CWE-345

658 vulnerabilities with CWE-345

CVE-2024-25584 MEDIUM

OX Dovecot Pro < 2.3.21 - Email Splitting via Incorrect DATA Command Termination

CVSS 5.3

CVE-2024-7980 HIGH

Google Chrome <128.0.6613.84 - Privilege Escalation

CVSS 7.8

CVE-2024-7979 HIGH

Google Chrome <128.0.6613.84 - Privilege Escalation

CVSS 7.8

CVE-2024-38198 HIGH

Windows Print Spooler - Privilege Escalation

CVSS 7.5

CVE-2024-37968 HIGH

Windows Server DNS Spoofing (2008, 2012, 2016, 2019, 2022, 23H2)

CVSS 7.5

CVE-2024-7256 HIGH

Google Chrome < 127.0.6533.88 - Remote Code Execution via Insufficient Data Validation in Dawn

CVSS 8.8

CVE-2024-38432 MEDIUM

Matrix Tafnit < 8.4.202 - Insufficient Verification of Data Authenticity

CVSS 5.5

CVE-2024-25638 HIGH

dnsjava <3.6.0 - DNS Response Record Validation Bypass

CVSS 8.9

CVE-2024-40644 MEDIUM

gix-path 0.10.8 - Unauthenticated Arbitrary Code Execution via Hardcoded Path Fallback

CVSS 6.8

CVE-2024-3173 HIGH

Google Chrome <120.0.6099.62 - Privilege Escalation

CVSS 8.8

CVE-2024-39689 HIGH

certifi 2021.5.30-2024.7.4 - Insufficient Verification of Data Authenticity via GLOBALTRUST Root Certificates

CVSS 7.5

CVE-2024-37370 HIGH

MIT Kerberos 5 < 1.21.3 - Insufficient Verification of Data Authenticity in GSS krb5 Wrap Token

CVSS 7.5

CVE-2024-33687 HIGH

Omron NJ and NX Series CPU Unit - Insufficient Verification of Data Authenticity

CVSS 7.5

CVE-2024-5458 MEDIUM

PHP 8.1.* < 8.1.29, 8.2.* < 8.2.20, 8.3.* < 8.3.8 - Insufficient Verification of Data Authenticity in URL Validation

CVSS 5.3

CVE-2024-30162 HIGH

Invision Community <= 4.7.16 - Authenticated Remote Code Execution via ZIP Upload in Editor Toolbar Plugin

CVSS 7.2

CVE-2024-5684 MEDIUM

Volkswagen ID.Charger Connect and Pro Firmware - Unauthenticated Authentication Bypass via JWT None Algorithm

CVSS 6.3

CVE-2024-3049 MEDIUM

Booth < 1.1 - Insufficient Verification of Data Authenticity

CVSS 5.9

CVE-2024-2382 MEDIUM

Authorize.net Payment Gateway For WooCommerce <8.0 - Auth Bypass

CVSS 5.3

CVE-2024-1718 MEDIUM

Checkout Cielo for WooCommerce <1.1.0 - Info Disclosure

CVSS 5.3

CVE-2024-23601 CRITICAL

AutomationDirect P3-550E 1.2.10.9 - Arbitrary Code Execution via Crafted scan_lib.bin

CVSS 9.8

CVE-2024-31341 MEDIUM

Cozmoslabs Profile Builder <3.11.2 - Auth Bypass

CVSS 5.3

CVE-2024-35175 MEDIUM

sshpiper 1.0.50-1.2.9 - Spoofed Source Address via Proxy Protocol

CVSS 5.3

CVE-2024-33494 MEDIUM

SIMATIC RTLS Locating Manager -<V3.0.1.1 - Info Disclosure

CVSS 6.5

CVE-2024-34354 MEDIUM

CMSaaSStarter <7904d416d2c72ec75f42fbf51e9e64fa74062ee6 - Auth Bypass

CVSS 6.5

CVE-2024-30250 HIGH

astro-shield 1.2.0-1.3.1 - Insufficient Verification of Data Authenticity via Integrity Attribute Bypass

CVSS 7.5