CVE.report search for "CVE-2024-3824"
Listed below are 50 relevant search results for "CVE-2024-3824" based on Vendor, Software, and CVE description
These results are gathered from attempted matches with listed vendor and software data, as well as a keyword search in the description of all known CVEs.
If you notice a "Not Listed" in either the vendor or software columns, the underlying source record does not currently include normalized affected-product data.
Search Results
| CVE ID | Vendor | Software | Description |
|---|---|---|---|
| CVE-2026-115915 | Vllm | Vllm | vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-controlled i... |
| CVE-2026-114615 | Authlib | Authlib | Authlib is a Python library which builds OAuth and OpenID Connect servers. From 1.3.1 until 1.9.0, OctKey.import_key() checks... |
| CVE-2026-112375 | An authenticated Kafka principal with no authorization grants (not even ALTER_CONFIGS) can make a broker read a file or an e... | ||
| CVE-2026-111252 | A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS par... | ||
| CVE-2026-111235 | An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/... | ||
| CVE-2026-108942 | A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This impac... | ||
| CVE-2026-108889 | A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub_14000443C... | ||
| CVE-2026-108729 | Corteza through 2024.9.10 contains an incorrect authorization vulnerability in compose attachment endpoints that allows unaut... | ||
| CVE-2026-107712 | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_mo... | ||
| CVE-2026-107228 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP re... | ||
| CVE-2026-101148 | The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its integration key, treating... | ||
| CVE-2026-99062 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: account only unread bytes in read_skb() A... | ||
| CVE-2026-93581 | User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, in... | ||
| CVE-2026-93113 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: camcc-sc8280xp: unregister CAMCC_GDSC_CLK Wi... | ||
| CVE-2026-90872 | Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_FTP Se... | ||
| CVE-2026-90871 | Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.7 and... | ||
| CVE-2026-90870 | A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions p... | ||
| CVE-2026-90869 | A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress Softwa... | ||
| CVE-2026-90868 | An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows c... | ||
| CVE-2026-90867 | Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 o... | ||
| CVE-2026-90866 | A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could al... | ||
| CVE-2026-90865 | An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows c... | ||
| CVE-2026-90864 | A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could al... | ||
| CVE-2026-90863 | Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.... | ||
| CVE-2026-90862 | Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4... | ||
| CVE-2026-90861 | Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear text... | ||
| CVE-2026-89212 | A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted ... | ||
| CVE-2026-89089 | A SQL injection vulnerability exists in the JasperReports-based reporting feature of multiple versions of OpenNMS Meridian an... | ||
| CVE-2026-85751 | Mailu is a mail server distributed as a set of Docker images. From Mailu 2.0 until 2024.06.55 and prior to Mailu helm-charts ... | ||
| CVE-2026-85394 | python-jose through 3.5.0 fails to properly validate asymmetric keys in HMAC initialization, accepting DER-encoded public key... | ||
| CVE-2026-84296 | Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2024.0... | ||
| CVE-2026-84295 | Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an ... | ||
| CVE-2026-84294 | Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.... | ||
| CVE-2026-80724 | In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becoming w... | ||
| CVE-2026-80327 | An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1... | ||
| CVE-2026-78359 | OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser backend... | ||
| CVE-2026-78358 | Several administrative actions do not sufficiently validate whether a request was intentionally initiated by the authenticate... | ||
| CVE-2026-78357 | Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deacti... | ||
| CVE-2026-78356 | The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote us... | ||
| CVE-2026-78355 | A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to referenc... | ||
| CVE-2026-77860 | Nlnetlabs | Unbound | In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double d... |
| CVE-2026-76843 | The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static m... | ||
| CVE-2026-75364 | Comfast CF-N1-S firmware 2.6.0.1 and CF-WR630AX (2024-01-30 build), the update_interface_png SET handler in /usr/bin/webmgnt ... | ||
| CVE-2026-73047 | siyuan versions <= 3.7.3 (fixed in v3.7.4) contain a server-side template injection vulnerability in the attribute-view Templ... | ||
| CVE-2026-68959 | SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attac... | ||
| CVE-2026-68456 | In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: wait for pre-firmware load in .dis... | ||
| CVE-2026-68062 | SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attac... | ||
| CVE-2026-67607 | LightFTP 2.3.1 contains a residual race condition vulnerability (an incomplete fix for CVE-2024-11144) in the worker_thread_c... | ||
| CVE-2026-63278 | URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could ... | ||
| CVE-2026-63270 | URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could ... | ||