CVE-2024-2890

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Tumult Inc. Tumult Hype Animations.This issue affects Tumult Hype Animations: from n/a through 1.9.12.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published
Mar 28, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-289005.5Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2024-289015.5Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2024-289025.5Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2024-289036.7Secure Boot Security Feature Bypass VulnerabilityCVE-2024-289047.8Microsoft Brokering File System Elevation of Privilege VulnerabilityCVE-2024-289057.8Microsoft Brokering File System Elevation of Privilege VulnerabilityCVE-2024-289068.8Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityCVE-2024-289077.8Microsoft Brokering File System Elevation of Privilege VulnerabilityCVE-2024-289088.8Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityCVE-2024-289098.8Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityCVE-2024-28918.8A vulnerability, which was classified as critical, was found in Tenda AC7 15.03.06.44. Affected is the function formQuickIndex of the file /CVE-2024-289108.8Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-2890: Critical severity, CVSS 9.1 | Vulnix