CVE-2024-33651

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Cross-Site Request Forgery (CSRF) vulnerability in Matthew Fries MF Gig Calendar.This issue affects MF Gig Calendar : from n/a through 1.2.1.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Apr 26, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-336525.3Missing Authorization vulnerability in Real Big Plugins Client Dash.This issue affects Client Dash: from n/a through 2.2.1.CVE-2024-336537.8A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past CVE-2024-336547.8A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past CVE-2024-336557.5The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service (resource consumption) by arranging for DNS quCVE-2024-336567.8The DXE module SmmComputrace contains a vulnerability that allows local attackers to leak stack or global memory. This could lead to privileCVE-2024-336577.8This SMM vulnerability affects certain modules, allowing privileged attackers to execute arbitrary code, manipulate stack memory, and leak iCVE-2024-336587.8APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory BuffCVE-2024-336598.8AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker. Successful exploitCVE-2024-33669.8A vulnerability classified as problematic was found in Xuxueli xxl-job up to 2.4.1. This vulnerability affects the function deserialize of tCVE-2024-336604.3An exploit is possible where an actor with physical access can manipulate SPI flash without being detected.CVE-2024-336619.1Portainer before 2.20.0 allows redirects when the target is not index.yaml.CVE-2024-336627.5Portainer before 2.20.2 improperly uses an encryption algorithm in the AesEncrypt function.
CVE-2024-33651: High severity, CVSS 8.8 | Vulnix