Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 130 of 521.
- MAL-2024-10017 Malicious code in ethreeum (PyPI)
- MAL-2024-10016 Malicious code in ethherum (PyPI)
- MAL-2024-10015 Malicious code in ethherium (PyPI)
- MAL-2024-10014 Malicious code in etheurm (PyPI)
- MAL-2024-10013 Malicious code in etheum (PyPI)
- MAL-2024-10012 Malicious code in etheruum (PyPI)
- MAL-2024-10011 Malicious code in etherun (PyPI)
- MAL-2024-10010 Malicious code in etherumm (PyPI)
- MAL-2024-1001 Malicious code in blockledger (npm)
- MAL-2024-10009 Malicious code in etherum (PyPI)
- MAL-2024-10008 Malicious code in etheruim (PyPI)
- MAL-2024-10007 Malicious code in etheruemm (PyPI)
- MAL-2024-10006 Malicious code in etheruem (PyPI)
- MAL-2024-10005 Malicious code in etherriuumm (PyPI)
- MAL-2024-10004 Malicious code in etherriuum (PyPI)
- MAL-2024-10003 Malicious code in etherrium (PyPI)
- MAL-2024-10002 Malicious code in etherreumm (PyPI)
- MAL-2024-10001 Malicious code in etherreum (PyPI)
- MAL-2024-10000 Malicious code in etherreeum (PyPI)
- MAL-2024-1000 Malicious code in custom-solutions (npm)
- MAL-2024-100 Malicious code in wdpr-ra-node-csp (npm)
- MAL-2024-10 Malicious code in @msmg-money/vue-datadog (npm)
- MAL-2024-1 Malicious code in squaredev-next-online-payments-example (npm)
- GO-2024-3293 Full access to the host's OS file system using osfs.FS with Router.Static in goyave.dev/goyave/v5
- GO-2024-3068 Missing check for the height of cryptographic equivocation evidence in github.com/cosmos/gaia
- GO-2024-3012 Malicious code in github.com/PromonLogicalis/asn1
- GO-2024-2451 IV collision in github.com/bincyber/go-sqlcrypter
- GHSA-xx4r-5265-48j6 silverstripe/framework SQL injection in full text search
- GHSA-xvcp-33rc-j8gq Insecure Unserialize in TYPO3 Import/Export
- GHSA-xrv3-jmcp-374j zerovec incorrectly uses `#[repr(packed)]`
- GHSA-xr7q-jx4m-x55m Private tokens could appear in logs if context containing gRPC metadata is logged in github.com/grpc/grpc-go
- GHSA-xpff-c35g-j3cr silverstripe/framework Privilege Escalation Risk in Member Edit form
- GHSA-xmrp-424f-vfpx SQLx Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts
- GHSA-xmp3-7745-g4vj ezsystems/ez-support-tools Failing access control in system info view
- GHSA-xmgr-jff3-fcfv TYPO3 Security Misconfiguration in User Session Handling
- GHSA-xm4r-5rj9-2pg3 gratient 0.5 contains credential harvesting code
- GHSA-xm3x-4ph3-3x9c friendsofsymfony/oauth2-php open redirection in oauth
- GHSA-xjw3-5r5c-m5ph typo3 Security fix for Flow Swift Mailer package
- GHSA-xgmx-j3hv-jh9x TYPO3 Cross-Site Scripting in Link Handling
- GHSA-xgfm-fjx6-62mj readthedocs-sphinx-search vulnerable to cross-site scripting when including search results from malicious projects
- GHSA-xg9w-r469-m455 ZendFramework Potential Information Disclosure and Insufficient Entropy vulnerabilities
- GHSA-xfhw-6mc4-mgxf crayon: ObjectPool creates uninitialized memory when freeing objects
- GHSA-xffp-6w68-4775 Zendframework Remote Address Spoofing Vector in `Zend\Http\PhpEnvironment\RemoteAddress`
- GHSA-xc69-p8fc-m6m5 silverstripe/subsites Unsafe SQL Query Construction (Safe Data Source)
- GHSA-x8jh-xj3x-gx3c `fast-float` has multiple soundness issues
- GHSA-x883-2vmg-xwf7 Authelia's Group Changes may not have the expected results (YAML file backend)
- GHSA-x86x-qhf8-f37w willdurand/js-translation-bundle potential path traversal attack and remote code injection
- GHSA-x7xj-jvwp-97rv RKE2 allows privilege escalation in Windows nodes due to Insecure Access Control Lists
- GHSA-x6xg-3fj2-4pq3 `exotel` project on PyPI compromised, malicious release made
- GHSA-x6v2-xmrq-574j Drupal Anonymous Open Redirect
- GHSA-x5w2-wcr8-9q45 Silverstripe Missing security check on dev/build/defaults
- GHSA-x5r5-2qrx-rqj8 Transparent TLS may not be applied to Marbles with certain manifest configurations
- GHSA-x565-32qp-m3vf phin may include sensitive headers in subsequent requests after redirect
