# CVEs published 2024-06-28

79 CVEs were published on June 28, 2024: 7 critical, 22 high. Days are UTC.

- [CVE-2024-38532](https://cve.now/CVE-2024-38532.md): TEST\_KEY used in example dcp\_tool reference implementation (CVSS 7.1, usbarmory mxs-dcp)
- [CVE-2024-38533](https://cve.now/CVE-2024-38533.md): ZKsync Era invalid stack addressing conversion (CVSS 6.5, matter-labs era-compiler-vyper)
- [CVE-2024-38525](https://cve.now/CVE-2024-38525.md): dd-trace-cpp malformed unicode header values may cause crash (CVSS 7.5, DataDog dd-trace-cpp)
- [CVE-2024-29040](https://cve.now/CVE-2024-29040.md): Fapi Verify Quote: Does not detect if quote was not generated by TPM (CVSS 4.3, tpm2-software tpm2-tss)
- [CVE-2024-39302](https://cve.now/CVE-2024-39302.md): Some bbb-record-core files installed with wrong file permission (CVSS 3.7, bigbluebutton)
- [CVE-2024-39307](https://cve.now/CVE-2024-39307.md): Cross-Site Scripting (XSS) vulnerability via crafted ebooks in Kavita (CVSS 3.5, Kareadita Kavita)
- [CVE-2024-38518](https://cve.now/CVE-2024-38518.md): bbb-web API additional parameters considered (CVSS 4.6, bigbluebutton)
- [CVE-2024-3995](https://cve.now/CVE-2024-3995.md): Command Injection in Helix ALM (CVSS 2.0, Perforce Helix ALM)
- [CVE-2024-38528](https://cve.now/CVE-2024-38528.md): Unlimited number of NTS-KE connections can crash ntpd-rs server (CVSS 7.5, pendulum-project ntpd-rs · ntpd)
- [CVE-2024-5827](https://cve.now/CVE-2024-5827.md): Arbitrary File Write by Prompt Injection via DuckDB SQL in vanna-ai/vanna (CVSS 9.8, vanna-ai/vanna)
- [CVE-2024-5712](https://cve.now/CVE-2024-5712.md): CSRF Vulnerability in stitionai/devika (CVSS 8.1, stitionai/devika)
- [CVE-2022-38383](https://cve.now/CVE-2022-38383.md): IBM Cloud Pak for Security information disclosure (CVSS 4.0, IBM Cloud Pak for Security · IBM QRadar Suite Software)
- [CVE-2022-27540](https://cve.now/CVE-2022-27540.md): A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might a (CVSS 7.8, HP PC BIOS)
- [CVE-2024-25041](https://cve.now/CVE-2024-25041.md): IBM Cognos Analytics cross-site scripting (CVSS 5.4, IBM Cognos Analytics)
- [CVE-2024-25053](https://cve.now/CVE-2024-25053.md): IBM Cognos Analytics improper certificate validation (CVSS 5.9, IBM Cognos Analytics)
- [CVE-2024-38322](https://cve.now/CVE-2024-38322.md): IBM Storage Defender information disclosure (CVSS 5.3, IBM Storage Defender - Resiliency Service)
- [CVE-2024-25031](https://cve.now/CVE-2024-25031.md): IBM Storage Defender information disclosure (CVSS 6.5, IBM Storage Defender - Resiliency Service)
- [CVE-2024-35116](https://cve.now/CVE-2024-35116.md): IBM MQ denial of service (CVSS 5.9, IBM MQ)
- [CVE-2024-35156](https://cve.now/CVE-2024-35156.md): IBM MQ information disclosure (CVSS 6.5, IBM MQ)
- [CVE-2024-38514](https://cve.now/CVE-2024-38514.md): NextChat Server-Side Request Forgery (SSRF) (CVSS 7.4, ChatGPTNextWeb ChatGPT-Next-Web)
- [CVE-2024-38374](https://cve.now/CVE-2024-38374.md): Improper Restriction of XML External Entity Reference in org.cyclonedx:cyclonedx-core-java (CVSS 7.5, cyclonedx-core-java · org.cyclonedx:cyclonedx-core-java)
