Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 162 of 521.
- CVE-2024-7263 Arbitrary Code Execution in WPS Office
- CVE-2024-7262 Kingsoft WPS Office Path Traversal
- CVE-2024-7261 Command injection in NWA1123ACv3 firmware
- CVE-2024-7260 Keycloak-core: open redirect on account page
- CVE-2024-7259 Ovirt-engine: potential exposure of cleartext provider passwords via web ui
- CVE-2024-7258 Missing authorization in WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping
- CVE-2024-7257 File upload in YayExtra – WooCommerce Extra Product Options
- CVE-2024-7256 Memory corruption in Chrome
- CVE-2024-7255 Memory corruption in Chrome
- CVE-2024-7254 Stack overflow in Protocol Buffers Java Lite
- CVE-2024-7253 NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- CVE-2024-7252 Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability
- CVE-2024-7251 Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability
- CVE-2024-7250 Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability
- CVE-2024-7249 Comodo Firewall Link Following Local Privilege Escalation Vulnerability
- CVE-2024-7248 Comodo Internet Security Pro Directory Traversal Local Privilege Escalation Vulnerability
- CVE-2024-7247 Cross-site scripting in Element Pack – Widgets, Templates & Addons for Elementor
- CVE-2024-7246 HPACK table poisoning in gRPC C++, Python & Ruby
- CVE-2024-7245 Panda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation Vulnerability
- CVE-2024-7244 Panda Security Dome VPN DLL Hijacking Local Privilege Escalation Vulnerability
- CVE-2024-7243 Panda Security Dome Link Following Local Privilege Escalation Vulnerability
- CVE-2024-7242 Panda Security Dome Link Following Local Privilege Escalation Vulnerability
- CVE-2024-7241 Panda Security Dome Link Following Local Privilege Escalation Vulnerability
- CVE-2024-7240 F-Secure Total Link Following Local Privilege Escalation Vulnerability
- CVE-2024-7239 VIPRE Advanced Security Link Following Local Privilege Escalation Vulnerability
- CVE-2024-7238 VIPRE Advanced Security SBAMSvc Link Following Local Privilege Escalation Vulnerability
- CVE-2024-7237 AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability
- CVE-2024-7236 AVG AntiVirus Free icarus Arbitrary File Creation Denial of Service Vulnerability
- CVE-2024-7235 AVG AntiVirus Free Link Following Denial-of-Service Vulnerability
- CVE-2024-7234 AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability
- CVE-2024-7233 Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability
- CVE-2024-7232 Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability
- CVE-2024-7231 Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability
- CVE-2024-7230 Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability
- CVE-2024-7229 Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability
- CVE-2024-7228 Avast Free Antivirus Link Following Denial-of-Service Vulnerability
- CVE-2024-7227 Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability
- CVE-2024-7226 SourceCodester Medicine Tracker System Password Change cross-site request forgery
- CVE-2024-7225 SourceCodester Insurance Management System Edit Insurance Policy Page update_policy cross site scripting
- CVE-2024-7224 SourceCodester Lot Reservation Management System lot_details.php sql injection
- CVE-2024-7223 SourceCodester Lot Reservation Management System view_model.php sql injection
- CVE-2024-7222 SourceCodester Lot Reservation Management System home.php sql injection
- CVE-2024-7221 SourceCodester/Campcodes School Log Management System manage_user.php sql injection
- CVE-2024-7220 SourceCodester/Campcodes School Log Management System print_barcode.php sql injection
- CVE-2024-7219 SourceCodester/Campcodes School Log Management System ajax.php sql injection
- CVE-2024-7218 SourceCodester/Campcodes School Log Management System ajax.php cross site scripting
- CVE-2024-7217 TOTOLINK CA300-PoE cstecgi.cgi loginauth buffer overflow
- CVE-2024-7216 TOTOLINK LR1200 shadow.sample hard-coded password
- CVE-2024-7215 TOTOLINK LR1200 cstecgi.cgi NTPSyncWithHost command injection
- CVE-2024-7214 TOTOLINK LR350 cstecgi.cgi setWanCfg command injection
- CVE-2024-7213 TOTOLINK A7000R cstecgi.cgi setWizardCfg buffer overflow
- CVE-2024-7212 TOTOLINK A7000R cstecgi.cgi loginauth buffer overflow
- CVE-2024-7211 The Duende Identity Server based component in 1E Platform may allow URL redirections to untrusted websites.
