Common Vulnerability and Exposures

Common Vulnerabilities and Exposures (CVE) is a critical tool for maintaining software security, providing a standardized way to track and manage vulnerabilities across systems. Organizations should regularly monitor CVE databases, assess the impact of vulnerabilities, and apply patches promptly to reduce the risk of exploitation.
CVE (Common Vulnerabilities and Exposures) is a public database that provides a standardized method for identifying, tracking, and referencing publicly disclosed security vulnerabilities in software and hardware. Each vulnerability receives a unique identifier called a CVE ID (e.g., CVE-2023-12345), making it easier to reference specific vulnerabilities across different tools and databases.

CVE Details

Total Search Results: 158437

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40
41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80
81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120
121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160
161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200
201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240
241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280
281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320
321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360
361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400
401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440
441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480
481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520
521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560
561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600
601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640
641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680
681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720
721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760
761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800
801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840
841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880
881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920
921 922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950 951 952 953 954 955 956 957 958 959 960
961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991 992 993 994 995 996 997 998 999 1000
1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018 1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 1040
1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080
1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120
1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160
1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181 1182 1183 1184 1185 1186 1187 1188 1189 1190 1191 1192 1193 1194 1195 1196 1197 1198 1199 1200
1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220 1221 1222 1223 1224 1225 1226 1227 1228 1229 1230 1231 1232 1233 1234 1235 1236 1237 1238 1239 1240
1241 1242 1243 1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254 1255 1256 1257 1258 1259 1260 1261 1262 1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280
1281 1282 1283 1284 1285 1286 1287 1288 1289 1290 1291 1292 1293 1294 1295 1296 1297 1298 1299 1300 1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319 1320
1321 1322 1323 1324 1325 1326 1327 1328 1329 1330 1331 1332 1333 1334 1335 1336 1337 1338 1339 1340 1341 1342 1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357 1358 1359 1360
1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373 1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400
1401 1402 1403 1404 1405 1406 1407 1408 1409 1410 1411 1412 1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440
1441 1442 1443 1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480
1481 1482 1483 1484 1485 1486 1487 1488 1489 1490 1491 1492 1493 1494 1495 1496 1497 1498 1499 1500 1501 1502 1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520
1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531 1532 1533 1534 1535 1536 1537 1538 1539 1540 1541 1542 1543 1544 1545 1546 1547 1548 1549 1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560
1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571 1572 1573 1574 1575 1576 1577 1578 1579 1580 1581 1582 1583 1584 1585

CVE ID	Description	Severity	Published Date	Affected Vendor
CVE-2024-4703	The One Page Express Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's one_page_express_contact_form shortcode in all versions up to, and including, 1.6.37 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.	Unknown	N/A	horearadu
CVE-2024-4704	The Contact Form 7 WordPress plugin before 5.9.5 has an open redirect that allows an attacker to utilize a false URL and redirect to the URL of their choosing.	Unknown	N/A	Unknown
CVE-2024-47044	Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION are vulnerable to insufficient access restrictions for Device Setting pages. If this vulnerability is exploited, an attacker who identified WAN-side IPv6 address may access the product's Device Setting page via WAN-side. Note that, the same products are also provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION, but the vulnerability only affects products subscribed and used in NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION areas.	Unknown	N/A	NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
CVE-2024-47045	Privilege chaining issue exists in the installer of e-Tax software(common program). If this vulnerability is exploited, a malicious DLL prepared by an attacker may be executed with higher privileges than the application privilege.	Unknown	N/A	National Tax Agency
CVE-2024-47046	A vulnerability has been identified in Simcenter Nastran 2306 (All versions), Simcenter Nastran 2312 (All versions), Simcenter Nastran 2406 (All versions < V2406.5000). The affected application is vulnerable to memory corruption while parsing specially crafted BDF files. This could allow an attacker to execute code in the context of the current process.	Unknown	N/A	Siemens
CVE-2024-47047	An issue was discovered in the powermail extension through 12.4.0 for TYPO3. It fails to validate the mail parameter of the createAction, resulting in Insecure Direct Object Reference (IDOR) in some configurations. An unauthenticated attacker can use this to display user-submitted data of all forms persisted by the extension. The fixed versions are 7.5.1, 8.5.1, 10.9.1, and 12.4.1.	Unknown	N/A	n/a
CVE-2024-47048	Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier allows stored XSS in the description and release notes of the marketplace and private apps.	Unknown	N/A	n/a
CVE-2024-47049	The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of local files.	Unknown	N/A	n/a
CVE-2024-4705	The Testimonials Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's testimonials shortcode in all versions up to, and including, 4.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.	Unknown	N/A	j0hnsmith
CVE-2024-47050	Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable.	Unknown	N/A	Mautic
CVE-2024-47058	With access to edit a Mautic form, the attacker can add Cross-Site Scripting stored in the html filed. This could be used to steal sensitive information from the user's current session.	Unknown	N/A	Mautic
CVE-2024-47059	When logging in with the correct username and incorrect weak password, the user receives the notification, that their password is too weak. However when an incorrect username is provided alongside with a weak password, the application responds with ’Invalid credentials’ notification. This difference could be used to perform username enumeration.	Unknown	N/A	Mautic
CVE-2024-4706	The WordPress + Microsoft Office 365 / Azure AD \| LOGIN plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pintra' shortcode in all versions up to, and including, 27.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.	Unknown	N/A	wpo365