- [CVE-2024-38371](https://cve.now/CVE-2024-38371.md): Insufficient access control for OAuth2 Device Code flow in authentik (CVSS 8.6, goauthentik authentik)
- [CVE-2024-35155](https://cve.now/CVE-2024-35155.md): IBM MQ information disclosure (CVSS 6.5, IBM MQ)
- [CVE-2024-31912](https://cve.now/CVE-2024-31912.md): IBM MQ privilege escalation (CVSS 7.5, IBM MQ)
- [CVE-2024-31919](https://cve.now/CVE-2024-31919.md): IBM MQ denial of service (CVSS 5.9, IBM MQ)
- [CVE-2024-37905](https://cve.now/CVE-2024-37905.md): Improper Access Control and Incorrect Authorization in github.com/goauthentik/authentik (CVSS 8.8, goauthentik authentik)
- [CVE-2024-38522](https://cve.now/CVE-2024-38522.md): CSP bypass in Hush Line (CVSS 6.3, scidsg hushline)
- [CVE-2024-6403](https://cve.now/CVE-2024-6403.md): Tenda A301 SetOnlineDevName formWifiBasicSet stack-based overflow (CVSS 7.1, Tenda A301)
- [CVE-2024-6402](https://cve.now/CVE-2024-6402.md): Tenda A301 SetOnlineDevName fromSetWirelessRepeat stack-based overflow (CVSS 7.1, Tenda A301)
- [CVE-2024-29039](https://cve.now/CVE-2024-29039.md): Missing check in tpm2\_checkquote allows attackers to misrepresent the TPM state (CVSS 9.1, tpm2-software tpm2-tools)
- [CVE-2024-35139](https://cve.now/CVE-2024-35139.md): IBM Security Access Manager Docker information disclosure (CVSS 6.2, IBM Security Verify Access Docker)
- [CVE-2024-38521](https://cve.now/CVE-2024-38521.md): Persistent Cross-Site Scripting (XSS) in hushline inbox (CVSS 8.8, scidsg hushline)
- [CVE-2024-35137](https://cve.now/CVE-2024-35137.md): IBM Security Access Manager Docker information disclosure (CVSS 6.2, IBM Security Verify Access Docker)
- [CVE-2024-29038](https://cve.now/CVE-2024-29038.md): tpm2 does not detect if quote was not generated by TPM (CVSS 4.3, tpm2-software tpm2-tools)
- [CVE-2024-38531](https://cve.now/CVE-2024-38531.md): Nix sandbox escape (CVSS 3.6, NixOS nix)
- [CVE-2024-3816](https://cve.now/CVE-2024-3816.md): SQLi in S@M CMS (CVSS 9.8, Concept Intermedia S@M CMS)
- [CVE-2024-3801](https://cve.now/CVE-2024-3801.md): XSS in S@M CMS (CVSS 6.1, Concept Intermedia S@M CMS)
- [CVE-2024-3800](https://cve.now/CVE-2024-3800.md): XSS in S@M CMS (CVSS 6.1, Concept Intermedia S@M CMS)
- [CVE-2024-5737](https://cve.now/CVE-2024-5737.md): HTML Injection in AdmirorFrames Joomla! Extension (CVSS 6.3, Nikola Vasilijevski AdmirorFrames)
- [CVE-2024-5736](https://cve.now/CVE-2024-5736.md): SSRF in AdmirorFrames Joomla! Extension (CVSS 8.2, Nikola Vasilijevski AdmirorFrames)
- [CVE-2024-5735](https://cve.now/CVE-2024-5735.md): Full Path Disclosure in AdmirorFrames Joomla! Extension (CVSS 6.3, Nikola Vasilijevski AdmirorFrames)
- [CVE-2024-5922](https://cve.now/CVE-2024-5922.md): Scylla lite \<= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode (CVSS 6.4, tislam100 Scylla lite)
- [CVE-2024-5662](https://cve.now/CVE-2024-5662.md): Ultimate Post Kit Addons For Elementor – (Post Grid, Post Carousel, Post Slider, Category List, Post Tabs, Timeline, Post Ticker, Tag Cloud) \<= 3.11.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Count (Static) Widget (CVSS 6.4, bdthemes Ultimate Post Kit Addons for Elementor)