- GHSA-x4rj-f7m6-42c3 TYPO3 CMS Authentication Bypass vulnerability
- GHSA-x428-565f-8xj2 TYPO3 Arbitrary Code Execution and Cross-Site Scripting in Backend API
- GHSA-x3f4-45xf-rjm7 `ruzstd` uninit and out-of-bounds memory reads
- GHSA-x2f4-8wxf-w3vf ZendFramework SQL injection due to execution of platform-specific SQL containing interpolations
- GHSA-wxxw-5gq6-j2g5 contao/core Insufficient input validation allows for code injection and remote execution
- GHSA-wxfg-253g-m7r4 Drupal core Open Redirect vulnerability
- GHSA-wwq9-3cpr-mm53 Borsh serialization of HashMap is non-canonical
- GHSA-ww6p-q26w-fr6m phpxmlrpc/extra XSS in class documenting_xmlrpc_server
- GHSA-wvvp-jwf5-qcpc TYPO3 Information Disclosure in Page Tree
- GHSA-wrw7-89jp-8q8g Unsoundness in `Iterator` and `DoubleEndedIterator` impls for `glib::VariantStrIter`
- GHSA-wrpf-2x8h-82gr Typo3 Arbitrary File Disclosure in Form Component
- GHSA-wr3c-6c22-m9v6 Privilege Escalation in TYPO3 Neos
- GHSA-wq9x-qwcq-mmgf Diesel vulnerable to Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts
- GHSA-wq8p-mqvg-2p5h laravel framework SQL Injection via limit and offset functions
- GHSA-wq88-fq4x-h2pm WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM
- GHSA-wq43-8r5p-w3mc contao/core PHP object injection vulnerability allows for arbitrary code execution
- GHSA-wp8j-c736-c5r3 TYPO3 Cross-Site Scripting Vulnerability Exploitable by Editors
- GHSA-wm25-j4gw-6vr3 pREST vulnerable to jwt bypass + sql injection
- GHSA-wjxc-pjx9-4wvm Nervos CKB Panic on malformed input
- GHSA-wjg9-v8cf-f5q2 silverstripe/graphql Cross-Site Request Forgery vulnerability
- GHSA-wj85-rg5g-v8jm TYPO3 Information Disclosure in User Authentication
- GHSA-wh8q-72cp-p5wf Cross-Site Scripting in TYPO3 component Indexed Search
- GHSA-wg8h-gxf4-g4gh TYPO3 Cross-Site Scripting in Online Media Asset Rendering
- GHSA-wg2x-rv86-mmpx SPV Merkle proof malleability allows the maintainer to prove invalid transactions
- GHSA-w9p3-26fx-5mp3 eZ Platform Admin UI is vulnerable to Cross-site Scripting (XSS)
- GHSA-w8gf-g2vq-j2f4 amphp/http-client Denial of Service via HTTP/2 CONTINUATION Frames
- GHSA-w8fq-xgvh-cxc2 Silverstripe Forum Module CSRF Vulnerability
- GHSA-w5w5-8vfh-xcjq whoami stack buffer overflow on several Unix platforms
- GHSA-w5mj-j45q-m638 ZendFramework1 Potential Security Issues in Bundled Dojo Library
- GHSA-w59h-378f-2frm Unsound sending of non-Send types across threads in threadalone
- GHSA-w4hv-vmv9-hgcr GitHub Security Lab (GHSL) Vulnerability Report, scrypted: `GHSL-2023-218`, `GHSL-2023-219`
- GHSA-w333-5f96-mjrr Drupal core Denial of Service
- GHSA-w2pj-9cgh-mq2c opencv-contrib-python-headless bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863
- GHSA-w228-rfpx-fhm4 cg vulnerable to an Open Redirect Vulnerability on Referer Header
- GHSA-vxcf-c7mx-pg53 Build corruption when using `PYO3_CONFIG_FILE` environment variable
- GHSA-vx3h-qwqw-r2wq Inventree Server-Side Request Forgery vulnerability exposes server port/internal IP
- GHSA-vvm3-rv48-j3g5 Zendframework Potential XSS or HTML Injection vector in Zend_Json
- GHSA-vv6c-69r6-chg9 Go-Landlock in best-effort mode did not restrict TCP bind and connect operations correctly
- GHSA-vr95-p7q6-8m9q Laravel Cross-site Scripting (XSS) vulnerability in blade templating
- GHSA-vq4j-qcx7-ppc6 Thelia Cross-site Scripting vulnerability in BackOffice
- GHSA-vpr3-rc99-2wpr Information Disclosure in TYPO3 Backend
- GHSA-vpr3-cw3h-prw8 SimpleSAMLphp Reflected Cross-site Scripting vulnerability
- GHSA-vp8p-c6xj-xpj7 Silverstripe External redirection risk in Security?ReturnURL
- GHSA-vmqh-5232-v43r Panic in wasmvm can slow down block production
- GHSA-vmg2-r3xv-r3xf Simulation of Wasmd message can cause crashing
- GHSA-vjwg-28gv-pm8h Pimcore TinyMCE Bundle - tinymce CVE-2024-29203, CVE-2024-29881
- GHSA-vjrg-wpm8-rhrw doctrine/orm Regression in Query Parenthesis can have Security Implications