Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 166 of 521.
- CVE-2024-6825 Remote Code Execution in BerriAI/litellm
- CVE-2024-6824 Missing authorization in Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- CVE-2024-6823 File upload in Media Library Assistant
- CVE-2024-6822 IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-6821 IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-6820 IrfanView AWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-6819 IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-6818 IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-6817 IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-6816 IrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-6815 IrfanView RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-6814 NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability
- CVE-2024-6813 NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability
- CVE-2024-6812 IrfanView WSQ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-6811 IrfanView WSQ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-6810 Quiz Organizer <= 2.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2024-6809 Simple Video Directory < 1.4.3 - Unauthenticated SQLi
- CVE-2024-6808 itsourcecode Simple Task List signUp.php insertUserRecord sql injection
- CVE-2024-6807 SourceCodester Student Study Center Desk Management System HTTP POST Request Users.php cross site scripting
- CVE-2024-6806 Missing Authorization Checks In NI VeriStand Gateway For Project Resources
- CVE-2024-6805 Missing Authorization Checks in NI VeriStand Gateway for File Transfer Resources
- CVE-2024-6804 Jeg Elementor Kit <= 2.6.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File
- CVE-2024-6803 itsourcecode Document Management System insert.php sql injection
- CVE-2024-6802 SourceCodester Computer Laboratory Management System Master.php sql injection
- CVE-2024-6801 SourceCodester Online Student Management System add-students.php unrestricted upload
- CVE-2024-6800 Auth bypass in GitHub Enterprise Server
- CVE-2024-6799 Missing authorization in YITH Essential Kit for WooCommerce #1
- CVE-2024-6798 DL Verification <= 1.2 - Admin+ Stored XSS
- CVE-2024-6797 DL Robots.txt <= 1.2 - Admin+ Stored XSS
- CVE-2024-6796 Vulnerability in Baxter Connex Health Portal
- CVE-2024-6795 Vulnerability in Baxter Connex Health Portal
- CVE-2024-6794 Deserialization of Untrusted Data in NI VeriStand Waveform Streaming Server
- CVE-2024-6793 Deserialization of Untrusted Data in NI VeriStand DataLogging Server
- CVE-2024-6792 WP ULike < 4.7.2.1 - Subscriber+ Stored-XSS
- CVE-2024-6791 Directory Path Traversal Vulnerability in NI VeriStand with vsmodel Files
- CVE-2024-6790 Mali GPU Kernel Driver can cause the whole system to become unresponsive
- CVE-2024-6789 Path traversal in M-Files API
- CVE-2024-6788 Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password
- CVE-2024-6787 MXview One Series vulnerable to Time-of-check Time-of-use (TOCTOU) Race Condition
- CVE-2024-6786 MXview One Series vulnerable to Path Traversal
- CVE-2024-6785 MXview One and MXview One Central Manager Series store cleartext credentials in a local file
- CVE-2024-6784 SSRF Server Side Request Forgery
- CVE-2024-6783 Vue client-side XSS via prototype pollution
- CVE-2024-6782 Calibre Remote Code Execution
- CVE-2024-6781 Calibre Arbitrary File Read
- CVE-2024-6780 Improper permission control in com.android.server.telecom
- CVE-2024-6779 Memory corruption in Chrome
- CVE-2024-6778 Race condition in Chrome
- CVE-2024-6777 Use after free in Chrome
- CVE-2024-6776 Use after free in Chrome
- CVE-2024-6775 Use after free in Chrome
- CVE-2024-6774 Use after free in Chrome
