CVE-2024 records published in April 2024
Page four of four: records 3,001 to 3,133 of the 3,133 published in April 2024, newest first. The first page carries the figures for April 2024.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-20854 | Samsung Mobile Samsung Camera improper handling of insufficient privileges | 5.9CNA v3.1 | 0.1% | 2024-04-02 | Fix |
| CVE-2024-20853 | Samsung Mobile ThemeStore improper intent verification | 5.1CNA v3.1 | 0.2% | 2024-04-02 | Fix |
| CVE-2024-20852 | Samsung Mobile SmartThings improper intent verification | 5.9CNA v3.1 | 0.1% | 2024-04-02 | Fix |
| CVE-2024-20851 | Samsung Mobile Samsung Data Store improper access control | 4.4CNA v3.1 | 0.1% | 2024-04-02 | Fix |
| CVE-2024-20850 | Samsung Mobile Samsung Pay implicit intent for sensitive communication | 6.2CNA v3.1 | 0.1% | 2024-04-02 | Fix |
| CVE-2024-20849 | Samsung Mobile Devices out-of-bounds write | 7.3CNA v3.1 | 0.2% | 2024-04-02 | Fix |
| CVE-2024-20848 | Samsung Mobile Devices improper input validation | 5.1CNA v3.1 | 0.2% | 2024-04-02 | Fix |
| CVE-2024-20847 | Samsung Mobile Devices StorageManagerService improper access control | 4.0CNA v3.1 | 0.1% | 2024-04-02 | Fix |
| CVE-2024-20846 | Samsung Mobile Devices out-of-bounds write | 5.9CNA v3.1 | 0.2% | 2024-04-02 | Fix |
| CVE-2024-20845 | Samsung Mobile Devices out-of-bounds write | 8.4CNA v3.1 | 0.2% | 2024-04-02 | Fix |
| CVE-2024-20844 | Samsung Mobile Devices out-of-bounds write | 8.4CNA v3.1 | 0.2% | 2024-04-02 | Fix |
| CVE-2024-20843 | Samsung Mobile Devices command parsing implementation of libIfaaCa out-of-bounds write | 5.6CNA v3.1 | 0.2% | 2024-04-02 | Fix |
| CVE-2024-20842 | Samsung Mobile Devices handling apdu of libsec-ril improper input validation | 4.2CNA v3.1 | 0.2% | 2024-04-02 | Fix |
| CVE-2024-20799 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-04-02 | Fix |
| CVE-2024-3248 | Stack overflow in Xpdf due to object loop in attachments | 2.9CNA v3.1 | 0.3% | 2024-04-02 | |
| CVE-2024-3247 | Stack overflow in Xpdf due to object loop in PDF object stream | 2.9CNA v3.1 | 0.3% | 2024-04-02 | |
| CVE-2024-3209 | Upx bele.h get_ne64 heap-based overflow | 9.8v3.1 | 1.2% | 2024-04-02 | Fix |
| CVE-2024-3207 | ermig1979 Simd SimdMemoryStream.h ReadUnsigned heap-based overflow | 9.8v3.1 | 1.0% | 2024-04-02 | |
| CVE-2024-3204 | C-Blosc2 ndlz4x4.c ndlz4_decompress heap-based overflow | 9.8v3.1 | 1.3% | 2024-04-02 | Fix |
| CVE-2024-3203 | C-Blosc2 ndlz8x8.c ndlz8_decompress heap-based overflow | 9.8v3.1 | 1.3% | 2024-04-02 | Fix |
| CVE-2024-3202 | codelyfe Stupid Simple CMS Login page excessive authentication | 5.9v3.1 | 1.2% | 2024-04-02 | |
| CVE-2024-3160 | Intelbras HDCVI 1016 HTTP GET request cap.js information disclosure | 5.3CNA v3.1 | 0.7% | 2024-04-02 | |
| CVE-2024-3151 | Bdtask Multi-Store Inventory Management System Stock Movement page cross-site request forgery | 4.3CNA v3.1 | 0.4% | 2024-04-02 | |
| CVE-2024-3148 | DedeCMS makehtml_archives_action.php SQL injection | 8.8v3.1 | 0.6% | 2024-04-02 | |
| CVE-2024-3147 | DedeCMS makehtml_map.php cross-site request forgery | 4.3v3.1 | 0.4% | 2024-04-02 | |
| CVE-2024-3146 | DedeCMS makehtml_rss_action.php cross-site request forgery | 4.3v3.1 | 0.4% | 2024-04-02 | |
