Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 160 of 521.
- CVE-2024-7475 Improper Access Control in lunary-ai/lunary
- CVE-2024-7474 IDOR in lunary-ai/lunary
- CVE-2024-7473 IDOR Vulnerability in lunary-ai/lunary
- CVE-2024-7472 Email Injection Vulnerability in lunary-ai/lunary
- CVE-2024-7470 Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface vpn_template_style.php sslvpn_config_mod os command injection
- CVE-2024-7469 Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_vpn_web_custom.php sslvpn_config_mod os command injection
- CVE-2024-7468 Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_service_manage.php sslvpn_config_mod os command injection
- CVE-2024-7467 Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_ip_network.php sslvpn_config_mod os command injection
- CVE-2024-7466 PMWeb Web Application Firewall cross site scripting
- CVE-2024-7465 TOTOLINK CP450 cstecgi.cgi loginauth buffer overflow
- CVE-2024-7464 TOTOLINK CP900 Telnet Service setTelnetCfg command injection
- CVE-2024-7463 TOTOLINK CP900 cstecgi.cgi UploadCustomModule buffer overflow
- CVE-2024-7462 TOTOLINK N350RT cstecgi.cgi setWizardCfg buffer overflow
- CVE-2024-7461 ForIP Tecnologia Administração PABX monitcallcenter authMonitCallcenter sql injection
- CVE-2024-7460 OSWAPP Warehouse Inventory System change_password.php cross-site request forgery
- CVE-2024-7459 OSWAPP Warehouse Inventory System edit_account.php cross-site request forgery
- CVE-2024-7458 elunez eladmin Database Management/Deployment Management upload path traversal
- CVE-2024-7457 macOS Stash network-management utility: Unauthorized Manipulation of System Network Preferences
- CVE-2024-7456 SQL Injection in lunary-ai/lunary
- CVE-2024-7455 itsourcecode Tailoring Management System partedit.php sql injection
- CVE-2024-7454 SourceCodester Clinics Patient Management System patients.php patient_name sql injection
- CVE-2024-7453 FastAdmin Attachment Management Section 4 cross site scripting
- CVE-2024-7452 itsourcecode Placement Management System view_company.php sql injection
- CVE-2024-7451 itsourcecode Placement Management System apply_now.php sql injection
- CVE-2024-7450 itsourcecode Placement Management System Image resume_upload.php unrestricted upload
- CVE-2024-7449 itsourcecode Placement Management System login.php sql injection
- CVE-2024-7448 Magnet Forensics AXIOM Command Injection Remote Code Execution Vulnerability
- CVE-2024-7447 Missing authorization in Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
- CVE-2024-7446 itsourcecode Ticket Reservation System list_tickets.php sql injection
- CVE-2024-7445 itsourcecode Ticket Reservation System checkout_ticket_save.php sql injection
- CVE-2024-7444 itsourcecode Ticket Reservation System Login Page login.php sql injection
- CVE-2024-7443 Vivotek IB8367A upload_file.cgi getenv command injection
- CVE-2024-7442 Vivotek SD9364 upload_file.cgi getenv command injection
- CVE-2024-7441 Vivotek SD9364 httpd read stack-based overflow
- CVE-2024-7440 Vivotek CC8160 upload_file.cgi getenv command injection
- CVE-2024-7439 Vivotek CC8160 httpd read stack-based overflow
- CVE-2024-7438 SimpleMachines SMF User Alert Read Status index.php resource injection
- CVE-2024-7437 SimpleMachines SMF Delete User index.php resource injection
- CVE-2024-7436 D-Link DI-8100 msp_info.htm msp_info_htm command injection
- CVE-2024-7435 Attire <= 2.0.6 - Authenticated (Contributor+) PHP Object Injection
- CVE-2024-7434 UltraPress <= 1.2.2 - Authenticated (Contributor+) PHP Object Injection
- CVE-2024-7433 Empowerment <= 1.0.2 - Authenticated (Contributor+) PHP Object Injection
- CVE-2024-7432 Unseen Blog <= 1.0.0 - Authenticated (Contributor+) PHP Object Injection
- CVE-2024-7429 Zotpress <= 7.3.12 - Missing Authorization
- CVE-2024-7428 Potential Open Redirect issues affect OpenText™ Network Node Manager i (NNMi).
- CVE-2024-7427 Potential Cross-Site Scripting vulnerability affect OpenText™ Network Node Manager i (NNMi).