CVE-2024-47060	Zitadel is an open source identity management platform. In Zitadel, even after an organization is deactivated, associated projects, respectively their applications remain active. Users across other organizations can still log in and access through these applications, leading to unauthorized access. Additionally, if a project was deactivated access to applications was also still possible. The issue stems from the fact that when an organization is deactivated in Zitadel, the applications associated with it do not automatically deactivate. The application lifecycle is not tightly coupled with the organization's lifecycle, leading to a situation where the organization or project is marked as inactive, but its resources remain accessible. This vulnerability allows for unauthorized access to projects and their resources, which should have been restricted post-organization deactivation. Versions 2.62.1, 2.61.1, 2.60.2, 2.59.3, 2.58.5, 2.57.5, 2.56.6, 2.55.8, and 2.54.10 have been released which address this issue. Users are advised to upgrade. Users unable to upgrade may explicitly disable the application to make sure the client is not allowed anymore.	Unknown	N/A	zitadel
CVE-2024-47061	Plate is a javascript toolkit that makes it easier for you to develop with Slate, a popular framework for building text editors. One longstanding feature of Plate is the ability to add custom DOM attributes to any element or leaf using the `attributes` property. These attributes are passed to the node component using the `nodeProps` prop. It has come to our attention that this feature can be used for malicious purposes, including cross-site scripting (XSS) and information exposure (specifically, users' IP addresses and whether or not they have opened a malicious document). Note that the risk of information exposure via attributes is only relevant to applications in which web requests to arbitrary URLs are not ordinarily allowed. Plate editors that allow users to embed images from arbitrary URLs, for example, already carry the risk of leaking users' IP addresses to third parties. All Plate editors using an affected version of @udecode/plate-core are vulnerable to these information exposure attacks via the style attribute and other attributes that can cause web requests to be sent. In addition, whether or not a Plate editor is vulnerable to cross-site scripting attacks using attributes depends on a number of factors. The most likely DOM attributes to be vulnerable are href and src on links and iframes respectively. Any component that spreads {...nodeProps} onto an or element and does not later override href or src will be vulnerable to XSS. In patched versions of Plate, we have disabled element.attributes and leaf.attributes for most attribute names by default, with some exceptions including target, alt, width, height, colspan and rowspan on the link, image, video, table cell and table header cell plugins. If this is a breaking change for you, you can selectively re-enable attributes for certain plugins as follows. Please carefully research and assess the security implications of any attribute you allow, as even seemingly innocuous attributes such as style can be used maliciously. If you are unable to upgrade to any of the patched versions, you should use a tool like patch-package or yarn patch to remove the logic from @udecode/plate-core that adds attributes to nodeProps.</td> <td>Unknown</td> <td>N/A</td> <td>udecode</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47061"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47062</td> <td>Navidrome is an open source web-based music collection server and streamer. Navidrome automatically adds parameters in the URL to SQL queries. This can be exploited to access information by adding parameters like `password=...` in the URL (ORM Leak). Furthermore, the names of the parameters are not properly escaped, leading to SQL Injections. Finally, the username is used in a `LIKE` statement, allowing people to log in with `%` instead of their username. When adding parameters to the URL, they are automatically included in an SQL `LIKE` statement (depending on the parameter's name). This allows attackers to potentially retrieve arbitrary information. For example, attackers can use the following request to test whether some encrypted passwords start with `AAA`. This results in an SQL query like `password LIKE 'AAA%'`, allowing attackers to slowly brute-force passwords. When adding parameters to the URL, they are automatically added to an SQL query. The names of the parameters are not properly escaped. This behavior can be used to inject arbitrary SQL code (SQL Injection). These vulnerabilities can be used to leak information and dump the contents of the database and have been addressed in release version 0.53.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.</td> <td>Unknown</td> <td>N/A</td> <td>navidrome</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47062"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47063</td> <td>Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. If a malicious CVAT user with permissions to either create a task, or edit an existing task can trick another logged-in user into visiting a maliciously-constructed URL, they can initiate any API calls on that user's behalf. This gives the attacker temporary access to all data that the victim user has access to. Upgrade to CVAT 2.19.0 or a later version to fix this issue.</td> <td>Unknown</td> <td>N/A</td> <td>cvat-ai</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47063"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47064</td> <td>Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. If an attacker can trick a logged-in CVAT user into visiting a maliciously-constructed URL, they can initiate any API calls on that user's behalf. This gives the attacker temporary access to all data that the victim user has access to. Upgrade to CVAT 2.19.0 or a later version to fix this issue.</td> <td>Unknown</td> <td>N/A</td> <td>cvat-ai</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47064"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47066</td> <td>Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.19.13, server-side request forgery protection implemented in `src/app/api/proxy/route.ts` does not consider redirect and could be bypassed when attacker provides an external malicious URL which redirects to internal resources like a private network or loopback address. Version 1.19.13 contains an improved fix for the issue.</td> <td>Unknown</td> <td>N/A</td> <td>lobehub</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47066"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47067</td> <td>AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerability in helper.go. The endpoint /i/:link_name takes in a user-provided value and reflects it back in the response. The endpoint returns an application/xml response, opening it up to HTML tags via XHTML and thus leading to a XSS vulnerability. This vulnerability is fixed in 3.29.0.</td> <td>Unknown</td> <td>N/A</td> <td>alist-org</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47067"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47068</td> <td>Rollup is a module bundler for JavaScript. Versions prior to 3.29.5 and 4.22.4 are susceptible to a DOM Clobbering vulnerability when bundling scripts with properties from `import.meta` (e.g., `import.meta.url`) in `cjs`/`umd`/`iife` format. The DOM Clobbering gadget can lead to cross-site scripting (XSS) in web pages where scriptless attacker-controlled HTML elements (e.g., an `img` tag with an unsanitized `name` attribute) are present. Versions 3.29.5 and 4.22.4 contain a patch for the vulnerability.</td> <td>Unknown</td> <td>N/A</td> <td>rollup</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47068"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47069</td> <td>Oveleon Cookie Bar is a cookie bar is for the Contao Open Source CMS and allows a visitor to define cookie & privacy settings for the website. Prior to versions 1.16.3 and 2.1.3, the `block/locale` endpoint does not properly sanitize the user-controlled `locale` input before including it in the backend's HTTP response, thereby causing reflected cross-site scripting. Versions 1.16.3 and 2.1.3 contain a patch for the vulnerability.