- CVE-2024-6773 Memory corruption in Chrome
- CVE-2024-6772 Memory corruption in Chrome
- CVE-2024-6770 Cross-site scripting in VPSUForm – Drag & Drop Contact Form Builder with Email Automation
- CVE-2024-6769 Medium to High Integrity Privilege Escalation in Microsoft Windows
- CVE-2024-6768 Denial of Service in CLFS.sys
- CVE-2024-6767 WordSurvey <= 3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via sounding_title Parameter
- CVE-2024-6766 Shortcodes Ultimate Pro < 7.2.1 - Contributor+ Stored XSS
- CVE-2024-6763 Jetty URI parsing of invalid authority
- CVE-2024-6762 Jetty PushSessionCacheFilter can cause remote DoS attacks
- CVE-2024-6760 ktrace(2) fails to detach when executing a setuid binary
- CVE-2024-6759 NFS client accepts file names containing path separators
- CVE-2024-6758 Improper Privilege Management vulnerability in Sprecher Automation SPRECON-E
- CVE-2024-6757 Elementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt Function
- CVE-2024-6756 Social Auto Poster <= 5.3.14 - Authenticated (Contributor+) Arbitrary File Upload
- CVE-2024-6755 Social Auto Poster <= 5.3.14 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
- CVE-2024-6754 Missing authorization in Social Auto Poster
- CVE-2024-6753 Social Auto Poster <= 5.3.14 - Unauthenticated Stored Cross-Site Scripting
- CVE-2024-6752 Social Auto Poster <= 5.3.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting
- CVE-2024-6751 Social Auto Poster <= 5.3.14 - Cross-Site Request Forgery via Multiple Functions
- CVE-2024-6750 Social Auto Poster <= 5.3.14 - Missing Authorization via Multiple Functions
- CVE-2024-6749 Information disclosure in AXIS Camera Station
- CVE-2024-6748 SQL Injection
- CVE-2024-6747 Information leak in mknotifyd
- CVE-2024-6746 NaiboWang EasySpider HTTP GET Request server.js path traversal
- CVE-2024-6745 code-projects Simple Ticket Booking Login adminauthenticate.php sql injection
- CVE-2024-6744 Memory corruption in Secure Email Gateway
- CVE-2024-6743 AguardNet Space Management System - SQL injection
- CVE-2024-6742 AguardNet Space Management System - Reflected Cross-Site Scripting
- CVE-2024-6741 Openfind Mail2000 - HttpOnly flag bypass
- CVE-2024-6740 Openfind Mail2000 - Stored XSS
- CVE-2024-6739 Openfind MailGates and MailAudit - Sensitive Cookie Without 'HttpOnly' Flag
- CVE-2024-6738 WisdomGarden Tronclass - Broken Access Control
- CVE-2024-6737 2100 TECHNOLOGY Electronic Official Document Management System - Broken Access Control
- CVE-2024-6736 SourceCodester Employee and Visitor Gate Pass Logging System view_employee.php sql injection
- CVE-2024-6735 itsourcecode Tailoring Management System setgeneral.php sql injection
- CVE-2024-6734 itsourcecode Tailoring Management System templateadd.php sql injection
- CVE-2024-6733 itsourcecode Tailoring Management System templateedit.php sql injection
- CVE-2024-6732 SourceCodester Student Study Center Desk Management System Users.php sql injection
- CVE-2024-6731 SourceCodester Student Study Center Desk Management System Master.php sql injection
- CVE-2024-6730 Nanjing Xingyuantu Technology SparkShop uploadFile unrestricted upload
- CVE-2024-6729 SourceCodester Kortex Lite Advocate Office Management System add_act.php sql injection
- CVE-2024-6728 itsourcecode Tailoring Management System typeedit.php sql injection
- CVE-2024-6727 Broken Access Control in Delphix
- CVE-2024-6726 Remote Code Execution (RCE) in Delphix
- CVE-2024-6725 Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
- CVE-2024-6724 Generate Images – Magic Post Thumbnail < 5.2.8 - Admin+ Stored XSS
- CVE-2024-6723 AI Engine < 2.4.8 - Admin+ SQLi
- CVE-2024-6722 Chatbot Support AI <= 1.0.2 - Admin+ Stored XSS