Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 142 of 521.
- CVE-2024-9404 Denial-of-Service Vulnerability
- CVE-2024-9403 Memory corruption in Firefox
- CVE-2024-9402 Memory corruption in Firefox
- CVE-2024-9401 Memory corruption in Firefox
- CVE-2024-9400 Memory corruption in Firefox
- CVE-2024-9399 Denial of service in Firefox
- CVE-2024-9398 Information disclosure in Firefox
- CVE-2024-9397 Security feature bypass in Firefox
- CVE-2024-9396 Memory corruption in Firefox
- CVE-2024-9395 Security feature bypass in Firefox
- CVE-2024-9394 Cross-site scripting in Firefox
- CVE-2024-9393 Security feature bypass in Firefox
- CVE-2024-9392 Security feature bypass in Firefox
- CVE-2024-9391 Security feature bypass in Firefox
- CVE-2024-9390 RegistrationMagic < 6.0.2.1 - Stored XSS
- CVE-2024-9388 Black Widgets For Elementor <= 1.3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-9387 URL Redirection to Untrusted Site ('Open Redirect') in GitLab
- CVE-2024-9386 Cross-site scripting in Exclusive Divi – Divi Preloader, Modules for Divi & Extra Theme
- CVE-2024-9385 Themify Builder <= 7.6.2 - Reflected Cross-Site Scripting
- CVE-2024-9384 Quantity Dynamic Pricing & Bulk Discounts for WooCommerce <= 3.8.0 - Reflected Cross-Site Scripting
- CVE-2024-9383 Parcel Pro <= 1.8.4 - Reflected Cross-Site Scripting
- CVE-2024-9382 Gantry 4 Framework <= 4.1.21 - Reflected Cross-Site Scripting
- CVE-2024-9381 Path traversal in CSA (Cloud Services Appliance)
- CVE-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection
- CVE-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection
- CVE-2024-9378 YML for Yandex Market <= 4.7.2 - Reflected Cross-Site Scripting
- CVE-2024-9377 Products, Order & Customers Export for WooCommerce <= 2.0.15 - Reflected Cross-Site Scripting
- CVE-2024-9376 Cross-site scripting in Kata Plus – Addons for Elementor – Widgets, Extensions and Templates
- CVE-2024-9375 WordPress Captcha Plugin by Captcha Bank <= 4.0.36 - Reflected Cross-Site Scripting
- CVE-2024-9374 Terms descriptions <= 3.4.6 - Reflected Cross-Site Scripting
- CVE-2024-9373 Elemenda <= 0.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-9372 WP Blocks Hub <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-9371 Branda – White Label & Branding, Custom Login Page Customizer <= 3.4.19 - Reflected Cross-Site Scripting
- CVE-2024-9369 Memory corruption in Chrome
- CVE-2024-9368 Aggregator Advanced Settings <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-9367 Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2024-9366 Easy Menu Manager | WPZest <= 1.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-9365 Cross-Site Request Forgery (CSRF) in polyaxon/polyaxon
- CVE-2024-9364 SendGrid for WordPress <= 1.4 - Missing Authorization to Authenticated (Subscriber+) Log Deletion
- CVE-2024-9363 Unauthorized File Deletion in polyaxon/polyaxon
- CVE-2024-9362 Directory Traversal in polyaxon/polyaxon
- CVE-2024-9361 Missing authorization in Bulk images optimizer: Resize, optimize, convert to webp, rename …
- CVE-2024-9360 code-projects Restaurant Reservation System updatebal.php sql injection
- CVE-2024-9359 code-projects Restaurant Reservation System addcompany.php sql injection
- CVE-2024-9358 ThingsBoard HTTP RPC API resource consumption
- CVE-2024-9357 xili-tidy-tags <= 1.12.04 - Reflected Cross-Site Scripting
- CVE-2024-9356 Yotpo: Product & Photo Reviews for WooCommerce <= 1.7.9 - Reflected Cross-Site Scripting
- CVE-2024-9355 Golang-fips: golang fips zeroed buffer
- CVE-2024-9354 Estatik Mortgage Calculator <= 2.0.11 - Reflected Cross-Site Scripting
- CVE-2024-9353 Popularis Extra <= 1.2.6 - Reflected Cross-Site Scripting
- CVE-2024-9352 Cross-site request forgery in Forminator Forms – Contact Form, Payment Form & Custom Form Builder
- CVE-2024-9351 Cross-site request forgery in Forminator Forms – Contact Form, Payment Form & Custom Form Builder
- CVE-2024-9350 DPD Baltic Shipping <= 1.2.83 - Reflected Cross-Site Scripting
- CVE-2024-9349 Auto Amazon Links – Amazon Associates Affiliate Plugin <= 5.4.2 - Reflected Cross-Site Scripting
- CVE-2024-9348 Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view
- CVE-2024-9347 The Ultimate WordPress Toolkit – WP Extended <= 3.0.9 - Reflected Cross-Site Scripting
- CVE-2024-9346 Embed videos and respect privacy <= 1.2 - Reflected Cross-Site Scripting
- CVE-2024-9345 Product Delivery Date for WooCommerce – Lite <= 2.7.3 - Reflected Cross-Site Scripting
- CVE-2024-9344 Cross-site scripting in BerqWP – Automated All-In-One Page Speed Optimization for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript
- CVE-2024-9343 Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console
- CVE-2024-9342 Eclipse GlassFish is vulnerable to Login Brute Force attacks through unlimited failed login attempts
- CVE-2024-9341 Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library
- CVE-2024-9340 Denial of Service (DoS) via Multipart Boundary in zenml-io/zenml
- CVE-2024-9334 Information Disclosure in E-Kent's Pallium Vehicle Tracking
- CVE-2024-9333 Permission bypass in M-Files Connector for Copilot
- CVE-2024-9329 Glassfish redirect to untrusted site
- CVE-2024-9328 SourceCodester Advocate Office Management System edit_client.php sql injection
- CVE-2024-9327 code-projects Blood Bank System forgot.php sql injection
- CVE-2024-9326 PHPGurukul Online Shopping Portal Admin Panel index.php sql injection
- CVE-2024-9325 Intelbras InControl incontrol-service-watchdog.exe unquoted search path
- CVE-2024-9324 Intelbras InControl Relatório de Operadores Page operador code injection
- CVE-2024-9323 SourceCodester Inventory Management System add_staff.php cross site scripting
- CVE-2024-9322 code-projects Supply Chain Management edit_manufacturer.php sql injection
- CVE-2024-9321 SourceCodester Online Railway Reservation System view_details.php access control
- CVE-2024-9320 SourceCodester Online Timesheet App Add Timesheet Form add-timesheet.php cross site scripting
- CVE-2024-9319 SourceCodester Online Timesheet App delete-timesheet.php sql injection
- CVE-2024-9318 SourceCodester Advocate Office Management System activate.php sql injection
- CVE-2024-9317 SourceCodester Online Eyewear Shop Master.php delete_category sql injection
- CVE-2024-9316 code-projects Blood Bank Management System B+.php sql injection
- CVE-2024-9315 SourceCodester Employee and Visitor Gate Pass Logging System manage_department.php sql injection
- CVE-2024-9314 Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Authenticated (Administrator+) PHP Object Injection
- CVE-2024-9313 PAM module may allow accessing with the credentials of another user
- CVE-2024-9312 Authd allows attacker-controlled usernames to yield controllable UIDs
- CVE-2024-9311 Cross-Site Request Forgery to XSS in haotian-liu/llava
- CVE-2024-9310 Security feature bypass in Collision Avoidance Systems
- CVE-2024-9309 SSRF in POST /worker_generate_stream API endpoint in haotian-liu/llava
- CVE-2024-9308 Open Redirect in haotian-liu/llava
- CVE-2024-9307 mFolio Lite <= 1.2.1 - Missing Authorization to Authenticated (Author+) File Upload via EXE and SVG Files
- CVE-2024-9306 WP Booking Calendar <= 10.6 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2024-9305 AppPresser – Mobile App Framework <= 4.4.4 - Privilege Escalation and Account Takeover via Weak OTP
- CVE-2024-9304 LocateAndFilter <= 1.6.14 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-9302 Auth bypass in App Builder – Create Native Android & iOS Apps On The Flight
- CVE-2024-9301 Path traversal in E2Nest
- CVE-2024-9300 SourceCodester Online Railway Reservation System Message Us Form contact_us.php cross site scripting
- CVE-2024-9299 SourceCodester Online Railway Reservation System ?page=reserve cross site scripting
- CVE-2024-9298 SourceCodester Online Railway Reservation System Ticket ?page=tickets access control
- CVE-2024-9297 SourceCodester Online Railway Reservation System admin improper authorization
- CVE-2024-9296 SourceCodester Advocate Office Management System forgot_pass.php sql injection
- CVE-2024-9295 SourceCodester Advocate Office Management System login.php sql injection
- CVE-2024-9294 dingfanzu CMS saveNewPwd.php sql injection