# CVEs published 2024-05-29

60 CVEs were published on May 29, 2024: 5 critical, 16 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2024-36114](https://cve.now/CVE-2024-36114.md): Decompressors can crash the JVM and leak memory content in Aircompressor (CVSS 8.6, airlift aircompressor · io.airlift:aircompressor)
- [CVE-2024-35221](https://cve.now/CVE-2024-35221.md): Denial of service when publishing a package on rubygems.org (CVSS 4.3, rubygems.org)
- [CVE-2024-35492](https://cve.now/CVE-2024-35492.md): Cesanta Mongoose commit b316989 was discovered to contain a NULL pointer dereference via the scpy function at src/fmt.c. (CVSS 7.5)
- [CVE-2024-35434](https://cve.now/CVE-2024-35434.md): Irontec Sngrep v1.8.1 was discovered to contain a heap buffer overflow via the function rtp\_check\_packet at /sngrep/src/rtp.c. (CVSS 7.5)
- [CVE-2024-36016](https://cve.now/CVE-2024-36016.md): tty: n\_gsm: fix possible out-of-bounds in gsm0\_receive() (CVSS 7.8, Linux)
- [CVE-2024-35512](https://cve.now/CVE-2024-35512.md): hmq v1.5.5 is vulnerable to Denial of Service (DoS) due to a Null Pointer Exception. (CVSS 5.3)
- [CVE-2024-34715](https://cve.now/CVE-2024-34715.md): Partial Password Exposure Vulnerability in Fides Webserver Logs (CVSS 2.3, ethyca fides · ethyca-fides)
- [CVE-2024-34161](https://cve.now/CVE-2024-34161.md): NGINX HTTP/3 QUIC vulnerability (CVSS 5.3, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2024-35200](https://cve.now/CVE-2024-35200.md): NGINX HTTP/3 QUIC vulnerability (CVSS 5.3, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2024-32760](https://cve.now/CVE-2024-32760.md): NGINX HTTP/3 QUIC vulnerability (CVSS 6.5, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2024-31079](https://cve.now/CVE-2024-31079.md): NGINX HTTP/3 QUIC vulnerability (CVSS 4.8, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2024-35311](https://cve.now/CVE-2024-35311.md): Yubico YubiKey 5 Series before 5.7.0, Security Key Series before 5.7.0, YubiKey Bio Series before 5.6.4, and YubiKey 5 FIPS before 5.7.2 hav (CVSS 3.3)
- [CVE-2024-35284](https://cve.now/CVE-2024-35284.md): A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to (CVSS 5.4)
- [CVE-2024-35283](https://cve.now/CVE-2024-35283.md): A vulnerability in the Ignite component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to condu (CVSS 6.1)
- [CVE-2023-46297](https://cve.now/CVE-2023-46297.md): An issue was discovered on Mercusys MW325R EU V3 MW325R(EU)\_V3\_1.11.0 221019 devices. (CVSS 5.1)
- [CVE-2024-28974](https://cve.now/CVE-2024-28974.md): Dell Data Protection Advisor, version(s) 19.9, contain(s) an Inadequate Encryption Strength vulnerability. (CVSS 7.6, Dell Data Protection Advisor · Dell PowerProtect DP Series…)
- [CVE-2024-35333](https://cve.now/CVE-2024-35333.md): A stack-buffer-overflow vulnerability exists in the read\_charset\_decl function of html2xhtml 1.3. (CVSS 8.4)
- [CVE-2024-4358](https://cve.now/CVE-2024-4358.md): Registration Authentication Bypass Vulnerability (CVSS 9.8, KEV, Progress Software Telerik Report Server)
- [CVE-2024-36470](https://cve.now/CVE-2024-36470.md): In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific edge cases (CVSS 8.1, JetBrains TeamCity)
- [CVE-2024-36378](https://cve.now/CVE-2024-36378.md): In JetBrains TeamCity before 2024.03.2 server was susceptible to DoS attacks with incorrect auth tokens (CVSS 5.9, JetBrains TeamCity)
- [CVE-2024-36377](https://cve.now/CVE-2024-36377.md): In JetBrains TeamCity before 2024.03.2 certain TeamCity API endpoints did not check user permissions (CVSS 6.5, JetBrains TeamCity)