| CVE-2024-3145 | DedeCMS makehtml_js_action.php cross-site request forgery | 4.3v3.1 | 0.4% | 2024-04-02 | |
| CVE-2024-3144 | DedeCMS makehtml_spec.php cross-site request forgery | 4.3v3.1 | 0.4% | 2024-04-02 | |
| CVE-2024-3143 | DedeCMS member_rank.php cross-site request forgery | 4.3v3.1 | 0.4% | 2024-04-02 | |
| CVE-2024-3142 | Clavister E10/E80 setting cross-site request forgery | 4.3CNA v3.1 | 0.3% | 2024-04-02 | Fix |
| CVE-2024-3137 | Improper privilege management in uvdesk/community-skeleton | 7.1CNA v3.0 | 0.4% | 2024-04-02 | |
| CVE-2024-2931 | WPFront User Role Editor WordPress plugin limited information exposure | 4.3CISA ADP v3.1 | 0.5% | 2024-04-02 | Fix |
| CVE-2024-2925 | Beaver Builder WordPress Page Builder plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-04-02 | Fix |
| CVE-2024-2924 | Creative Addons for Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-04-02 | Fix |
| CVE-2024-2839 | Colibri Page Builder WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-04-02 | Fix |
| CVE-2024-2791 | Metform Elementor Contact Form Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-04-02 | Fix |
| CVE-2024-2745 | Rapid7 InsightVM sensitive information exposure via URL | 3.3CNA v3.1 | 0.2% | 2024-04-02 | Fix |
| CVE-2024-2435 | Temporal OSS ui-server stored XSS in Timeline view | 4.3CNA v3.1 | 0.4% | 2024-04-02 | Fix |
| CVE-2024-2389 | Flowmon Unauthenticated command injection | 10.0CNA v3.1 | 93.0% | 2024-04-02 | NucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-2369 | Page Builder Gutenberg Blocks WordPress plugin Contributor+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-04-02 | Fix |
| CVE-2024-1946 | Genesis Blocks WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-04-02 | Fix |
| CVE-2024-1807 | Product Sort and Display for WooCommerce WordPress plugin missing authorization | 6.5CNA v3.1 | 0.6% | 2024-04-02 | Fix |
| CVE-2024-1732 | djamio1988 Sharkdropship for AliExpress product removal function missing authorization | 5.3CNA v3.1 | 0.4% | 2024-04-02 | Fix |
| CVE-2024-1504 | SecuPress Free WordPress Security plugin cross-site request forgery to Banned IP Address | 4.3CNA v3.1 | 0.3% | 2024-04-02 | Fix |
| CVE-2024-1300 | Red Hat CEQ eclipse Vert.x vulnerable to a memory leak in TCP servers | 5.4CNA v3.1 | 1.1% | 2024-04-02 | Fix |
| CVE-2024-1274 | My Calendar WordPress plugin authenticated stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-04-02 | Fix |
| CVE-2024-31099 | Phlox Core Elements WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-04-01 | Fix |
| CVE-2024-31033 | JJWT Java JWT DefaultJwtParser and DefaultJwtBuilder vulnerability | 6.8CISA ADP v3.1 | 0.8% | 2024-04-01 | |
| CVE-2024-30872 | Netentsec NS-ASG SQL injection | 5.1CISA ADP v3.1 | 0.3% | 2024-04-01 | |
| CVE-2024-30871 | Netentsec NS-ASG SQL injection | 8.8CISA ADP v3.1 | 0.7% | 2024-04-01 | |
| CVE-2024-30870 | Netentsec NS-ASG SQL injection | 8.8CISA ADP v3.1 | 0.7% | 2024-04-01 | |
| CVE-2024-30868 | Netentsec NS-ASG code injection | 9.8CISA ADP v3.1 | 0.7% | 2024-04-01 | |
| CVE-2024-30867 | Netentsec NS-ASG SQL injection | 9.8CISA ADP v3.1 | 0.7% | 2024-04-01 | |
