# CVEs published 2024-06-13

320 CVEs were published on June 13, 2024: 17 critical, 72 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2023-29174](https://cve.now/CVE-2023-29174.md): WordPress SKU Label Changer For WooCommerce plugin \<= 3.0 - Broken Access Control vulnerability (CVSS 6.5, NervyThemes SKU Label Changer For WooCommerce)
- [CVE-2023-35040](https://cve.now/CVE-2023-35040.md): WordPress SendPress Newsletters plugin \<= 1.23.11.6 - Broken Access Control vulnerability (CVSS 5.3, SendPress Newsletters)
- [CVE-2023-35045](https://cve.now/CVE-2023-35045.md): WordPress Fat Rat Collect plugin \<= 2.6.7 - Broken Access Control vulnerability (CVSS 4.3, Fat Rat Collect)
- [CVE-2023-36504](https://cve.now/CVE-2023-36504.md): WordPress BBS e-Popup plugin \<= 2.4.5 - Broken Access Control vulnerability (CVSS 6.5, BBS e-Theme BBS e-Popup)
- [CVE-2023-36694](https://cve.now/CVE-2023-36694.md): WordPress Kingkong Board plugin \<= 2.1.0.2 - Broken Access Control vulnerability (CVSS 6.3, Bryan Lee Kingkong Board)
- [CVE-2023-36695](https://cve.now/CVE-2023-36695.md): WordPress Sublanguage plugin \<= 2.9 - Broken Access Control vulnerability (CVSS 5.4, Maxime Schoeni Sublanguage)
- [CVE-2023-37394](https://cve.now/CVE-2023-37394.md): WordPress WP Dummy Content Generator plugin \<= 2.3.0 - Broken Access Control vulnerability (CVSS 5.3, Deepak anand WP Dummy Content Generator)
- [CVE-2024-0086](https://cve.now/CVE-2024-0086.md): CVE (CVSS 5.5, nvidia vGPU software and Cloud Gaming)
- [CVE-2024-0094](https://cve.now/CVE-2024-0094.md): CVE (CVSS 5.5, nvidia vGPU software and Cloud Gaming)
- [CVE-2024-0085](https://cve.now/CVE-2024-0085.md): CVE (CVSS 6.3, nvidia vGPU software and Cloud Gaming)
- [CVE-2024-0084](https://cve.now/CVE-2024-0084.md): CVE (CVSS 7.8, nvidia vGPU software and Cloud Gaming)
- [CVE-2024-0099](https://cve.now/CVE-2024-0099.md): CVE (CVSS 7.8, nvidia vGPU software and Cloud Gaming)
- [CVE-2024-0092](https://cve.now/CVE-2024-0092.md): CVE (CVSS 5.5, nvidia GPU display driver, vGPU software, and Cloud Gaming)
- [CVE-2024-0093](https://cve.now/CVE-2024-0093.md): CVE (CVSS 6.5, nvidia vGPU software and Cloud Gaming)
- [CVE-2024-0091](https://cve.now/CVE-2024-0091.md): CVE (CVSS 7.8, nvidia GPU display driver, vGPU software, and Cloud Gaming)
- [CVE-2024-0089](https://cve.now/CVE-2024-0089.md): CVE (CVSS 7.8, nvidia GPU display driver, vGPU software, and Cloud Gaming)
- [CVE-2024-0090](https://cve.now/CVE-2024-0090.md): CVE (CVSS 7.8, nvidia GPU display driver, vGPU software, and Cloud Gaming)
- [CVE-2024-0095](https://cve.now/CVE-2024-0095.md): CVE (CVSS 4.3, NVIDIA Triton Inference Server)
- [CVE-2024-0103](https://cve.now/CVE-2024-0103.md): CVE (CVSS 5.4, NVIDIA Triton Inference Server)
- [CVE-2024-32930](https://cve.now/CVE-2024-32930.md): In plugin\_ipc\_handler of slc\_plugin.c, there is a possible information disclosure due to uninitialized data. (CVSS 5.5, Google Android)
- [CVE-2024-32926](https://cve.now/CVE-2024-32926.md): there is a possible information disclosure due to side channel information disclosure. (CVSS 5.5, Google Android)
- [CVE-2024-32925](https://cve.now/CVE-2024-32925.md): In dhd\_prot\_txstatus\_process of dhd\_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. (CVSS 8.8, Google Android)
- [CVE-2024-32924](https://cve.now/CVE-2024-32924.md): In DeregAcceptProcINT of cn\_NrmmStateDeregInit.cpp, there is a possible denial of service due to a logic error in the code. (CVSS 7.5, Google Android)
- [CVE-2024-32923](https://cve.now/CVE-2024-32923.md): there is a possible cellular denial of service due to a logic error in the code. (CVSS 4.0, Google Android)
- [CVE-2024-32922](https://cve.now/CVE-2024-32922.md): In gpu\_pm\_power\_on\_top\_nolock of pixel\_gpu\_power.c, there is a possible compromise of protected memory due to a logic error in the code. (CVSS 7.4, Google Android)
- [CVE-2024-32921](https://cve.now/CVE-2024-32921.md): In lwis\_initialize\_transaction\_fences of lwis\_fence.c, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.4, Google Android)
- [CVE-2024-32920](https://cve.now/CVE-2024-32920.md): In set\_secure\_reg of sac\_handler.c, there is a possible out of bounds read due to a missing bounds check. (CVSS 7.1, Google Android)
- [CVE-2024-32919](https://cve.now/CVE-2024-32919.md): In lwis\_add\_completion\_fence of lwis\_fence.c, there is a possible escalation of privilege due to type confusion. (CVSS 7.8, Google Android)
- [CVE-2024-32918](https://cve.now/CVE-2024-32918.md): Permission Bypass allowing attackers to disable HDCP 2.2 encryption by not completing the HDCP Key Exchange initialization steps (CVSS 6.1, Google Android)
- [CVE-2024-32917](https://cve.now/CVE-2024-32917.md): In pl330\_dma\_from\_peri\_start() of fp\_spi\_dma.c, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.1, Google Android)
- [CVE-2024-32916](https://cve.now/CVE-2024-32916.md): In fvp\_freq\_histogram\_init of fvp.c, there is a possible Information Disclosure due to uninitialized data. (CVSS 5.9, Google Android)
- [CVE-2024-32915](https://cve.now/CVE-2024-32915.md): In CellInfoListParserV2::FillCellInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.3, Google Android)
- [CVE-2024-32914](https://cve.now/CVE-2024-32914.md): In tpu\_get\_int\_state of tpu.c, there is a possible information disclosure due to uninitialized data. (CVSS 5.5, Google Android)
- [CVE-2024-32913](https://cve.now/CVE-2024-32913.md): In wl\_notify\_rx\_mgmt\_frame of wl\_cfg80211.c, there is a possible out of bounds write due to an integer overflow. (CVSS 9.8, Google Android)
