10.0, GitHub Enterprise Server)
- [CVE-2024-35194](https://cve.now/CVE-2024-35194.md): Stacklok Minder vulnerable to denial of service from maliciously crafted templates (CVSS 5.3, stacklok minder · github.com/stacklok/minder)
- [CVE-2024-35192](https://cve.now/CVE-2024-35192.md): Trivy possibly leaks registry credential when scanning images from malicious registries (CVSS 5.5, aquasecurity trivy · github.com/aquasecurity/trivy)
- [CVE-2024-33900](https://cve.now/CVE-2024-33900.md): KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. (CVSS 6.5)
- [CVE-2024-35191](https://cve.now/CVE-2024-35191.md): verbb/formie Server-Side Template Injection for variable-enabled settings (CVSS 4.4, verbb formie · verbb/formie)
- [CVE-2024-33901](https://cve.now/CVE-2024-33901.md): Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database vi (CVSS 6.5)
- [CVE-2024-35195](https://cve.now/CVE-2024-35195.md): Requests \`Session\` object does not verify requests after making first request with verify=False (CVSS 5.6, psf requests · requests)
- [CVE-2024-29000](https://cve.now/CVE-2024-29000.md): SolarWinds Platform Reflected XSS Vulnerability (CVSS 7.9, SolarWinds Platform)
- [CVE-2023-49335](https://cve.now/CVE-2023-49335.md): Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details. (CVSS 8.3, ManageEngine ADAudit Plus)
- [CVE-2023-49334](https://cve.now/CVE-2023-49334.md): Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report. (CVSS 8.3, ManageEngine ADAudit Plus)
- [CVE-2023-49333](https://cve.now/CVE-2023-49333.md): Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature. (CVSS 8.3, ManageEngine ADAudit Plus)
- [CVE-2024-34949](https://cve.now/CVE-2024-34949.md): SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function OrderLogic::getOrderList (CVSS 8.2)
- [CVE-2023-49332](https://cve.now/CVE-2023-49332.md): Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares. (CVSS 8.3, ManageEngine ADAudit Plus)
- [CVE-2023-49331](https://cve.now/CVE-2023-49331.md): Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option. (CVSS 8.3, ManageEngine ADAudit Plus)
- [CVE-2024-34193](https://cve.now/CVE-2024-34193.md): smanga 3.2.7 does not filter the file parameter at the PHP/get file flow.php interface, resulting in a path traversal vulnerability that can (CVSS 7.5)
- [CVE-2024-35578](https://cve.now/CVE-2024-35578.md): Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv. (CVSS 8.0)
- [CVE-2024-35576](https://cve.now/CVE-2024-35576.md): Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv. (CVSS 5.2)
- [CVE-2024-35579](https://cve.now/CVE-2024-35579.md): Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv. (CVSS 7.7)
- [CVE-2024-24293](https://cve.now/CVE-2024-24293.md): A Prototype Pollution issue in MiguelCastillo @bit/loader v.10.0.3 allows an attacker to execute arbitrary code via the M function e argumen (CVSS 8.8, @bit/loader)
- [CVE-2024-35580](https://cve.now/CVE-2024-35580.md): Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv. (CVSS 9.8)
- [CVE-2024-35571](https://cve.now/CVE-2024-35571.md): Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv. (CVSS 9.8)
- [CVE-2024-31714](https://cve.now/CVE-2024-31714.md): Buffer Overflow vulnerability in Waxlab wax v.0.9-3 and before allows an attacker to cause a denial of service via the Lua library component (CVSS 7.5)
- [CVE-2024-29651](https://cve.now/CVE-2024-29651.md): A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code (CVSS 8.1, @apidevtools/json-schema-ref-parser)
- [CVE-2024-0401](https://cve.now/CVE-2024-0401.md): ASUS OVPN RCE (CVSS 7.2, ASUS ExpertWiFi · ASUS RT-AX55 +8)