- [CVE-2024-36376](https://cve.now/CVE-2024-36376.md): In JetBrains TeamCity before 2024.03.2 users could perform actions that should not be available to them based on their permissions (CVSS 6.5, JetBrains TeamCity)
- [CVE-2024-36375](https://cve.now/CVE-2024-36375.md): In JetBrains TeamCity before 2024.03.2 technical information regarding TeamCity server could be exposed (CVSS 5.3, JetBrains TeamCity)
- [CVE-2024-36374](https://cve.now/CVE-2024-36374.md): In JetBrains TeamCity before 2024.03.2 stored XSS via build step settings was possible (CVSS 4.6, JetBrains TeamCity)
- [CVE-2024-36373](https://cve.now/CVE-2024-36373.md): In JetBrains TeamCity before 2024.03.2 several stored XSS in untrusted builds settings were possible (CVSS 4.6, JetBrains TeamCity)
- [CVE-2024-36372](https://cve.now/CVE-2024-36372.md): In JetBrains TeamCity before 2023.05.6 reflected XSS on the subscriptions page was possible (CVSS 4.6, JetBrains TeamCity)
- [CVE-2024-36371](https://cve.now/CVE-2024-36371.md): In JetBrains TeamCity before 2023.05.6, 2023.11.5 stored XSS in Commit status publisher was possible (CVSS 4.6, JetBrains TeamCity)
- [CVE-2024-36370](https://cve.now/CVE-2024-36370.md): In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via OAuth connection settings was possible (CVSS 4.6, JetBrains TeamCity)
- [CVE-2024-36369](https://cve.now/CVE-2024-36369.md): In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via issue tracker integration was possible (CVSS 4.6, JetBrains TeamCity)
- [CVE-2024-36368](https://cve.now/CVE-2024-36368.md): In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 reflected XSS via OAuth provider configuration was possible (CVSS 4.6, JetBrains TeamCity)
- [CVE-2024-36367](https://cve.now/CVE-2024-36367.md): In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via third-party reports was possible (CVSS 4.6, JetBrains TeamCity)
- [CVE-2024-36366](https://cve.now/CVE-2024-36366.md): In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 an XSS could be executed via certain report grouping and filtering o (CVSS 5.4, JetBrains TeamCity)
- [CVE-2024-36365](https://cve.now/CVE-2024-36365.md): In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 a third-party agent could impersonate a cloud agent (CVSS 6.8, JetBrains TeamCity)
- [CVE-2024-36364](https://cve.now/CVE-2024-36364.md): In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 improper access control in Pull Requests and Commit status publisher (CVSS 6.5, JetBrains TeamCity)
- [CVE-2024-36363](https://cve.now/CVE-2024-36363.md): In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 several Stored XSS in code inspection reports were possible (CVSS 4.6, JetBrains TeamCity)
- [CVE-2024-36362](https://cve.now/CVE-2024-36362.md): In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was pos (CVSS 6.5, JetBrains TeamCity)
- [CVE-2024-25975](https://cve.now/CVE-2024-25975.md): Arbitrary File Overwrite (CVSS 6.5, Interaction Design Team at the University of Applied Scienc…)
- [CVE-2024-5185](https://cve.now/CVE-2024-5185.md): Data Poisoning in EmbedAI (CVSS 8.3, SamurAIGPT EmbedAI)
- [CVE-2023-42005](https://cve.now/CVE-2023-42005.md): IBM Db2 on Cloud Pak for Data privilege escalation (CVSS 7.4, IBM Db2 on Cloud Pak for Data)
- [CVE-2024-5039](https://cve.now/CVE-2024-5039.md): HUSKY – Products Filter Professional for WooCommerce \<= 1.3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, realmag777 HUSKY – Products Filter Professional for WooComm…)