- [CVE-2024-32912](https://cve.now/CVE-2024-32912.md): there is a possible persistent Denial of Service due to test/debugging code left in a production build. (CVSS 5.5, Google Android)
- [CVE-2024-32911](https://cve.now/CVE-2024-32911.md): There is a possible escalation of privilege due to improperly used crypto. (CVSS 7.5, Google Android)
- [CVE-2024-32910](https://cve.now/CVE-2024-32910.md): In handle\_msg\_shm\_map\_req of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to uninitialized data. (CVSS 5.5, Google Android)
- [CVE-2024-32909](https://cve.now/CVE-2024-32909.md): In handle\_msg of main.cpp, there is a possible out of bounds write due to a heap buffer overflow. (CVSS 8.1, Google Android)
- [CVE-2024-32908](https://cve.now/CVE-2024-32908.md): In sec\_media\_protect of media.c, there is a possible permission bypass due to a race condition. (CVSS 8.4, Google Android)
- [CVE-2024-32907](https://cve.now/CVE-2024-32907.md): In memcall\_add of memlog.c, there is a possible buffer overflow due to improper input validation. (CVSS 8.4, Google Android)
- [CVE-2024-32906](https://cve.now/CVE-2024-32906.md): In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. (CVSS 7.8, Google Android)
- [CVE-2024-32905](https://cve.now/CVE-2024-32905.md): In circ\_read of link\_device\_memory\_legacy.c, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 9.8, Google Android)
- [CVE-2024-32904](https://cve.now/CVE-2024-32904.md): In ProtocolVsimOperationAdapter() of protocolvsimadapter.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.7, Google Android)
- [CVE-2024-32903](https://cve.now/CVE-2024-32903.md): In prepare\_response\_locked of lwis\_transaction.c, there is a possible out of bounds write due to improper input validation. (CVSS 7.4, Google Android)
- [CVE-2024-32902](https://cve.now/CVE-2024-32902.md): Remote prevention of access to cellular service with no user interaction (for example, crashing the cellular radio service with a malformed (CVSS 7.5, Google Android)
- [CVE-2024-32901](https://cve.now/CVE-2024-32901.md): In v4l2\_smfc\_qbuf of smfc-v4l2-ioctls.c, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, Google Android)
- [CVE-2024-32900](https://cve.now/CVE-2024-32900.md): In lwis\_fence\_signal of lwis\_debug.c, there is a possible Use after Free due to improper locking. (CVSS 9.8, Google Android)
- [CVE-2024-32899](https://cve.now/CVE-2024-32899.md): In gpu\_pm\_power\_off\_top\_nolock of pixel\_gpu\_power.c, there is a possible compromise of protected memory due to a race condition. (CVSS 7.0, Google Android)
- [CVE-2024-32898](https://cve.now/CVE-2024-32898.md): In ProtocolCellIdentityParserV4::Parse() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.7, Google Android)
- [CVE-2024-32897](https://cve.now/CVE-2024-32897.md): In ProtocolCdmaCallWaitingIndAdapter::GetCwInfo() of protocolsmsadapter.cpp, there is a possible out of bounds read due to a missing bounds (CVSS 5.9, Google Android)
- [CVE-2024-32896](https://cve.now/CVE-2024-32896.md): there is a possible way to bypass due to a logic error in the code. (CVSS 8.1, KEV, Google Android)
- [CVE-2024-32895](https://cve.now/CVE-2024-32895.md): In BCMFASTPATH of dhd\_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. (CVSS 9.8, Google Android)
- [CVE-2024-32894](https://cve.now/CVE-2024-32894.md): In bc\_get\_converted\_received\_bearer of bc\_utilities.c, there is a possible out of bounds read due to a missing bounds check. (CVSS 7.5, Google Android)
- [CVE-2024-32893](https://cve.now/CVE-2024-32893.md): In \_s5e9865\_mif\_set\_rate of exynos\_dvfs.c, there is a possible out of bounds read due to improper casting. (CVSS 8.1, Google Android)
- [CVE-2024-32892](https://cve.now/CVE-2024-32892.md): In handle\_init of goodix/main/main.c, there is a possible memory corruption due to type confusion. (CVSS 7.8, Google Android)
- [CVE-2024-32891](https://cve.now/CVE-2024-32891.md): In sec\_media\_unprotect of media.c, there is a possible memory corruption due to a race condition. (CVSS 7.0, Google Android)
- [CVE-2024-29787](https://cve.now/CVE-2024-29787.md): In lwis\_process\_transactions\_in\_queue of lwis\_transaction.c, there is a possible use after free due to a use after free. (CVSS 7.4, Google Android)
- [CVE-2024-29786](https://cve.now/CVE-2024-29786.md): In pktproc\_fill\_data\_addr\_without\_bm of link\_rx\_pktproc.c, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.4, Google Android)
- [CVE-2024-29785](https://cve.now/CVE-2024-29785.md): In aur\_get\_state of aurora.c, there is a possible information disclosure due to uninitialized data. (CVSS 5.5, Google Android)
- [CVE-2024-29784](https://cve.now/CVE-2024-29784.md): In prepare\_response of lwis\_periodic\_io.c, there is a possible out of bounds write due to an integer overflow. (CVSS 7.7, Google Android)
- [CVE-2024-29781](https://cve.now/CVE-2024-29781.md): In ss\_AnalyzeOssReturnResUssdArgIe of ss\_OssAsnManagement.c, there is a possible out of bounds read due to improper input validation. (CVSS 7.5, Google Android)
- [CVE-2024-29780](https://cve.now/CVE-2024-29780.md): In hwbcc\_ns\_deprivilege of trusty/user/base/lib/hwbcc/client/hwbcc.c, there is a possible uninitialized stack data disclosure due to uniniti (CVSS 5.5, Google Android)
- [CVE-2024-29778](https://cve.now/CVE-2024-29778.md): In ProtocolPsDedicatedBearInfoAdapter::processQosSession of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing b (CVSS 4.7, Google Android)