</td> <td>Unknown</td> <td>N/A</td> <td>oveleon</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47069"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-4707</td> <td>The Materialis Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's materialis_contact_form shortcode in all versions up to, and including, 1.3.41 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</td> <td>Unknown</td> <td>N/A</td> <td>horearadu</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-4707"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47070</td> <td>authentik is an open-source identity provider. A vulnerability that exists in versions prior to 2024.8.3 and 2024.6.5 allows bypassing password login by adding X-Forwarded-For header with an unparsable IP address, e.g. `a`. This results in a possibility of logging into any account with a known login or email address. The vulnerability requires the authentik instance to trust X-Forwarded-For header provided by the attacker, thus it is not reproducible from external hosts on a properly configured environment. The issue occurs due to the password stage having a policy bound to it, which skips the password stage if the Identification stage is setup to also contain a password stage. Due to the invalid X-Forwarded-For header, which does not get validated to be an IP Address early enough, the exception happens later and the policy fails. The default blueprint doesn't correctly set `failure_result` to `True` on the policy binding meaning that due to this exception the policy returns false and the password stage is skipped. Versions 2024.8.3 and 2024.6.5 fix this issue.</td> <td>Unknown</td> <td>N/A</td> <td>goauthentik</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47070"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47071</td> <td>OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authenticated web users unauthorized access to read system files with the permissions of the webserver process. This vulnerability is fixed in 14.0.4.</td> <td>Unknown</td> <td>N/A</td> <td>FreePBX</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47071"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47074</td> <td>DataEase is an open source data visualization analysis tool. In Dataease, the PostgreSQL data source in the data source function can customize the JDBC connection parameters and the PG server target to be connected. In backend/src/main/java/io/dataease/provider/datasource/JdbcProvider.java, PgConfiguration class don't filter any parameters, directly concat user input. So, if the attacker adds some parameters in JDBC url, and connect to evil PG server, the attacker can trigger the PG jdbc deserialization vulnerability, and eventually the attacker can execute through the deserialization vulnerability system commands and obtain server privileges. The vulnerability has been fixed in v1.18.25.</td> <td>Unknown</td> <td>N/A</td> <td>dataease</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47074"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47075</td> <td>LayUI is a native minimalist modular Web UI component library. Versions prior to 2.9.17 have a DOM Clobbering vulnerability that can lead to Cross-site Scripting (XSS) on web pages where attacker-controlled HTML elements (e.g., `img` tags with unsanitized `name` attributes) are present. Version 2.9.17 fixes this issue.</td> <td>Unknown</td> <td>N/A</td> <td>layui</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47075"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47076</td> <td>CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in `libcupsfilters` does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS system.</td> <td>Unknown</td> <td>N/A</td> <td>OpenPrinting</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47076"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47077</td> <td>authentik is an open-source identity provider. Prior to versions 2024.8.3 and 2024.6.5, access tokens issued to one application can be stolen by that application and used to impersonate the user against any other proxy provider. Also, a user can steal an access token they were legitimately issued for one application and use it to access another application that they aren't allowed to access. Anyone who has more than one proxy provider application with different trust domains or different access control is affected. Versions 2024.8.3 and 2024.6.5 fix the issue.</td> <td>Unknown</td> <td>N/A</td> <td>goauthentik</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47077"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47078</td> <td>Meshtastic is an open source, off-grid, decentralized, mesh network. Meshtastic uses MQTT to communicate over an internet connection to a shared or private MQTT Server. Nodes can communicate directly via an internet connection or proxied through a connected phone (i.e., via bluetooth). Prior to version 2.5.1, multiple weaknesses in the MQTT implementation allow for authentication and authorization bypasses resulting in unauthorized control of MQTT-connected nodes. Version 2.5.1 contains a patch.</td> <td>Unknown</td> <td>N/A</td> <td>meshtastic</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47078"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47079</td> <td>Meshtastic is an open source, off-grid, decentralized, mesh network built to run on affordable, low-power devices. Meshtastic firmware is an open source firmware implementation for the broader project. The remote hardware module of the firmware does not have proper checks to ensure a remote hardware control message was received should be considered valid. This issue has been addressed in release version 2.5.1. All users are advised to upgrade. There are no known workarounds for this vulnerability.</td> <td>Unknown</td> <td>N/A</td> <td>meshtastic</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47079"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-4708</td> <td>mySCADA myPRO uses a hard-coded password which could allow an attacker to remotely execute code on the affected device.</td> <td>Unknown</td> <td>N/A</td> <td>mySCADA</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-4708"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47080</td> <td>matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. In matrix-js-sdk versions versions 9.11.0 through 34.7.0, the method `MatrixClient.sendSharedHistoryKeys` is vulnerable to interception by malicious homeservers. The method was introduced by MSC3061) and is commonly used to share historical message keys with newly invited users, granting them access to past messages in the room. However, it unconditionally sends these "shared" keys to all of the invited user's devices, regardless of whether the user's cryptographic identity is verified or whether the user's devices are signed by that identity. This allows the attacker to potentially inject its own devices to receive sensitive historical keys without proper security checks. Note that this only affects clients running the SDK with the legacy crypto stack. Clients using the new Rust cryptography stack (i.e. those that call `MatrixClient.initRustCrypto()` instead of `MatrixClient.initCrypto()`) are unaffected by this vulnerability, because `MatrixClient.sendSharedHistoryKeys()` raises an exception in such environments. The vulnerability was fixed in matrix-js-sdk 34.8.0 by removing the vulnerable functionality. As a workaround, remove use of affected functionality from clients.</td> <td>Unknown</td> <td>N/A</td> <td>matrix-org</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47080"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47082</td> <td>Strawberry GraphQL is a library for creating GraphQL APIs. Prior to version 0.243.0, multipart file upload support as defined in the GraphQL multipart request specification was enabled by default in all Strawberry HTTP view integrations. This made all Strawberry HTTP view integrations vulnerable to cross-site request forgery (CSRF) attacks if users did not explicitly enable CSRF preventing security mechanism for their servers. Additionally, the Django HTTP view integration, in particular, had an exemption for Django's built-in CSRF protection (i.e., the `CsrfViewMiddleware` middleware) by default. In affect, all Strawberry integrations were vulnerable to CSRF attacks by default. Version `v0.243.0` is the first `strawberry-graphql` including a patch.