CVE.report search for "CVE-2024-5324"
Listed below are 50 relevant search results for "CVE-2024-5324" based on Vendor, Software, and CVE description
These results are gathered from attempted matches with listed vendor and software data, as well as a keyword search in the description of all known CVEs.
If you notice a "Not Listed" in either the vendor or software columns, the underlying source record does not currently include normalized affected-product data.
Search Results
| CVE ID | Vendor | Software | Description |
|---|---|---|---|
| CVE-2026-111252 | A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS par... | ||
| CVE-2026-111235 | An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/... | ||
| CVE-2026-108942 | A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This impac... | ||
| CVE-2026-108889 | A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub_14000443C... | ||
| CVE-2026-108729 | Corteza through 2024.9.10 contains an incorrect authorization vulnerability in compose attachment endpoints that allows unaut... | ||
| CVE-2026-107712 | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_mo... | ||
| CVE-2026-107228 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP re... | ||
| CVE-2026-101148 | The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its integration key, treating... | ||
| CVE-2026-93581 | User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, in... | ||
| CVE-2026-93113 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: camcc-sc8280xp: unregister CAMCC_GDSC_CLK Wi... | ||
| CVE-2026-89212 | A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted ... | ||
| CVE-2026-89089 | A SQL injection vulnerability exists in the JasperReports-based reporting feature of multiple versions of OpenNMS Meridian an... | ||
| CVE-2026-85751 | Mailu is a mail server distributed as a set of Docker images. From Mailu 2.0 until 2024.06.55 and prior to Mailu helm-charts ... | ||
| CVE-2026-85394 | python-jose through 3.5.0 fails to properly validate asymmetric keys in HMAC initialization, accepting DER-encoded public key... | ||
| CVE-2026-80724 | In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becoming w... | ||
| CVE-2026-80327 | An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1... | ||
| CVE-2026-78359 | OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser backend... | ||
| CVE-2026-78358 | Several administrative actions do not sufficiently validate whether a request was intentionally initiated by the authenticate... | ||
| CVE-2026-78357 | Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deacti... | ||
| CVE-2026-78356 | The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote us... | ||
| CVE-2026-78355 | A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to referenc... | ||
| CVE-2026-77860 | Nlnetlabs | Unbound | In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double d... |
| CVE-2026-76843 | The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static m... | ||
| CVE-2026-75364 | Comfast CF-N1-S firmware 2.6.0.1 and CF-WR630AX (2024-01-30 build), the update_interface_png SET handler in /usr/bin/webmgnt ... | ||
| CVE-2026-73047 | siyuan versions <= 3.7.3 (fixed in v3.7.4) contain a server-side template injection vulnerability in the attribute-view Templ... | ||
| CVE-2026-68959 | SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attac... | ||
| CVE-2026-68456 | In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: wait for pre-firmware load in .dis... | ||
| CVE-2026-68062 | SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attac... | ||
| CVE-2026-67607 | LightFTP 2.3.1 contains a residual race condition vulnerability (an incomplete fix for CVE-2024-11144) in the worker_thread_c... | ||
| CVE-2026-63278 | URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could ... | ||
| CVE-2026-63270 | URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could ... | ||
| CVE-2026-62422 | Jetbrains | Youtrack | In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authenti... |
| CVE-2026-59739 | Apache | Zookeeper | Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check. An attacker can discove... |
| CVE-2026-57821 | Apache | Fineract | A SQL Injection vulnerability exists in Apache Fineract's Office Search API (GET /api/v1/offices) in versions up to and inclu... |
| CVE-2026-56142 | Jetbrains | Hub | In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege esc... |
| CVE-2026-56141 | Jetbrains | Hub | In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeo... |
| CVE-2026-54699 | Warp is an agentic development environment. From 0.2024.03.12.08.02.stable_01 until 0.2026.05.06.15.42.stable_01, Warp contai... | ||
| CVE-2026-54024 | Librechat | Librechat | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the fix for CVE-2024-11171 (c... |
| CVE-2026-53038 | Linux | Linux Kernel | In the Linux kernel, the following vulnerability has been resolved: ima_fs: Correctly create securityfs files for unsupporte... |
| CVE-2026-52726 | Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.23.2 and prior to versio... | ||
| CVE-2026-50242 | Jetbrains | Hub | In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authenticatio... |
| CVE-2026-50023 | Yt-dlp Project | Yt-dlp | yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote a... |
| CVE-2026-49319 | Remote Keyless Entry System (RKES), using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., LTD., ... | ||
| CVE-2026-49217 | Mailu is a mail server as a set of Docker images. Prior to version 2024.06.52, a missing authorization check in the Mailu adm... | ||
| CVE-2026-48731 | Warp is an agentic development environment. From 0.2024.02.20.08.01.stable_01 until 0.2026.05.06.15.42.stable_01, Warp contai... | ||
| CVE-2026-48212 | An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page, which is stored by the applicat... | ||
| CVE-2026-48211 | An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request F... | ||
| CVE-2026-48208 | Otrs | Otrs | An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attack... |
| CVE-2026-48191 | Otrs | Otrs | An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Fil... |
| CVE-2026-48190 | Otrs | Otrs | An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allows an authenticated custom... |