CWE-639

1,811 vulnerabilities with CWE-639

CVE-2024-39321 HIGH

Traefik < 2.11.6, 3.0.0-beta3-3.0.4 - IP Allow-List Bypass via HTTP/3 Early Data

CVSS 7.5

CVE-2024-39223 CRITICAL

gost 2.11.5 - Authentication Bypass via SSH HostKeyCallback Misconfiguration

CVSS 9.8

CVE-2024-31898 MEDIUM

IBM InfoSphere Information Server 11.7 - Auth Bypass

CVSS 5.4

CVE-2024-5942 MEDIUM

Page and Post Clone <= 6.0 - Authenticated Insecure Direct Object Reference via 'content_clone' Function

CVSS 4.3

CVE-2024-1107 CRITICAL

Talya Informatics Travel APPS <v17.0.68 - Auth Bypass

CVSS 9.8

CVE-2024-4874 MEDIUM

Bricks Builder < 1.9.8 - Authenticated Insecure Direct Object Reference via postId Parameter

CVSS 4.3

CVE-2024-5639 MEDIUM

WordPress <2.6.1 - Insecure Direct Object Reference

CVSS 4.3

CVE-2024-4873 MEDIUM

WordPress Replace Image <1.1.10 - Insecure Direct Object Reference

CVSS 4.3

CVE-2024-37889 MEDIUM

myfinances < 0.4.6 - Authorization Bypass via User-Controlled Key

CVSS 6.5

CVE-2024-33373 MEDIUM

LB-LINK BL-W1210M v2.0 - Authorization Bypass via Password Policy Bypass

CVSS 6.3

CVE-2024-2472 CRITICAL

LatePoint Plugin <4.9.9 - Info Disclosure

CVSS 9.1

CVE-2024-29181 LOW

Strapi < 4.19.1 - Authorization Bypass in Content Manager Plugin

CVSS 2.3

CVE-2024-5438 MEDIUM

Tutor LMS < 2.7.1 - Authenticated Insecure Direct Object Reference via Quiz Attempt Deletion

CVSS 4.3

CVE-2024-5131 MEDIUM

lunary-ai/lunary <1.2.2 - Info Disclosure

CVSS 6.5

CVE-2024-5130 HIGH

lunary-ai/lunary <1.2.8 - Auth Bypass

CVSS 7.5

CVE-2024-5128 HIGH

lunary-ai/lunary <1.2.2 - Info Disclosure

CVSS 8.8

CVE-2024-36399 HIGH

kanboard < 1.2.37 - Improper Access Control in ProjectPermissionController

CVSS 8.2

CVE-2024-4886 MEDIUM

BuddyBoss Platform < 2.6.00 - Insecure Direct Object Reference via Post ID Manipulation

CVSS 4.3

CVE-2024-4750 MEDIUM

BuddyBoss Platform < 2.6.0 - Authorization Bypass via Private Post Like Request

CVSS 5.3

CVE-2024-4274 MEDIUM

WordPress Essential Real Estate <4.4.2 - Info Disclosure

CVSS 4.3

CVE-2024-32045 MEDIUM

Mattermost <9.5.4, <9.6.2, <8.1.13 - Privilege Escalation

CVSS 5.9

CVE-2024-5258 MEDIUM

GitLab 16.10-16.10.5, 16.11-16.11.2, 17.0 - Authenticated Authorization Bypass via Pipeline Naming Convention

CVSS 4.4

CVE-2024-5166 MEDIUM

Google Cloud's Looker - Info Disclosure

CVSS 6.5

CVE-2024-4154 MEDIUM

lunary < 1.2.26 - Unauthenticated Project Renaming via PATCH Request

CVSS 6.5

CVE-2024-4151 HIGH

lunary < 1.2.25 - Unauthenticated Authorization Bypass via Template Version Request Handling

CVSS 8.1