Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 171 of 521.
- CVE-2024-6282 Cross-site scripting in Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits
- CVE-2024-6281 Path Traversal in parisneo/lollms
- CVE-2024-6280 SourceCodester Simple Online Bidding System unrestricted upload
- CVE-2024-6279 lahirudanushka School Management System Exam Results Page examresults-par.php sql injection
- CVE-2024-6278 lahirudanushka School Management System Subject Page subject.php sql injection
- CVE-2024-6277 lahirudanushka School Management System Student Page student.php sql injection
- CVE-2024-6276 lahirudanushka School Management System Teacher Page teacher.php sql injection
- CVE-2024-6275 lahirudanushka School Management System Parent Page parent.php sql injection
- CVE-2024-6274 lahirudanushka School Management System Attendance Report Page attendancelist.php sql injection
- CVE-2024-6273 SourceCodester Clinic Queuing System patient_side.php save_patient cross site scripting
- CVE-2024-6272 SpiderContacts <= 1.1.7 - Reflected XSS
- CVE-2024-6271 Community Events < 1.5 - Event Deletion via CSRF
- CVE-2024-6270 Community Events < 1.5.1 - Admin+ Stored XSS
- CVE-2024-6269 Ruijie RG-UAC HTTP POST Request sxh_vpnlic.php get_ip.addr_details command injection
- CVE-2024-6268 lahirudanushka School Management System Login Page login.php sql injection
- CVE-2024-6267 SourceCodester Service Provider Management System System Info Page index.php cross site scripting
- CVE-2024-6266 Pear Admin Boot loadDictItem sql injection
- CVE-2024-6265 SQL injection in UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP
- CVE-2024-6264 Post Meta Data Manager <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-6263 WP Lightbox 2 <= 3.0.6.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
- CVE-2024-6262 Portfolio Gallery – Image Gallery Plugin <= 1.6.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
- CVE-2024-6261 Image Photo Gallery Final Tiles Grid <= 3.6.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
- CVE-2024-6260 Malwarebytes Antimalware Link Following Local Privilege Escalation Vulnerability
- CVE-2024-6259 BT: HCI: adv_ext_report Improper discarding in adv_ext_report
- CVE-2024-6258 BT: Missing length checks of net_buf in rfcomm_handle_data
- CVE-2024-6257 HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation
- CVE-2024-6256 Cross-site scripting in Feeds for YouTube (YouTube video, channel, and gallery plugin)
- CVE-2024-6255 Path Traversal in gaizhenbiao/chuanhuchatgpt
- CVE-2024-6254 Brizy – Page Builder <= 2.5.1 - Cross-Site Request Forgery
- CVE-2024-6253 itsourcecode Online Food Ordering System purchase.php sql injection
- CVE-2024-6252 Zorlan SkyCaiji Task cross site scripting
- CVE-2024-6251 playSMS New Phonebook cross site scripting
- CVE-2024-6250 Absolute Path Traversal in parisneo/lollms-webui
- CVE-2024-6249 Wyze Cam v3 TCP Traffic Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-6248 Wyze Cam v3 Cloud Infrastructure Improper Authentication Remote Code Execution Vulnerability
- CVE-2024-6247 Wyze Cam v3 Wi-Fi SSID OS Command Injection Remote Code Execution Vulnerability
- CVE-2024-6246 Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-6245 Default Credentials in ssh service for SmartPlay in Maruti Suzuki
- CVE-2024-6244 pz-frontend-manager < 1.0.6 - CSRF change user profile picture
- CVE-2024-6243 HTML Forms < 1.3.33 - Admin+ Stored XSS
- CVE-2024-6242 Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices
- CVE-2024-6241 Pear Admin Boot getDictItems sql injection
- CVE-2024-6240 Improper privilege management vulnerability in Parallels Desktop
- CVE-2024-6239 Poppler: pdfinfo: crash in broken documents when using -dests parameter
- CVE-2024-6238 pgAdmin 4 Installation Directory permission issue
