CVE-2024-38xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
842 records · Page 5 of 9
In JetBrains YouTrack before 2024.2.34646 user without appropriate permissions could enable the auto-attach option for workflows
UpdatedIn JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site
UpdatedIn JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles
Updated- CVE-2024-38503: Apache Syncope: HTML tags can be injected into Console or Enduser text fields 3.9 Low
When editing a user, group or any object in the Syncope Console, HTML tags could be added to any text field and could lead to potential exploits. The same vulnerability was found in the Syncope Enduser, when editing “Personal Information” or “User Requests”. Users are recommended to upgrade to version 3.0.8, which fixes this issue.
Updated An unauthenticated remote attacker may use stored XSS vulnerability to obtain information from a user or reboot the affected device once.
Updated- CVE-2024-38501: Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows HTML injection 6.1 Medium
An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain low-privileged access on the affected device.
Updated CA Client Automation (ITCM) allows non-admin/non-root users to encrypt a string using CAF CLI and SD_ACMD CLI. This would allow the non admin user to access the critical encryption keys which further causes the exploitation of stored credentials. This fix doesn't allow a non-admin/non-root user to execute "caf encrypt"/"sd_acmd encrypt" commands.
Updated- CVE-2024-38496: Symantec Privileged Access Manager Insecure Direct Object Reference vulnerability 5.1 Medium
The vulnerability allows a malicious low-privileged PAM user to access information about other PAM users and their group memberships.
Updated A specific authentication strategy allows a malicious attacker to learn ids of all PAM users defined in its database.
UpdatedThis vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request.
Updated- CVE-2024-38493: Symantec Privileged Access Manager Reflected Cross Site Scripting vulnerability 6.8 Medium
A reflected cross-site scripting (XSS) vulnerability exists in the PAM UI web interface. A remote attacker able to convince a PAM user to click on a specially crafted link to the PAM UI web interface could potentially execute arbitrary client-side code in the context of PAM UI.
Updated - CVE-2024-38492: Symantec Privileged Access Manager Remote Command Execution vulnerability 9.4 Critical
This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file.
Updated The vulnerability allows an unauthenticated attacker to read arbitrary information from the database.
UpdatedDell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event.
UpdatedDell iDRAC Service Module version 5.3.0.0 and prior contains Out of bound write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service (partial) event.
UpdatedDell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability. An improper Restriction of Excessive Authentication vulnerability where a Network attacker could potentially exploit this vulnerability, leading to a brute force attack or a dictionary attack against the RecoverPoint login form and a complete system compromise. This allows attackers to brute-force the password of valid users in
Updatedapi-gateway container running with root privilege would allow an attacker to escape the container and access host system to perform unintended actions.
UpdatedDell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x , contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
UpdatedDell ECS, versions prior to 3.8.0, contain(s) a Host Header Injection Vulnerability. A remote low-privileged attacker could potentially exploit this vulnerability to trigger redirections that leads to sensitive information leakage.
UpdatedDell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
UpdatedCloudLink, versions 7.1.x and 8.x, contain an Improper check or handling of Exceptional Conditions Vulnerability in Cluster Component. A highly privileged malicious user with remote access could potentially exploit this vulnerability, leading to execute unauthorized actions and retrieve sensitive information from the database.
UpdatedDell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Read Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event.
Updated"Piccoma" App for Android and iOS versions prior to 6.20.0 uses a hard-coded API key for an external service, which may allow a local attacker to obtain the API key. Note that the users of the app are not directly affected by this vulnerability.
Updated- CVE-2024-38479: Apache Traffic Server: Cache key plugin is vulnerable to cache poisoning attack 7.5 High
Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.
Updated null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request. Users are recommended to upgrade to version 2.4.60, which fixes this issue.
UpdatedVulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable. Users are recommended to upgrade to version 2.4.60, which fixes this issue.
UpdatedImproper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure. Substitutions in server context that use a backreferences or variables as the first segment of the su
UpdatedSubstitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant to only to be executed as CGI. Users are recommended to upgrade to version 2.4.60, which fixes this issue. Some RewriteRules that capture and substitute unsa
UpdatedEncoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, which fixes this issue.
UpdatedSSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue. Note: Existing configurations that access UNC paths will have to configure new directive "UNCList" to allow access during request processing.
UpdatedMultiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.
Updatedzhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /own.php.
Updatedzhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /pay.php.
UpdatedShenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API.
UpdatedShenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized user information retrieval via the queryUser API.
Updated- CVE-2024-38466: Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password. 9.8 Critical
Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password.
Updated Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error.
UpdatediRODS before 4.3.2 provides an msiSendMail function with a problematic dependency on the mail binary, such as in the mailMS.cpp#L94-L106 reference.
UpdatedirodsServerMonPerf in iRODS before 4.3.2 attempts to proceed with use of a path even if it is not a directory.
UpdatedIn SonarQube before 10.4 and 9.9.4 LTA, encrypted values generated using the Settings Encryption feature are potentially exposed in cleartext as part of the URL parameters in the logs (such as SonarQube Access Logs, Proxy Logs, etc).
Updatedlangchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444.
UpdatedXenforo before 2.2.16 allows code injection.
UpdatedXenforo before 2.2.16 allows CSRF.
UpdatedHIGH-LEIT V05.08.01.03 and HIGH-LEIT V04.25.00.00 to 4.25.01.01 for Windows from Vivavis contain an insecure file and folder permissions vulnerability in prunsrv.exe. A regular user (non-admin) can exploit the weak folder and file permissions to escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM.
UpdatedExpressionEngine before 7.4.11 allows XSS.
