Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 148 of 521.
- CVE-2024-8760 Stackable – Page Builder Gutenberg Blocks <= 3.13.6 - Unauthenticated CSS Injection
- CVE-2024-8759 Nested Pages <= 3.2.8 - Editor+ Stored XSS
- CVE-2024-8758 Quiz and Survey Master (QSM) < 9.1.3 - Author+ Stored XSS
- CVE-2024-8757 Boost Your Blog's Engagement with WP Post Author <= 3.8.1 - Authenticated (Administrator+) SQL Injection
- CVE-2024-8756 Quform - WordPress Form Builder <= 2.20.0 - Unauthenticated Sensitive Information Exposure
- CVE-2024-8755 Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
- CVE-2024-8754 External Control of Critical State Data in GitLab
- CVE-2024-8752 WebIQ 2.15.9 Runtime on Windows - Directory Traversal Vulnerability
- CVE-2024-8751 CVE-2024-8751
- CVE-2024-8750 Cross-site Scripting vulnerability in Idoit pro
- CVE-2024-8749 SQL Injection vulnerability in Idoit pro
- CVE-2024-8748 Memory corruption in VMG8825-T50K firmware
- CVE-2024-8747 Email Obfuscate Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-8746 File Manager Pro <= 8.3.9 - Unauthenticated Backup File Download and Upload
- CVE-2024-8743 File upload in File Manager
- CVE-2024-8742 Cross-site scripting in Essential Addons for Elementor – Popular Elementor Templates & Widgets
- CVE-2024-8741 Beam me up Scotty – Back to Top Button <= 1.0.21 - Reflected Cross-Site Scripting
- CVE-2024-8740 GetResponse Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting
- CVE-2024-8739 ReCaptcha Integration for WordPress <= 1.2.5 - Reflected Cross-Site Scripting
- CVE-2024-8738 Seriously Simple Stats <= 1.6.0 - Reflected Cross-Site Scripting
- CVE-2024-8737 PDF Thumbnail Generator <= 1.3 - Reflected Cross-Site Scripting
- CVE-2024-8736 Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webui
- CVE-2024-8735 MailMunch – Grow your Email List <= 3.1.8 - Reflected Cross-Site Scripting
- CVE-2024-8734 Lucas String Replace <= 2.0.5 - Reflected Cross-Site Scripting
- CVE-2024-8733 HP One Agent Software – Potential Privilege Escalation
- CVE-2024-8732 Roles & Capabilities <= 1.1.9 - Reflected Cross-Site Scripting
- CVE-2024-8731 Cron Jobs <= 1.2.9 - Reflected Cross-Site Scripting
- CVE-2024-8730 Exit Notifier <= 1.10.4 - Reflected Cross-Site Scripting
- CVE-2024-8729 Easy Social Share Buttons <= 1.4.5 - Reflected Cross-Site Scripting
- CVE-2024-8728 Easy Load More <= 1.0.3 - Reflected Cross-Site Scripting
- CVE-2024-8727 DK PDF <= 1.9.6 - Reflected Cross-Site Scripting
- CVE-2024-8726 MailChimp Forms by MailMunch <= 3.2.3 - Reflected Cross-Site Scripting
- CVE-2024-8725 Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Upload
- CVE-2024-8724 Waitlist Woocommerce ( Back in stock notifier ) <= 2.7.5 - Reflected Cross-Site Scripting
- CVE-2024-8723 012 PS Multi Languages <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-8722 WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-8721 Tracking Code Manager <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-8720 RumbleTalk Live Group Chat – HTML5 <= 6.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-8719 Flexmls® IDX Plugin <= 3.14.22 - Reflected Cross-Site Scripting
- CVE-2024-8718 Gravity Forms Toolbar <= 1.7.0 - Reflected Cross-Site Scripting
- CVE-2024-8717 PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip <= 2.3.32 - Reflected Cross-Site Scripting
- CVE-2024-8716 XT Ajax Add To Cart for WooCommerce <= 1.1.2 - Reflected Cross-Site Scripting
- CVE-2024-8715 Simple LDAP Login <= 1.6.0 - Reflected Cross-Site Scripting
- CVE-2024-8714 WordPress Affiliates Plugin — SliceWP Affiliates <= 1.1.20 - Reflected Cross-Site Scripting
- CVE-2024-8713 Kodex Posts likes <= 2.5.0 - Reflected Cross-Site Scripting
- CVE-2024-8712 GTM Server Side <= 2.1.19 - Reflected Cross-Site Scripting
- CVE-2024-8711 SourceCodester Food Ordering Management System includes exposure of information through directory listing
- CVE-2024-8710 code-projects Inventory Management Products Table Page viewProduct.php sql injection
- CVE-2024-8709 SourceCodester Best House Rental Management System admin_class.php save_user sql injection
