Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 159 of 521.
- CVE-2024-7582 Tenda i22 apPortalAccessCodeAuth formApPortalAccessCodeAuth buffer overflow
- CVE-2024-7581 Tenda A301 WifiBasicSet formWifiBasicSet stack-based overflow
- CVE-2024-7580 Alien Technology ALR-F800 system.html os command injection
- CVE-2024-7579 Alien Technology ALR-F800 File Name upgrade.cgi popen os command injection
- CVE-2024-7578 Alien Technology ALR-F800 cmd.php improper authorization
- CVE-2024-7577 IBM InfoSphere Information Server information disclosure
- CVE-2024-7576 Progress UI for WPF format provider unsafe deserialization vulnerability
- CVE-2024-7575 Improper neutralization special element in hyperlinks
- CVE-2024-7574 Christmasify! <= 1.5.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2024-7573 Relevanssi Live Ajax Search <= 2.4 - Unauthenticated WP_Query Argument Injection
- CVE-2024-7572 Misconfiguration in Desktop and Server Management
- CVE-2024-7571 Privilege escalation in Secure Access Client
- CVE-2024-7570 Security feature bypass in ITSM
- CVE-2024-7569 Information disclosure in ITSM
- CVE-2024-7568 Favicon Generator <= 1.5 - Cross-Site Request Forgery to Arbitrary File Deletion
- CVE-2024-7567 Rockwell Automation Micro850/870 Vulnerable to denial-of-service Vulnerability via CIP/Modbus Port
- CVE-2024-7565 SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability
- CVE-2024-7564 Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability
- CVE-2024-7562 Privilege escalation in InstallShield
- CVE-2024-7561 The Next <= 1.1.0 - Authenticated (Contributor+) PHP Object Injection
- CVE-2024-7560 News Flash <= 1.1.0 - Authenticated (Editor+) PHP Object Injection
- CVE-2024-7559 File Manager Pro <= 8.3.7 - Authenticated (Subscriber+) Arbitrary File Upload
- CVE-2024-7558 JUJU_CONTEXT_ID is a predictable authentication secret
- CVE-2024-7557 Odh-dashboard: odh-model-controller: cross-model authentication bypass in openshift ai
- CVE-2024-7556 Wordpress Simple Share Plugin <=0.5.3 - Admin+ XSS
- CVE-2024-7554 Exposure of Sensitive Information to an Unauthorized Actor in GitLab
- CVE-2024-7553 Accessing Untrusted Directory May Allow Local Privilege Escalation
- CVE-2024-7552 DataGear Data Schema Page ConversionSqlParamValueMapper.java evaluateVariableExpression expression language injection
- CVE-2024-7551 juzaweb CMS Theme Editor default path traversal
- CVE-2024-7550 Memory corruption in Chrome
- CVE-2024-7548 LearnPress – WordPress LMS Plugin <= 4.2.6.9.3 - Authenticated (Contributor+) SQL Injection via order Parameter
- CVE-2024-7547 oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability
- CVE-2024-7546 oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability
- CVE-2024-7545 oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability
- CVE-2024-7544 oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability
- CVE-2024-7543 oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability
- CVE-2024-7542 oFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability
- CVE-2024-7541 oFono AT CMT Command Uninitialized Variable Information Disclosure Vulnerability
- CVE-2024-7540 oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability
- CVE-2024-7539 oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability
- CVE-2024-7538 oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability
- CVE-2024-7537 oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-7536 Use after free in Chrome
- CVE-2024-7535 Memory corruption in Chrome
- CVE-2024-7534 Memory corruption in Chrome
- CVE-2024-7533 Use after free in Chrome
- CVE-2024-7532 Memory corruption in Chrome
- CVE-2024-7531 Weak cryptography in Firefox
- CVE-2024-7530 Use after free in Firefox
- CVE-2024-7529 Security feature bypass in Firefox
- CVE-2024-7528 Use after free in Firefox
