CVE-2024-4219

Affected software: BeyondInsight. Vulnerability: Server-Side Request Forgery via HTTP-based connectors, fixed in version 23.2 (Prior to 23.2 vulnerability exists). Root cause: Unauthenticated SSRF path through connectors leading to arbitrary server-side requests. Impact: High confidentiality and ...

CVE-2024-23326

CVE-2024-23326 is a vulnerability in Envoy (an open source cloud-native edge and service proxy) where a server can be tricked into adding an upgrade header in a response, causing request smuggling. The root cause is Envoy accepting a 200 response in a protocol upgrade flow (RFC 7230 §6.7 discusse...

CVE-2024-32464

CVE-2024-32464 concerns Action Text in Rails. The issue affects ActionText::Attachable::ContentAttachment within a rich_text_area, where unsanitized HTML could be present. Affected software is Rails with Action Text; vulnerable component is the ContentAttachment handling in the rich text editor. ...

CVE-2024-28103

CVE-2024-28103 affects Ruby on Rails Action Pack where the configurable Permissions-Policy was only served on HTML Content-Type responses. Connected advisories confirm this CVE is addressed in multiple Rails-related patches and packages. Debian lists fixed versions for Rails in bookworm as 2:6.1....

CVE-2024-4520

CVE-2024-4520 affects the gaizhenbiao/chuanhuchatgpt application (version 20240410). The root cause is insufficient access control in how chat history data is handled, allowing any server user to access another user’s chat history without interaction. Documented impact includes potential data bre...

CVE-2024-30525

Technical details about CVE-2024-30525 are not provided in the supplied documents. Public information on affected versions and impact is not confirmed here; monitor for official advisories from vendors and CVE databases.

CVE-2024-30528

CVE-2024-30528 is a Missing Authorization (Broken Access Control) vulnerability in Spiffy Calendar (Spiffy Plugins) affecting Spiffy Calendar versions up to 4.9.10. Exploitation would require network access with low privileges and no user interaction; the CVSS base metrics indicate Confidentialit...

CVE-2024-30484

Technical details for CVE-2024-30484 are not provided in the supplied documents. The sources mention a Missing Authorization issue in RT Easy Builder – Advanced addons for Elementor but do not specify affected versions, vectors, or remediation.

CVE-2024-35670

CVE-2024-35670 affects the WordPress plugin “Integrate Google Drive”. Connected sources describe a missing authorization/broken access control issue in Integrate Google Drive, affecting versions up to and including 1.3.93. The vulnerability is mitigated by an unspecified patch introduced after th...

CVE-2024-34759

CVE-2024-34759 is a Stored XSS in the WordPress Picture Gallery plugin. Affected product: Picture Gallery plugin for WordPress (versions n/a through 1.5.11). Connected sources confirm the vulnerability type (XSS), scope, and that the issue has been patched in later releases; exact fixed version i...

CVE-2024-35672

CVE-2024-35672 is a Missing Authorization / Broken Access Control vulnerability in WordPress Netgsm plugin (versions n/a–2.9.19). Patchstack documents a fix in 2.9.20; other sources reiterate the issue as Missing Authorization affecting Netgsm up to 2.9.19. No exploit details are provided in the ...

CVE-2024-37273

CVE-2024-37273 affects the Jan project, specifically version 0.4.12 . The vulnerability lies in the /v1/app/appendFileSync interface, where uploading a crafted file can lead to arbitrary code execution on the server. The available connected document details confirm this arbitrary-file-upload flaw...

CVE-2024-36858

Summary: CVE-2024-36858 affects Jan v0.4.12 via the /v1/app/writeFileSync endpoint, where an arbitrary file upload vulnerability allows an attacker to execute arbitrary code. The root cause is an insecure file upload interface that does not sufficiently validate uploaded content. The impact is de...

CVE-2024-36857

CVE-2024-36857 affects Jan v0.4.12, which contains an arbitrary file read vulnerability exposed through the /v1/app/readFileSync interface. The connected template details a path traversal flaw that allows unauthenticated attackers to read arbitrary files on the system, via a vulnerable readFileSy...

CVE-2024-36604

CVE-2024-36604 affects Tenda O3V2 v1.0.0.12(3880). The vulnerability is a Blind Command Injection in the stpEn parameter of the SetStp function, enabling arbitrary commands to run with root privileges. The Red Hat/PT-Security entry corroborates the affected version and the SetStp/stpEn vector; NV...

CVE-2024-29004

CVE-2024-29004: SolarWinds Platform web console stored cross-site scripting vulnerability. Root cause: stored XSS in the web UI. A high-privileged user must interact with the page to exploit; authenticated access is required. Potential impact includes browser-side script execution with the user’s...

CVE-2024-28999

CVE-2024-28999 is a race-condition vulnerability in SolarWinds Platform web console. Public materials (exploit-db, GitHub exploit, Nessus plugin) confirm a login-page race condition affecting SolarWinds Platform 2024.1 SR1 and earlier; several related advisories (Red Hat, ENISA ENISA EUVD, NCSC) ...

CVE-2024-28996

The CVE-2024-28996 entry concerns SolarWinds Platform SWQL Injection Vulnerability. The vulnerability is described as high impact with attack complexity: high, requiring no user interaction but adjacent access, and affects confidentiality, integrity, and availability. Connected sources confirm th...

CVE-2024-36550

CVE-2024-36550 affects idccms V1.35 and describes a Cross-Site Request Forgery (CSRF) vulnerability accessible via /admin/vpsCompany_deal.php?mudi=add&nohrefStr=close. The NVD entry lists CVSSv3.1 scores of 8.8 (HIGH) for the NVD view with network attack vector, user interaction required, and hig...

CVE-2024-36549

CVE-2024-36549 affects idccms v1.35 with a Cross-Site Request Forgery (CSRF) vulnerability in the /admin/vpsCompany_deal.php?mudi=rev&nohrefStr=close endpoint. The connected PT-2024-27067 entry specifies the vulnerable software version (idccms 1.35) and identifies the CSRF issue related to the /a...