CVE-2024-31493

FortiSOAR is affected by CVE-2024-31493 due to an improper removal of sensitive information before storage or transfer. An authenticated low-privilege user can read connector passwords in plain text via HTTP responses. Affected versions: FortiSOAR 7.3.0, 7.2.2 and below, and 7.0.3 and below. Root...

CVE-2024-23107

FortiWeb is affected (versions 7.4.0, 7.2.4 and below, 7.0.8 and below, and 6.3 all versions) by CVE-2024-23107, a vulnerability that allows an authenticated attacker to read password hashes of other administrators via CLI commands due to exposure of sensitive information (CWE-200). The issue is ...

CVE-2024-36963

CVE-2024-36963 affects the Linux kernel tracefs feature. The issue arises from how permissions are generated for tracefs files: they default to the root inode’s permissions unless the user changes them, and a remount with permissions should update all files, but currently leaves unchanged files t...

CVE-2024-36964

CVE-2024-36964 is a Linux kernel vulnerability in the 9P filesystem (fs/9p) where garbage in plain 9P2000 perm bits could bypass permission checks and allow setting special bits (e.g., SUID). The issue is fixed by ensuring that only the RWX permissions for plain 9P2000 are translated, preventing ...

CVE-2024-36962

The CVE-2024-36962 issue affects the Linux kernel KS8851 driver for SPI-bus KS8851, where RX packets were queued in the IRQ handler with netif_rx() inside a critical section protected by a lock. This could lead to a hang by racing with the driver’s start_xmit. The fix removes BH manipulation and ...

CVE-2024-36961

The CVE-2024-36961 issue relates to the Linux kernel’s thermal debugfs code. The root cause is two locking problems in the thermal zone debugfs handling: (1) a race where user space can open the mitigations file before the thermal zone’s debugfs pointer is set, leading to a NULL pointer dereferen...

CVE-2024-36960

The CVE-2024-36960 entry maps to a Linux kernel issue in drm/vmwgfx where the length field for drm_event was incorrectly set to the parent structure, causing out-of-bounds reads when drm_read copies events to userspace. The provided documents confirm the root cause and fix: set drm_event length t...

CVE-2024-35640

CVE-2024-35640 is a stored XSS in the WordPress Safety Exit plugin affecting versions up to 1.7.0. Exploitation requires Administrator privileges. The issue has been fixed in 1.7.1; upgrading to 1.7.1 or later mitigates the vulnerability (low severity per Patchstack).

CVE-2024-35641

CVE-2024-35641 affects WordPress plugin Just Writing Statistics (versions

CVE-2024-35642

CVE-2024-35642: WordPress Site Favicon plugin <= 0.2 suffers stored XSS due to improper input handling in admin settings; fixed in 0.3. Affected: Site Favicon versions

CVE-2024-35643

CVE-2024-35643 affects the WP Back Button WordPress plugin (versions up to 1.1.3). The issue is a Stored XSS caused by insufficient input sanitization/output escaping in admin settings, exploitable by an attacker with Administrator privileges to inject scripts that run for other users. Public pat...

CVE-2024-5311

CVE-2024-5311 affects DigiWin EasyFlow .NET. The vulnerability arises from insufficient validation of certain input parameters, allowing an unauthenticated remote attacker to inject arbitrary SQL commands that can read, modify, and delete database records. The issue is rated CVSS v3.1 base score ...

CVE-2024-37031

The CVE-2024-37031 entry describes a stored XSS vulnerability in Active Admin (Ruby on Rails) before 3.2.2, triggered when users create entities with arbitrary names used as dynamic form legends. The root cause is the dynamic name value being reflected in admin forms, enabling an attacker to inje...

CVE-2024-36042

CVE-2024-36042 affects Silverpeas prior to 6.3.5. The issue allows authentication bypass by omitting the Password field to AuthenticationServlet, often granting an unauthenticated user superadmin access. Root cause: missing Password field handling leads to bypass of authentication checks (as desc...

CVE-2023-51436

CVE-2023-51436 affects UNIVERSAL PASSPORT RX (Japan System Techniques) up to version 1.0.8. The issue is a cross-site scripting (XSS) vulnerability that can be exploited by a remote authenticated attacker with administrative privileges to execute arbitrary scripts in users’ browsers. The root cau...

CVE-2023-42427

CVE-2023-42427 affects UNIVERSAL PASSPORT RX versions 1.0.0–1.0.7. Description: cross-site scripting may allow a remote authenticated attacker to execute arbitrary scripts in a user’s browser. Root cause hinted across sources includes a known vulnerability in the Primefaces library and associated...

CVE-2024-20075

CVE-2024-20075 affects the eemgpu component, where a missing bounds check allows a possible out-of-bounds write. This could enable local privilege escalation with System execution privileges required; exploitation does not require user interaction. Patch ALPS08713302 is referenced (MSV-1393). No ...

CVE-2024-20074

CVE-2024-20074 concerns the component “dmc,” with a possible out-of-bounds write caused by a missing bounds check. This could enable local escalation of privilege to System privileges, with no user interaction required. Reported patches include Patch ID ALPS08668110 and Issue ID MSV-1333. Multipl...

CVE-2024-20073

CVE-2024-20073 affects the wlan service due to an out-of-bounds write from improper input validation, potentially enabling local privilege escalation to SYSTEM; no user interaction required. Patch: WCNCR00367704 (MSV-1411). CVSSv3.1: 6.6 (AV:N, AC:H, PR:H, UI:N, S:U, C:H, I:H, A:H). Exploitation ...

CVE-2024-20072

The vulnerability CVE-2024-20072 affects the WLAN driver and involves an out-of-bounds write caused by improper input validation in the driver code. This flaw could allow local escalation of privileges to System level without user interaction, as described in multiple sources. A patch is identifi...