UpdatedThe Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024.
UpdatedA Directory Traversal vulnerability in KasmVNC 1.3.1.230e50f7b89663316c70de7b0e3db6f6b9340489 and possibly earlier versions allows remote authenticated attackers to browse parent directories and read the content of files outside the scope of the application.
Updatedhtags in GNU Global through 6.6.12 allows code execution in situations where dbpath (aka -d) is untrusted, because shell metacharacters may be used.
UpdatedNATO NCI ANET 3.4.1 allows Insecure Direct Object Reference via a modified ID field in a request for a private draft report (that belongs to an arbitrary user).
UpdatedNATO NCI ANET 3.4.1 mishandles report ownership. A user can create a report and, despite the restrictions imposed by the UI, change the author of that report to an arbitrary user (without their consent or knowledge) via a modified UUID in a POST request.
UpdatedC/sorting/binary_insertion_sort.c in The Algorithms - C through e5dad3f has a segmentation fault for deep recursion, which may affect common use cases such as sorting an array of 50 elements.
UpdatedNetatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to '\0' in FPMapName in afp_mapname in etc/afpd/directory.c. 2.4.1 and 3.1.19 are also fixed versions.
UpdatedNetatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly using FPLoginExt in BN_bin2bn in etc/uams/uams_dhx_pam.c. The original issue 1097 report stated: 'The latest version of Netatalk (v3.2.0) contains a security vulnerability. This vulnerability arises due to a lack of validation for the length field after parsing
UpdatedNetatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\0' in FPLoginExt in login in etc/uams/uams_pam.c. 2.4.1 and 3.1.19 are also fixed versions.
UpdatedD-Link - CWE-294: Authentication Bypass by Capture-replay
Updated- CVE-2024-38437: D-Link - CWE-288: Authentication Bypass Using an Alternate Path or Channel 9.8 Critical
D-Link - CWE-288:Authentication Bypass Using an Alternate Path or Channel
Updated Commugen SOX 365 – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
UpdatedUnitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service
UpdatedUnitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass
UpdatedNuvoton - CWE-305: Authentication Bypass by Primary Weakness An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock reference code can modify the u-boot image header on flash parsed by the BootBlock which could lead to arbitrary code execution.
UpdatedMatrix Tafnit v8 - CWE-646: Reliance on File Name or Extension of Externally-Supplied File
UpdatedMatrix Tafnit v8 - CWE-204: Observable Response Discrepancy
UpdatedMatrix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
UpdatedMatrix Tafnit v8 - CWE-552: Files or Directories Accessible to External Parties
Updatedurl.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent.
UpdatedIn International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in CIccTagXmlProfileSequenceId::ParseXml in IccXML/IccLibXML/IccTagXml.cpp results in unconditionally returning false.
UpdatedWhile processing the authentication message in UE, improper authentication may lead to information disclosure.
UpdatedInformation disclosure while sending implicit broadcast containing APP launch information.
UpdatedMemory corruption during GNSS HAL process initialization.
UpdatedMemory corruption while processing GPU page table switch.
UpdatedMemory corruption while processing voice packet with arbitrary data received from ADSP.
UpdatedMemory corruption while processing GPU commands.
UpdatedMemory corruption while configuring a Hypervisor based input virtual device.
UpdatedMemory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
UpdatedMemory corruption while parsing the memory map info in IOCTL calls.
UpdatedInformation disclosure while processing IO control commands.
Updated- CVE-2024-38416: Buffer Over-read in Audio 6.1 Medium
Information disclosure during audio playback.
Updated Memory corruption while handling session errors from firmware.
UpdatedInformation disclosure while processing information on firmware image during core initialization.
UpdatedMemory corruption while processing frame packets.
UpdatedMemory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors.
UpdatedMemory corruption while registering a buffer from user-space to kernel-space using IOCTL calls.
UpdatedMemory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.
UpdatedMemory corruption while station LL statistic handling.
UpdatedCryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
UpdatedMemory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.
UpdatedMemory corruption while handling IOCTL calls in JPEG Encoder driver.
UpdatedTransient DOS while processing the CU information from RNR IE.
UpdatedTransient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.
UpdatedTransient DOS while parsing BTM ML IE when per STA profile is not included.
UpdatedMemory corruption while processing IOCTL call for getting group info.
UpdatedMemory corruption while processing concurrent IOCTL calls.
UpdatedMemory corruption while processing user packets to generate page faults.
UpdatedTransient DOS while parsing probe response and assoc response frame.
UpdatedAn issue was discovered in iTerm2 3.5.x before 3.5.2. Unfiltered use of an escape sequence to report a window title, in combination with the built-in tmux integration feature (enabled by default), allows an attacker to inject arbitrary code into the terminal, a different vulnerability than CVE-2024-38395.
UpdatedIn iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially exploitable."
UpdatedMismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kernel's underlying device matching logic allow a physically proximate attacker to access some unintended Linux kernel USB functionality, such as USB device-specific kernel modules and filesystem implementations. NOTE: the GSD supplier indicates that consideration of a mitigation for
UpdatedPexip Infinity Connect before 1.13.0 lacks sufficient authenticity checks during the loading of resources, and thus remote attackers can cause the application to run untrusted code.
UpdatedThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Updated · Rejected recordIn the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails Calling a6xx_destroy() before adreno_gpu_init() leads to a null pointer dereference on: msm_gpu_cleanup() : platform_set_drvdata(gpu->pdev, NULL); as gpu->pdev is only assigned in: a6xx_gpu_init() |_ adreno_gpu_init |_ msm_gpu_init() Instead of relying
Updated