- [CVE-2024-24294](https://cve.now/CVE-2024-24294.md): A Prototype Pollution issue in Blackprint @blackprint/engine v.0.9.0 allows an attacker to execute arbitrary code via the \_utils.setDeepProp (CVSS 9.8, @blackprint/engine)
- [CVE-2024-34948](https://cve.now/CVE-2024-34948.md): An issue in Quanxun Huiju Network Technology(Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 allows attackers to cause a Denial of Se (CVSS 7.5)
- [CVE-2024-34947](https://cve.now/CVE-2024-34947.md): Quanxun Huiju Network Technology (Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was discovered to be vulnerable to an ICMP redirect (CVSS 9.4)
- [CVE-2024-4151](https://cve.now/CVE-2024-4151.md): Improper Access Control in lunary-ai/lunary (CVSS 8.3, lunary-ai/lunary)
- [CVE-2024-2835](https://cve.now/CVE-2024-2835.md): OpenText ArcSight Enterprise Security Manager and ArcSight Platform Stored XSS (CVSS 8.7, OpenText ArcSight Enterprise Security Manager · OpenText Ar…)
- [CVE-2024-3482](https://cve.now/CVE-2024-3482.md): OpenText ArcSight Enterprise Security Manager and ArcSight Platform Stored XSS (CVSS 8.7, OpenText ArcSight Enterprise Security Manager · OpenText Ar…)
- [CVE-2024-34953](https://cve.now/CVE-2024-34953.md): An issue in taurusxin ncmdump v1.3.2 allows attackers to cause a Denial of Service (DoS) via memory exhaustion by supplying a crafted .ncm f (CVSS 7.5)
- [CVE-2024-34952](https://cve.now/CVE-2024-34952.md): taurusxin ncmdump v1.3.2 was discovered to contain a segmentation violation via the NeteaseCrypt::FixMetadata() function at /src/ncmcrypt.cp (CVSS 5.0)
- [CVE-2024-27312](https://cve.now/CVE-2024-27312.md): Authorization vulnerability in PAM360 (CVSS 8.1, ManageEngine PAM360)
- [CVE-2024-4287](https://cve.now/CVE-2024-4287.md): Improper Input Validation in mintplex-labs/anything-llm (CVSS 8.1, mintplex-labs/anything-llm)
- [CVE-2023-49330](https://cve.now/CVE-2023-49330.md): Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data. (CVSS 8.3, ManageEngine ADAudit Plus)
- [CVE-2024-4323](https://cve.now/CVE-2024-4323.md): Fluent Bit Memory Corruption Vulnerability (CVSS 9.8, Fluent Bit)
- [CVE-2024-36009](https://cve.now/CVE-2024-36009.md): ax25: Fix netdev refcount issue (CVSS 7.8, Linux)
- [CVE-2024-36008](https://cve.now/CVE-2024-36008.md): ipv4: check for NULL idev in ip\_route\_use\_hint() (no CVSS, Linux)
- [CVE-2024-36007](https://cve.now/CVE-2024-36007.md): mlxsw: spectrum\_acl\_tcam: Fix warning during rehash (CVSS 7.8, Linux)
- [CVE-2024-36006](https://cve.now/CVE-2024-36006.md): mlxsw: spectrum\_acl\_tcam: Fix incorrect list API usage (no CVSS, Linux)
- [CVE-2024-36005](https://cve.now/CVE-2024-36005.md): netfilter: nf\_tables: honor table dormant flag from netdev release event path (no CVSS, Linux)
- [CVE-2024-36004](https://cve.now/CVE-2024-36004.md): i40e: Do not use WQ\_MEM\_RECLAIM flag for workqueue (no CVSS, Linux)
- [CVE-2024-36003](https://cve.now/CVE-2024-36003.md): ice: fix LAG and VF lock dependency in ice\_reset\_vf() (no CVSS, Linux)
- [CVE-2024-36002](https://cve.now/CVE-2024-36002.md): dpll: fix dpll\_pin\_on\_pin\_register() for multiple parent pins (no CVSS, Linux)
- [CVE-2024-36001](https://cve.now/CVE-2024-36001.md): netfs: Fix the pre-flush when appending to a file in writethrough mode (CVSS 7.8, Linux)
- [CVE-2024-36000](https://cve.now/CVE-2024-36000.md): mm/hugetlb: fix missing hugetlb\_lock for resv uncharge (no CVSS, Linux)
- [CVE-2024-35999](https://cve.now/CVE-2024-35999.md): smb3: missing lock when picking channel (CVSS 7.5, Linux)
- [CVE-2024-35998](https://cve.now/CVE-2024-35998.md): smb3: fix lock ordering potential deadlock in cifs\_sync\_mid\_result (CVSS 7.5, Linux)