- CVE-2024-6237 389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request
- CVE-2024-6236 Denial of Service
- CVE-2024-6235 Sensitive information disclosure
- CVE-2024-6233 Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability
- CVE-2024-6232 Regular-expression DoS when parsing TarFile headers
- CVE-2024-6231 Request a Quote < 2.4.1 - Admin+ Stored XSS
- CVE-2024-6230 Pardakht Delkhah <= 2.9.8 - Form Fields Reset via CSRF
- CVE-2024-6229 Stored XSS in stangirard/quivr
- CVE-2024-6228 WANotifier < 2.6 - Subscriber+ LFI
- CVE-2024-6227 Infinite Loop in aimhubio/aim
- CVE-2024-6226 WpStickyBar <= 2.1.0 - Reflected XSS
- CVE-2024-6225 Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2024-6224 Send email only on Reply to My Comment <= 1.0.6 - Stored XSS via CSRF
- CVE-2024-6223 Send email only on Reply to My Comment <= 1.0.6 - Reflected XSS
- CVE-2024-6222 Security feature bypass in Docker Desktop
- CVE-2024-6221 Improper Access Control in corydolphin/flask-cors
- CVE-2024-6220 简数采集器 (Keydatas) <= 2.5.2 - Unauthenticated Arbitrary File Upload
- CVE-2024-6219 lxd has a restricted TLS certificate privilege escalation when in PKI mode
- CVE-2024-6218 itsourcecode Vehicle Management System busprofile.php sql injection
- CVE-2024-6217 SourceCodester Food Ordering Management System user-router.php sql injection
- CVE-2024-6216 SourceCodester Food Ordering Management System add-users.php sql injection
- CVE-2024-6215 SourceCodester Food Ordering Management System view-ticket-admin.php sql injection
- CVE-2024-6214 SourceCodester Food Ordering Management System add-item.php sql injection
- CVE-2024-6213 SourceCodester Food Ordering Management System Login Panel login.php sql injection
- CVE-2024-6212 SourceCodester Simple Student Attendance System student_form.php get_student cross site scripting
- CVE-2024-6210 Duplicator <= 1.5.9 - Full Path Disclosure
- CVE-2024-6209 unauthorized file access
- CVE-2024-6208 Download Manager <= 3.2.97 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-6207 Denial of service in Compact GuardLogix 5380 SIL 2
- CVE-2024-6206 Code injection in HPE Athonet Mobile Core
- CVE-2024-6205 PayPlus Payment Gateway < 6.6.9 - Unauthenticated SQLi
- CVE-2024-6204 SQL injection
- CVE-2024-6203 HaloITSM - Password Reset Poisoning
- CVE-2024-6202 HaloITSM - SAML XML Signature Wrapping (XSW)
- CVE-2024-6201 HaloITSM - Emailing Template Injection
- CVE-2024-6200 HaloITSM - Stored Cross-Site Scripting in Tickets
- CVE-2024-6199 Unauthenticated Remote Code Execution
- CVE-2024-6198 SNORE Interface Unauthenticated Remote Code Execution
- CVE-2024-6197 freeing stack buffer in utf8asn1str
- CVE-2024-6196 itsourcecode Banking Management System admin_class.php sql injection
- CVE-2024-6195 itsourcecode Tailoring Management System orderadd.php sql injection
- CVE-2024-6194 itsourcecode Tailoring Management System editmeasurement.php sql injection
- CVE-2024-6193 itsourcecode Vehicle Management System driverprofile.php sql injection
- CVE-2024-6192 itsourcecode Loan Management System Login Page login.php sql injection
- CVE-2024-6191 itsourcecode Student Management System Login Page login.php sql injection
- CVE-2024-6190 itsourcecode Farm Management System Login index.php sql injection
- CVE-2024-6189 Tenda A301 WifiExtraSet fromSetWirelessRepeat stack-based overflow
- CVE-2024-6188 Parsec Automation TrackSYS pagedefinition direct request
- CVE-2024-6187 Ruijie RG-UAC sub_commit.php os command injection
- CVE-2024-6186 Ruijie RG-UAC commit.php os command injection
- CVE-2024-6185 Ruijie RG-UAC commit.php get_ip_addr_details os command injection
- CVE-2024-6184 Ruijie RG-UAC reboot_commit.php os command injection
- CVE-2024-6183 EZ-Suite EZ-Partner Forgot Password cross site scripting
- CVE-2024-6182 LabVantage LIMS cross site scripting
- CVE-2024-6181 LabVantage LIMS cross site scripting