- [CVE-2024-5976](https://cve.now/CVE-2024-5976.md): SourceCodester Employee and Visitor Gate Pass Logging System log\_employee sql injection (CVSS 6.9, SourceCodester Employee and Visitor Gate Pass Logging System)
- [CVE-2024-32929](https://cve.now/CVE-2024-32929.md): In gpu\_slc\_get\_region of pixel\_gpu\_slc.c, there is a possible EoP due to a use after free. (CVSS 8.1, Google Android)
- [CVE-2024-4696](https://cve.now/CVE-2024-4696.md): A privilege escalation vulnerability was reported in Lenovo Service Bridge prior to version 5.0.2.17 that could allow operating system comma (CVSS 7.5, Lenovo Service Bridge)
- [CVE-2024-38312](https://cve.now/CVE-2024-38312.md): When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed (CVSS 6.5, Mozilla Firefox for iOS)
- [CVE-2024-38313](https://cve.now/CVE-2024-38313.md): In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual website (CVSS 4.3, Mozilla Firefox for iOS)
- [CVE-2024-5947](https://cve.now/CVE-2024-5947.md): Deep Sea Electronics DSE855 Configuration Backup Missing Authentication Information Disclosure Vulnerability (CVSS 6.5, Deep Sea Electronics DSE855)
- [CVE-2024-5948](https://cve.now/CVE-2024-5948.md): Deep Sea Electronics DSE855 Multipart Boundary Stack-Based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8, Deep Sea Electronics DSE855)
- [CVE-2024-5949](https://cve.now/CVE-2024-5949.md): Deep Sea Electronics DSE855 Multipart Boundary Infinite Loop Denial-of-Service Vulnerability (CVSS 4.3, Deep Sea Electronics DSE855)
- [CVE-2024-5950](https://cve.now/CVE-2024-5950.md): Deep Sea Electronics DSE855 Multipart Value Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8, Deep Sea Electronics DSE855)
- [CVE-2024-5951](https://cve.now/CVE-2024-5951.md): Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability (CVSS 7.1, Deep Sea Electronics DSE855)
- [CVE-2024-5952](https://cve.now/CVE-2024-5952.md): Deep Sea Electronics DSE855 Restart Missing Authentication Denial-of-Service Vulnerability (CVSS 4.3, Deep Sea Electronics DSE855)
- [CVE-2024-5924](https://cve.now/CVE-2024-5924.md): Dropbox Desktop Folder Sharing Mark-of-the-Web Bypass Vulnerability (CVSS 8.8, Dropbox Desktop)
- [CVE-2024-38083](https://cve.now/CVE-2024-38083.md): Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 4.3, Microsoft Edge for Android · Microsoft Edge for iOS)
- [CVE-2024-30057](https://cve.now/CVE-2024-30057.md): Microsoft Edge for iOS Spoofing Vulnerability (CVSS 5.4, Microsoft Edge for iOS)
- [CVE-2024-30058](https://cve.now/CVE-2024-30058.md): Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 5.4, Microsoft Edge)
- [CVE-2024-38285](https://cve.now/CVE-2024-38285.md): Insufficiently Protected Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600) (CVSS 7.0, Motorola Solutions Vigilant Fixed LPR Coms Box)
- [CVE-2024-37022](https://cve.now/CVE-2024-37022.md): Fuji Electric Tellus Lite V-Simulator Out-of-bounds Write (CVSS 7.8, Fuji Electric Tellus Lite V-Simulator)
- [CVE-2024-37029](https://cve.now/CVE-2024-37029.md): Fuji Electric Tellus Lite V-Simulator Stack-based Buffer Overflow (CVSS 7.8, Fuji Electric Tellus Lite V-Simulator)
- [CVE-2024-38284](https://cve.now/CVE-2024-38284.md): Authentication Bypass by Capture-replay in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600) (CVSS 8.7, Motorola Solutions Vigilant Fixed LPR Coms Box)
- [CVE-2024-38283](https://cve.now/CVE-2024-38283.md): Missing Encryption of Sensitive Data in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600) (CVSS 5.1, Motorola Solutions Vigilant Fixed LPR Coms Box)
- [CVE-2024-38282](https://cve.now/CVE-2024-38282.md): Insufficiently Protected Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600) (CVSS 8.5, Motorola Solutions Vigilant Fixed LPR Coms Box)
- [CVE-2024-38281](https://cve.now/CVE-2024-38281.md): Use of Hard-coded Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600) (CVSS 8.6, Motorola Solutions Vigilant Fixed LPR Coms Box)
- [CVE-2024-38280](https://cve.now/CVE-2024-38280.md): Cleartext Storage in a File or on Disk in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600) (CVSS 7.0, Motorola Solutions Vigilant Fixed LPR Coms Box)
- [CVE-2024-37279](https://cve.now/CVE-2024-37279.md): Kibana Broken Access Control issue (CVSS 4.3, Elastic Kibana)
- [CVE-2024-38279](https://cve.now/CVE-2024-38279.md): Authentication Bypass Using an Alternate Path or Channel in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600) (CVSS 5.1, Motorola Solutions Vigilant Fixed LPR Coms Box)
- [CVE-2024-37280](https://cve.now/CVE-2024-37280.md): Elasticsearch StackOverflow vulnerability (CVSS 4.9, Elasticsearch · org.elasticsearch:elasticsearch)
- [CVE-2024-37307](https://cve.now/CVE-2024-37307.md): Cilium leaks sensitive information in cilium-bugtool (CVSS 7.9, cilium · github.com/cilium/cilium)
- [CVE-2024-22441](https://cve.now/CVE-2024-22441.md): HPE Cray Parallel Application Launch Service (PALS) is subject to an authentication bypass. (CVSS 9.8, Hewlett Packard Enterprise (HPE) Cray System Management Sof…)
- [CVE-2024-29169](https://cve.now/CVE-2024-29169.md): Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST API. (CVSS 5.4, Dell Secure Connect Gateway-Application · Dell Secure Conne…)
- [CVE-2024-29168](https://cve.now/CVE-2024-29168.md): Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST API. (CVSS 5.4, Dell Secure Connect Gateway-Application · Dell Secure Conne…)