- [CVE-2024-35997](https://cve.now/CVE-2024-35997.md): HID: i2c-hid: remove I2C\_HID\_READ\_PENDING flag to prevent lock-up (no CVSS, Linux)
- [CVE-2024-35996](https://cve.now/CVE-2024-35996.md): cpu: Re-enable CPU mitigations by default for !X86 architectures (no CVSS, Linux)
- [CVE-2024-35995](https://cve.now/CVE-2024-35995.md): ACPI: CPPC: Use access\_width over bit\_width for system memory accesses (no CVSS, Linux)
- [CVE-2024-35994](https://cve.now/CVE-2024-35994.md): firmware: qcom: uefisecapp: Fix memory related IO errors and crashes (CVSS 7.8, Linux)
- [CVE-2024-35993](https://cve.now/CVE-2024-35993.md): mm: turn folio\_test\_hugetlb into a PageType (CVSS 7.8, Linux)
- [CVE-2024-35992](https://cve.now/CVE-2024-35992.md): phy: marvell: a3700-comphy: Fix out of bounds read (no CVSS, Linux)
- [CVE-2024-35991](https://cve.now/CVE-2024-35991.md): dmaengine: idxd: Convert spinlock to mutex to lock evl workqueue (no CVSS, Linux)
- [CVE-2024-35990](https://cve.now/CVE-2024-35990.md): dma: xilinx\_dpdma: Fix locking (CVSS 7.8, Linux)
- [CVE-2024-35989](https://cve.now/CVE-2024-35989.md): dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (CVSS 5.5, Linux)
- [CVE-2024-35988](https://cve.now/CVE-2024-35988.md): riscv: Fix TASK\_SIZE on 64-bit NOMMU (no CVSS, Linux)
- [CVE-2024-35987](https://cve.now/CVE-2024-35987.md): riscv: Fix loading 64-bit NOMMU kernels past the start of RAM (CVSS 8.4, Linux)
- [CVE-2024-35986](https://cve.now/CVE-2024-35986.md): phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered (CVSS 7.0, Linux)
- [CVE-2024-35985](https://cve.now/CVE-2024-35985.md): sched/eevdf: Prevent vlag from going out of bounds in reweight\_eevdf() (no CVSS, Linux)
- [CVE-2024-35984](https://cve.now/CVE-2024-35984.md): i2c: smbus: fix NULL function pointer dereference (no CVSS, Linux)
- [CVE-2024-35983](https://cve.now/CVE-2024-35983.md): bounds: Use the right number of bits for power-of-two CONFIG\_NR\_CPUS (no CVSS, Linux)
- [CVE-2024-35982](https://cve.now/CVE-2024-35982.md): batman-adv: Avoid infinite loop trying to resize local TT (CVSS 5.1, Linux)
- [CVE-2024-35981](https://cve.now/CVE-2024-35981.md): virtio\_net: Do not send RSS key if it is not supported (no CVSS, Linux)
- [CVE-2024-35980](https://cve.now/CVE-2024-35980.md): arm64: tlb: Fix TLBI RANGE operand (CVSS 8.4, Linux)
- [CVE-2024-35979](https://cve.now/CVE-2024-35979.md): raid1: fix use-after-free for original bio in raid1\_write\_request() (CVSS 7.8, Linux)
- [CVE-2024-35978](https://cve.now/CVE-2024-35978.md): Bluetooth: Fix memory leak in hci\_req\_sync\_complete() (no CVSS, Linux)
- [CVE-2024-35977](https://cve.now/CVE-2024-35977.md): platform/chrome: cros\_ec\_uart: properly fix race condition (no CVSS, Linux)
- [CVE-2024-35976](https://cve.now/CVE-2024-35976.md): xsk: validate user input for XDP\_{UMEM|COMPLETION}\_FILL\_RING (CVSS 7.1, Linux)
- [CVE-2024-35975](https://cve.now/CVE-2024-35975.md): octeontx2-pf: Fix transmit scheduler resource leak (no CVSS, Linux)
- [CVE-2024-35974](https://cve.now/CVE-2024-35974.md): block: fix q-\>blkg\_list corruption during disk rebind (no CVSS, Linux)
- [CVE-2024-35973](https://cve.now/CVE-2024-35973.md): geneve: fix header validation in geneve\[6\]\_xmit\_skb (CVSS 5.5, Linux)
- [CVE-2024-35972](https://cve.now/CVE-2024-35972.md): bnxt\_en: Fix possible memory leak in bnxt\_rdma\_aux\_device\_init() (no CVSS, Linux)
- [CVE-2024-35971](https://cve.now/CVE-2024-35971.md): net: ks8851: Handle softirqs at the end of IRQ thread to fix hang (CVSS 7.5, Linux)
