CVE-2024-36121

Netty’s netty-incubator-codec-ohttp contains a flaw in BoringSSLAEADContext: the sequence counter can overflow, causing AES-GCM nonces to repeat and potentially compromise confidentiality/integrity. Public sources describe that enabling encryption beyond 2^32 messages without proper overflow chec...

CVE-2024-32974

CVE-2024-32974 is a use-after-free in Envoy’s QUIC stack. A crash occurs in EnvoyQuicServerStream::OnInitialHeadersComplete() because QUICHE may push request headers after StopReading() and the HCM ActiveStream has been destroyed, risking use-after-free when QUICHE makes up calls. This can crash ...

CVE-2024-32975

CVE-2024-32975 affects Envoy’s QUIC stack. It describes a crash caused by an integer underflow in QuicStreamSequencerBuffer::PeekRegion(), leading to a crash at QuicheDataReader::PeekVarInt62Length(). The vulnerability is triggered by the underflow, resulting in a crash and potential denial of se...

CVE-2024-32976

CVE-2024-32976 affects Envoy’s Brotli decompressor. The Brotli filter can enter an endless loop during decompression when given extra input, potentially enabling denial-of-service. Connected advisories note this issue alongside other Envoy CVEs and list mitigations that include upgrading Envoy to...

CVE-2024-34362

CVE-2024-34362 affects Envoy’s QUIC stack: a use-after-free in HttpConnectionManager with EnvoyQuicServerStream can crash the process. Exploitation described as crafted request sequencing (no FIN, then RESET_STREAM, then close). No explicit exploit details in the Initial description; connected ad...

CVE-2024-34363

CVE-2024-34363 affects Envoy, due to how Envoy invoked the nlohmann JSON library. The issue can cause an uncaught exception from downstream data when incomplete UTF-8 strings are serialized, leading to a process crash. The vulnerability is documented across multiple advisories and vendor analyses...

CVE-2024-34364

Envoy (the cloud-native proxy) is affected by CVE-2024-34364: an out-of-memory (OOM) condition caused by the async HTTP client buffering the mirror response with an unbounded buffer. This unbounded buffering can lead to memory exhaustion and potential DoS. Public documents attribute the issue to ...

CVE-2024-4220

Technical details for CVE-2024-4220 are not publicly available in the provided documents; monitor for updates.

CVE-2024-4219

Affected software: BeyondInsight. Vulnerability: Server-Side Request Forgery via HTTP-based connectors, fixed in version 23.2 (Prior to 23.2 vulnerability exists). Root cause: Unauthenticated SSRF path through connectors leading to arbitrary server-side requests. Impact: High confidentiality and ...

CVE-2024-23326

CVE-2024-23326 is a vulnerability in Envoy (an open source cloud-native edge and service proxy) where a server can be tricked into adding an upgrade header in a response, causing request smuggling. The root cause is Envoy accepting a 200 response in a protocol upgrade flow (RFC 7230 §6.7 discusse...

CVE-2024-32464

CVE-2024-32464 concerns Action Text in Rails. The issue affects ActionText::Attachable::ContentAttachment within a rich_text_area, where unsanitized HTML could be present. Affected software is Rails with Action Text; vulnerable component is the ContentAttachment handling in the rich text editor. ...

CVE-2024-28103

CVE-2024-28103 affects Ruby on Rails Action Pack where the configurable Permissions-Policy was only served on HTML Content-Type responses. Connected advisories confirm this CVE is addressed in multiple Rails-related patches and packages. Debian lists fixed versions for Rails in bookworm as 2:6.1....

CVE-2024-4520

CVE-2024-4520 affects the gaizhenbiao/chuanhuchatgpt application (version 20240410). The root cause is insufficient access control in how chat history data is handled, allowing any server user to access another user’s chat history without interaction. Documented impact includes potential data bre...

CVE-2024-30525

Technical details about CVE-2024-30525 are not provided in the supplied documents. Public information on affected versions and impact is not confirmed here; monitor for official advisories from vendors and CVE databases.

CVE-2024-30528

CVE-2024-30528 is a Missing Authorization (Broken Access Control) vulnerability in Spiffy Calendar (Spiffy Plugins) affecting Spiffy Calendar versions up to 4.9.10. Exploitation would require network access with low privileges and no user interaction; the CVSS base metrics indicate Confidentialit...

CVE-2024-30484

Technical details for CVE-2024-30484 are not provided in the supplied documents. The sources mention a Missing Authorization issue in RT Easy Builder – Advanced addons for Elementor but do not specify affected versions, vectors, or remediation.

CVE-2024-35670

CVE-2024-35670 affects the WordPress plugin “Integrate Google Drive”. Connected sources describe a missing authorization/broken access control issue in Integrate Google Drive, affecting versions up to and including 1.3.93. The vulnerability is mitigated by an unspecified patch introduced after th...

CVE-2024-34759

CVE-2024-34759 is a Stored XSS in the WordPress Picture Gallery plugin. Affected product: Picture Gallery plugin for WordPress (versions n/a through 1.5.11). Connected sources confirm the vulnerability type (XSS), scope, and that the issue has been patched in later releases; exact fixed version i...

CVE-2024-35672

CVE-2024-35672 is a Missing Authorization / Broken Access Control vulnerability in WordPress Netgsm plugin (versions n/a–2.9.19). Patchstack documents a fix in 2.9.20; other sources reiterate the issue as Missing Authorization affecting Netgsm up to 2.9.19. No exploit details are provided in the ...

CVE-2024-37273

CVE-2024-37273 affects the Jan project, specifically version 0.4.12 . The vulnerability lies in the /v1/app/appendFileSync interface, where uploading a crafted file can lead to arbitrary code execution on the server. The available connected document details confirm this arbitrary-file-upload flaw...