# CVEs published 2024-07-03

58 CVEs were published on July 3, 2024: 3 critical, 14 high. Days are UTC.

- [CVE-2024-6284](https://cve.now/CVE-2024-6284.md): Improper IPv4 and IPv6 byte order storage in github.com/google/nftables (CVSS 6.3, https://github.com/google/nftables · github.com/google/nfta…)
- [CVE-2024-6383](https://cve.now/CVE-2024-6383.md): MongoDB C Driver bson\_string\_append may be vulnerable to a buffer overflow (CVSS 5.3, MongoDB libbson)
- [CVE-2024-34750](https://cve.now/CVE-2024-34750.md): Apache Tomcat: HTTP/2 excess header handling DoS (CVSS 7.5, Apache Software Foundation Apache Tomcat · org.apache.to… +1)
- [CVE-2024-39683](https://cve.now/CVE-2024-39683.md): ZITADEL Vulnerable to Session Information Leakage (CVSS 5.7, zitadel · github.com/zitadel/zitadel)
- [CVE-2024-37157](https://cve.now/CVE-2024-37157.md): Discourse vulnerable to Server-Side Request Forgery via FastImage (CVSS 6.4, discourse)
- [CVE-2024-36122](https://cve.now/CVE-2024-36122.md): Discourse doesn't limit reviewable user serializer payload (CVSS 2.4, discourse)
- [CVE-2024-36113](https://cve.now/CVE-2024-36113.md): Discourse missing authorization checks for suspending admins/moderators (CVSS 4.9, discourse)
- [CVE-2024-35234](https://cve.now/CVE-2024-35234.md): Discourse vulnerable to stored-dom XSS via Facebook Oneboxes (CVSS 4.2, discourse)
- [CVE-2024-5821](https://cve.now/CVE-2024-5821.md): Local File Inclusion (LFI) in stitionai/devika (CVSS 6.2, stitionai/devika)
- [CVE-2024-35227](https://cve.now/CVE-2024-35227.md): Discourse vulnerable to DoS through Onebox (CVSS 7.5, discourse)
- [CVE-2024-31223](https://cve.now/CVE-2024-31223.md): Fides Information Disclosure Vulnerability in Privacy Center of SERVER\_SIDE\_FIDES\_API\_URL (CVSS 5.3, ethyca fides · ethyca-fides)
- [CVE-2024-3332](https://cve.now/CVE-2024-3332.md): bt: host/smp: DoS caused by null pointer dereference (CVSS 6.5, zephyrproject-rtos Zephyr)
- [CVE-2024-6126](https://cve.now/CVE-2024-6126.md): Cockpit: authenticated user can kill any process when enabling pam\_env's user\_readenv option (CVSS 3.2, cockpit · Red Hat Enterprise Linux)
- [CVE-2024-6052](https://cve.now/CVE-2024-6052.md): XSS in SQL check parameters (CVSS 6.5, Checkmk)
- [CVE-2024-32937](https://cve.now/CVE-2024-32937.md): An os command injection vulnerability exists in the CWMP SelfDefinedTimeZone functionality of Grandstream GXP2135 1.0.9.129, 1.0.11.74 and 1 (CVSS 8.1, Grandstream GXP2135)
- [CVE-2024-6471](https://cve.now/CVE-2024-6471.md): SourceCodester Online Tours & Travels Management sms\_setting.php sql injection (CVSS 5.3, SourceCodester Online Tours & Travels Management)
- [CVE-2024-6470](https://cve.now/CVE-2024-6470.md): playSMS Template injection (CVSS 5.1, playSMS)
- [CVE-2024-5672](https://cve.now/CVE-2024-5672.md): Red Lion Europe: mbNET.mini vulnerable to OS command injection (CVSS 7.2, Red Lion Europe mbNET.mini · Helmholz REX)
- [CVE-2024-6427](https://cve.now/CVE-2024-6427.md): Uncontrolled Resource Consumption vulnerability in MESbook (CVSS 7.5, MESbook)
- [CVE-2024-6426](https://cve.now/CVE-2024-6426.md): Information exposure vulnerability vulnerability in MESbook (CVSS 8.1, MESbook)
- [CVE-2024-6469](https://cve.now/CVE-2024-6469.md): playSMS Template injection (CVSS 5.1, playSMS)
- [CVE-2024-6428](https://cve.now/CVE-2024-6428.md): Limited DoS due to permitting creating users with user-defined IDs (CVSS 5.3, Mattermost)
- [CVE-2024-39353](https://cve.now/CVE-2024-39353.md): RemoteClusterFrame payloads are audit logged in full (CVSS 2.7, Mattermost)
- [CVE-2024-39361](https://cve.now/CVE-2024-39361.md): Creating posts with user-defined IDs permitted in CreatePost API (CVSS 3.1, Mattermost)
- [CVE-2024-39830](https://cve.now/CVE-2024-39830.md): Timing attack during remote cluster token comparison when shared channels are enabled (CVSS 8.1, Mattermost)
- [CVE-2024-39807](https://cve.now/CVE-2024-39807.md): Channel IDs of archived/restored channels leaked via webhook events (CVSS 3.1, Mattermost)
- [CVE-2024-36257](https://cve.now/CVE-2024-36257.md): Lack of permission check when updating the profile picture of a remote user (shared channels enabled) (CVSS 2.7, Mattermost)
- [CVE-2024-6263](https://cve.now/CVE-2024-6263.md): WP Lightbox 2 \<= 3.0.6.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (CVSS 6.4, smub WP Lightbox)
- [CVE-2024-6340](https://cve.now/CVE-2024-6340.md): Premium Addons for Elementor \<= 4.10.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget (CVSS 6.4, leap13 Premium Addons for Elementor – Powerful Elementor Te…)