- [CVE-2024-35970](https://cve.now/CVE-2024-35970.md): af\_unix: Clear stale u-\>oob\_skb. (CVSS 6.3, Linux)
- [CVE-2024-35969](https://cve.now/CVE-2024-35969.md): ipv6: fix race condition between ipv6\_get\_ifaddr and ipv6\_del\_addr (CVSS 8.8, Linux)
- [CVE-2024-35968](https://cve.now/CVE-2024-35968.md): pds\_core: Fix pdsc\_check\_pci\_health function to use work thread (CVSS 7.8, Linux)
- [CVE-2024-35967](https://cve.now/CVE-2024-35967.md): Bluetooth: SCO: Fix not validating setsockopt user input (CVSS 7.1, Linux)
- [CVE-2024-35966](https://cve.now/CVE-2024-35966.md): Bluetooth: RFCOMM: Fix not validating setsockopt user input (no CVSS, Linux)
- [CVE-2024-35965](https://cve.now/CVE-2024-35965.md): Bluetooth: L2CAP: Fix not validating setsockopt user input (no CVSS, Linux)
- [CVE-2024-35964](https://cve.now/CVE-2024-35964.md): Bluetooth: ISO: Fix not validating setsockopt user input (no CVSS, Linux)
- [CVE-2024-35963](https://cve.now/CVE-2024-35963.md): Bluetooth: hci\_sock: Fix not validating setsockopt user input (CVSS 7.1, Linux)
- [CVE-2024-35962](https://cve.now/CVE-2024-35962.md): netfilter: complete validation of user input (CVSS 7.1, Linux)
- [CVE-2024-35961](https://cve.now/CVE-2024-35961.md): net/mlx5: Register devlink first under devlink lock (no CVSS, Linux)
- [CVE-2024-35960](https://cve.now/CVE-2024-35960.md): net/mlx5: Properly link new fs rules into the tree (CVSS 9.1, Linux)
- [CVE-2024-35959](https://cve.now/CVE-2024-35959.md): net/mlx5e: Fix mlx5e\_priv\_init() cleanup flow (no CVSS, Linux)
- [CVE-2024-35958](https://cve.now/CVE-2024-35958.md): net: ena: Fix incorrect descriptor free behavior (CVSS 7.8, Linux)
- [CVE-2024-35957](https://cve.now/CVE-2024-35957.md): iommu/vt-d: Fix WARN\_ON in iommu probe path (CVSS 5.9, Linux)
- [CVE-2024-35956](https://cve.now/CVE-2024-35956.md): btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations (no CVSS, Linux)
- [CVE-2024-35955](https://cve.now/CVE-2024-35955.md): kprobes: Fix possible use-after-free issue on kprobe registration (CVSS 8.8, Linux)
- [CVE-2024-35954](https://cve.now/CVE-2024-35954.md): scsi: sg: Avoid sg device teardown race (CVSS 7.8, Linux)
- [CVE-2024-35953](https://cve.now/CVE-2024-35953.md): accel/ivpu: Fix deadlock in context\_xa (no CVSS, Linux)
- [CVE-2024-35952](https://cve.now/CVE-2024-35952.md): drm/ast: Fix soft lockup (no CVSS, Linux)
- [CVE-2024-35951](https://cve.now/CVE-2024-35951.md): drm/panfrost: Fix the error path in panfrost\_mmu\_map\_fault\_addr() (CVSS 7.8, Linux)
- [CVE-2024-35950](https://cve.now/CVE-2024-35950.md): drm/client: Fully protect modes\[\] with dev-\>mode\_config.mutex (CVSS 7.8, Linux)
- [CVE-2024-5137](https://cve.now/CVE-2024-5137.md): PHPGurukul Directory Management System Searchbar admin-profile.php cross site scripting (CVSS 5.1, PHPGurukul Directory Management System)
- [CVE-2024-35949](https://cve.now/CVE-2024-35949.md): btrfs: make sure that WRITTEN is set on all metadata blocks (CVSS 7.8, Linux)
- [CVE-2024-35948](https://cve.now/CVE-2024-35948.md): bcachefs: Check for journal entries overruning end of sb clean section (CVSS 7.8, Linux)
- [CVE-2024-5136](https://cve.now/CVE-2024-5136.md): PHPGurukul Directory Management System search-directory.php. cross site scripting (CVSS 5.1, PHPGurukul Directory Management System)
- [CVE-2024-3761](https://cve.now/CVE-2024-3761.md): Missing Authorization on Delete Datasets in lunary-ai/lunary (CVSS 9.1, lunary-ai/lunary)
- [CVE-2024-5135](https://cve.now/CVE-2024-5135.md): PHPGurukul Directory Management System index.php sql injection (CVSS 6.9, PHPGurukul Directory Management System)
