Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 152 of 521.
- CVE-2024-8332 master-nan Sweet-CMS index sql injection
- CVE-2024-8331 OpenRapid RapidCMS user-move-run.php sql injection
- CVE-2024-8330 Gether Technology 6SHR System - Unrestricted File Upload
- CVE-2024-8329 Gether Technology 6SHR System - SQL Injection
- CVE-2024-8328 HWA JIUH DIGITAL TECHNOLOGY Easy test Online Learning and Testing Platform - Reflected XSS
- CVE-2024-8327 HWA JIUH DIGITAL TECHNOLOGY Easy test Online Learning and Testing Platform - SQL injection
- CVE-2024-8326 Information disclosure in s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions
- CVE-2024-8325 Cross-site scripting in BlockSpare — News, Magazine and Blog Addons for (Gutenberg) Block Editor
- CVE-2024-8324 XO Slider <= 3.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-8323 Cross-site scripting in Pricing Table WordPress Plugin – Easy Pricing Tables
- CVE-2024-8322 Auth bypass in Endpoint Manager
- CVE-2024-8321 Missing authorization in Endpoint Manager
- CVE-2024-8320 Auth bypass in Endpoint Manager
- CVE-2024-8319 Tourfic <= 2.11.20 - Cross-Site Request Forgery in Multiple Functions
- CVE-2024-8318 Cross-site scripting in Attributes for Blocks
- CVE-2024-8317 Cross-site scripting in WP AdCenter – Ad Manager & Adsense Ads
- CVE-2024-8316 Progress UI for WPF format provider unsafe deserialization vulnerability
- CVE-2024-8315 Improper Handling of Insufficient Permissions or Privileges in B&R APROL
- CVE-2024-8314 Improper session handling in B&R APROL
- CVE-2024-8313 Default or Guessable SNMP community names in B&R APROL
- CVE-2024-8312 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2024-8311 Improper Protection of Alternate Path in GitLab
- CVE-2024-8310 OPW Fuel Management Systems SiteSentinel Missing Authentication for Critical Function
- CVE-2024-8309 SQL Injection in langchain-ai/langchain
- CVE-2024-8308 Siempelkamp: SQL injection due to improper handling of HTTP request input data
- CVE-2024-8306 Privilege escalation in Vijeo Designer
- CVE-2024-8305 MongoDB Server secondaries may crash due to forced index constraints
- CVE-2024-8304 jpress Template Module edit path traversal
- CVE-2024-8303 dingfanzu CMS getBasicInfo.php sql injection
- CVE-2024-8302 dingfanzu CMS chpwd.php sql injection
- CVE-2024-8301 dingfanzu CMS checkin.php sql injection
- CVE-2024-8300 Malicious Code Execution Vulnerability in GENESIS64 and ICONICS Suite
- CVE-2024-8299 Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32
- CVE-2024-8298 Information disclosure in EMUI
- CVE-2024-8297 kitsada8621 Digital Library Management System jwt_refresh_token_middleware.go JwtRefreshAuth neutralization for logs
- CVE-2024-8296 FeehiCMS index.php insert unrestricted upload
- CVE-2024-8295 FeehiCMS index.php createBanner unrestricted upload
- CVE-2024-8294 FeehiCMS index.php update unrestricted upload
- CVE-2024-8292 Auth bypass in WP-Recall – Registration, Profile, Commerce & More
- CVE-2024-8291 Concrete CMS Stored XSS in Image Editor Background Color
- CVE-2024-8290 Missing authorization in WCFM – Frontend Manager for WooCommerce
- CVE-2024-8289 Missing authorization in MultiVendorX – WooCommerce Multivendor Marketplace Solutions
- CVE-2024-8288 Cross-site scripting in Guten Post Layout – An Advanced Post Grid Collection
- CVE-2024-8287 Security feature bypass in Anbox Cloud
- CVE-2024-8286 GDPR Cookie Consent <= 2.6.0 - Bulk Delete via CSRF
- CVE-2024-8285 Kroxylicious: missing upstream kafka tls hostname verification
- CVE-2024-8284 Download Manager <= 3.2.98 - Admin+ Stored XSS
- CVE-2024-8283 Slider by 10Web < 1.2.59 - Admin+ Stored XSS
- CVE-2024-8282 Cross-site scripting in Ibtana – WordPress Website Builder
- CVE-2024-8281 Command injection in HX Enclosure Certified Node (ThinkAgile) XCC
- CVE-2024-8280 Command injection in HX Enclosure Certified Node (ThinkAgile) XCC
