# CVEs published 2024-05-31

76 CVEs were published on May 31, 2024: 15 critical, 32 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2024-5138](https://cve.now/CVE-2024-5138.md): The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged actions on behalf of (CVSS 8.1, Canonical snapd · github.com/snapcore/snapd)
- [CVE-2024-34009](https://cve.now/CVE-2024-34009.md): moodle: ReCAPTCHA can be bypassed on the login page (CVSS 7.5, Moodle · moodle/moodle)
- [CVE-2024-34008](https://cve.now/CVE-2024-34008.md): moodle: CSRF risk in analytics management of models (CVSS 3.5, Moodle · moodle/moodle)
- [CVE-2024-34007](https://cve.now/CVE-2024-34007.md): moodle: logout CSRF in admin/tool/mfa/auth.php (CVSS 8.8, Moodle · moodle/moodle)
- [CVE-2024-34006](https://cve.now/CVE-2024-34006.md): moodle: unsanitized HTML in site log for config\_log\_created (CVSS 4.3, Moodle · moodle/moodle)
- [CVE-2024-34005](https://cve.now/CVE-2024-34005.md): moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod\_data backup (CVSS 6.5, Moodle · moodle/moodle)
- [CVE-2024-34004](https://cve.now/CVE-2024-34004.md): moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod\_wiki backup (CVSS 6.5, Moodle · moodle/moodle)
- [CVE-2024-34003](https://cve.now/CVE-2024-34003.md): moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod\_workshop backup (CVSS 5.9, Moodle · moodle/moodle)
- [CVE-2024-34002](https://cve.now/CVE-2024-34002.md): moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod\_feedback backup (CVSS 6.5, Moodle · moodle/moodle)
- [CVE-2024-34001](https://cve.now/CVE-2024-34001.md): moodle: CSRF risk in admin preset tool management of presets (CVSS 8.4, Moodle · moodle/moodle)
- [CVE-2024-34000](https://cve.now/CVE-2024-34000.md): moodle: stored XSS in lesson overview report via user ID number (CVSS 4.3, Moodle · moodle/moodle)
- [CVE-2024-33999](https://cve.now/CVE-2024-33999.md): moodle: unsafe direct use of $\_SERVER\['HTTP\_REFERER'\] in admin/tool/mfa/index.php (CVSS 9.8, Moodle · moodle/moodle)
- [CVE-2024-33998](https://cve.now/CVE-2024-33998.md): moodle: stored XSS via user's name on participants page when opening some options (CVSS 5.4, Moodle · moodle/moodle)
- [CVE-2024-33997](https://cve.now/CVE-2024-33997.md): moodle: stored XSS risk when editing another user's equation in equation editor (CVSS 6.1, Moodle · moodle/moodle)
- [CVE-2024-33996](https://cve.now/CVE-2024-33996.md): moodle: broken access control when setting calendar event type (CVSS 6.2, Moodle · moodle/moodle)
- [CVE-2024-36845](https://cve.now/CVE-2024-36845.md): An invalid pointer in the modbus\_receive() function of libmodbus v3.1.6 allows attackers to cause a Denial of Service (DoS) via a crafted me (CVSS 4.3)
- [CVE-2024-36844](https://cve.now/CVE-2024-36844.md): libmodbus v3.1.6 was discovered to contain a use-after-free via the ctx-\>backend pointer. (CVSS 7.5)
- [CVE-2024-23316](https://cve.now/CVE-2024-23316.md): PingAccess HTTP Request Desynchronization Weakness (CVSS 8.8, Ping Identity PingAccess)
- [CVE-2024-5564](https://cve.now/CVE-2024-5564.md): Libndp: buffer overflow in route information length field (CVSS 8.1, libndp · Red Hat Enterprise Linux)
- [CVE-2024-31030](https://cve.now/CVE-2024-31030.md): An issue in coap\_msg.c in Keith Cullen's FreeCoAP v.0.7 allows remote attackers to cause a Denial of Service or potentially disclose informa (CVSS 9.1)
- [CVE-2021-44534](https://cve.now/CVE-2021-44534.md): Insufficient user input filtering leads to arbitrary file read by non-authenticated attacker, which results in sensitive information disclos (CVSS 6.5, ExpressionEngine)
- [CVE-2023-38042](https://cve.now/CVE-2023-38042.md): A local privilege escalation vulnerability in Ivanti Secure Access Client for Windows allows a low privileged user to execute code as SYSTEM (CVSS 7.8, Ivanti Secure Access Client)
- [CVE-2023-46810](https://cve.now/CVE-2023-46810.md): A local privilege escalation vulnerability in Ivanti Secure Access Client for Linux before 22.7R1, allows a low privileged user to execute c (CVSS 7.3, Ivanti Secure Access Linux)
- [CVE-2024-22059](https://cve.now/CVE-2024-22059.md): A SQL injection vulnerability in web component of Ivanti Neurons for ITSM allows a remote authenticated user to read/modify/delete informati (CVSS 8.8, Ivanti ITSM)
- [CVE-2024-29823](https://cve.now/CVE-2024-29823.md): An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the sam (CVSS 9.6, Ivanti EPM)