- CVE-2024-8708 SourceCodester Best House Rental Management System categories.php cross site scripting
- CVE-2024-8707 云课网络科技有限公司 Yunke Online School System Appadmin.php downfile path traversal
- CVE-2024-8706 JFinalCMS com.cms.util.TemplateUtils update path traversal
- CVE-2024-8705 SQL injection in Heating Network Wireless Monitoring System
- CVE-2024-8704 Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale
- CVE-2024-8703 Z-Downloads < 1.11.6 - Unauthenticated Stored XSS
- CVE-2024-8702 Backup Database <= 4.9 - Admin+ Stored XSS
- CVE-2024-8701 Event Calendar <= 1.0.4 - Admin+ Stored XSS
- CVE-2024-8700 Event Calendar <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion
- CVE-2024-8699 Z-Downloads < 1.11.5 - Admin+ Arbitrary File Upload
- CVE-2024-8698 Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak
- CVE-2024-8696 Code injection in Docker Desktop
- CVE-2024-8695 Code injection in Docker Desktop
- CVE-2024-8694 JFinalCMS com.cms.controller.admin.TemplateController update path traversal
- CVE-2024-8693 Kaon CG3000 dhcpcd Command cross site scripting
- CVE-2024-8692 TDuckCloud TDuckPro password recovery
- CVE-2024-8691 PAN-OS: User Impersonation in GlobalProtect Portal
- CVE-2024-8690 Cortex XDR Agent: Local Windows Administrator Can Disable the Agent
- CVE-2024-8689 ActiveMQ Content Pack: Cleartext Exposure of Credentials
- CVE-2024-8688 PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)
- CVE-2024-8687 PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes
- CVE-2024-8686 PAN-OS: Command Injection Vulnerability
- CVE-2024-8685 Path-Traversal vulnerability in Revolution Pi
- CVE-2024-8684 OS Command Injection vulnerability in Revolution Pi
- CVE-2024-8682 JNews - WordPress Newspaper Magazine Blog AMP Theme <= 11.6.6 - Unauthorized User Registration
- CVE-2024-8681 Cross-site scripting in Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- CVE-2024-8680 MailChimp for Wordpress <= 4.9.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2024-8679 Library Management System <= 3.1 - Authenticated (Admin+) SQL Injection
- CVE-2024-8678 Revolut Gateway for WooCommerce <= 4.17.3 - Missing Authorization to Unauthenticated Order Status Update
- CVE-2024-8676 Cri-o: checkpoint restore can be triggered from different namespaces
- CVE-2024-8675 Soumettre.fr <= 2.1.3 - Missing Authorization
- CVE-2024-8673 Z-Downloads < 1.11.7 - Admin+ Stored XSS via SVG Upload
- CVE-2024-8672 Code injection in Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets
- CVE-2024-8671 WooEvents <= 4.1.2 - Unauthenticated Arbitrary File Overwrite
- CVE-2024-8670 Photo Gallery by 10Web < 1.8.29 - Admin+ Stored XSS
- CVE-2024-8669 Backuply – Backup, Restore, Migrate and Clone <= 1.3.4 - Authenticated (Admin+) SQL Injection
- CVE-2024-8668 Cross-site scripting in ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
- CVE-2024-8667 Missing authorization in HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce
- CVE-2024-8666 Shoutcast Icecast HTML5 Radio Player <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-8665 YITH Custom Login <= 1.7.3 - Reflected Cross-Site Scripting
- CVE-2024-8664 WP Test Email <= 1.1.7 - Reflected Cross-Site Scripting
- CVE-2024-8663 WP Simple Booking Calendar <= 2.0.10 - Reflected Cross-Site Scripting
- CVE-2024-8662 Koko Analytics <= 1.3.12 - Reflected Cross-Site Scripting
- CVE-2024-8661 Concrete CMS version 9.0.0 to 9.3.3 and below 8.5.19 are vulnerable to Stored XSS in the "Next&Previous Nav" block
- CVE-2024-8660 Stored XSS in the "Top Navigator Bar" block
- CVE-2024-8658 Missing authorization in Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
- CVE-2024-8657 Garden Gnome Package <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-8656 WPFactory Helper <= 1.7.0 - Reflected Cross-Site Scripting
- CVE-2024-8655 Mercury MNVR816 web-static file access
- CVE-2024-8654 MongoDB Server may access non-initialized region of memory leading to unexpected behaviour
- CVE-2024-8653 Netcat CMS: multiple reflected cross-site scripting vulnerabilities in netshop module