- [CVE-2024-28969](https://cve.now/CVE-2024-28969.md): Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API (CVSS 4.3, Dell Secure Connect Gateway-Application · Dell Secure Conne…)
- [CVE-2024-28968](https://cve.now/CVE-2024-28968.md): Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for internal email and collectio (CVSS 5.4, Dell Secure Connect Gateway-Application · Dell Secure Conne…)
- [CVE-2024-28967](https://cve.now/CVE-2024-28967.md): Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal maintenance REST (CVSS 5.4, Dell Secure Connect Gateway-Application · Dell Secure Conne…)
- [CVE-2024-28966](https://cve.now/CVE-2024-28966.md): Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API (CVSS 5.4, Dell Secure Connect Gateway-Application · Dell Secure Conne…)
- [CVE-2024-28965](https://cve.now/CVE-2024-28965.md): Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal enable REST API (CVSS 5.4, Dell Secure Connect Gateway-Application · Dell Secure Conne…)
- [CVE-2024-37131](https://cve.now/CVE-2024-37131.md): SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability. (CVSS 7.5, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2024-37306](https://cve.now/CVE-2024-37306.md): CVAT's export and backup-related API endpoints are susceptible to CSRF (CVSS 7.1, cvat-ai cvat)
- [CVE-2024-37164](https://cve.now/CVE-2024-37164.md): CVAT SSRF via custom cloud storage endpoints (CVSS 7.1, cvat-ai cvat)
- [CVE-2024-37309](https://cve.now/CVE-2024-37309.md): Client initialized Session-Renegotiation DoS (CVSS 5.3, crate · io.crate:crate)
- [CVE-2024-22333](https://cve.now/CVE-2024-22333.md): IBM Maximo Application Suite information disclosure (CVSS 3.3, IBM Maximo Application Suite · IBM Maximo Asset Management)
- [CVE-2024-37308](https://cve.now/CVE-2024-37308.md): WordPress Cooked Plugin - Authenticated (Contributor+) Persistent Cross-Site Scripting Vulnerability (CVSS 5.4, XjSv Cooked)
- [CVE-2024-25052](https://cve.now/CVE-2024-25052.md): IBM Jazz Reporting Service information disclosure (CVSS 4.4, IBM Jazz Reporting Service)
- [CVE-2024-32860](https://cve.now/CVE-2024-32860.md): Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. (CVSS 7.5, Dell CPG BIOS)
- [CVE-2024-32858](https://cve.now/CVE-2024-32858.md): Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. (CVSS 7.5, Dell CPG BIOS)
- [CVE-2024-32859](https://cve.now/CVE-2024-32859.md): Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. (CVSS 7.5, Dell CPG BIOS)
- [CVE-2024-36396](https://cve.now/CVE-2024-36396.md): Verint - CWE-434: Unrestricted Upload of File with Dangerous Type (CVSS 8.8, Verint WFO)
- [CVE-2024-36395](https://cve.now/CVE-2024-36395.md): Verint - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) (CVSS 6.1, Verint WFO)
- [CVE-2024-32856](https://cve.now/CVE-2024-32856.md): Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. (CVSS 5.1, Dell CPG BIOS)
- [CVE-2024-34130](https://cve.now/CVE-2024-34130.md): Acrobat Android : OverSecured Finding : Access to arbitrary\* content providers via insecure Intent configuration (CVSS 5.5, Adobe Acrobat Mobile Sign Android)
- [CVE-2024-34129](https://cve.now/CVE-2024-34129.md): Acrobat Android : OverSecured Finding : Overwriting arbitrary files via attacker-controlled output file paths (CVSS 7.5, Adobe Acrobat Mobile Sign Android)
- [CVE-2024-34112](https://cve.now/CVE-2024-34112.md): ColdFusion CFDOCUMENT file retrieval / access control bypass (CVSS 7.5, Adobe ColdFusion)
- [CVE-2024-34113](https://cve.now/CVE-2024-34113.md): ColdFusion | Weak Cryptography for Passwords (CWE-261) (CVSS 5.5, Adobe ColdFusion)
- [CVE-2024-34116](https://cve.now/CVE-2024-34116.md): Adobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege Escalation (CVSS 7.1, Adobe Creative Cloud Desktop)
- [CVE-2024-34115](https://cve.now/CVE-2024-34115.md): ZDI-CAN-24054: Adobe Substance 3D Stager SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2024-30300](https://cve.now/CVE-2024-30300.md): Tenable Vulnerability Disclosure | Sensitive Information Disclosure Via Fake FMPS Worker (CVSS 9.8, Adobe Framemaker Publishing Server)
- [CVE-2024-30299](https://cve.now/CVE-2024-30299.md): Tenable Vulnerability Disclosure | API Auth Bypass (CVSS 10.0, Adobe Framemaker Publishing Server)
- [CVE-2024-20753](https://cve.now/CVE-2024-20753.md): Adobe Photoshop PDF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop Desktop)
- [CVE-2024-30472](https://cve.now/CVE-2024-30472.md): Telemetry Dashboard v1.0.0.8 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. (CVSS 7.5, Dell Wyse 5070 Thin Client)
- [CVE-2024-30278](https://cve.now/CVE-2024-30278.md): Adobe Media Encoder 2024 TGA File parsing memory corruption (CVSS 5.5, Adobe Media Encoder)
- [CVE-2024-34106](https://cve.now/CVE-2024-34106.md): Insecure Direct Object Reference - An attacker can able to erase the victim quote details (CVSS 5.3, Adobe Commerce · magento/community-edition)
- [CVE-2024-34103](https://cve.now/CVE-2024-34103.md): Customer account takeover via web API call & subsequent password reset (CVSS 8.1, Adobe Commerce · magento/community-edition)
- [CVE-2024-34109](https://cve.now/CVE-2024-34109.md): Adobe Commerce | Improper Input Validation (CWE-20) (CVSS 7.2, Adobe Commerce)
- [CVE-2024-34110](https://cve.now/CVE-2024-34110.md): RCE in the Adobe Commerce Webhook module through a legit webhook definition (CVSS 7.2, Adobe Commerce)
- [CVE-2024-34111](https://cve.now/CVE-2024-34111.md): SSRF in service connector (CVSS 6.5, Adobe Commerce · magento/community-edition)