</td> <td>Unknown</td> <td>N/A</td> <td>strawberry-graphql</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47082"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47083</td> <td>Power Platform Terraform Provider allows managing environments and other resources within Power Platform. Versions prior to 3.0.0 have an issue in the Power Platform Terraform Provider where sensitive information, specifically the `client_secret` used in the service principal authentication, may be exposed in logs. This exposure occurs due to an error in the logging code that causes the `client_secret` to not be properly masked when logs are persisted or viewed. Users should upgrade to version 3.0.0 to receive a patched version of the provider that removes all logging of sensitive content. Users who have used this provider with the affected versions should take the following additional steps to mitigate the risk: Immediately rotate the `client_secret` for any service principal that has been configured using this Terraform provider. This will invalidate any potentially exposed secrets. Those who have set the `TF_LOG_PATH` environment variable or configured Terraform to persist logs to a file or an external system, consider disabling this until they have updated to a fixed version of the provider. Those who have existing logs that may contain the `client_secret` should remove or sanitize these logs to prevent unauthorized access. This includes logs on disk, in monitoring systems, or in logging services.</td> <td>Unknown</td> <td>N/A</td> <td>microsoft</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47083"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47084</td> <td>Gradio is an open-source Python package designed for quick prototyping. This vulnerability is related to CORS origin validation, where the Gradio server fails to validate the request origin when a cookie is present. This allows an attacker’s website to make unauthorized requests to a local Gradio server. Potentially, attackers can upload files, steal authentication tokens, and access user data if the victim visits a malicious website while logged into Gradio. This impacts users who have deployed Gradio locally and use basic authentication. Users are advised to upgrade to `gradio>4.44` to address this issue. As a workaround, users can manually enforce stricter CORS origin validation by modifying the `CustomCORSMiddleware` class in their local Gradio server code. Specifically, they can bypass the condition that skips CORS validation for requests containing cookies to prevent potential exploitation.</td> <td>Unknown</td> <td>N/A</td> <td>gradio-app</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47084"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47085</td> <td>This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters (cCdslClicentcode and cLdClientCode) in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to exposure of sensitive information belonging to other users.</td> <td>Unknown</td> <td>N/A</td> <td>Apex Softcell</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47085"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47086</td> <td>This vulnerability exists in Apex Softcell LD DP Back Office due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by providing arbitrary OTP value for authentication and subsequently changing its API response. Successful exploitation of this vulnerability could allow the attacker to bypass OTP verification for other user accounts.</td> <td>Unknown</td> <td>N/A</td> <td>Apex Softcell</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47086"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47087</td> <td>This vulnerability exists in Apex Softcell LD Geo due to improper validation of the certain parameters (Client ID, DPID or BOID) in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to exposure of sensitive information belonging to other users.</td> <td>Unknown</td> <td>N/A</td> <td>Apex Softcell</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47087"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47088</td> <td>This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on login OTP, which could lead to gain unauthorized access to other user accounts.</td> <td>Unknown</td> <td>N/A</td> <td>Apex Softcell</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47088"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47089</td> <td>This vulnerability exists in the Apex Softcell LD Geo due to improper validation of the transaction token ID in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating the transaction token ID in the API request leading to unauthorized access and modification of transactions belonging to other users.</td> <td>Unknown</td> <td>N/A</td> <td>Apex Softcell</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47089"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-4709</td> <td>The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘subject’ parameter in versions up to, and including, 5.1.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, and access granted by an administrator, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</td> <td>Unknown</td> <td>N/A</td> <td>techjewel</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-4709"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47095</td> <td>Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the expiredSupportMessage parameter of handleloginform.do.</td> <td>Unknown</td> <td>N/A</td> <td>Follet School Solutions</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47095"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-4710</td> <td>The UberMenu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ubermenu-col, ubermenu_mobile_close_button, ubermenu_toggle, ubermenu-search shortcodes in all versions up to, and including, 3.8.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</td> <td>Unknown</td> <td>N/A</td> <td>SevenSpark</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-4710"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-4711</td> <td>The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ajax_load_more shortcode in versions up to, and including, 7.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</td> <td>Unknown</td> <td>N/A</td> <td>connekthq</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-4711"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-4712</td> <td>An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the image-handler process, which can incorrectly create files that don’t exist when a maliciously formed payload is provided. This can lead to local privilege escalation. Note: This CVE has been split into two (CVE-2024-4712 and CVE-2024-8405) and it’s been rescored with a "Privileges Required (PR)" rating of low, and “Attack Complexity (AC)” rating of low, reflecting the worst-case scenario where an Administrator has granted local login access to standard network users on the host server.</td> <td>Unknown</td> <td>N/A</td> <td>PaperCut</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-4712"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47121</td> <td>The goTenna Pro App uses a weak password for sharing encryption keys via the key broadcast method. If the broadcasted encryption key is captured over RF, and password is cracked via brute force attack, it is possible to decrypt it and use it to decrypt all future and past messages sent via encrypted broadcast with that particular key. This only applies when the key is broadcasted over RF. This is an optional feature, so it is recommended to use local QR encryption key sharing for additional security on this and previous versions.</td> <td>Unknown</td> <td>N/A</td> <td>goTenna</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47121"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47122</td> <td>In the goTenna Pro App, the encryption keys are stored along with a static IV on the End User Device (EUD). This allows for complete decryption of keys stored on the EUD if physically compromised. This allows an attacker to decrypt all encrypted broadcast communications based on encryption keys stored on the EUD. This requires access to and control of the EUD, so it is recommended to use strong access control measures and layered encryption on the EUD for more secure operation.</td> <td>Unknown</td> <td>N/A</td> <td>goTenna</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47122"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47123</td> <td>The goTenna Pro App uses AES CTR type encryption for short, encrypted messages without any additional integrity checking mechanisms. This leaves messages malleable to an attacker that can access the message. It is recommended to continue to use encryption in the app and update to the current release for more secure operations.