CVE-2024-42343

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Loway - CWE-204: Observable Response Discrepancy

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-204CWE-203

Affected software

No affected versions have been published.

Timeline

Published
Sep 8, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-423445.5A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application inserts sensitive inCVE-2024-423454.3A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP2). The affected application does not properly haCVE-2024-423465.4Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructCVE-2024-423476.5matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. A malicious homeserver could manipulate a usCVE-2024-423488.6FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.2 can leak AD username and password when registeringCVE-2024-423495.3FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.4 and earlier can leak authorized and rejected loginCVE-2024-42354.9A vulnerability classified as problematic was found in Netgear DG834Gv5 1.6.01.34. This vulnerability affects unknown code of the component CVE-2024-423503.0Biscuit is an authorization token with decentralized verification, offline attenuation and strong security policy enforcement based on a logCVE-2024-423519.1Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructCVE-2024-423527.5Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. `nuxt/icon` provides an API to alloCVE-2024-423536.1WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it dCVE-2024-423545.9Shopware is an open commerce platform. The store-API works with regular entities and not expose all fields for the public API; fields need t
CVE-2024-42343: High severity, CVSS 7.5 | Vulnix