Lista CVE 2024/32xxx

CVE nel gruppo: 32xxx

CVE-2024-32029 (N/A)

CVE-2024-32030 (N/A)

CVE-2024-32034 (Remote code execution via JNDI resolution in JMX metrics collection in Kafka UI)

CVE-2024-32035 (Cross-site scripting (XSS) in the decidim admin activity log)

CVE-2024-32036 (Memory Allocation with Excessive Size Value in SixLabors.ImageSharp)

CVE-2024-32037 (SixLabors.ImageSharp vulnerable to data leakage)

CVE-2024-32038 (GeoNetwork vulnerable to search end-point information disclosure in response headers)

CVE-2024-32039 (Wazuh Analysis Engine Event Decoder Heap-based Buffer Overflow Remote Code Execution Vulnerability)

CVE-2024-32040 (FreeRDP Integer overflow & OutOfBound Write in clear_decompress_residual_data)

CVE-2024-32041 (FreeRDP vulnerable to integer underflow in nsc_rle_decode)

CVE-2024-32042 (FreeRDP OutOfBound Read in zgfx_decompress_segment)

CVE-2024-32044 (CyberPower PowerPanel business Storing Passwords in a Recoverable Format)

CVE-2024-32045 (N/A)

CVE-2024-32046 (Playbook run link to private channel grants channel access)

CVE-2024-32047 (Detailed error discloses full file path with dev mode off)

CVE-2024-32048 (CyberPower PowerPanel business Active Debug Code)

CVE-2024-32049 (N/A)

CVE-2024-32051 (BIG-IP Next Central Manager vulnerability)

CVE-2024-32053 (N/A)

CVE-2024-32055 (CyberPower PowerPanel business Use of Hard-coded Credentials)

CVE-2024-32056 (N/A)

CVE-2024-32057 (N/A)

CVE-2024-32058 (N/A)

CVE-2024-32059 (N/A)

CVE-2024-32060 (N/A)

CVE-2024-32061 (N/A)

CVE-2024-32062 (N/A)

CVE-2024-32063 (N/A)

CVE-2024-32064 (N/A)

CVE-2024-32065 (N/A)

CVE-2024-32066 (N/A)

CVE-2024-32077 (N/A)

CVE-2024-32078 (Apache Airflow: XSS vulnerability in Task Instance Log/Log Details)

CVE-2024-32079 (WordPress FV Player plugin <= 7.5.44.7212 - Unvalidated Redirects and Forwards vulnerability)

CVE-2024-32080 (WordPress Advanced iFrame plugin <= 2024.2 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-32081 (WordPress Search Keyword Redirect plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-32082 (WordPress Filter Custom Fields & Taxonomies Light plugin <= 1.05 - Broken Access Control vulnerability)

CVE-2024-32083 (WordPress Sync Post With Other Site plugin <= 1.5.1 - Cross Site Request Forgery (CSRF) to XSS vulnerability)

CVE-2024-32084 (WordPress Easy Logo plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-32085 (WordPress Before And After plugin <= 3.9 - Cross Site Request Forgery (CSRF) vulnerability)