CVE-2024-54xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
663 records · Page 2 of 7
app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow.
Updatedapp/View/GalaxyClusters/cluster_export_misp_galaxy.ctp in MISP through 2.5.2 has stored XSS when exporting custom clusters into the misp-galaxy format.
UpdatedDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-52945. Reason: This candidate is a reservation duplicate of CVE-2024-52945. Notes: All CVE users should reference CVE-2024-52945 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
Updated · Rejected recordAn issue was discovered in the Webmail Classic UI in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A Local File Inclusion (LFI) vulnerability exists in the /h/rest endpoint, allowing authenticated remote attackers to include and access sensitive files in the WebRoot directory. Exploitation requires a valid auth token and involves crafting a malicious request targeting specific file paths.
UpdatedDante 1.4.0 through 1.4.3 (fixed in 1.4.4) has incorrect access control for some sockd.conf configurations involving socksmethod.
Updated- CVE-2024-54661: readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file. 9.8 Critical
readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.
Updated A JNDI injection issue was discovered in Cloudera JDBC Connector for Hive before 2.6.26 and JDBC Connector for Impala before 2.6.35. Attackers can inject malicious parameters into the JDBC URL, triggering JNDI injection during the process when the JDBC Driver uses this URL to connect to the database. This could lead to remote code execution. JNDI injection is possible via the JDBC connection prope
UpdatedThe issue was addressed with improved memory handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing web content may lead to a denial-of-service.
UpdatedThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThis candidate was in a CNA pool that was not assigned to any issues.
Updated · Rejected recordThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. Parsing a maliciously crafted file may lead to an unexpected app termination.
UpdatedThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access sensitive user data.
UpdatedThis issue was addressed through improved state management. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, visionOS 1.3. A file received from AirDrop may not have the quarantine flag applied.
UpdatedA logic issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, watchOS 11. A malicious app may be able to modify other apps without having App Management permission.
UpdatedThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access sensitive user data.
UpdatedA clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to trick a user into granting access to photos from the user's photo library.
UpdatedA logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An attacker may gain access to protected parts of the file system.
UpdatedThis issue was addressed through improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. A user may be able to view restricted content from the lock screen.
UpdatedThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data.
UpdatedThe issue was addressed with improved memory handling. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing web content may lead to a denial-of-service.
UpdatedThis issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. An app may be able to view autocompleted contact information from Messages and Mail in system logs.
UpdatedThis issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data.
UpdatedThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to access protected user data.
UpdatedThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An app may be able to cause unexpected system termination or corrupt kernel memory.
UpdatedThe issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to memory corruption.
Updated