</td> <td>Unknown</td> <td>N/A</td> <td>goTenna</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47123"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47124</td> <td>The goTenna Pro App does not encrypt callsigns in messages. It is recommended to not use sensitive information in callsigns when using this and previous versions of the app and update your app to the current app version which uses AES-256 encryption for callsigns in encrypted operation.</td> <td>Unknown</td> <td>N/A</td> <td>goTenna</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47124"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47125</td> <td>The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages. It is advised to update your app to the current release for enhanced encryption protocols.</td> <td>Unknown</td> <td>N/A</td> <td>goTenna</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47125"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47126</td> <td>The goTenna Pro App does not use SecureRandom when generating passwords for sharing cryptographic keys. The random function in use makes it easier for attackers to brute force this password if the broadcasted encryption key is captured over RF. This only applies to the optional broadcast of an encryption key, so it is advised to share the key with local QR code for higher security operations.</td> <td>Unknown</td> <td>N/A</td> <td>goTenna</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47126"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47127</td> <td>In the goTenna Pro App there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a software defined radio in existing goTenna mesh networks. This vulnerability can be exploited if the device is being used in an unencrypted environment or if the cryptography has already been compromised. It is advised to share encryption keys via QR scanning for higher security operations and update your app to the current release for enhanced encryption protocols.</td> <td>Unknown</td> <td>N/A</td> <td>goTenna</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47127"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47128</td> <td>The goTenna Pro App encryption key name is always sent unencrypted when the key is shared over RF through a broadcast message. It is advised to share the encryption key via local QR for higher security operations.</td> <td>Unknown</td> <td>N/A</td> <td>goTenna</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47128"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47129</td> <td>The goTenna Pro App does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used.</td> <td>Unknown</td> <td>N/A</td> <td>goTenna</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47129"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-4713</td> <td>A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view/all_teacher.php. The manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263791.</td> <td>Unknown</td> <td>N/A</td> <td>Campcodes</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-4713"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47130</td> <td>The goTenna Pro App allows unauthenticated attackers to remotely update the local public keys used for P2P and group messages. It is advised to update your app to the current release for enhanced encryption protocols.</td> <td>Unknown</td> <td>N/A</td> <td>goTenna</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47130"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47134</td> <td>Out-of-bounds write vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execution, and/or information disclosure because the issues exist in parsing of KPP project files.</td> <td>Unknown</td> <td>N/A</td> <td>JTEKT ELECTRONICS CORPORATION</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47134"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47135</td> <td>Stack-based buffer overflow vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execution, and/or information disclosure because the issues exist in parsing of KPP project files.</td> <td>Unknown</td> <td>N/A</td> <td>JTEKT ELECTRONICS CORPORATION</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47135"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47136</td> <td>Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execution, and/or information disclosure because the issues exist in parsing of KPP project files.</td> <td>Unknown</td> <td>N/A</td> <td>JTEKT ELECTRONICS CORPORATION</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47136"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47139</td> <td>A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IQ Configuration utility that allows an attacker with the Administrator role to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</td> <td>Unknown</td> <td>N/A</td> <td>F5</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47139"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-4714</td> <td>A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is some unknown functionality of the file /model/update_subject.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263792.</td> <td>Unknown</td> <td>N/A</td> <td>Campcodes</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-4714"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47145</td> <td>Mattermost versions 9.5.x <= 9.5.8 fail to properly authorize access to archived channels when viewing archived channels is disabled, which allows an attacker to view posts and files of archived channels via file links.</td> <td>Unknown</td> <td>N/A</td> <td>Mattermost</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47145"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-4715</td> <td>A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /model/update_grade.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263793 was assigned to this vulnerability.</td> <td>Unknown</td> <td>N/A</td> <td>Campcodes</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-4715"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47159</td> <td>In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project</td> <td>Unknown</td> <td>N/A</td> <td>JetBrains</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47159"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-4716</td> <td>A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /model/update_exam.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-263794 is the identifier assigned to this vulnerability.</td> <td>Unknown</td> <td>N/A</td> <td>Campcodes</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-4716"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47160</td> <td>In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible</td> <td>Unknown</td> <td>N/A</td> <td>JetBrains</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47160"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47161</td> <td>In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API</td> <td>Unknown</td> <td>N/A</td> <td>JetBrains</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47161"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47162</td> <td>In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page</td> <td>Unknown</td> <td>N/A</td> <td>JetBrains</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47162"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47164</td> <td>Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to the bypass of directory traversal checks within the `is_in_or_equal` function. This function, intended to check if a file resides within a given directory, can be bypassed with certain payloads that manipulate file paths using `..` (parent directory) sequences. Attackers could potentially access restricted files if they are able to exploit this flaw, although the difficulty is high. This primarily impacts users relying on Gradio’s blocklist or directory access validation, particularly when handling file uploads. Users are advised to upgrade to `gradio>=5.0` to address this issue. As a workaround, users can manually sanitize and normalize file paths in their Gradio deployment before passing them to the `is_in_or_equal` function. Ensuring that all file paths are properly resolved and absolute can help mitigate the bypass vulnerabilities caused by the improper handling of `..` sequences or malformed paths.