CVE-2024-29077

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Improper access control in some JAM STAPL Player software before version 2.6.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Nov 13, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-290787.5Incorrect permission assignment for critical resource issue exists in MosP kintai kanri V4.6.6 and earlier, which may allow a remote unauthe CVE-2024-290797.8Insufficient control flow management in some Intel(R) VROC software before version 8.6.0.3001 may allow an authenticated user to potentially CVE-2024-29084.3The Call Now Button WordPress plugin before 1.4.7 does not sanitise and escape some of its settings, which could allow high privilege users CVE-2024-290806.5Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application Enabling Software Driv CVE-2024-290828.6Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6 CVE-2024-290836.7Incorrect default permissions in some Intel(R) Distribution for Python software before version 2024.2 may allow an authenticated user to pot CVE-2024-290855.5Improper access control for some BigDL software maintained by Intel(R) before version 2.5.0 may allow an authenticated user to potentially e CVE-2024-290865.5in OpenHarmony v3.2.4 and prior versions allow a local attacker cause DOS through stack overflow.CVE-2024-290896.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Five Star Plugins Five Star Restaurant CVE-2024-29098.8A vulnerability classified as critical was found in Ruijie RG-EG350 up to 20240318. Affected by this vulnerability is the function setAction CVE-2024-290906.8Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: fro CVE-2024-290917.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dnesscarkey WP Armour – Honeypot Anti