Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 140 of 521.
- CVE-2024-9621 Io.quarkiverse.cxf:quarkus-cxf: quarkus cxf may log user password and secret to application log
- CVE-2024-9620 Event-driven automation in ansible automation platform (aap): ansible event-driven automation (eda) lacks encryption
- CVE-2024-9619 WP SHAPES <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-9618 Master Addons <= 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
- CVE-2024-9617 IDOR in danswer-ai/danswer
- CVE-2024-9616 BlockMeister – Block Pattern Builder <= 3.1.10 - Reflected Cross-Site Scripting
- CVE-2024-9615 BulkPress <= 0.3.5 - Reflected Cross-Site Scripting
- CVE-2024-9614 Constant Contact Forms by MailMunch <= 2.1.2 - Reflected Cross-Site Scripting
- CVE-2024-9613 FormFacade – WordPress plugin for Google Forms <= 1.3.6 - Reflected Cross-Site Scripting
- CVE-2024-9612 Unauthorized Access in danswer-ai/danswer
- CVE-2024-9611 Increase upload file size & Maximum Execution Time limit <= 2.0 - Reflected Cross-Site Scripting
- CVE-2024-9610 Language Switcher <= 3.7.13 - Reflected Cross-Site Scripting
- CVE-2024-9609 LearnPress Export Import – WordPress extension for LearnPress <= 4.0.4 - Reflected Cross-Site Scripting
- CVE-2024-9608 MyParcel <= 4.24.1 - Reflected Cross-Site Scripting
- CVE-2024-9607 10Web Social Post Feed <= 1.2.9 - Reflected Cross-Site Scripting
- CVE-2024-9606 Improper Output Neutralization for Logs in berriai/litellm
- CVE-2024-9603 Memory corruption in Chrome
- CVE-2024-9602 Memory corruption in Chrome
- CVE-2024-9601 Cross-site scripting in Qubely – Advanced Gutenberg Blocks
- CVE-2024-9600 Ditty < 3.1.47 - Author+ Stored XSS
- CVE-2024-9599 Popup Box < 4.7.8 - Admin+ Stored XSS
- CVE-2024-9598 AMP for WP – Accelerated Mobile Pages <= 1.0.99.1 - Cross-Site Request Forgery to Privilege Escalation
- CVE-2024-9597 Path Traversal in parisneo/lollms
- CVE-2024-9596 Inclusion of Sensitive Information in Source Code in GitLab
- CVE-2024-9595 TablePress <= 2.4.2 - Authenticated (Author+) Stored Cross-Site Scripting
- CVE-2024-9594 VM images built with Image Builder with some providers use default credentials during builds
- CVE-2024-9593 Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution
- CVE-2024-9592 Cross-site request forgery in Easy PayPal Gift Certificate
- CVE-2024-9591 Category and Taxonomy Image <= 1.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting
- CVE-2024-9590 Category and Taxonomy Meta Fields <= 1.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting
- CVE-2024-9589 Category and Taxonomy Meta Fields <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2024-9588 Category and Taxonomy Meta Fields <= 1.0.0 - Cross-Site Request Forgery to Taxonomy Meta Add/Delete
- CVE-2024-9587 Linkz.ai <= 1.1.8 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update via AJAX
- CVE-2024-9586 Linkz.ai <= 1.1.8 - Missing Authorization to Unauthenticated Plugin Settings Update
- CVE-2024-9585 Image Map Pro <= 6.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-9584 Image Map Pro <= 6.0.20 - Missing Authorization to Authenticated (Contributor+) Map Project Add/Update/Delete
- CVE-2024-9583 RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 4.23.12 - Missing Authorization
- CVE-2024-9582 Accordion Slider <= 1.9.11 - Authenticted (Contributor+) Stored Cross-Site Scripting via HTML Attribute
- CVE-2024-9581 Shortcodes AnyWhere <= 1.0.1 - Unauthenticated Arbitrary Shortcode Execution
- CVE-2024-9579 Certain Poly Video Conference Devices – Potential Remote Code Execution
- CVE-2024-9578 Hide Links <= 1.4.2 - Unauthenticated Shortcode Execution
- CVE-2024-9576 Improper access control in Linux Workbooth Distro
- CVE-2024-9575 Local File Inclusion in pretix-widget WordPress plugin
- CVE-2024-9574 SQL Injection vulnerability in SOPlanning
- CVE-2024-9573 SQL Injection vulnerability in SOPlanning
- CVE-2024-9572 Cross-Site Scripting vulnerability in SOPlanning