| CVE-2024-30866 | Netentsec NS-ASG SQL injection | 5.4CISA ADP v3.1 | 0.3% | 2024-04-01 | |
| CVE-2024-30865 | Netentsec NS-ASG SQL injection | 9.8CISA ADP v3.1 | 0.7% | 2024-04-01 | |
| CVE-2024-30864 | Netentsec NS-ASG SQL injection | 6.3CISA ADP v3.1 | 0.3% | 2024-04-01 | |
| CVE-2024-30863 | Netentsec NS-ASG SQL injection | 6.3CISA ADP v3.1 | 0.4% | 2024-04-01 | |
| CVE-2024-30862 | Netentsec NS-ASG SQL injection | 8.8CISA ADP v3.1 | 0.7% | 2024-04-01 | |
| CVE-2024-30861 | Netentsec NS-ASG SQL injection | 5.3CISA ADP v3.1 | 0.4% | 2024-04-01 | |
| CVE-2024-30860 | Netentsec NS-ASG SQL injection | 8.8CISA ADP v3.1 | 0.6% | 2024-04-01 | |
| CVE-2024-30859 | Netentsec NS-ASG SQL injection | 8.8CISA ADP v3.1 | 0.7% | 2024-04-01 | |
| CVE-2024-30858 | Netentsec NS-ASG code injection | 9.8CISA ADP v3.1 | 0.7% | 2024-04-01 | |
| CVE-2024-29435 | alldata command injection | 4.1CISA ADP v3.1 | 0.3% | 2024-04-01 | |
| CVE-2024-29433 | alldata FASTJSON component deserialization of untrusted data | 9.8CISA ADP v3.1 | 0.8% | 2024-04-01 | |
| CVE-2024-28895 | LY 'Yahoo! JAPAN' App cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-04-01 | |
| CVE-2024-28232 | IceWhaleTech CasaOS-UserService Username Enumeration in CasaOS via bypass of | 6.2CNA v3.1 | 0.6% | 2024-04-01 | Fix |
| CVE-2024-27609 | Bonita cross-site scripting | 6.5CISA ADP v3.1 | 0.5% | 2024-04-01 | Fix |
| CVE-2024-27333 | Kofax Power PDF GIF File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.4% | 2024-04-01 | |
| CVE-2024-27332 | PDF-XChange Editor JPG File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 0.4% | 2024-04-01 | |
| CVE-2024-27331 | PDF-XChange Editor EMF File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 0.4% | 2024-04-01 | |
| CVE-2024-27330 | PDF-XChange Editor EMF File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 0.4% | 2024-04-01 | |
| CVE-2024-27329 | PDF-XChange Editor XPS File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.4% | 2024-04-01 | |
| CVE-2024-27328 | PDF-XChange Editor EMF File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.4% | 2024-04-01 | |
| CVE-2024-27327 | PDF-XChange Editor PDF File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-04-01 | |
| CVE-2024-27326 | PDF-XChange Editor XPS File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.4% | 2024-04-01 | |
| CVE-2024-27325 | PDF-XChange Editor EMF File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.4% | 2024-04-01 | |
| CVE-2024-27324 | PDF-XChange Editor TIF File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.4% | 2024-04-01 | |
| CVE-2024-27323 | PDF-XChange Editor Updater improper certificate validation remote code execution | 7.5v3.1 | 0.3% | 2024-04-01 | |
| CVE-2024-26655 | Linux kernel posix clock driver memory leak | 5.5v3.1 | 0.3% | 2024-04-01 | Fix |
| CVE-2024-26654 | Linux kernel AICA sound driver use-after-free | 7.8CNA v3.1 | 0.3% | 2024-04-01 | Fix |
| CVE-2024-26653 | Linux kernel ljca USB driver double free | 7.8v3.1 | 0.2% | 2024-04-01 | Fix |
| CVE-2024-25574 | Delta Electronics DIAEnergie SQL injection | 9.8v3.1 | 8.8% | 2024-04-01 | Fix |
| CVE-2024-25080 | Axigen WebMail image attachment viewer cross-site scripting | 4.7CISA ADP v3.1 | 0.3% | 2024-04-01 | |