- [CVE-2024-4482](https://cve.now/CVE-2024-4482.md): The Plus Addons for Elementor \<= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget (CVSS 6.4, posimyththemes The Plus Addons for Elementor – Addons for E…)
- [CVE-2024-37082](https://cve.now/CVE-2024-37082.md): When deploying Cloud Foundry together with the haproxy-boshrelease and using a non default configuration, it might be possible to craft HTTP (CVSS 9.1, Cloud Foundry haproxy-boshrelease)
- [CVE-2024-2376](https://cve.now/CVE-2024-2376.md): WPQA \< 6.1.1 - Arbitrary Category and Tag Follow/Unfollow via CSRF (CVSS 8.8, WPQA Builder)
- [CVE-2024-2375](https://cve.now/CVE-2024-2375.md): WPQA \< 6.1.1 - Contributor+ Stored XSS (CVSS 5.9, WPQA Builder)
- [CVE-2024-2235](https://cve.now/CVE-2024-2235.md): Himer - Social Questions and Answers \< 2.1.1 - Bypass Poll Voting Restrictions via CSRF (CVSS 6.3, Himer)
- [CVE-2024-2234](https://cve.now/CVE-2024-2234.md): Himer - Social Questions and Answers \< 2.1.1 - Contributor+ Stored XSS (CVSS 6.3, Himer)
- [CVE-2024-2233](https://cve.now/CVE-2024-2233.md): Himer - Social Questions and Answers \< 2.1.1 - Multiple CSRF on the Group Section (CVSS 6.3, Himer)
- [CVE-2024-2231](https://cve.now/CVE-2024-2231.md): Himer - Social Questions and Answers \< 2.1.1 - Subscriber+ Private Group Joining via IDOR (CVSS 6.5, Himer)
- [CVE-2024-2040](https://cve.now/CVE-2024-2040.md): Himer - Social Questions and Answers \< 2.1.1 - Arbitrary Group Joining via CSRF (CVSS 6.3, Himer)
- [CVE-2024-4543](https://cve.now/CVE-2024-4543.md): Snippet Shortcodes \<= 4.1.4 - Cross-Site Request Forgery (CVSS 4.3, aliakro Snippet Shortcodes)
- [CVE-2024-32673](https://cve.now/CVE-2024-32673.md): Improper Validation of Array Index vulnerability in Samsung Open Source Walrus Webassembly runtime engine allows a segmentation fault issue. (CVSS 6.7, Samsung Open Source Walrus)
- [CVE-2023-52168](https://cve.now/CVE-2023-52168.md): The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite (CVSS 8.4)
- [CVE-2023-52169](https://cve.now/CVE-2023-52169.md): The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the i (CVSS 8.2)
- [CVE-2024-29506](https://cve.now/CVE-2024-29506.md): Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi\_apply\_filter() function via a long PDF filter name. (CVSS 5.4)
- [CVE-2024-29507](https://cve.now/CVE-2024-29507.md): Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters. (CVSS 5.4)
- [CVE-2024-29508](https://cve.now/CVE-2024-29508.md): Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf\_base\_ (CVSS 3.3)
- [CVE-2024-29509](https://cve.now/CVE-2024-29509.md): Artifex Ghostscript before 10.03.0 has a heap-based overflow when PDFPassword (e.g., for runpdf) has a \\000 byte in the middle. (CVSS 8.8)
- [CVE-2024-29510](https://cve.now/CVE-2024-29510.md): Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device. (CVSS 6.3)
- [CVE-2024-29511](https://cve.now/CVE-2024-29511.md): Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrary file reading (and (CVSS 7.5)
- [CVE-2024-33869](https://cve.now/CVE-2024-33869.md): An issue was discovered in Artifex Ghostscript before 10.03.1. (CVSS 5.3)
- [CVE-2024-33870](https://cve.now/CVE-2024-33870.md): An issue was discovered in Artifex Ghostscript before 10.03.1. (CVSS 6.3)
- [CVE-2024-33871](https://cve.now/CVE-2024-33871.md): An issue was discovered in Artifex Ghostscript before 10.03.1. (CVSS 8.8)
- [CVE-2024-37726](https://cve.now/CVE-2024-37726.md): Insecure Permissions vulnerability in Micro-Star International Co., Ltd MSI Center v.2.0.36.0 allows a local attacker to escalate privileges (CVSS 6.8)
- [CVE-2024-38453](https://cve.now/CVE-2024-38453.md): The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. (CVSS 7.5)
- [CVE-2024-39220](https://cve.now/CVE-2024-39220.md): BAS-IP AV-01D, AV-01MD, AV-01MFD, AV-01ED, AV-01KD, AV-01BD, AV-01KBD, AV-02D, AV-02IDE, AV-02IDR, AV-02IPD, AV-02FDE, AV-02FDR, AV-03D, AV- (CVSS 6.5)
- [CVE-2024-39223](https://cve.now/CVE-2024-39223.md): An authentication bypass in the SSH service of gost v2.11.5 allows attackers to intercept communications via setting the HostKeyCallback fun (CVSS 9.8, github.com/ginuerzh/gost)
- [CVE-2024-39248](https://cve.now/CVE-2024-39248.md): A cross-site scripting (XSS) vulnerability in SimpCMS v0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload i (CVSS 5.4)
- [CVE-2024-39844](https://cve.now/CVE-2024-39844.md): In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK. (CVSS 9.8)
- [CVE-2024-39920](https://cve.now/CVE-2024-39920.md): The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers to infer the content of one TCP connection (CVSS 4.3)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-07-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.