- [CVE-2024-34107](https://cve.now/CVE-2024-34107.md): Adobe Commerce | Improper Access Control (CWE-284) (CVSS 5.3, Adobe Commerce · magento/community-edition)
- [CVE-2024-34105](https://cve.now/CVE-2024-34105.md): Stored Cross Site Scripting in Order Comment (CVSS 4.8, Adobe Commerce · magento/community-edition)
- [CVE-2024-34104](https://cve.now/CVE-2024-34104.md): Adobe Commerce | Improper Authorization (CWE-285) (CVSS 8.2, Adobe Commerce · magento/community-edition)
- [CVE-2024-34102](https://cve.now/CVE-2024-34102.md): XXE can expose crypt key and other secrets granting full admin access (CVSS 9.8, KEV, Adobe Commerce · magento/community-edition)
- [CVE-2024-34108](https://cve.now/CVE-2024-34108.md): Large attack surface through legit webhook usage in Adobe Commerce (CVSS 9.1, Adobe Commerce)
- [CVE-2024-4176](https://cve.now/CVE-2024-4176.md): An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially leverage an XSS/HTML-Inject (CVSS 4.1, Trellix EDR UI)
- [CVE-2024-4371](https://cve.now/CVE-2024-4371.md): CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More \<= 4.4.1 - Unauthenticated PHP Object Injection (CVSS 9.0, codexpert CoDesigner – All in One Elementor WooCommerce Bui…)
- [CVE-2024-0979](https://cve.now/CVE-2024-0979.md): Dashboard Widgets Suite \<= 3.4.3 - Reflected Cross-Site Scripting (CVSS 6.1, specialk Dashboard Widgets Suite)
- [CVE-2024-1565](https://cve.now/CVE-2024-1565.md): EmbedPress \<= 3.9.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via PDF Widget URL (CVSS 6.4, wpdevteam EmbedPress – PDF Embedder, Embed YouTube Videos,…)
- [CVE-2024-3073](https://cve.now/CVE-2024-3073.md): Easy WP SMTP by SendLayer \<= 2.3.0 - Exposure of Sensitive Information via the UI (CVSS 2.7, smub Easy WP SMTP – WordPress SMTP and Email Logs: Gmail, O…)
- [CVE-2024-30285](https://cve.now/CVE-2024-30285.md): Adobe Audition 2024 MP4 File Parsing Null Pointer Dereference (CVSS 5.5, Adobe Audition)
- [CVE-2024-30276](https://cve.now/CVE-2024-30276.md): Adobe Audition 2024 M2V File Parsing Memory corruption (CVSS 5.5, Adobe Audition)
- [CVE-2024-36213](https://cve.now/CVE-2024-36213.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26126](https://cve.now/CVE-2024-26126.md): Adobe Experience Manager | Improper Input Validation (CWE-20) (CVSS 3.5, Adobe Experience Manager)
- [CVE-2024-36150](https://cve.now/CVE-2024-36150.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36238](https://cve.now/CVE-2024-36238.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36239](https://cve.now/CVE-2024-36239.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26037](https://cve.now/CVE-2024-26037.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36156](https://cve.now/CVE-2024-36156.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36229](https://cve.now/CVE-2024-36229.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-20769](https://cve.now/CVE-2024-20769.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36236](https://cve.now/CVE-2024-36236.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36157](https://cve.now/CVE-2024-36157.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-34120](https://cve.now/CVE-2024-34120.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26082](https://cve.now/CVE-2024-26082.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26088](https://cve.now/CVE-2024-26088.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36211](https://cve.now/CVE-2024-36211.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36224](https://cve.now/CVE-2024-36224.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36233](https://cve.now/CVE-2024-36233.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36225](https://cve.now/CVE-2024-36225.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26110](https://cve.now/CVE-2024-26110.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36206](https://cve.now/CVE-2024-36206.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36153](https://cve.now/CVE-2024-36153.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36160](https://cve.now/CVE-2024-36160.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26075](https://cve.now/CVE-2024-26075.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36230](https://cve.now/CVE-2024-36230.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26074](https://cve.now/CVE-2024-26074.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36144](https://cve.now/CVE-2024-36144.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26111](https://cve.now/CVE-2024-26111.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36222](https://cve.now/CVE-2024-36222.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26060](https://cve.now/CVE-2024-26060.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36173](https://cve.now/CVE-2024-36173.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26083](https://cve.now/CVE-2024-26083.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26090](https://cve.now/CVE-2024-26090.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26072](https://cve.now/CVE-2024-26072.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36165](https://cve.now/CVE-2024-36165.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36186](https://cve.now/CVE-2024-36186.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36220](https://cve.now/CVE-2024-36220.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36215](https://cve.now/CVE-2024-36215.