| CVE-2024-23119 | Centreon insertGraphTemplate SQL injection remote code execution | 8.8CNA v3.0 | 1.4% | 2024-04-01 | Fix |
| CVE-2024-23118 | Centreon updateContactHostCommands SQL injection remote code execution | 7.2CNA v3.0 | 53.4% | 2024-04-01 | Fix |
| CVE-2024-23117 | Centreon updateContactServiceCommands SQL injection remote code execution | 7.2CNA v3.0 | 53.4% | 2024-04-01 | Fix |
| CVE-2024-23116 | Centreon updateLCARelation SQL injection remote code execution | 7.2CNA v3.0 | 53.4% | 2024-04-01 | Fix |
| CVE-2024-23115 | Centreon updateGroups SQL injection remote code execution | 7.2CISA ADP v3.1 | 67.5% | 2024-04-01 | Fix |
| CVE-2024-21473 | Qualcomm Snapdragon improper input validation in WIN SON | 9.8CNA v3.1 | 0.7% | 2024-04-01 | Fix |
| CVE-2024-21472 | Qualcomm Snapdragon use-after-free in Kernel | 8.4CNA v3.1 | 0.1% | 2024-04-01 | Fix |
| CVE-2024-21470 | Qualcomm Snapdragon integer overflow to buffer overflow in Graphics Windows | 8.4CNA v3.1 | 0.1% | 2024-04-01 | Fix |
| CVE-2024-21468 | Qualcomm Snapdragon use-after-free in Kernel | 8.4CNA v3.1 | 0.1% | 2024-04-01 | Fix |
| CVE-2024-21463 | Qualcomm Snapdragon buffer copy without checking size of input in Audio | 7.3CNA v3.1 | 0.3% | 2024-04-01 | Fix |
| CVE-2024-21454 | Qualcomm Snapdragon integer overflow to buffer overflow in Automotive Telematics | 7.5CNA v3.1 | 0.4% | 2024-04-01 | Fix |
| CVE-2024-21453 | Qualcomm Snapdragon improper input validation in Automotive Telematics | 7.5CNA v3.1 | 0.4% | 2024-04-01 | Fix |
| CVE-2024-21452 | Qualcomm Snapdragon improper input validation in Automotive Telematics | 7.3CNA v3.1 | 0.3% | 2024-04-01 | Fix |
| CVE-2024-20055 | MediaTek chipsets information disclosure in imgsys | 6.3CISA ADP v3.1 | 0.1% | 2024-04-01 | Fix |
| CVE-2024-20054 | MediaTek chipsets improper input validation in gnss | 6.6CISA ADP v3.1 | 0.3% | 2024-04-01 | Fix |
| CVE-2024-20053 | MediaTek chipsets improper check or handling of exceptional conditions in flashc | 8.4CISA ADP v3.1 | 0.1% | 2024-04-01 | Fix |
| CVE-2024-20052 | MediaTek chipsets improper check or handling of exceptional conditions in flashc | 4.4CISA ADP v3.1 | 0.1% | 2024-04-01 | Fix |
| CVE-2024-20051 | MediaTek chipsets improper check or handling of exceptional conditions in flashc | 2.3CISA ADP v3.1 | 0.1% | 2024-04-01 | Fix |
| CVE-2024-20050 | MediaTek chipsets improper check or handling of exceptional conditions in flashc | 4.4CISA ADP v3.1 | 0.1% | 2024-04-01 | Fix |
| CVE-2024-20049 | MediaTek chipsets improper check or handling of exceptional conditions in flashc | 4.4CISA ADP v3.1 | 0.1% | 2024-04-01 | Fix |
| CVE-2024-20048 | MediaTek chipsets improper check or handling of exceptional conditions in flashc | 6.2CISA ADP v3.1 | 0.1% | 2024-04-01 | Fix |
| CVE-2024-20047 | MediaTek chipsets out-of-bounds read in battery | 5.4CISA ADP v3.1 | 0.2% | 2024-04-01 | Fix |
| CVE-2024-20046 | MediaTek chipsets integer overflow or wraparound in battery | 6.6CISA ADP v3.1 | 0.3% | 2024-04-01 | Fix |
| CVE-2024-20045 | MediaTek chipsets out-of-bounds read in audio | 2.3CISA ADP v3.1 | 0.1% | 2024-04-01 | Fix |
| CVE-2024-20044 | MediaTek chipsets improper check or handling of exceptional conditions in da | 6.6CISA ADP v3.1 | 0.3% | 2024-04-01 | Fix |
