Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 147 of 521.
- CVE-2024-8860 Tourfic <= 2.14.5 - Missing Authorization in Multiple Functions
- CVE-2024-8859 Path Traversal in mlflow/mlflow
- CVE-2024-8858 Cross-site scripting in Livemesh Addons by Elementor
- CVE-2024-8857 WordPress Auction <= 3.7 - Editor+ Stored XSS
- CVE-2024-8856 Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Upload
- CVE-2024-8855 WordPress Auction <= 3.7 - Editor+ SQL Injection
- CVE-2024-8854 Polls CP <= 1.0.75 - Admin+ Stored XSS via Custom Styles
- CVE-2024-8853 Webo-facto <= 1.40 - Unauthenticated Privilege Escalation
- CVE-2024-8852 All-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error Logs
- CVE-2024-8851 Polls CP <= 1.0.75 - Admin+ Stored Cross-Site Scripting
- CVE-2024-8850 MC4WP: Mailchimp for WordPress 4.9.9 - 4.9.16 - Reflected Cross-Site Scripting
- CVE-2024-8849 PDF-XChange Editor AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8848 PDF-XChange Editor AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8847 PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-8846 PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8845 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8844 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8843 PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8842 PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability
- CVE-2024-8841 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8840 PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-8839 PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8838 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-8837 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-8836 PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8835 PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8834 PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8833 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-8832 PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8831 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-8830 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-8829 PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8828 PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8827 PDF-XChange Editor PPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-8826 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-8825 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-8824 PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8823 PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8822 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8821 PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability
- CVE-2024-8820 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8819 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-8818 PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-8817 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-8816 PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability
- CVE-2024-8815 PDF-XChange Editor U3D File Parsing Memory Corruption Remote Code Execution Vulnerability
- CVE-2024-8814 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-8813 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-8812 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-8811 WinZip Mark-of-the-Web Bypass Vulnerability
- CVE-2024-8810 Privilege escalation in Enterprise Server
- CVE-2024-8809 Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability
- CVE-2024-8808 Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability
- CVE-2024-8807 Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability
- CVE-2024-8806 Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability
- CVE-2024-8805 BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability
- CVE-2024-8804 Code Embed <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-8803 Bulk NoIndex & NoFollow Toolkit <= 2.15 - Reflected Cross-Site Scripting
- CVE-2024-8802 Clio Grow <= 1.0.2 - Reflected Cross-Site Scripting
- CVE-2024-8801 Happy Addons for Elementor <= 3.12.2 - Authenticated (Contributor+) Sensitive Information Exposure
- CVE-2024-8800 Cross-site scripting in RabbitLoader – AI Speed Optimization, Caching & CDN for WordPress & WooCommerce
- CVE-2024-8799 Custom Banners <= 3.3 - Reflected Cross-Site Scripting
- CVE-2024-8798 Bluetooth: classic: avdtp: missing buffer length check
- CVE-2024-8797 WP Booking System – Booking Calendar <= 2.0.19.8 - Reflected Cross-Site Scripting
- CVE-2024-8796 Insufficient Default OTP Shared Secret Length
- CVE-2024-8795 BA Book Everything <= 1.6.20 - Cross-Site Request Forgery to Email Address Update/Account Takeover
- CVE-2024-8794 BA Book Everything <= 1.6.20 - Unauthenticated Arbitrary User Password Reset
- CVE-2024-8793 Cross-site scripting in Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers
- CVE-2024-8792 Subscribe to Comments <= 2.3 - Reflected Cross-Site Scripting
- CVE-2024-8791 Auth bypass in Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More
- CVE-2024-8790 Social Share With Floating Bar <= 1.0.3 - Reflected Cross-Site Scripting
- CVE-2024-8789 Regular Expression Denial of Service (ReDoS) in lunary-ai/lunary
- CVE-2024-8788 EU/UK VAT Manager for WooCommerce <= 2.12.12 - Reflected Cross-Site Scripting
- CVE-2024-8787 Smart Online Order for Clover <= 1.5.7 - Reflected Cross-Site Scripting
- CVE-2024-8786 Auto Featured Image from Title <= 2.3 - Reflected Cross-Site Scripting
- CVE-2024-8785 WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability
- CVE-2024-8784 QDocs Smart School Management System Chat mynewuser sql injection
- CVE-2024-8783 OpenTibiaBR MyAAC Post Reply new_post.php cross site scripting
- CVE-2024-8782 JFinalCMS edit delete path traversal
- CVE-2024-8781 Container Escape Vulnerability in TR7's Application Security Platform (ASP)
- CVE-2024-8780 The SYSCOM Group OMFLOW - Improper Authorization for Data Query Function
- CVE-2024-8779 The SYSCOM Group OMFLOW - Broken Access Control
- CVE-2024-8778 The SYSCOM Group OMFLOW - Arbitrary File Read
- CVE-2024-8777 The SYSCOM Group OMFLOW - Information Leakage
- CVE-2024-8776 INTUMIT SmartRobot - Cross-site Scripting
- CVE-2024-8775 Ansible-core: exposure of sensitive information in ansible vault files due to improper logging
- CVE-2024-8774 Privilege Escalation in SIMPLE.ERP
- CVE-2024-8773 Protocol Downgrade in SIMPLE.ERP
- CVE-2024-8772 Race condition in AXIS OS
- CVE-2024-8771 Missing authorization in Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress
- CVE-2024-8770 Cross-site scripting in GitHub Enterprise Server
- CVE-2024-8769 Arbitrary File Deletion via Relative Path Traversal in aimhubio/aim
- CVE-2024-8768 Vllm: a completions api request with an empty prompt will crash the vllm api server.
- CVE-2024-8767 Privilege escalation in Acronis Backup extension for Plesk
- CVE-2024-8766 Privilege escalation in Acronis Cyber Protect 16
- CVE-2024-8765 Improper Path Equivalence Resolution in lunary-ai/lunary
- CVE-2024-8764 Improper Authorization in lunary-ai/lunary
- CVE-2024-8763 Regular Expression Denial of Service (ReDoS) in lunary-ai/lunary
- CVE-2024-8762 code-projects Crud Operation System updatedata.php sql injection
- CVE-2024-8761 Share This Image <= 2.03 - Open Redirect via link Parameter