- [CVE-2024-25977](https://cve.now/CVE-2024-25977.md): Session Fixation (CVSS 7.3, Interaction Design Team at the University of Applied Scienc…)
- [CVE-2024-25976](https://cve.now/CVE-2024-25976.md): Reflected Cross-Site-Scripting (XSS) (CVSS 6.1, Interaction Design Team at the University of Applied Scienc…)
- [CVE-2024-27313](https://cve.now/CVE-2024-27313.md): XSS Vulnerability (CVSS 6.3, ManageEngine PAM360)
- [CVE-2023-52881](https://cve.now/CVE-2023-52881.md): tcp: do not accept ACK of bytes we never sent (CVSS 9.8, Linux)
- [CVE-2024-28826](https://cve.now/CVE-2024-28826.md): Unrestricted upload and download paths in check\_sftp (CVSS 8.8, Checkmk)
- [CVE-2024-3412](https://cve.now/CVE-2024-3412.md): WP STAGING WordPress Backup Plugin – Migration Backup Restore \<= 3.4.3 - Authenticated (Admin+) Arbitrary File Upload (CVSS 9.1, renehermi WP STAGING – WordPress Backup, Restore & Migration)
- [CVE-2024-36015](https://cve.now/CVE-2024-36015.md): ppdev: Add an error check in register\_device (no CVSS, Linux)
- [CVE-2024-5086](https://cve.now/CVE-2024-5086.md): Essential Addons for Elementor PRO – Best Elementor Templates, Widgets, Kits & WooCommerce Builders \<= 5.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Carousel Widget (CVSS 6.4, Essential Addons for Elementor Pro)
- [CVE-2024-36014](https://cve.now/CVE-2024-36014.md): drm/arm/malidp: fix a possible null pointer dereference (no CVSS, Linux)
- [CVE-2024-3937](https://cve.now/CVE-2024-3937.md): Playlist for Youtube \<= 1.32 - Editor+ Stored XSS (CVSS 4.8, Playlist for Youtube)
- [CVE-2024-3921](https://cve.now/CVE-2024-3921.md): Gianism \<= 5.1.0 - Admin+ Stored XSS (CVSS 4.8, Gianism)
- [CVE-2024-3050](https://cve.now/CVE-2024-3050.md): Site Reviews \< 7.0.0 - IP Spoofing (CVSS 9.1, Site Reviews)
- [CVE-2024-4419](https://cve.now/CVE-2024-4419.md): Fetch JFT \<= 1.8.3 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 4.4, pjaudiomv Fetch JFT)
- [CVE-2024-21512](https://cve.now/CVE-2024-21512.md): Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields a (CVSS 8.2, mysql2 · org.webjars.npm:mysql2)
- [CVE-2024-4611](https://cve.now/CVE-2024-4611.md): AppPresser \<= 4.3.2 - Improper Missing Encryption Exception Handling to Authentication Bypass (CVSS 8.1, scottopolis AppPresser – Mobile App Framework)
- [CVE-2023-6743](https://cve.now/CVE-2023-6743.md): Unlimited Elements for Elementor \<= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import (CVSS 8.8, unitecms Unlimited Elements For Elementor)
- [CVE-2024-0434](https://cve.now/CVE-2024-0434.md): WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly \<= 1.7.1 - Missing Authorization via ttbm\_new\_place\_save (CVSS 5.3, magepeopleteam Travelly – Tour & Travel Booking Manager for…)
- [CVE-2024-5150](https://cve.now/CVE-2024-5150.md): Login with phone number \<= 1.7.26 - Authentication Bypass due to Missing Empty Value Check (CVSS 9.8, glboy OTP Login With Phone Number, OTP Verification)
- [CVE-2024-5204](https://cve.now/CVE-2024-5204.md): Swiss Toolkit For WP \<= 1.0.7 - Authenticated (Contributor+) Authentication Bypass (CVSS 8.8, wpmessiah Swiss Toolkit For WP)
- [CVE-2024-36427](https://cve.now/CVE-2024-36427.md): The file-serving function in TARGIT Decision Suite before 24.06.19002 (TARGIT Decision Suite 2024 – June) allows authenticated attackers to (CVSS 8.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-05-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.