CVEs published in April 2024
21 tracked CVEs from 7 vendors had their first vendor advisory published in April 2024: 4 critical, 8 high. Newest first.
21 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2024-32766Critical
QTS: OS command injection vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2024-32764Critical
myQNAPcloud: missing authentication for critical function vulnerability has been reported to affect myQNAPcloud Link.
QNAP · 1 advisory - Added
CVE-2024-27124High
QTS: OS command injection vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2024-21905Medium
QTS: integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2023-51365High
QTS: path traversal vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2023-51364High
QTS: path traversal vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2023-50364Medium
QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory - Added
CVE-2023-50363High
QTS: incorrect authorization vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2023-50362Medium
QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory - Added
CVE-2023-50361Medium
QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory - Added
CVE-2023-47222Critical
exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on.
QNAP · 1 advisory - Added
CVE-2023-41291Medium
QuFirewall: path traversal vulnerability has been reported to affect QuFirewall.
QNAP · 1 advisory - Added
CVE-2023-41290Medium
QuFirewall: path traversal vulnerability has been reported to affect QuFirewall.
QNAP · 1 advisory - Added
CVE-2024-2312Medium
Grub2 Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-22257High
Spring Security Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-24910High
local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen, Identity Agent for Windows…
Check Point · 1 advisory - Added
CVE-2023-6489Medium
Inefficient Regular Expression Complexity in GitLab
GitLab · 1 advisory - Added
CVE-2024-3567Medium
Qemu-kvm: net: assertion failure in update_sctp_checksum
NetApp, Red Hat · 2 advisories - Added
CVE-2024-26230High
Windows Telephony Server Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2023-41677High
insufficiently protected credentials vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 through 7.4.1, FortiProxy 7.2.0 through 7.2.7, FortiProxy 7.0.0 through 7.0.13, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via targeted social engineering attack
Fortinet · 1 advisory - Added
CVE-2024-3094Critical
XZ Utils Vulnerability in NetApp Products
NetApp · 1 advisory