</td> <td>Unknown</td> <td>N/A</td> <td>gradio-app</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47164"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47165</td> <td>Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to CORS origin validation accepting a null origin. When a Gradio server is deployed locally, the `localhost_aliases` variable includes "null" as a valid origin. This allows attackers to make unauthorized requests from sandboxed iframes or other sources with a null origin, potentially leading to data theft, such as user authentication tokens or uploaded files. This impacts users running Gradio locally, especially those using basic authentication. Users are advised to upgrade to `gradio>=5.0` to address this issue. As a workaround, users can manually modify the `localhost_aliases` list in their local Gradio deployment to exclude "null" as a valid origin. By removing this value, the Gradio server will no longer accept requests from sandboxed iframes or sources with a null origin, mitigating the potential for exploitation.</td> <td>Unknown</td> <td>N/A</td> <td>gradio-app</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47165"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47166</td> <td>Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a one-level read path traversal in the `/custom_component` endpoint. Attackers can exploit this flaw to access and leak source code from custom Gradio components by manipulating the file path in the request. Although the traversal is limited to a single directory level, it could expose proprietary or sensitive code that developers intended to keep private. This impacts users who have developed custom Gradio components and are hosting them on publicly accessible servers. Users are advised to upgrade to `gradio>=4.44` to address this issue. As a workaround, developers can sanitize the file paths and ensure that components are not stored in publicly accessible directories.</td> <td>Unknown</td> <td>N/A</td> <td>gradio-app</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47166"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47167</td> <td>Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to Server-Side Request Forgery (SSRF) in the `/queue/join` endpoint. Gradio’s `async_save_url_to_cache` function allows attackers to force the Gradio server to send HTTP requests to user-controlled URLs. This could enable attackers to target internal servers or services within a local network and possibly exfiltrate data or cause unwanted internal requests. Additionally, the content from these URLs is stored locally, making it easier for attackers to upload potentially malicious files to the server. This impacts users deploying Gradio servers that use components like the Video component which involve URL fetching. Users are advised to upgrade to `gradio>=5` to address this issue. As a workaround, users can disable or heavily restrict URL-based inputs in their Gradio applications to trusted domains only. Additionally, implementing stricter URL validation (such as allowinglist-based validation) and ensuring that local or internal network addresses cannot be requested via the `/queue/join` endpoint can help mitigate the risk of SSRF attacks.</td> <td>Unknown</td> <td>N/A</td> <td>gradio-app</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47167"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47168</td> <td>Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves data exposure due to the enable_monitoring flag not properly disabling monitoring when set to False. Even when monitoring is supposedly disabled, an attacker or unauthorized user can still access the monitoring dashboard by directly requesting the /monitoring endpoint. This means that sensitive application analytics may still be exposed, particularly in environments where monitoring is expected to be disabled. Users who set enable_monitoring=False to prevent unauthorized access to monitoring data are impacted. Users are advised to upgrade to gradio>=4.44 to address this issue. There are no known workarounds for this vulnerability.</td> <td>Unknown</td> <td>N/A</td> <td>gradio-app</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47168"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47169</td> <td>Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to upload arbitrary files to attacker-chosen locations on the server, including JavaScript, enabling the execution of commands within those files. This issue could result in unauthorized access, full server compromise, data leakage, and other critical security threats. This does not affect `agnai.chat`, installations using S3-compatible storage, or self-hosting that is not publicly exposed. This does affect publicly hosted installs without S3-compatible storage. Version 1.0.330 fixes this vulnerability.</td> <td>Unknown</td> <td>N/A</td> <td>agnaistic</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47169"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-4717</td> <td>A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /model/update_classroom.php. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263795.</td> <td>Unknown</td> <td>N/A</td> <td>Campcodes</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-4717"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47170</td> <td>Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to read arbitrary JSON files at attacker-chosen locations on the server. This issue can lead to unauthorized access to sensitive information and exposure of confidential configuration files. This only affects installations with `JSON_STORAGE` enabled which is intended to local/self-hosting only. Version 1.0.330 fixes this issue.</td> <td>Unknown</td> <td>N/A</td> <td>agnaistic</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47170"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47171</td> <td>Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to upload image files at attacker-chosen location on the server. This issue can lead to image file uploads to unauthorized or unintended directories, including overwriting of existing images which may be used for defacement. This does not affect `agnai.chat`, installations using S3-compatible storage, or self-hosting that is not publicly exposed. Version 1.0.330 fixes this vulnerability.</td> <td>Unknown</td> <td>N/A</td> <td>agnaistic</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47171"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47172</td> <td>Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacker with a CVAT account may retrieve certain information about any project, task, job or membership resource on the CVAT instance. The information exposed in this way is the same as the information returned on a GET request to the resource. In addition, the attacker can also alter the default source and target storage associated with any project or task. Upgrade to CVAT 2.19.1 or any later version to fix the issue.</td> <td>Unknown</td> <td>N/A</td> <td>cvat-ai</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47172"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47174</td> <td>Nix is a package manager for Linux and other Unix systems. Starting in version 1.11 and prior to versions 2.18.8 and 2.24.8, `<nix/fetchurl.nix>` did not verify TLS certificates on HTTPS connections. This could lead to connection details such as full URLs or credentials leaking in case of a man-in-the-middle (MITM) attack. `<nix/fetchurl.nix>` is also known as the builtin derivation builder `builtin:fetchurl`. It's not to be confused with the evaluation-time function `builtins.fetchurl`, which was not affected by this issue. A user may be affected by the risk of leaking credentials if they have a `netrc` file for authentication, or rely on derivations with `impureEnvVars` set to use credentials from the environment. In addition, the commonplace trust-on-first-use (TOFU) technique of updating dependencies by specifying an invalid hash and obtaining it from a remote store was also vulnerable to a MITM injecting arbitrary store objects. This also applied to the impure derivations experimental feature. Note that this may also happen when using Nixpkgs fetchers to obtain new hashes when not using the fake hash method, although that mechanism is not implemented in Nix itself but rather in Nixpkgs using a fixed-output derivation. The behavior was introduced in version 1.11 to make it consistent with the Nixpkgs `pkgs.fetchurl` and to make `<nix/fetchurl.nix>` work in the derivation builder sandbox, which back then did not have access to the CA bundles by default. Nowadays, CA bundles are bind-mounted on Linux. This issue has been fixed in Nix 2.18.8 and 2.24.8. As a workaround, implement (authenticated) fetching with `pkgs.fetchurl` from Nixpkgs, using `impureEnvVars` and `curlOpts` as needed.