- CVE-2024-7426 Information disclosure in Community by PeepSo – Download from PeepSo.com
- CVE-2024-7425 WP All Export Pro <= 1.9.1 - Authenticated (ShopManager+) Arbtirary Options Update
- CVE-2024-7424 Multiple Page Generator Plugin – MPG <= 4.0.1 - Missing Authorization
- CVE-2024-7423 Stream <= 4.0.1 - Cross-Site Request Forgery to Arbitrary Options Update
- CVE-2024-7422 Theme My Login <= 7.1.7 - Cross-Site Request Forgery to Settings Update
- CVE-2024-7421 Information disclosure in Remote Desktop Manager
- CVE-2024-7420 Insert PHP Code Snippet <= 1.3.6 - Cross-Site Request Forgery to Code Snippet Activate/Deactivate/Deletion
- CVE-2024-7419 WP All Export Pro <= 1.9.1 - Unauthenticated Remote Code Execution via Custom Export Fields
- CVE-2024-7418 The Post Grid <= 7.7.11 - Authenticated (Contributor+) Information Disclosure
- CVE-2024-7417 Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure
- CVE-2024-7416 Reveal Template <= 3.7 - Unauthenticated Full Path Disclosure
- CVE-2024-7415 Remember Me Controls <= 2.0.1 - Unauthenticated Full Path Disclosure
- CVE-2024-7414 PDF Builder for WPForms <= 1.2.116 - Unauthenticated Full Path Disclosure
- CVE-2024-7413 Obfuscate Email <= 3.8.1 - Unauthenticated Full Path Disclosure
- CVE-2024-7412 No Update Nag <= 1.4.12 - Unauthenticated Full Path Disclosure
- CVE-2024-7411 Newsletters <= 4.9.9 - Unauthenticated Full Path Disclosure
- CVE-2024-7410 My Custom CSS PHP & ADS <= 3.3 - Unauthenticated Full Path Disclosure
- CVE-2024-7409 Qemu: denial of service via improper synchronization in qemu nbd server during socket closure
- CVE-2024-7408 Information Disclosure Vulnerability in Airveda Air Quality Monitor
- CVE-2024-7407 Weak password encoding in Streamsoft Prestiż
- CVE-2024-7404 Improper Restriction of Rendered UI Layers or Frames in GitLab
- CVE-2024-7402 Netskope Client Configuration Tampering with Local MITM
- CVE-2024-7401 Client Enrollment Process Bypass
- CVE-2024-7400 Local privilege escalation in ESET products for Windows
- CVE-2024-7399 Samsung MagicINFO 9 Server Path Traversal
- CVE-2024-7398 Concrete CMS Stored XSS Vulnerability in Calendar Event Addition Feature
- CVE-2024-7397 Unauthenticated Command Injection
- CVE-2024-7396 Plaintext Communication
- CVE-2024-7395 Insufficient Authentication
- CVE-2024-7394 Concrete CMS version 9.0.0 through 9.3.2 and below 8.5.18 - Stored XSS in getAttributeSetName()
- CVE-2024-7392 ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability
- CVE-2024-7391 ChargePoint Home Flex Bluetooth Low Energy Information Disclosure Vulnerability
- CVE-2024-7390 WP Testimonial Widget <= 3.1 - Missing Authorization
- CVE-2024-7389 Forminator <= 1.29.1 - HubSpot Developer API Key Sensitive Information Exposure
- CVE-2024-7388 WP Bannerize Pro <= 1.9.0 - Authenticated (Editor+) Stored Cross-Site Scripting
- CVE-2024-7387 Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy
- CVE-2024-7386 Premium Packages – Sell Digital Products Securely <= 5.9.1 - Cross-Site Request Forgery
- CVE-2024-7385 WordPress Simple HTML Sitemap <= 3.1 - Authenticated (Admin+) SQL Injection
- CVE-2024-7384 AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function
- CVE-2024-7383 Libnbd: nbd server improper certificate validation
- CVE-2024-7382 Linkify Text <= 1.9.1 - Unauthenticated Full Path Disclosure
- CVE-2024-7381 Geo Controller <= 8.6.9 - Missing Authorization to Unauthenticated Shortcode Execution
- CVE-2024-7380 Geo Controller <= 8.7.3 - Missing Authorization to Authenticated (Subscriber+) Menu Creation/Deletion
- CVE-2024-7378 SourceCodester Simple Realtime Quiz System manage_question.php sql injection
- CVE-2024-7377 SourceCodester Simple Realtime Quiz System view_result.php sql injection
- CVE-2024-7376 SourceCodester Simple Realtime Quiz System print_quiz_records.php sql injection
- CVE-2024-7375 SourceCodester Simple Realtime Quiz System my_quiz_result.php sql injection
- CVE-2024-7374 SourceCodester Simple Realtime Quiz System manage_user.php sql injection
- CVE-2024-7373 SourceCodester Simple Realtime Quiz System ajax.php sql injection
- CVE-2024-7372 SourceCodester Simple Realtime Quiz System quiz_board.php sql injection
- CVE-2024-7371 SourceCodester Simple Realtime Quiz System quiz_view.php sql injection
- CVE-2024-7370 SourceCodester Simple Realtime Quiz System manage_quiz.php sql injection
- CVE-2024-7369 SourceCodester Simple Realtime Quiz System Login ajax.php sql injection
- CVE-2024-7368 SourceCodester Simple Realtime Quiz System ajax.php cross site scripting