- CVE-2024-7209 CVE-2024-7209
- CVE-2024-7208 CVE-2024-7208
- CVE-2024-7206 Firmware extraction and Hardware SSL Pinning Bypass
- CVE-2024-7205 sharing unnecessary device-sensitive information allows Secondary user able to take over devices as primary user
- CVE-2024-7204 Ai3 QbiBot - Stored XSS
- CVE-2024-7203 Command injection in ATP series firmware
- CVE-2024-7202 Simopro Technology WinMatrix3 Web package - SQL Injection
- CVE-2024-7201 Simopro Technology WinMatrix3 Web package - SQL Injection
- CVE-2024-7200 SourceCodester Complaints Report Management System cross site scripting
- CVE-2024-7199 SourceCodester Complaints Report Management System manage_user.php sql injection
- CVE-2024-7198 SourceCodester Complaints Report Management System manage_station.php sql injection
- CVE-2024-7197 SourceCodester Complaints Report Management System manage_complaint.php sql injection
- CVE-2024-7196 SourceCodester Complaints Report Management System sql injection
- CVE-2024-7195 itsourcecode Society Management System check_admin.php sql injection
- CVE-2024-7194 itsourcecode Society Management System check_student.php sql injection
- CVE-2024-7193 Mp3tag DLL tak_deco_lib.dll uncontrolled search path
- CVE-2024-7192 itsourcecode Society Management System student.php unrestricted upload
- CVE-2024-7191 itsourcecode Society Management System get_balance.php sql injection
- CVE-2024-7190 itsourcecode Society Management System get_price.php sql injection
- CVE-2024-7189 itsourcecode Online Food Ordering System editproduct.php unrestricted upload
- CVE-2024-7188 Bylancer Quicklancer GET Parameter listing sql injection
- CVE-2024-7187 TOTOLINK A3600R cstecgi.cgi UploadCustomModule buffer overflow
- CVE-2024-7186 TOTOLINK A3600R cstecgi.cgi setWiFiAclAddConfig buffer overflow
- CVE-2024-7185 TOTOLINK A3600R cstecgi.cgi setWebWlanIdx buffer overflow
- CVE-2024-7184 TOTOLINK A3600R cstecgi.cgi setUrlFilterRules buffer overflow
- CVE-2024-7183 TOTOLINK A3600R cstecgi.cgi setUploadSetting buffer overflow
- CVE-2024-7182 TOTOLINK A3600R cstecgi.cgi setUpgradeFW buffer overflow
- CVE-2024-7181 TOTOLINK A3600R cstecgi.cgi setTelnetCfg command injection
- CVE-2024-7180 TOTOLINK A3600R cstecgi.cgi setPortForwardRules buffer overflow
- CVE-2024-7179 TOTOLINK A3600R cstecgi.cgi setParentalRules buffer overflow
- CVE-2024-7178 TOTOLINK A3600R cstecgi.cgi setMacQos buffer overflow
- CVE-2024-7177 TOTOLINK A3600R cstecgi.cgi setLanguageCfg buffer overflow
- CVE-2024-7176 TOTOLINK A3600R cstecgi.cgi setIpQosRules buffer overflow
- CVE-2024-7175 TOTOLINK A3600R cstecgi.cgi setDiagnosisCfg os command injection
- CVE-2024-7174 TOTOLINK A3600R cstecgi.cgi setdeviceName buffer overflow
- CVE-2024-7173 TOTOLINK A3600R cstecgi.cgi loginauth buffer overflow
- CVE-2024-7172 TOTOLINK A3600R getSaveConfig buffer overflow
- CVE-2024-7171 TOTOLINK A3600R cstecgi.cgi NTPSyncWithHost os command injection
- CVE-2024-7170 TOTOLINK A3000RU product.ini hard-coded password
- CVE-2024-7169 SourceCodester School Fees Payment System ajax.php cross-site request forgery
- CVE-2024-7168 SourceCodester School Fees Payment System manage_user.php sql injection
- CVE-2024-7167 SourceCodester School Fees Payment System manage_course.php sql injection
- CVE-2024-7166 SourceCodester School Fees Payment System receipt.php sql injection
- CVE-2024-7165 SourceCodester School Fees Payment System view_payment.php sql injection
- CVE-2024-7164 SourceCodester School Fees Payment System sql injection
- CVE-2024-7163 SeaCMS index.php cross site scripting
- CVE-2024-7162 SeaCMS cross site scripting