</td> <td>Unknown</td> <td>N/A</td> <td>NixOS</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47174"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47175</td> <td>CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.</td> <td>Unknown</td> <td>N/A</td> <td>OpenPrinting</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47175"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47176</td> <td>CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. When combined with other vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute arbitrary commands remotely on the target machine without authentication when a malicious printer is printed to.</td> <td>Unknown</td> <td>N/A</td> <td>OpenPrinting</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47176"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47177</td> <td>CUPS is a standards-based, open-source printing system, and cups-filters provides backends, filters, and other software for CUPS 2.x to use on non-Mac OS systems. Any value passed to `FoomaticRIPCommandLine` via a PPD file will be executed as a user controlled command. When combined with other logic bugs as described in CVE_2024-47176, this can lead to remote command execution.</td> <td>Unknown</td> <td>N/A</td> <td>OpenPrinting</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47177"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47178</td> <td>basic-auth-connect is Connect's Basic Auth middleware in its own module. basic-auth-connect < 1.1.0 uses a timing-unsafe equality comparison that can leak timing information. This issue has been fixed in basic-auth-connect 1.1.0.</td> <td>Unknown</td> <td>N/A</td> <td>expressjs</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47178"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47179</td> <td>RSSHub is an RSS network. Prior to commit 64e00e7, RSSHub's `docker-test-cont.yml` workflow is vulnerable to Artifact Poisoning, which could have lead to a full repository takeover. Downstream users of RSSHub are not vulnerable to this issue, and commit 64e00e7 fixed the underlying issue and made the repository no longer vulnerable. The `docker-test-cont.yml` workflow gets triggered when the `PR - Docker build test` workflow completes successfully. It then collects some information about the Pull Request that triggered the triggering workflow and set some labels depending on the PR body and sender. If the PR also contains a `routes` markdown block, it will set the `TEST_CONTINUE` environment variable to `true`. The workflow then downloads and extracts an artifact uploaded by the triggering workflow which is expected to contain a single `rsshub.tar.zst` file. However, prior to commit 64e00e7, it did not validate and the contents were extracted in the root of the workspace overriding any existing files. Since the contents of the artifact were not validated, it is possible for a malicious actor to send a Pull Request which uploads, not just the `rsshub.tar.zst` compressed docker image, but also a malicious `package.json` file with a script to run arbitrary code in the context of the privileged workflow. As of commit 64e00e7, this scenario has been addressed and the RSSHub repository is no longer vulnerable.</td> <td>Unknown</td> <td>N/A</td> <td>DIYgod</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47179"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-4718</td> <td>A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /model/delete_student_grade_subject.php. The manipulation of the argument index leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263796.</td> <td>Unknown</td> <td>N/A</td> <td>Campcodes</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-4718"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47180</td> <td>Shields.io is a service for concise, consistent, and legible badges in SVG and raster format. Shields.io and users self-hosting their own instance of shields using version < `server-2024-09-25` are vulnerable to a remote execution vulnerability via the JSONPath library used by the Dynamic JSON/Toml/Yaml badges. This vulnerability would allow any user with access to make a request to a URL on the instance to the ability to execute code by crafting a malicious JSONPath expression. All users who self-host an instance are vulnerable. This problem was fixed in server-2024-09-25. Those who follow the tagged releases should update to `server-2024-09-25` or later. Those who follow the rolling tag on DockerHub, `docker pull shieldsio/shields:next` to update to the latest version. As a workaround, blocking access to the endpoints `/badge/dynamic/json`, `/badge/dynamic/toml`, and `/badge/dynamic/yaml` (e.g: via a firewall or reverse proxy in front of your instance) would prevent the exploitable endpoints from being accessed.</td> <td>Unknown</td> <td>N/A</td> <td>badges</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47180"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47182</td> <td>Dozzle is a realtime log viewer for docker containers. Before version 8.5.3, the app uses sha-256 as the hash for passwords, which leaves users susceptible to rainbow table attacks. The app switches to bcrypt, a more appropriate hash for passwords, in version 8.5.3.</td> <td>Unknown</td> <td>N/A</td> <td>amir20</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47182"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47183</td> <td>Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. If the Parse Server option allowCustomObjectId: true is set, an attacker that is allowed to create a new user can set a custom object ID for that new user that exploits the vulnerability and acquires privileges of a specific role. This vulnerability is fixed in 6.5.9 and 7.3.0.</td> <td>Unknown</td> <td>N/A</td> <td>parse-community</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47183"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47184</td> <td>Ampache is a web based audio/video streaming application and file manager. Prior to version 6.6.0, the Democratic Playlist Name is vulnerable to a stored cross-site scripting. Version 6.6.0 fixes this issue.</td> <td>Unknown</td> <td>N/A</td> <td>ampache</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47184"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47186</td> <td>Filament is a collection of full-stack components for Laravel development. Versions of Filament from v3.0.0 through v3.2.114 are affected by a cross-site scripting (XSS) vulnerability. If values passed to a `ColorColumn` or `ColumnEntry` are not valid and contain a specific set of characters, applications are vulnerable to XSS attack against a user who opens a page on which a color column or entry is rendered. Filament v3.2.115 fixes this issue.</td> <td>Unknown</td> <td>N/A</td> <td>filamentphp</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47186"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47187</td> <td>Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for "thash" leads to datasets having predictable hash table behavior. This can lead to dataset file loading to use excessive time to load, as well as runtime performance issues during traffic handling. This issue has been addressed in 7.0.7. As a workaround, avoid loading datasets from untrusted sources. Avoid dataset rules that track traffic in rules.</td> <td>Unknown</td> <td>N/A</td> <td>OISF</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47187"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47188</td> <td>Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for "thash" leads to byte-range tracking having predictable hash table behavior. This can lead to an attacker forcing lots of data into a single hash bucket, leading to severe performance degradation. This issue has been addressed in 7.0.7.</td> <td>Unknown</td> <td>N/A</td> <td>OISF</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47188"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47189</td> <td>The API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct SQL injection due to insufficient sanitization of user input. A successful exploit could allow an attacker with knowledge of specific details to access non-sensitive user provisioning information and execute arbitrary SQL database commands.