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36204](https://cve.now/CVE-2024-36204.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26053](https://cve.now/CVE-2024-26053.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36217](https://cve.now/CVE-2024-36217.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36147](https://cve.now/CVE-2024-36147.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36196](https://cve.now/CVE-2024-36196.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36154](https://cve.now/CVE-2024-36154.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36175](https://cve.now/CVE-2024-36175.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36205](https://cve.now/CVE-2024-36205.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36179](https://cve.now/CVE-2024-36179.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26092](https://cve.now/CVE-2024-26092.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26093](https://cve.now/CVE-2024-26093.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36207](https://cve.now/CVE-2024-36207.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36192](https://cve.now/CVE-2024-36192.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26123](https://cve.now/CVE-2024-26123.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26095](https://cve.now/CVE-2024-26095.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36234](https://cve.now/CVE-2024-36234.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36189](https://cve.now/CVE-2024-36189.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36143](https://cve.now/CVE-2024-36143.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36188](https://cve.now/CVE-2024-36188.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36181](https://cve.now/CVE-2024-36181.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36190](https://cve.now/CVE-2024-36190.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36231](https://cve.now/CVE-2024-36231.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36170](https://cve.now/CVE-2024-36170.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36201](https://cve.now/CVE-2024-36201.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36171](https://cve.now/CVE-2024-36171.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26078](https://cve.now/CVE-2024-26078.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36151](https://cve.now/CVE-2024-36151.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36184](https://cve.now/CVE-2024-36184.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36235](https://cve.now/CVE-2024-36235.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-20784](https://cve.now/CVE-2024-20784.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26039](https://cve.now/CVE-2024-26039.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36162](https://cve.now/CVE-2024-36162.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36177](https://cve.now/CVE-2024-36177.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36218](https://cve.now/CVE-2024-36218.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36194](https://cve.now/CVE-2024-36194.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26029](https://cve.now/CVE-2024-26029.md): Adobe Experience Manager | Improper Access Control (CWE-284) (CVSS 7.5, Adobe Experience Manager)
- [CVE-2024-36169](https://cve.now/CVE-2024-36169.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36228](https://cve.now/CVE-2024-36228.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36174](https://cve.now/CVE-2024-36174.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36198](https://cve.now/CVE-2024-36198.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26071](https://cve.now/CVE-2024-26071.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36168](https://cve.now/CVE-2024-36168.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26066](https://cve.now/CVE-2024-26066.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26114](https://cve.now/CVE-2024-26114.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36200](https://cve.now/CVE-2024-36200.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36146](https://cve.now/CVE-2024-36146.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26121](https://cve.now/CVE-2024-26121.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-34119](https://cve.now/CVE-2024-34119.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26070](https://cve.now/CVE-2024-26070.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36159](https://cve.now/CVE-2024-36159.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26036](https://cve.now/CVE-2024-26036.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36202](https://cve.now/CVE-2024-36202.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36141](https://cve.now/CVE-2024-36141.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36197](https://cve.now/CVE-2024-36197.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26089](https://cve.now/CVE-2024-26089.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36180](https://cve.now/CVE-2024-36180.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36216](https://cve.now/CVE-2024-36216.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36164](https://cve.now/CVE-2024-36164.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36183](https://cve.now/CVE-2024-36183.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36158](https://cve.now/CVE-2024-36158.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36214](https://cve.now/CVE-2024-36214.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36149](https://cve.now/CVE-2024-36149.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36148](https://cve.now/CVE-2024-36148.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36163](https://cve.now/CVE-2024-36163.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36193](https://cve.now/CVE-2024-36193.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26127](https://cve.now/CVE-2024-26127.md): Adobe Experience Manager | Improper Input Validation (CWE-20) (CVSS 3.5, Adobe Experience Manager)