- [CVE-2024-5925](https://cve.now/CVE-2024-5925.md): Theron Lite \<= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode (CVSS 6.4, tislam100 Theron Lite)
- [CVE-2024-5424](https://cve.now/CVE-2024-5424.md): Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery \<= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via galleryID and className Parameters (CVSS 6.4, gallerycreator Mixed Media Gallery Blocks)
- [CVE-2024-30135](https://cve.now/CVE-2024-30135.md): Sensitive Information Disclosure vulnerability affects DRYiCE AEX v10 (CVSS 3.3, HCL Software DRYiCE AEX)
- [CVE-2024-6288](https://cve.now/CVE-2024-6288.md): Conversios.io - All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce \<= 7.1.0 - Reflected Cross-Site Scripting (CVSS 4.7, tatvic Conversios: Google Analytics (GA4), Google Ads, Conv…)
- [CVE-2024-2795](https://cve.now/CVE-2024-2795.md): SEO SIMPLE PACK \<= 3.2.1 - Information Exposure (CVSS 5.3, looswebstudio SEO SIMPLE PACK)
- [CVE-2024-5796](https://cve.now/CVE-2024-5796.md): Infinite \<= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via project\_url Parameter (CVSS 6.4, ravichandra Infinite)
- [CVE-2024-5788](https://cve.now/CVE-2024-5788.md): Silesia \<= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode (CVSS 6.4, nattywp Silesia)
- [CVE-2024-39350](https://cve.now/CVE-2024-39350.md): A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. (CVSS 7.5, Synology Camera Firmware)
- [CVE-2024-30111](https://cve.now/CVE-2024-30111.md): Missing Root Detection vulnerability affects DRYiCE AEX v10 (CVSS 3.3, HCL Software DRYiCE AEX)
- [CVE-2024-39348](https://cve.now/CVE-2024-39348.md): Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1 (CVSS 7.5, Synology Router Manager)
- [CVE-2024-39347](https://cve.now/CVE-2024-39347.md): Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 (CVSS 5.9, Synology Router Manager)
- [CVE-2024-30110](https://cve.now/CVE-2024-30110.md): Lack of input validation vulnerability affects DRYiCE AEX v10 (CVSS 3.7, HCL Software DRYiCE AEX)
- [CVE-2024-39352](https://cve.now/CVE-2024-39352.md): A vulnerability regarding incorrect authorization is found in the firmware upgrade functionality. (CVSS 4.9, Synology Camera Firmware)
- [CVE-2024-39351](https://cve.now/CVE-2024-39351.md): A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the NTP con (CVSS 7.2, Synology Camera Firmware)
- [CVE-2024-39349](https://cve.now/CVE-2024-39349.md): A vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow') is found in the libjansson component and it (CVSS 9.8, Synology Camera Firmware)
- [CVE-2023-47803](https://cve.now/CVE-2023-47803.md): A vulnerability regarding improper limitation of a pathname to a restricted directory ('Path Traversal') is found in the Language Settings f (CVSS 5.3, Synology Camera Firmware)
- [CVE-2023-47802](https://cve.now/CVE-2023-47802.md): A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the IP bloc (CVSS 7.2, Synology Camera Firmware)
- [CVE-2024-5730](https://cve.now/CVE-2024-5730.md): Pagerank Tools \<= 1.1.5 - Reflected XSS (CVSS 6.1, Pagerank tools)
