Lista CVE 2024/29xxx

CVE nel gruppo: 29xxx

CVE-2024-29068 (Clicca per dettagli)

CVE-2024-29069 (snapd non-regular file indefinite blocking read)

CVE-2024-29070 (snapd will follow archived symlinks when unpacking a filesystem)

CVE-2024-29071 (Apache StreamPark: session not invalidated after logout)

CVE-2024-29072 (Clicca per dettagli)

CVE-2024-29073 (Clicca per dettagli)

CVE-2024-29074 (Clicca per dettagli)

CVE-2024-29075 (Telephony has an improper input validation vulnerability)

CVE-2024-29076 (Clicca per dettagli)

CVE-2024-29077 (Clicca per dettagli)

CVE-2024-29078 (Clicca per dettagli)

CVE-2024-29079 (Clicca per dettagli)

CVE-2024-29080 (Clicca per dettagli)

CVE-2024-29082 (Clicca per dettagli)

CVE-2024-29083 (Vonets WiFi Bridges Improper Access Control)

CVE-2024-29085 (Clicca per dettagli)

CVE-2024-29086 (Clicca per dettagli)

CVE-2024-29089 (Arkcompiler runtime has a stack overflow svulnerability)

CVE-2024-29090 (WordPress Restaurant Menu and Food Ordering plugin <= 2.4.14 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29091 (WordPress AI Engine plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability)

CVE-2024-29092 (WordPress WP Armour plugin <= 2.1.13 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-29093 (WordPress Permalink Manager Lite plugin <= 2.4.3 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-29094 (WordPress Builder for WooCommerce reviews shortcodes – ReviewShort plugin <= 1.01.3 - Cross Site Request Forgery (CSRF) vulnerability)

CVE-2024-29095 (WordPress HT Easy GA4 plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29096 (WordPress Site Reviews plugin <= 6.11.6 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29097 (WordPress MJM Clinic plugin <= 1.1.22 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29098 (WordPress User profile plugin <= 2.0.20 - Subscriber+ Stored Cross Site Scripting (XSS) vulnerability)

CVE-2024-29099 (WordPress WP Calameo plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29100 (WordPress Evergreen Content Poster plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-29101 (WordPress AI Engine plugin <= 2.1.4 - Arbitrary File Upload vulnerability)

CVE-2024-29102 (WordPress Jeg Elementor Kit plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29103 (WordPress Extensions For CF7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerability)

CVE-2024-29104 (WordPress Database for Contact Form 7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerability)

CVE-2024-29105 (WordPress Ticket Tailor plugin <= 1.10 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29106 (WordPress WP Popups – WordPress Popup builder plugin <= 2.1.5.5 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29107 (WordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29108 (WordPress Elementor Addon Elements plugin <= 1.12.10 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29109 (WordPress Happy Addons for Elementor plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29110 (WordPress Shariff Wrapper plugin <= 4.6.10 - Contributor+ Cross Site Scripting (XSS) vulnerability)

CVE-2024-29111 (WordPress Tablesome plugin <= 1.0.27 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29112 (WordPress Sitekit plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29113 (WordPress WooCommerce Google Feed Manager plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29114 (WordPress RegistrationMagic plugin <= 5.2.5.9 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-29115 (WordPress Download Manager plugin <= 3.2.84 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29116 (WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29117 (WordPress WooThumbs for WooCommerce by Iconic plugin <= 5.5.3 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-29118 (WordPress Contact Forms by Cimatti plugin <= 1.7.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability)

CVE-2024-29119 (WordPress Scrollsequence plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29120 (Clicca per dettagli)

CVE-2024-29121 (Apache StreamPark: Information leakage vulnerability)

CVE-2024-29122 (WordPress WooCommerce License Manager plugin <= 5.3.1 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-29123 (WordPress FV Player plugin <= 7.5.41.7212 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29124 (WordPress Link Library plugin <= 7.6 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-29125 (WordPress Advanced Access Manager plugin <= 6.9.20 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29126 (WordPress Coupon Affiliates plugin <= 5.12.7 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-29127 (WordPress Specific Content For Mobile plugin <= 0.1.9.5 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29128 (WordPress Advanced Access Manager plugin <= 6.9.20 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-29129 (WordPress POST SMTP Mailer plugin <= 2.8.6 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-29130 (WordPress OxyExtras plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29131 (WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-29133 (Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator())

CVE-2024-29134 (Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree)

CVE-2024-29135 (WordPress Tourfic plugin <= 2.11.8 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29136 (WordPress Tourfic plugin <= 2.11.15 - Arbitrary File Upload vulnerability)

CVE-2024-29137 (WordPress Tourfic plugin <= 2.11.17 - PHP Object Injection vulnerability)

CVE-2024-29138 (WordPress Tourfic plugin <= 2.11.7 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-29139 (WordPress Restrict User Access plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-29140 (WordPress MyCurator Content Curation plugin <= 3.76 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29141 (WordPress MJM Clinic plugin <= 1.1.22 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29142 (WordPress PDF Embedder plugin <= 4.6.4 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29143 (WordPress Better Search plugin <= 3.3.0 - Stored Cross Site Scripting (XSS) vulnerability)

CVE-2024-29146 (WordPress Passwordless Login plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-29149 (Clicca per dettagli)

CVE-2024-29150 (Clicca per dettagli)

CVE-2024-29151 (Clicca per dettagli)

CVE-2024-29152 (Clicca per dettagli)

CVE-2024-29153 (Clicca per dettagli)

CVE-2024-29154 (Clicca per dettagli)

CVE-2024-29155 (Clicca per dettagli)

CVE-2024-29156 (Denial of service on Microchip RN4870 devices)