- [CVE-2024-1968](https://cve.now/CVE-2024-1968.md): Authorization Header Leakage in scrapy/scrapy on Scheme Change Redirects (CVSS 7.5, scrapy/scrapy · scrapy)
- [CVE-2024-5134](https://cve.now/CVE-2024-5134.md): SourceCodester Electricity Consumption Monitoring Tool delete-bill.php sql injection (CVSS 5.3, SourceCodester Electricity Consumption Monitoring Tool)
- [CVE-2024-5123](https://cve.now/CVE-2024-5123.md): SourceCodester Event Registration System cross site scripting (CVSS 6.9, SourceCodester Event Registration System)
- [CVE-2024-5122](https://cve.now/CVE-2024-5122.md): SourceCodester Event Registration System sql injection (CVSS 6.9, SourceCodester Event Registration System)
- [CVE-2024-5121](https://cve.now/CVE-2024-5121.md): SourceCodester Event Registration System cross site scripting (CVSS 5.3, SourceCodester Event Registration System)
- [CVE-2024-5120](https://cve.now/CVE-2024-5120.md): SourceCodester Event Registration System sql injection (CVSS 5.3, SourceCodester Event Registration System)
- [CVE-2024-3368](https://cve.now/CVE-2024-3368.md): All in One SEO \< 4.6.1.1 - Contributor+ Stored XSS (CVSS 6.1, All in One SEO)
- [CVE-2024-5119](https://cve.now/CVE-2024-5119.md): SourceCodester Event Registration System sql injection (CVSS 5.3, SourceCodester Event Registration System)
- [CVE-2024-5118](https://cve.now/CVE-2024-5118.md): SourceCodester Event Registration System login.php sql injection (CVSS 6.9, SourceCodester Event Registration System)
- [CVE-2024-5117](https://cve.now/CVE-2024-5117.md): SourceCodester Event Registration System portal.php sql injection (CVSS 6.9, SourceCodester Event Registration System)
- [CVE-2024-5116](https://cve.now/CVE-2024-5116.md): SourceCodester Online Examination System save.php sql injection (CVSS 6.9, SourceCodester Online Examination System)
- [CVE-2024-5115](https://cve.now/CVE-2024-5115.md): Campcodes Complete Web-Based School Management System teacher\_profile.php sql injection (CVSS 5.3, Campcodes Complete Web-Based School Management System)
- [CVE-2024-5114](https://cve.now/CVE-2024-5114.md): Campcodes Complete Web-Based School Management System teacher\_attendance\_history1.php sql injection (CVSS 5.3, Campcodes Complete Web-Based School Management System)
- [CVE-2024-5113](https://cve.now/CVE-2024-5113.md): Campcodes Complete Web-Based School Management System student\_profile1.php sql injection (CVSS 5.3, Campcodes Complete Web-Based School Management System)
- [CVE-2024-5112](https://cve.now/CVE-2024-5112.md): Campcodes Complete Web-Based School Management System student\_profile.php sql injection (CVSS 5.3, Campcodes Complete Web-Based School Management System)
- [CVE-2024-5111](https://cve.now/CVE-2024-5111.md): Campcodes Complete Web-Based School Management System student\_payment\_invoice1.php sql injection (CVSS 5.3, Campcodes Complete Web-Based School Management System)
- [CVE-2024-5110](https://cve.now/CVE-2024-5110.md): Campcodes Complete Web-Based School Management System student\_payment\_invoice.php sql injection (CVSS 5.3, Campcodes Complete Web-Based School Management System)
- [CVE-2024-5109](https://cve.now/CVE-2024-5109.md): Campcodes Complete Web-Based School Management System student\_payment\_history.php sql injection (CVSS 5.3, Campcodes Complete Web-Based School Management System)
- [CVE-2024-5108](https://cve.now/CVE-2024-5108.md): Campcodes Complete Web-Based School Management System student\_payment\_details4.php sql injection (CVSS 5.3, Campcodes Complete Web-Based School Management System)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-05-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.