- [CVE-2024-26049](https://cve.now/CVE-2024-26049.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 4.8, Adobe Experience Manager)
- [CVE-2024-26116](https://cve.now/CVE-2024-26116.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36221](https://cve.now/CVE-2024-36221.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36187](https://cve.now/CVE-2024-36187.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36209](https://cve.now/CVE-2024-36209.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26085](https://cve.now/CVE-2024-26085.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36212](https://cve.now/CVE-2024-36212.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26077](https://cve.now/CVE-2024-26077.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26115](https://cve.now/CVE-2024-26115.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36178](https://cve.now/CVE-2024-36178.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36142](https://cve.now/CVE-2024-36142.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36166](https://cve.now/CVE-2024-36166.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36172](https://cve.now/CVE-2024-36172.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26117](https://cve.now/CVE-2024-26117.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36182](https://cve.now/CVE-2024-36182.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26058](https://cve.now/CVE-2024-26058.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26054](https://cve.now/CVE-2024-26054.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36152](https://cve.now/CVE-2024-36152.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26091](https://cve.now/CVE-2024-26091.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26113](https://cve.now/CVE-2024-26113.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36176](https://cve.now/CVE-2024-36176.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36167](https://cve.now/CVE-2024-36167.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36226](https://cve.now/CVE-2024-36226.md): Adobe Experience Manager | Improper Input Validation (CWE-20) (CVSS 3.5, Adobe Experience Manager)
- [CVE-2024-36219](https://cve.now/CVE-2024-36219.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36227](https://cve.now/CVE-2024-36227.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36203](https://cve.now/CVE-2024-36203.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36191](https://cve.now/CVE-2024-36191.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36208](https://cve.now/CVE-2024-36208.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26068](https://cve.now/CVE-2024-26068.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26086](https://cve.now/CVE-2024-26086.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36155](https://cve.now/CVE-2024-36155.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36185](https://cve.now/CVE-2024-36185.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26057](https://cve.now/CVE-2024-26057.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36210](https://cve.now/CVE-2024-36210.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26081](https://cve.now/CVE-2024-26081.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36195](https://cve.now/CVE-2024-36195.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-26055](https://cve.now/CVE-2024-26055.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36161](https://cve.now/CVE-2024-36161.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36199](https://cve.now/CVE-2024-36199.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-36232](https://cve.now/CVE-2024-36232.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2024-4615](https://cve.now/CVE-2024-4615.md): Elespare – Blog, Magazine and Newspaper Addons for Elementor with Templates, Widgets, Kits, and Header/Footer Builder. One Click Import: No Coding Required! \<= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Horizontal Nav Menu Widget (CVSS 6.4, EleSpare – News, Magazine and Blog Addons for Elementor)
- [CVE-2024-5265](https://cve.now/CVE-2024-5265.md): WPBakery Page Builder \<= 7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via VC Single Image link attribute (CVSS 6.4, WPBakery Page Builder)
- [CVE-2024-4576](https://cve.now/CVE-2024-4576.md): TIBCO EBX File Inclusion Vulnerability (CVSS 5.3, Tibco EBX)
- [CVE-2024-4149](https://cve.now/CVE-2024-4149.md): Floating Chat Widget \< 3.2.3 - Admin+ Stored XSS (CVSS 6.1, Floating Chat Widget: Contact Chat Icons, WhatsApp, Telegra…)
- [CVE-2024-4145](https://cve.now/CVE-2024-4145.md): Search & Replace \< 3.2.2 - Admin+ SQL injection (CVSS 3.8, Search & Replace)