</td> <td>Unknown</td> <td>N/A</td> <td>n/a</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47189"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-4719</td> <td>A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /model/delete_record.php. The manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263797 was assigned to this vulnerability.</td> <td>Unknown</td> <td>N/A</td> <td>Campcodes</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-4719"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47191</td> <td>pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink.</td> <td>Unknown</td> <td>N/A</td> <td>n/a</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47191"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47194</td> <td>A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). vish2.exe in affected applications allows a specific DLL file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges in installations where administrators or processes with elevated privileges launch vish2.exe from a user-writable directory.</td> <td>Unknown</td> <td>N/A</td> <td>Siemens</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47194"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47195</td> <td>A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). gdb.exe in affected applications allows a specific executable file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges in installations where administrators or processes with elevated privileges launch gdb.exe from a user-writable directory.</td> <td>Unknown</td> <td>N/A</td> <td>Siemens</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47195"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47196</td> <td>A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). vsimk.exe in affected applications allows a specific tcl file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges in installations where administrators or processes with elevated privileges launch vsimk.exe from a user-writable directory.</td> <td>Unknown</td> <td>N/A</td> <td>Siemens</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47196"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> <tr> <td>CVE-2024-47197</td> <td>Exposure of Sensitive Information to an Unauthorized Actor, Insecure Storage of Sensitive Information vulnerability in Maven Archetype Plugin. This issue affects Maven Archetype Plugin: from 3.2.1 before 3.3.0. Users are recommended to upgrade to version 3.3.0, which fixes the issue. Archetype integration testing creates a file called ./target/classes/archetype-it/archetype-settings.xml This file contains all the content from the users ~/.m2/settings.xml file, which often contains information they do not want to publish. We expect that on many developer machines, this also contains credentials. When the user runs mvn verify again (without a mvn clean), this file becomes part of the final artifact. If a developer were to publish this into Maven Central or any other remote repository (whether as a release or a snapshot) their credentials would be published without them knowing.</td> <td>Unknown</td> <td>N/A</td> <td>Apache Software Foundation</td> <td> <form action="Controller" method="get"> <input type="hidden" name="page" value="cve_ai4"> <input type="hidden" name="cve_id" value="CVE-2024-47197"> <button type="submit" class="btn" style="background-color: orange; color: black;">AI Action</button> </form> </td> </tr> </table> </div> </div> </div> </div> </div> </div> <!-- Bottom Code --> </div> <!-- Footer-Section --> <div class="footer-section"> <div class="container"> <div class="row"> <!-- <div class="col-lg-4 col-md-4 col-sm-6"> <div class="footer-content1"> <a href="index.html" class="text-decoration-none"><figure><img src="./assets/images/footer-logo.png" alt="" class="img-fluid"></figure></a> <p class="footer-section-text">Deleniti aeue corrupti quos dolores et quas molestias excepturi sint occaecati rupiditate non provident, similique sunt...</p> <ul class="list-unstyled"> <li class="list-item"> <a href="#"><i class="fa-brands fa-facebook-f marginLeft"></i></a> <a href="#"><i class="fa-brands fa-twitter marginLeft"></i></a> <a href="#"><i class="fa-brands fa-instagram marginLeft"></i></a> </li> </ul> </div> </div> --> <div class="col-lg-2 col-md-2 col-sm-12 d-lg-block d-none"> <h5 class="footer-link footer-next-list footer-next-list-about">About Us</h5> <ul class="useful-footer"> <li> <a href="Controller?page=home" class="text-decoration-none footer-link-p"> About Us </a> </li> <li> <a href="Controller?page=contact_us" class="text-decoration-none footer-link-p"> Contact us </a> </li> <li> <a href="Controller?page=tos" class="text-decoration-none footer-link-p"> Terms of Service </a> </li> </ul> </div> <div class="col-lg-3 col-md-4 col-sm-12 d-md-block d-none"> <h5 class="footer-link text-white footer-next-list footer-next-list-contact">Contact Info</h5> <div class="footer-list footer-link contact-list"> <div class="icon-list-box1"> <ul class="list-unstyled contact-us-ul"> <li class="list-item"> <a href="mailto:info@vulnerability-insight.com" class="text-decoration-none footer-link-auto">info@vulnerability-insight.com</a> <i class="fa fa-envelope fa-icon footer-location2"></i> </li> <li class="list-item"> </li> <li class="list-item"> <a class="text-decoration-none footer-link-auto">Kuala Lumpur, MALAYSIA</a> </li><i class="fa-solid fa-location-dot footer-location"></i> </ul> </div> </div> </div> <div class="col-lg-6 col-md-4 col-sm-6"> <div class="footer-list signupbox"> <div class="form-btn"> <form id="subscribeForm" action="Controller?page=subscribing_us" method="POST" onsubmit="return validateEmail()"> <h4 class="footer-link text-white footer-next-list footer-next-list-signup">Sign up for Newsletter</h4> <div class="icon-list-box1"> <div class="col-inner"> <input type="text" id="email" name="email" class="form-control input-fill" placeholder="Email Address:"> </div> <div class="form-btn"> <button type="submit" class="btn btn-primary" onclick="subscribe()">Subscribe</button> </div> </div> <p id="message" style="color: red;"> </p> </form> </div> </div> </div> </div> </div> <div class="footer-bar text-center"> <div class="row"> <div class="footer-bar-content w-100"> <p class="text-size-16 mb-0"><a href="Controller?page=home"> vunerability-insight.com © 2023 - 2025</a>. All Rights Reserved. <br>Vulnerability Data Repositories v </p> </div> </div> </div> </div> <script> function validateEmail() { // Get the email value from the input field var email = document.getElementById('email').value; // Email validation using a regular expression var emailPattern = /^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$/; if (!emailPattern.test(email)) { // Display error message if the email is invalid var messageElement = document.getElementById('message'); messageElement.textContent = 'Please enter a valid email address.'; messageElement.classList.remove('success-message'); messageElement.classList.add('error-message'); hideMessageAfterDelay(); // Hide message after delay return false; // Prevent form submission } return true; // Allow form submission if email is valid } // Function to hide the message after 5 seconds function hideMessageAfterDelay() { setTimeout(function() { document.getElementById('message').style.display = 'none'; // Hide the message }, 5000); // 5000 milliseconds = 5 seconds } </script> <script src="https://code.jquery.com/jquery-1.12.1.min.js"></script> <script src="assets/js/animations.js"></script> <script src="assets/js/bootstrap.min.js"></script> <script src="assets/js/jquery-3.6.0.min.js"></script> <script src="assets/js/popper.min.js"></script> <script src="assets/js/owl.carousel.js"></script> <script src="https://unpkg.com/aos@2.3.1/dist/aos.js"></script> <script src="assets/js/text-animations.js"></script> <script src="assets/js/carousel.js"></script> <script src="assets/js/showhide.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/magnific-popup.js/1.1.0/jquery.magnific-popup.js"></script> <script src="https://unpkg.com/ityped@0.0.10"></script> <script src="./assets/js/type.js"></script> <script src="assets/js/custom-script.js"></script> </body> </html>