- CVE-2024-9571 Cross-Site Scripting vulnerability in SOPlanning
- CVE-2024-9570 D-Link DIR-619L B1 formEasySetTimezone buffer overflow
- CVE-2024-9569 D-Link DIR-619L B1 formEasySetPassword buffer overflow
- CVE-2024-9568 D-Link DIR-619L B1 formAdvNetwork buffer overflow
- CVE-2024-9567 D-Link DIR-619L B1 formAdvFirewall buffer overflow
- CVE-2024-9566 D-Link DIR-619L B1 formDeviceReboot buffer overflow
- CVE-2024-9565 D-Link DIR-605L formSetPassword buffer overflow
- CVE-2024-9564 D-Link DIR-605L formWlanWizardSetup buffer overflow
- CVE-2024-9563 D-Link DIR-605L formWlanSetup_Wizard buffer overflow
- CVE-2024-9562 D-Link DIR-605L formSetWizard2 buffer overflow
- CVE-2024-9561 D-Link DIR-605L formSetWAN_Wizard52 buffer overflow
- CVE-2024-9560 ESAFENET CDG Catelogs;logindojojs delCatelogs sql injection
- CVE-2024-9559 D-Link DIR-605L formWlanSetup buffer overflow
- CVE-2024-9558 D-Link DIR-605L formSetWanPPTP buffer overflow
- CVE-2024-9557 D-Link DIR-605L formSetWanPPPoE buffer overflow
- CVE-2024-9556 D-Link DIR-605L formSetEnableWizard buffer overflow
- CVE-2024-9555 D-Link DIR-605L formSetEasy_Wizard buffer overflow
- CVE-2024-9554 Sovell Smart Canteen System Password Reset suanfa.py Check_ET_CheckPwdz201 authorization
- CVE-2024-9553 D-Link DIR-605L formdumpeasysetup buffer overflow
- CVE-2024-9552 D-Link DIR-605L formSetWanNonLogin buffer overflow
- CVE-2024-9551 D-Link DIR-605L formSetWanL2TP buffer overflow
- CVE-2024-9550 D-Link DIR-605L formLogDnsquery buffer overflow
- CVE-2024-9549 D-Link DIR-605L formEasySetupWizard formEasySetupWizard2 buffer overflow
- CVE-2024-9548 Slimstat Analytics <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting
- CVE-2024-9546 WPIDE <= 3.4.9 - Unauthenticated Full Path Dislcosure
- CVE-2024-9545 Cross-site scripting in Shortcodes and extra features for Phlox theme
- CVE-2024-9544 Cross-site scripting in MapSVG
- CVE-2024-9543 Powerpress <= 11.9.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via skipto Shortcode
- CVE-2024-9542 Information disclosure in Sky Addons – Elementor Addons with Widgets & Templates
- CVE-2024-9541 Information disclosure in News Kit Addons For Elementor
- CVE-2024-9540 Information disclosure in Sina Extension for Elementor
- CVE-2024-9539 Information disclosure in GitHub Enterprise Server
- CVE-2024-9538 ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template
- CVE-2024-9537 ScienceLogic SL1 Unspecified
- CVE-2024-9536 ESAFENET CDG MultiServerBackService sql injection
- CVE-2024-9535 D-Link DIR-605L formEasySetupWWConfig buffer overflow
- CVE-2024-9534 D-Link DIR-605L formEasySetPassword buffer overflow
- CVE-2024-9533 D-Link DIR-605L formDeviceReboot buffer overflow
- CVE-2024-9532 D-Link DIR-605L formAdvanceSetup buffer overflow
- CVE-2024-9531 Missing authorization in MultiVendorX – WooCommerce Multivendor Marketplace Solutions
- CVE-2024-9530 Qi Addons For Elementor <= 1.8.0 - Sensitive Information Exposure
- CVE-2024-9529 Secure Custom Fields < 6.3.6.3 - Admin+ Remote Code Execution
- CVE-2024-9528 Cross-site scripting in Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
- CVE-2024-9526 Stored XSS in Kubeflow Pipeline View
- CVE-2024-9524 Privilege Escalation Vulnerability in Avira Prime Version 1.1.96.2
- CVE-2024-9522 WP Users Masquerade <= 2.0.0 - Authenticated (Subscriber+) Authentication Bypass
- CVE-2024-9521 SEO Manager <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta
- CVE-2024-9520 UserPlus <= 2.0 - Missing Authorization via Multiple Functions
- CVE-2024-9519 UserPlus <= 2.0 - Authenticated (Editor+) Registration Form Update to Privilege Escalation
- CVE-2024-9518 UserPlus <= 2.0 - Unauthenticated Privilege Escalation
- CVE-2024-9515 D-Link DIR-605L formSetQoS buffer overflow
- CVE-2024-9514 D-Link DIR-605L formSetDomainFilter buffer overflow
- CVE-2024-9513 Netadmin Software NetAdmin IAM HTTP POST Request ReturnUserQuestionsFilled information exposure
- CVE-2024-9512 Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab