Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 146 of 521.
- CVE-2024-8966 Denial of Service in gradio-app/gradio
- CVE-2024-8965 Absolute Reviews <= 1.1.3 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Criteria Name
- CVE-2024-8964 Cross-site scripting in Image Optimizer, Resizer and CDN – Sirv
- CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal
- CVE-2024-8962 Cross-site scripting in WPBITS Addons For Elementor Page Builder
- CVE-2024-8961 Cross-site scripting in Essential Addons for Elementor – Popular Elementor Templates & Widgets
- CVE-2024-8960 Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-8959 Cross-site scripting in WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer
- CVE-2024-8958 Unrestricted File Write and Read in composiohq/composio
- CVE-2024-8957 PTZOptics PT30X-SDI/NDI Cameras OS Command Injection
- CVE-2024-8956 PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass
- CVE-2024-8955 SSRF in composiohq/composio
- CVE-2024-8954 Authentication Bypass in composiohq/composio
- CVE-2024-8953 Unsafe eval usage in composiohq/composio
- CVE-2024-8952 SSRF in composiohq/composio
- CVE-2024-8951 SourceCodester Resort Reservation System manage_fee.php cross site scripting
- CVE-2024-8950 SQLi in Arne Informatics' Piramit Automation
- CVE-2024-8949 SourceCodester Online Eyewear Shop Cart Content Master.php improper ownership management
- CVE-2024-8948 MicroPython objint.c mpz_as_bytes heap-based overflow
- CVE-2024-8947 MicroPython objarray.c use after free
- CVE-2024-8946 MicroPython VFS Unmount vfs.c mp_vfs_umount heap-based overflow
- CVE-2024-8945 CodeCanyon RISE Ultimate Project Manager save sql injection
- CVE-2024-8944 code-projects Hospital Management System check_availability.php sql injection
- CVE-2024-8943 LatePoint <= 5.0.12 - Authentication Bypass
- CVE-2024-8942 Cross-site Scripting vulnerability on Scriptcase
- CVE-2024-8941 Path Traversal vulnerability on Scriptcase
- CVE-2024-8940 Unrestricted Upload of File with Dangerous Type vulnerability on Scriptcase
- CVE-2024-8939 Vllm: denials of service in vllm json web api
- CVE-2024-8938 Memory corruption in Modicon M340 CPU (part numbers BMXP34*)
- CVE-2024-8937 Memory corruption in Modicon M340 CPU (part numbers BMXP34*)
- CVE-2024-8936 Other in Modicon M340 CPU (part numbers BMXP34*)
- CVE-2024-8935 Weak cryptography in Modicon M340 CPU (part numbers BMXP34*)
- CVE-2024-8934 Beckhoff: Local command injection via TwinCAT Package Manager
- CVE-2024-8933 Other in Modicon M340 CPU (part numbers BMXP34*)
- CVE-2024-8932 OOB access in ldap_escape
- CVE-2024-8929 Leak partial content of the heap through heap buffer over-read in mysqlnd
- CVE-2024-8927 cgi.force_redirect configuration is bypassable due to the environment variable collision
- CVE-2024-8926 PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass)
- CVE-2024-8925 Erroneous parsing of multipart form data
- CVE-2024-8924 Unauthenticated Blind SQL Injection in Core Platform
- CVE-2024-8923 Sandbox Escape in Now Platform
- CVE-2024-8922 Product Enquiry for WooCommerce <= 2.2.33.33 - Authenticated (Author+) PHP Object Injection in enquiry_detail.php
- CVE-2024-8921 Zita Elementor Site Library <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-8920 Fonto – Custom Web Fonts Manager <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-8919 Cross-site scripting in Confetti Fall Animation
- CVE-2024-8918 File Manager Pro <= 8.3.9 - Unauthenticated Limited JavaScript File Upload
- CVE-2024-8917 AnWP Football Leagues <= 0.16.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-8916 Suki Sites Import <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-8915 Category Icon <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-8914 Cross-site scripting in Thanh Toán Quét Mã QR Code Tự Động – MoMo, ViettelPay, VNPay và 40 ngân hàng Việt Nam
- CVE-2024-8913 Information disclosure in The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce
- CVE-2024-8912 HTTP Request Smuggling in Looker
- CVE-2024-8911 LatePoint <= 5.0.11 - Unauthenticated Arbitrary User Password Change via SQL Injection
- CVE-2024-8910 Information disclosure in HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- CVE-2024-8909 Other in Chrome
- CVE-2024-8908 Other in Chrome
- CVE-2024-8907 Cross-site scripting in Chrome
- CVE-2024-8906 Other in Chrome
- CVE-2024-8905 Memory corruption in Chrome
- CVE-2024-8904 Memory corruption in Chrome
- CVE-2024-8903 Privilege escalation in Acronis Cyber Protect Cloud Agent
- CVE-2024-8902 Information disclosure in Addon Elements for Elementor (formerly Elementor Addon Elements)
- CVE-2024-8901 Lack of JWT issuer and signer validation
- CVE-2024-8900 Security feature bypass in Firefox
- CVE-2024-8899 Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template
- CVE-2024-8898 Path Traversal in parisneo/lollms-webui
- CVE-2024-8897 Open redirect in Firefox for Android
- CVE-2024-8896 Autodesk AutoCAD DXF File Parsing Unitialized Variable Code Execution Vulnerability
- CVE-2024-8894 Out-of-bounds Write vulnerability in ODA SDK versions < 2025.10
- CVE-2024-8893 Hardcoded credentials in GW1500‑XS
- CVE-2024-8892 Uncontrolled Resource Consumption vulnerability on CIRCUTOR TCP2RS+
- CVE-2024-8891 Exposure of Private Personal Information to an Unauthorized Actor vulnerability on CIRCUTOR Q-SMT
- CVE-2024-8890 Insertion of Sensitive Information Into Sent Data vulnerability on CIRCUTOR Q-SMT
- CVE-2024-8889 Improper Input Validation vulnerability on CIRCUTOR TCP2RS+
- CVE-2024-8888 Insufficient Session Expiration vulnerability on CIRCUTOR Q-SMT
- CVE-2024-8887 Authentication bypass vulnerability on CIRCUTOR Q-SMT
- CVE-2024-8885 Privilege escalation in Sophos Intercept X
- CVE-2024-8884 Information disclosure in System Monitor application in Harmony Industrial PC HMIBMO/HMIBMI/HMIPSO/HMIBMP/HMIBMU/HMIPSP/HMIPEP series
- CVE-2024-8883 Keycloak: vulnerable redirect uri validation results in open redirec
- CVE-2024-8882 Memory corruption in GS1900-48 firmware
- CVE-2024-8881 Command injection in GS1900-48 firmware
- CVE-2024-8880 playSMS Template index.php code injection
- CVE-2024-8878 Unauthenticated Password Reset
- CVE-2024-8877 SQL Injection
- CVE-2024-8876 xiaohe4966 TpMeCMS lang path traversal
- CVE-2024-8875 vedees wcms finder.php path traversal
- CVE-2024-8874 AJAX Login and Registration modal popup + inline form <= 2.24 - Reflected Cross-Site Scripting
- CVE-2024-8873 PeproDev WooCommerce Receipt Uploader <= 2.6.9 - Reflected Cross-Site Scripting
- CVE-2024-8872 Store Hours for WooCommerce <= 4.3.20 - Reflected Cross-Site Scripting
- CVE-2024-8871 Pricing Tables WordPress Plugin – Easy Pricing Tables <= 3.2.5 - Reflected Cross-Site Scripting
- CVE-2024-8870 Forms for Mailchimp by Optin Cat – Grow Your MailChimp List <= 2.5.7 - Reflected Cross-Site Scripting
- CVE-2024-8869 TOTOLINK A720R exportOvpn os command injection
- CVE-2024-8868 code-projects Crud Operation System savedata.php sql injection
- CVE-2024-8867 Perfex CRM Parameter Clients.php cross site scripting
- CVE-2024-8866 AutoCMS robot.php cross site scripting
- CVE-2024-8865 composiohq composio api.py path path traversal
- CVE-2024-8864 composiohq composio calculator.py Calculator code injection
- CVE-2024-8863 aimhubio aim Text Explorer textbox.tsx dangerouslySetInnerHTML cross site scripting
- CVE-2024-8862 h2oai h2o-3 JDBC Connection 1 getConnectionSafe deserialization
- CVE-2024-8861 Cross-site scripting in ProfileGrid – User Profiles, Groups and Communities