| CVE-2024-20043 | MediaTek chipsets improper check or handling of exceptional conditions in da | 6.6CISA ADP v3.1 | 0.2% | 2024-04-01 | Fix |
| CVE-2024-20042 | MediaTek chipsets improper check or handling of exceptional conditions in da | 6.6CISA ADP v3.1 | 0.3% | 2024-04-01 | Fix |
| CVE-2024-20041 | MediaTek chipsets improper check or handling of exceptional conditions in da | 4.4CISA ADP v3.1 | 0.2% | 2024-04-01 | Fix |
| CVE-2024-20040 | MediaTek chipsets improper input validation in wlan firmware | 8.8CISA ADP v3.1 | 0.2% | 2024-04-01 | Fix |
| CVE-2024-20039 | MediaTek chipsets out-of-bounds write in Modem protocol | 8.8CISA ADP v3.1 | 0.9% | 2024-04-01 | Fix |
| CVE-2024-3165 | dotCMS core database credential exposure in the Logs | 4.5CNA v3.1 | 0.5% | 2024-04-01 | |
| CVE-2024-3164 | dotCMS core improper access control | 4.5CNA v3.1 | 0.5% | 2024-04-01 | |
| CVE-2024-3141 | Clavister E10/E80 Misc settings Page MiscSettings cross-site scripting | 2.4CNA v3.1 | 0.5% | 2024-04-01 | Fix |
| CVE-2024-3140 | SourceCodester Computer Laboratory Management System cross-site scripting | 5.4v3.1 | 0.6% | 2024-04-01 | |
| CVE-2024-3139 | SourceCodester Computer Laboratory Management System save_users improper authorization | 5.4v3.1 | 0.5% | 2024-04-01 | |
| CVE-2024-3138 | francoisjacquet RosarioSIS Add Portal Note cross-site scripting | 3.5CNA v3.1 | 0.5% | 2024-04-01 | |
| CVE-2024-3135 | Cross-site request forgery (CSRF) vulnerability in mudler/LocalAI | 6.5CNA v3.0 | 0.3% | 2024-04-01 | |
| CVE-2024-3131 | SourceCodester Computer Laboratory Management System SQL injection | 6.5v3.1 | 0.5% | 2024-04-01 | |
| CVE-2024-3130 | CoolKit Technology eWeLink APP insecure Data Storage leading to sensitive information disclosure | 5.7CNA v3.1 | 0.1% | 2024-04-01 | Fix |
| CVE-2024-3129 | SourceCodester Image Accordion Gallery App add-image.php unrestricted upload | 6.3CNA v3.1 | 0.7% | 2024-04-01 | |
| CVE-2024-3128 | Replify-Messenger Backup file androidmanifest.xml backup | 2.4CNA v3.1 | 0.3% | 2024-04-01 | |
| CVE-2024-3125 | Zebra ZTC GK420d Alert Setup page settings cross-site scripting | 2.4CNA v3.1 | 0.5% | 2024-04-01 | |
| CVE-2024-3124 | fridgecow smartalarm Backup file androidmanifest.xml backup | 2.4CNA v3.1 | 0.3% | 2024-04-01 | |
| CVE-2024-2278 | WooCommerce Product Filter WordPress plugin Admin+ stored XSS | 6.1CISA ADP v3.1 | 0.4% | 2024-04-01 | Fix |
| CVE-2024-2263 | WooCommerce Product Filter WordPress plugin reflected XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-04-01 | Fix |
| CVE-2024-2262 | WooCommerce Product Filter WordPress plugin Filter deletion via CSRF | 4.7CISA ADP v3.1 | 0.2% | 2024-04-01 | Fix |
| CVE-2024-1863 | Sante PACS Server Token Endpoint SQL injection remote code execution | 9.8CNA v3.0 | 1.1% | 2024-04-01 | |
| CVE-2024-1526 | Hubbub Lite WordPress plugin unauthenticated password Protected posts access | 5.3CISA ADP v3.1 | 0.5% | 2024-04-01 | Fix |
| CVE-2024-1179 | TP-Link Omada ER605 DHCPv6 client options stack-based buffer overflow remote code execution | 8.8v3.1 | 0.9% | 2024-04-01 | |
| CVE-2024-0637 | Centreon updateDirectory SQL injection remote code execution | 8.8CNA v3.0 | 72.3% | 2024-04-01 | Fix |