- [CVE-2024-29827](https://cve.now/CVE-2024-29827.md): An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the sam (CVSS 9.6, Ivanti EPM)
- [CVE-2024-22060](https://cve.now/CVE-2024-22060.md): An unrestricted file upload vulnerability in web component of Ivanti Neurons for ITSM allows a remote, authenticated, high privileged user t (CVSS 8.7, Ivanti ITSM)
- [CVE-2024-29822](https://cve.now/CVE-2024-29822.md): An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the sam (CVSS 9.6, Ivanti EPM)
- [CVE-2024-29826](https://cve.now/CVE-2024-29826.md): An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the sam (CVSS 9.6, Ivanti EPM)
- [CVE-2024-29828](https://cve.now/CVE-2024-29828.md): An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attacker within the same (CVSS 8.4, Ivanti EPM)
- [CVE-2024-29829](https://cve.now/CVE-2024-29829.md): An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attacker within the same (CVSS 8.4, Ivanti EPM)
- [CVE-2024-29848](https://cve.now/CVE-2024-29848.md): An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated, privileged user to exec (CVSS 7.2, Ivanti Avalanche)
- [CVE-2024-29846](https://cve.now/CVE-2024-29846.md): An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attacker within the same (CVSS 8.4, Ivanti EPM)
- [CVE-2023-38551](https://cve.now/CVE-2023-38551.md): A CRLF Injection vulnerability in Ivanti Connect Secure (9.x, 22.x) allows an authenticated high-privileged user to inject malicious code on (CVSS 8.2, Ivanti Connect Secure)
- [CVE-2024-29830](https://cve.now/CVE-2024-29830.md): An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attacker within the same (CVSS 8.4, Ivanti EPM)
- [CVE-2024-22058](https://cve.now/CVE-2024-22058.md): A buffer overflow allows a low privilege user on the local machine that has the EPM Agent installed to execute arbitrary code with elevated (CVSS 7.8, Ivanti EPM)
- [CVE-2024-29824](https://cve.now/CVE-2024-29824.md): An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the sam (CVSS 9.6, KEV, Ivanti EPM)
- [CVE-2024-29825](https://cve.now/CVE-2024-29825.md): An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the sam (CVSS 9.6, Ivanti EPM)
- [CVE-2024-5176](https://cve.now/CVE-2024-5176.md): Vulnerability in Welch Allyn Configuration Tool Software (CVSS 9.4, Baxter Welch Allyn Configuration Tool)
- [CVE-2024-35196](https://cve.now/CVE-2024-35196.md): Slack integration leaks sensitive information in logs in Sentry (CVSS 2.0, getsentry sentry · sentry)
- [CVE-2024-1275](https://cve.now/CVE-2024-1275.md): Vulnerability in Baxter Welch Allyn Connex Spot Monitor (CVSS 9.1, Baxter Welch Allyn Connex Spot Monitor)
- [CVE-2024-35142](https://cve.now/CVE-2024-35142.md): IBM Security Verify Access privilege escalation (CVSS 8.4, IBM Security Verify Access Docker)
- [CVE-2024-35140](https://cve.now/CVE-2024-35140.md): IBM Security Verify Access privilege escalation (CVSS 7.7, IBM Security Verify Access Docker)
- [CVE-2024-36120](https://cve.now/CVE-2024-36120.md): javascript-deobfuscator crafted payload can lead to code execution (CVSS 8.2, ben-sb javascript-deobfuscator · js-deobfuscator)
- [CVE-2022-25037](https://cve.now/CVE-2022-25037.md): An issue in wanEditor v4.7.11 and fixed in v.4.7.12 and v.5 was discovered to contain a cross-site scripting (XSS) vulnerability via the ima (CVSS 5.4, @wangeditor/editor)
- [CVE-2022-25038](https://cve.now/CVE-2022-25038.md): wanEditor v4.7.11 was discovered to contain a cross-site scripting (XSS) vulnerability via the video upload function. (CVSS 6.1)
- [CVE-2024-28736](https://cve.now/CVE-2024-28736.md): An issue in Debezium Community debezium-ui v.2.5 allows a local attacker to execute arbitrary code via the refresh page function. (CVSS 7.1)
- [CVE-2024-36108](https://cve.now/CVE-2024-36108.md): Multiple Broken Function-Level Authorization vulnerabilities in casgate (CVSS 9.8, casgate)
- [CVE-2023-7073](https://cve.now/CVE-2023-7073.md): Auto Featured Image (Auto Post Thumbnail) \<= 4.1.7 - Authenticated (Author+) Server-Side Request Forgery (CVSS 6.4, themeisle Auto Featured Image)
- [CVE-2024-5565](https://cve.now/CVE-2024-5565.md): Prompt Injection in "ask" API with visualization leads to RCE (CVSS 8.1, vanna)
- [CVE-2024-31907](https://cve.now/CVE-2024-31907.md): IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Planning Analytics Local)
- [CVE-2024-31908](https://cve.now/CVE-2024-31908.md): IBM Planning Analytics Local cross-site scripting (CVSS 6.4, IBM Planning Analytics Local)