- CVE-2024-7527 Use after free in Firefox
- CVE-2024-7526 Information disclosure in Firefox
- CVE-2024-7525 Security feature bypass in Firefox
- CVE-2024-7524 Cross-site scripting in Firefox
- CVE-2024-7523 Security feature bypass in Firefox
- CVE-2024-7522 Memory corruption in Firefox
- CVE-2024-7521 Use after free in Firefox
- CVE-2024-7520 Memory corruption in Firefox
- CVE-2024-7519 Memory corruption in Firefox
- CVE-2024-7518 Other in Firefox
- CVE-2024-7517 Privileged escalation via crafted use of portcfg command
- CVE-2024-7516 Brocade Fabric OS before 9.2.2 does not enforce strict host key checking
- CVE-2024-7515 Denial of service in Compact GuardLogix 5380 (5069 – L3zS2)
- CVE-2024-7514 WordPress Comments Import & Export <= 2.3.7 - Authenticated (Author+) Arbitrary File Read via Directory Traversal
- CVE-2024-7513 Rockwell Automation FactoryTalk® View Site Edition Code Execution Vulnerability via File Permissions
- CVE-2024-7512 Concrete CMS Stored XSS in Board instances
- CVE-2024-7511 Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-7510 Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-7509 Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-7508 Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-7507 Denial of service in Compact GuardLogix 5380 (5069- L3zS2)
- CVE-2024-7506 itsourcecode Tailoring Management System setlogo.php unrestricted upload
- CVE-2024-7505 itsourcecode Bike Delivery System contact_us_action.php sql injection
- CVE-2024-7503 WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover
- CVE-2024-7502 Delta Electronics DIAScreen Stack-Based Buffer Overflow
- CVE-2024-7501 Download Plugins and Themes from Dashboard <= 1.8.7 - Cross-Site Request Forgery
- CVE-2024-7500 itsourcecode Airline Reservation System admin_class.php save_settings unrestricted upload
- CVE-2024-7499 itsourcecode Airline Reservation System flights.php sql injection
- CVE-2024-7498 itsourcecode Airline Reservation System Admin Login Page login.php login2 sql injection
- CVE-2024-7497 itsourcecode Airline Reservation System index.php file inclusion
- CVE-2024-7496 itsourcecode Airline Reservation System index.php file inclusion
- CVE-2024-7495 itsourcecode Laravel Accounting System HomeController.php unrestricted upload
- CVE-2024-7494 SourceCodester Clinics Patient Management System new_prescription.php sql injection
- CVE-2024-7493 WPCOM Member <= 1.5.2.1 - Unauthenticated Privilege Escalation via User Meta
- CVE-2024-7492 MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update
- CVE-2024-7491 HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.1 - Insecure Direct Object Reference to Unsubscribe
- CVE-2024-7490 Remote Code Execution in Advanced Software Framework DHCP server
- CVE-2024-7489 Cross-site scripting in Forms for Mailchimp by Optin Cat – Grow Your MailChimp List
- CVE-2024-7488 Business Logic Error in RestApp Inc.'s Online Ordering System
- CVE-2024-7487 Improper Authentication in WSO2 Identity Server 7.0.0 Allows Bypass of App-Native Authentication
- CVE-2024-7486 MultiPurpose <= 1.2.0 - Authenticated (Contributor+) PHP Object Injection
- CVE-2024-7485 Traffic Manager <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting
- CVE-2024-7484 CRM Perks Forms <= 1.1.3 - Authenticated (Administrator+) Arbitrary File Upload
- CVE-2024-7481 Improper signature verification of Printer driver installation in TeamViewer Remote Clients
- CVE-2024-7480 Improper access control in Avaya Aura System Manager
- CVE-2024-7479 Improper signature verification of VPN driver installation in TeamViewer Remote Clients
- CVE-2024-7478 Username Enumeration via External User Stores in Multiple WSO2 Products Allows User Account Discovery
- CVE-2024-7477 Avaya Aura System Manager SQL injection vulnerability
- CVE-2024-7476 Broken Access Control in lunary-ai/lunary