- [CVE-2024-5729](https://cve.now/CVE-2024-5729.md): Simple AL Slider \<= 1.2.10 - Reflected XSS (CVSS 6.1, Simple AL Slider)
- [CVE-2024-5728](https://cve.now/CVE-2024-5728.md): Animated AL List \<= 1.0.6 - Reflected XSS (CVSS 5.4, Animated AL List)
- [CVE-2024-5727](https://cve.now/CVE-2024-5727.md): Widget4Call \<= 1.0.7 - Reflected XSS (CVSS 4.7, Widget4Call)
- [CVE-2024-5570](https://cve.now/CVE-2024-5570.md): Simple Photoswipe \<= 0.1 - Subscriber+ Arbitrary Settings Update (CVSS 6.5, Simple Photoswipe)
- [CVE-2024-30109](https://cve.now/CVE-2024-30109.md): Lack of Clickjacking Protection vulnerability affects DRYiCE AEX v10 (CVSS 3.7, HCL Software DRYiCE AEX)
- [CVE-2024-37282](https://cve.now/CVE-2024-37282.md): It was identified that under certain specific preconditions, an API key that was originally created with a specific privileges could be subs (CVSS 8.1, Elastic Cloud Enterprise)
- [CVE-2024-6296](https://cve.now/CVE-2024-6296.md): Stackable – Page Builder Gutenberg Blocks \<= 3.13.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (CVSS 6.4, bfintal Stackable – Page Builder Gutenberg Blocks)
- [CVE-2024-5864](https://cve.now/CVE-2024-5864.md): Easy Affiliate Links \<= 3.7.3 - Missing Authorization to Authenticated (Subscriber+) Settings Reset (CVSS 4.3, brechtvds Easy Affiliate Links)
- [CVE-2024-5863](https://cve.now/CVE-2024-5863.md): Easy Image Collage \<= 1.13.5 - Missing Authorization to Authenticated (Contributor+) Data Clearance (CVSS 5.4, brechtvds Easy Image Collage)
- [CVE-2024-37137](https://cve.now/CVE-2024-37137.md): Dell Key Trust Platform, v3.0.6 and prior, contains Use of a Cryptographic Primitive with a Risky Implementation vulnerability. (CVSS 3.8, Dell CloudLink)
- [CVE-2019-25211](https://cve.now/CVE-2019-25211.md): parseWildcardRules in Gin-Gonic CORS middleware before 1.6.0 mishandles a wildcard at the end of an origin string, e.g., https://example.com (CVSS 9.1, github.com/gin-gonic/gin · github.com/gin-contrib/cors)
- [CVE-2024-27628](https://cve.now/CVE-2024-27628.md): Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component. (CVSS 8.1)
- [CVE-2024-27629](https://cve.now/CVE-2024-27629.md): An issue in dc2niix before v.1.0.20240202 allows a local attacker to execute arbitrary code via the generated file name is not properly esca (CVSS 7.8)
- [CVE-2024-37370](https://cve.now/CVE-2024-37370.md): In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, ca (CVSS 7.5)
- [CVE-2024-37371](https://cve.now/CVE-2024-37371.md): In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message (CVSS 9.1)
- [CVE-2024-37741](https://cve.now/CVE-2024-37741.md): OpenPLC 3 through 9cd8f1b allows XSS via an SVG document as a profile picture. (CVSS 5.4)
- [CVE-2024-39704](https://cve.now/CVE-2024-39704.md): Soft Circle French-Bread Melty Blood: Actress Again: Current Code through 1.07 Rev. (CVSS 9.8)
- [CVE-2024-39828](https://cve.now/CVE-2024-39828.md): R74n Sandboxels 1.9 through 1.9.5 allows XSS via a message in a modified saved-game file. (CVSS 6.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-06-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.