- [CVE-2024-31889](https://cve.now/CVE-2024-31889.md): IBM Planning Analytics Local cross-site scripting (CVSS 5.4, IBM Planning Analytics Local)
- [CVE-2024-22338](https://cve.now/CVE-2024-22338.md): IBM Security Verify Access OIDC Provider information disclosure (CVSS 4.0, IBM Security Verify Access OIDC Provider)
- [CVE-2024-23692](https://cve.now/CVE-2024-23692.md): Rejetto HTTP File Server 2.3m Unauthenticated RCE (CVSS 9.8, KEV, Rejetto HTTP File Server)
- [CVE-2024-5041](https://cve.now/CVE-2024-5041.md): Happy Addons for Elementor \<= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion (CVSS 6.4, thehappymonster Happy Addons for Elementor)
- [CVE-2024-4160](https://cve.now/CVE-2024-4160.md): Download Manager \<= 3.2.90 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages Shortcode (CVSS 6.4, codename065 Download Manager)
- [CVE-2024-5347](https://cve.now/CVE-2024-5347.md): Happy Addons for Elementor \<= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget (CVSS 6.4, thehappymonster Happy Addons for Elementor)
- [CVE-2024-5436](https://cve.now/CVE-2024-5436.md): Type Confusion in Snapchat Lenscore (CVSS 7.3, Snapchat Lenscore)
- [CVE-2024-5525](https://cve.now/CVE-2024-5525.md): Improper privilege management vulnerability in Astrotalks (CVSS 8.3, Astrotalks)
- [CVE-2024-5524](https://cve.now/CVE-2024-5524.md): Information exposure vulnerability in Astrotalks (CVSS 5.3, Astrotalks)
- [CVE-2024-5523](https://cve.now/CVE-2024-5523.md): SQL injection vulnerability in Astrotalks (CVSS 8.8, Astrotalks)
- [CVE-2024-5427](https://cve.now/CVE-2024-5427.md): WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce \<= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form Shortcode (CVSS 6.4, arraytics WPCafe – Restaurant Menu, Online Food Ordering &…)
- [CVE-2024-36246](https://cve.now/CVE-2024-36246.md): Missing authorization vulnerability exists in Unifier and Unifier Cast. (CVSS 9.8, Yokogawa Rental & Lease Unifier)
- [CVE-2024-23847](https://cve.now/CVE-2024-23847.md): Incorrect default permissions issue exists in Unifier and Unifier Cast. (CVSS 7.8, Yokogawa Rental & Lease Unifier)
- [CVE-2024-4469](https://cve.now/CVE-2024-4469.md): Migration Backup Restore \< 3.5.0 - Admin+ SSRF (CVSS 7.5, WP STAGING WordPress Backup Plugin)
- [CVE-2024-4379](https://cve.now/CVE-2024-4379.md): Premium Addons for Elementor \<= 4.10.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Global Tooltip (CVSS 5.4, leap13 Premium Addons for Elementor – Powerful Elementor Te…)
- [CVE-2024-4376](https://cve.now/CVE-2024-4376.md): Premium Addons for Elementor \<= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget (CVSS 6.4, leap13 Premium Addons for Elementor – Powerful Elementor Te…)
- [CVE-2024-4205](https://cve.now/CVE-2024-4205.md): Premium Addons for Elementor \<= 4.10.31 - Missing Authorization to Information Disclosure (CVSS 4.3, leap13 Premium Addons for Elementor – Powerful Elementor Te…)
- [CVE-2024-2793](https://cve.now/CVE-2024-2793.md): Visual Website Collaboration, Feedback & Project Management – Atarim \<= 3.30 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, wpfeedback Atarim – Visual Feedback, Review & AI Collaborat…)
- [CVE-2024-5418](https://cve.now/CVE-2024-5418.md): DethemeKit For Elementor \<= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via slitems Attribute (CVSS 6.4, DethemeKit for Elementor)
- [CVE-2024-5345](https://cve.now/CVE-2024-5345.md): Responsive Owl Carousel for Elementor \<= 1.2.0 - Local File Inclusion (CVSS 8.8, thenahidul Responsive Owl Carousel for Elementor)
- [CVE-2024-32850](https://cve.now/CVE-2024-32850.md): Improper neutralization of special elements used in a command ('Command Injection') exists in SkyBridge MB-A100/MB-A110 firmware Ver. (CVSS 9.8, Seiko Solutions SkyBridge MB-A100/MB-A110 · Seiko Solutions…)
- [CVE-2024-37018](https://cve.now/CVE-2024-37018.md): The OpenDaylight 0.15.3 controller allows topology poisoning via API requests because an application can manipulate the path that is taken b (CVSS 9.1)
- [CVE-2024-36843](https://cve.now/CVE-2024-36843.md): libmodbus v3.1.6 was discovered to contain a heap overflow via the modbus\_mapping\_free() function. (CVSS 7.5)
- [CVE-2024-37032](https://cve.now/CVE-2024-37032.md): Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus mishandles (CVSS 8.8, github.com/ollama/ollama)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-05-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.