- [CVE-2024-3552](https://cve.now/CVE-2024-3552.md): Web Directory Free \< 1.7.0 - Unauthenticated SQL Injection (CVSS 9.8, Web Directory Free)
- [CVE-2024-3032](https://cve.now/CVE-2024-3032.md): Themify Builder \< 7.5.8 - Open Redirect (CVSS 6.1, Themify Builder)
- [CVE-2024-2762](https://cve.now/CVE-2024-2762.md): FooGallery \< 2.4.15 - Author+ Stored XSS (CVSS 6.3, FooGallery · foogallery-premium)
- [CVE-2024-5661](https://cve.now/CVE-2024-5661.md): Potential Denial of Service affecting XenServer and Citrix Hypervisor (CVSS 6.0, Citrix Hypervisor · Citrix XenServer)
- [CVE-2024-5787](https://cve.now/CVE-2024-5787.md): PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) \<= 2.7.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Effects Widget (CVSS 6.4, ideaboxcreations PowerPack Addons for Elementor)
- [CVE-2024-5757](https://cve.now/CVE-2024-5757.md): Elementor Header & Footer Builder \<= 1.6.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Title Widget (CVSS 6.4, brainstormforce Ultimate Addons for Elementor)
- [CVE-2024-2098](https://cve.now/CVE-2024-2098.md): Download Manager \<= 3.2.89 - Improper Authorization via protectMediaLibrary (CVSS 7.5, codename065 Download Manager)
- [CVE-2024-3922](https://cve.now/CVE-2024-3922.md): Dokan Pro \<= 3.10.3 - Unauthenticated SQL Injection (CVSS 10.0, wedevs Dokan Pro)
- [CVE-2023-35858](https://cve.now/CVE-2023-35858.md): XPath Injection vulnerabilities in the blog and RSS functions of Modern Campus - Omni CMS 2023.1 allow a remote, unauthenticated attacker to (CVSS 5.3)
- [CVE-2023-35859](https://cve.now/CVE-2023-35859.md): A Reflected Cross-Site Scripting (XSS) vulnerability in the blog function of Modern Campus - Omni CMS 2023.1 allows a remote attacker to inj (CVSS 6.1)
- [CVE-2023-35860](https://cve.now/CVE-2023-35860.md): A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system in (CVSS 5.3)
- [CVE-2023-52890](https://cve.now/CVE-2023-52890.md): NTFS-3G before 75dcdc2 has a use-after-free in ntfs\_uppercase\_mbs in libntfs-3g/unistr.c. (CVSS 4.5)
- [CVE-2024-31777](https://cve.now/CVE-2024-31777.md): File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary code via a crafted file to the certbadge.p (CVSS 9.8)
- [CVE-2024-31956](https://cve.now/CVE-2024-31956.md): An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400. (CVSS 8.4)
- [CVE-2024-32504](https://cve.now/CVE-2024-32504.md): An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, E (CVSS 8.4)
- [CVE-2024-33253](https://cve.now/CVE-2024-33253.md): Cross-site scripting (XSS) vulnerability in GUnet OpenEclass E-learning Platform version 3.15 and before allows a authenticated privileged a (CVSS 6.0)
- [CVE-2024-36586](https://cve.now/CVE-2024-36586.md): An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary. (CVSS 8.8, github.com/AdguardTeam/AdGuardHome)
- [CVE-2024-36587](https://cve.now/CVE-2024-36587.md): Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting (CVSS 7.8)
- [CVE-2024-36588](https://cve.now/CVE-2024-36588.md): An issue in Annonshop.app DecentralizeJustice/ anonymousLocker commit 2b2b4 allows attackers to send messages erroneously attributed to arbi (CVSS 6.5)
- [CVE-2024-36589](https://cve.now/CVE-2024-36589.md): An issue in Annonshop.app DecentralizeJustice/anonymousLocker commit 2b2b4 to ba9fd and DecentralizeJustice/anonBackend commit 57837 to cd81 (CVSS 4.3)
- [CVE-2024-36647](https://cve.now/CVE-2024-36647.md): A stored cross-site scripting (XSS) vulnerability in Church CRM v5.8.0 allows attackers to execute arbitrary web scripts or HTML via a craft (CVSS 5.4)
- [CVE-2024-36760](https://cve.now/CVE-2024-36760.md): A stack overflow vulnerability was found in version 1.18.0 of rhai. (CVSS 7.5, rhai)
- [CVE-2024-37630](https://cve.now/CVE-2024-37630.md): D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attackers to log in as ro (CVSS 8.8)
- [CVE-2024-37631](https://cve.now/CVE-2024-37631.md): TOTOLINK A3700R V9.1.2u.6165\_20211012 was discovered to contain a stack overflow via the File parameter in function UploadCustomModule. (CVSS 8.8)
- [CVE-2024-37632](https://cve.now/CVE-2024-37632.md): TOTOLINK A3700R V9.1.2u.6165\_20211012 was discovered to contain a stack overflow via the password parameter in function loginAuth . (CVSS 6.5)
- [CVE-2024-37633](https://cve.now/CVE-2024-37633.md): TOTOLINK A3700R V9.1.2u.6165\_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiGuestCfg (CVSS 8.8)
- [CVE-2024-37634](https://cve.now/CVE-2024-37634.md): TOTOLINK A3700R V9.1.2u.6165\_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiEasyCfg. (CVSS 9.8)
- [CVE-2024-37635](https://cve.now/CVE-2024-37635.md): TOTOLINK A3700R V9.1.2u.6165\_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfg (CVSS 9.8)
- [CVE-2024-37849](https://cve.now/CVE-2024-37849.md): A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the us (CVSS 9.8)
- [CVE-2024-37877](https://cve.now/CVE-2024-37877.md): UERANSIM before 3.2.6 allows out-of-bounds read when a RLS packet is sent to gNodeB with malformed PDU length. (CVSS 5.5)
- [CVE-2024-38293](https://cve.now/CVE-2024-38293.md): ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php. (CVSS 9.6)
- [CVE-2024-38294](https://cve.now/CVE-2024-38294.md): ALCASAR before 3.6.1 allows email\_registration\_back.php remote code execution. (CVSS 8.8)
- [CVE-2024-38295](https://cve.now/CVE-2024-38295.md): ALCASAR before 3.6.1 allows still\_connected.php remote code execution. (CVSS 8.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-06-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.