- CVE-2024-8279 Command injection in HX Enclosure Certified Node (ThinkAgile) XCC
- CVE-2024-8278 Command injection in HX Enclosure Certified Node (ThinkAgile) XCC
- CVE-2024-8277 WooCommerce Photo Reviews Premium <= 1.3.13.2 - Authentication Bypass to Account Takeover and Privilege Escalation
- CVE-2024-8276 Cross-site scripting in WPZOOM Portfolio Lite – Filterable Portfolio Plugin
- CVE-2024-8275 The Events Calendar <= 6.6.4 - Unauthenticated SQL Injection
- CVE-2024-8274 WP Booking Calendar <= 10.5 - Reflected Cross-Site Scripting
- CVE-2024-8273 Auth bypass in Server
- CVE-2024-8272 macOS Universal Audio (UAConnect) <= 2.7.0 - Local Privilege Escalation
- CVE-2024-8271 FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution
- CVE-2024-8270 macOS Rocket.Chat: TCC Policy Bypass via Dylib Injection Due to Missing Code Signing Flags and Dangerous Entitlements
- CVE-2024-8269 MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registration
- CVE-2024-8268 Frontend Dashboard <= 2.2.4 - Authenticated (Subscriber+) Arbitrary Function Call
- CVE-2024-8267 Cross-site scripting in Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player
- CVE-2024-8266 Execution with Unnecessary Privileges in GitLab
- CVE-2024-8264 Information disclosure in Robot Schedule Enterprise
- CVE-2024-8263 Privilege escalation in GitHub Enterprise Server
- CVE-2024-8262 Path Traversal in Proliz Software's OBS
- CVE-2024-8261 IDOR in Proliz Software's OBS
- CVE-2024-8260 OPA SMB Force-Authentication
- CVE-2024-8259 Unauthenticated SQLi in Eryaz IT's NatraCar B2B Dealer Management Program
- CVE-2024-8258 Insecure Electron Fuses in Logitech Options Plus Allowing Arbitrary Code Execution on macOS
- CVE-2024-8256 Incorrect Permission Assignment in RutOS based routers and TSWOS based managed switches
- CVE-2024-8255 Path Traversal in Ocean Data Systems Dream Report
- CVE-2024-8254 Code injection in Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress
- CVE-2024-8253 Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Authenticated (Subscriber+) Privilege Escalation
- CVE-2024-8252 Clean Login <= 1.14.5 - Authenticated (Contributor+) Local File Inclusion
- CVE-2024-8251 Prisma Injection in mintplex-labs/anything-llm
- CVE-2024-8250 Expired Pointer Dereference in Wireshark
- CVE-2024-8249 Unauthenticated Denial of Service (DoS) in mintplex-labs/anything-llm
- CVE-2024-8248 Path Traversal in mintplex-labs/anything-llm
- CVE-2024-8247 Newsletters <= 4.9.9.2 - Authenticated Privilege Escalation
- CVE-2024-8246 Privilege escalation in Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
- CVE-2024-8245 GamiPress - Reset User <= 1.0.0 - GamiPress User Data Removal via CSRF
- CVE-2024-8244 Walk/WalkDir in path/filepath susceptible to symlink race
- CVE-2024-8243 Plugin Upgrade Time Out <= 1.0 - Stored XSS via CSRF
- CVE-2024-8242 File upload in MStore API – Create Native Android & iOS Apps On The Cloud
- CVE-2024-8241 Nova Blocks by Pixelgrade <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute
- CVE-2024-8239 Starbox < 3.5.3 - Contributor+ Stored XSS
- CVE-2024-8238 Unrestricted Code Execution in aimhubio/aim
- CVE-2024-8237 Inefficient Algorithmic Complexity in GitLab
- CVE-2024-8236 Cross-site scripting in Elementor Website Builder – more than just a page builder
- CVE-2024-8235 Libvirt: crash of virtinterfaced via virconnectlistinterfaces()
- CVE-2024-8234 Command injection in NWA1100-N firmware
- CVE-2024-8233 Inefficient Algorithmic Complexity in GitLab
- CVE-2024-8232 iniNet Solutions SpiderControl SCADA Web Server Unrestricted Upload of File with Dangerous Type
- CVE-2024-8231 Tenda O6 setPortForward fromVirtualSet stack-based overflow
- CVE-2024-8230 Tenda O6 setMacFilterList fromSafeSetMacFilter stack-based overflow
- CVE-2024-8229 Tenda O6 operateMacFilter frommacFilterModify stack-based overflow
- CVE-2024-8228 Tenda O5 setMacFilterList fromSafeSetMacFilter stack-based overflow