Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 176 of 521.
- CVE-2024-58304 SPA-CART CMS < 2.0.0 Stored Cross-Site Scripting
- CVE-2024-58303 FoF Pretty Mail 1.1.2 Server Side Template Injection via Email Template Settings
- CVE-2024-58302 FoF Pretty Mail 1.1.2 Local File Inclusion via Email Template Settings
- CVE-2024-58301 Purei CMS 1.0 SQL Injection via Multiple Vulnerable Endpoints
- CVE-2024-58300 Siklu MultiHaul TG Series <= 2.0.0 Unauthenticated Credential Disclosure Vulnerability
- CVE-2024-5830 Memory corruption in Chrome
- CVE-2024-58299 PCMan FTP Server 2.0 Remote Buffer Overflow via 'pwd' Command
- CVE-2024-58298 Compuware iStrobe Web 20.13 Pre-Auth Remote Code Execution via File Upload
- CVE-2024-58297 PyroCMS v3.0.1 Stored Cross-Site Scripting via Admin Redirects
- CVE-2024-58296 CE Phoenix v1.0.8.20 Stored Cross-Site Scripting via admin/currencies.php
- CVE-2024-58295 ElkArte Forum 1.1.9 Authenticated Remote Code Execution via Theme Upload
- CVE-2024-58294 FreePBX 16 Authenticated Remote Code Execution via API Module
- CVE-2024-58293 Akaunting 3.1.8 Server-Side Template Injection via Multiple Form Fields
- CVE-2024-58292 XMB Forum 1.9.12.06 Persistent Cross-Site Scripting via Admin Templates
- CVE-2024-58291 Flatboard 3.2 Authenticated Stored Cross-Site Scripting via Forum Information Field
- CVE-2024-58290 Xhibiter NFT Marketplace 1.10.2 SQL Injection via Collections Endpoint
- CVE-2024-5829 smallweigit Avue avueUeditor cross site scripting
- CVE-2024-58289 Microweber 2.0.15 Stored Cross-Site Scripting via User Profile Fields
- CVE-2024-58288 Genexus Protection Server 9.7.2.10 Unquoted Service Path Privilege Escalation
- CVE-2024-58287 reNgine 2.2.0 Authenticated Command Injection via Scan Engine Configuration
- CVE-2024-58286 dizqueTV 1.5.3 Remote Code Execution via FFMPEG Executable Path
- CVE-2024-58285 Chyrp 2.5.2 Stored Cross-Site Scripting Vulnerability via Post Title
- CVE-2024-58284 PopojiCMS 2.0.1 Remote Command Execution via Authenticated Metadata Settings
- CVE-2024-58283 WBCE CMS 1.6.2 Remote Code Execution via Elfinder File Upload
- CVE-2024-58282 Serendipity 2.5.0 Remote Code Execution via Authenticated Media Upload
- CVE-2024-58281 Dotclear 2.29 Remote Code Execution via Authenticated File Upload
- CVE-2024-58280 CMSimple 5.15 Remote Command Execution via Extensions Configuration
- CVE-2024-5828 EL Injection Vulnerability in Hitachi Tuning Manager
- CVE-2024-58279 appRain CMF 4.0.5 Authenticated Remote Code Execution via Filemanager Upload
- CVE-2024-58278 IndigoSTAR Software - perl2exe <= V30.10C - Arbitrary Code Execution
- CVE-2024-58277 R Radio Network FM Transmitter 1.07 System Settings Disclosure
- CVE-2024-58276 Obi08-Enrollment System 1.0 get_subject.php SQL Injection
- CVE-2024-58275 Easywall 0.3.1 - Authenticated Command Injection in /ports-save Endpoint
- CVE-2024-58274 Command injection in CSMP iSecure Center
- CVE-2024-58273 Nagios Log Server < 2024R1.0.2 LPE from Apache/Backend Shell User to Root
- CVE-2024-5827 Arbitrary File Write by Prompt Injection via DuckDB SQL in vanna-ai/vanna
- CVE-2024-58269 Rancher exposes sensitive information through audit logs
- CVE-2024-58267 Rancher CLI SAML authentication is vulnerable to phishing attacks
- CVE-2024-58266 Multiple issues involving quote API in shlex
- CVE-2024-58265 Unauthenticated Nonce Increment in snow
- CVE-2024-58264 serde-json-wasm stack overflow during recursive JSON parsing
- CVE-2024-58263 CosmWasm affected by arithmetic overflows
- CVE-2024-58262 curve25519-dalek has timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub`
- CVE-2024-58261 Low severity (DoS) vulnerability in sequoia-openpgp
- CVE-2024-58260 Rancher update on users can deny the service to the admin
- CVE-2024-5826 Remote Code Execution via Prompt Injection in vanna-ai/vanna
- CVE-2024-58259 Rancher affected by unauthenticated Denial of Service
- CVE-2024-58258 Server-side request forgery in SugarCRM
- CVE-2024-58257 Command injection in EnzoH-W5611T
- CVE-2024-58256 Command injection in EnzoH-W5611T
- CVE-2024-58255 Command injection in EnzoH-W5611T
- CVE-2024-58253 obfstr Type Confusion vulnerability
- CVE-2024-58252 Information disclosure in HarmonyOS
- CVE-2024-58251 Denial of service in BusyBox
- CVE-2024-58250 Privilege escalation in ppp
- CVE-2024-58249 Denial of service in wxWidgets
- CVE-2024-58248 Race condition in nopCommerce
- CVE-2024-58241 Bluetooth: hci_core: Disable works on hci_unregister_dev
- CVE-2024-58240 tls: separate no-async decryption request handling from async
- CVE-2024-5824 Path Traversal in parisneo/lollms
- CVE-2024-58239 tls: stop recv() if initial process_rx_list gave us non-DATA
- CVE-2024-58238 Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- CVE-2024-58237 bpf: consider that tail calls invalidate packet pointers
- CVE-2024-5823 File Overwrite Vulnerability in gaizhenbiao/chuanhuchatgpt
- CVE-2024-5822 Server-Side Request Forgery (SSRF) in gaizhenbiao/ChuanhuChatGPT
- CVE-2024-5821 Local File Inclusion (LFI) in stitionai/devika
- CVE-2024-5820 Unprotected WebSocket in stitionai/devika
- CVE-2024-5819 Cross-site scripting in Kadence Blocks — Page Builder Toolkit for Gutenberg Editor
- CVE-2024-5818 Cross-site scripting in Royal Addons for Elementor – Addons and Templates Kit for Elementor
- CVE-2024-5817 Improper authorization allows read access to issue content in GitHub Enterprise Server
- CVE-2024-5816 Improper authorization allows persistent access in GitHub Enterprise Server
- CVE-2024-5815 Cross Site Request Forgery was identified in GitHub Enterprise Server that allowed write in a user owned repository
- CVE-2024-5814 Unverifed Ciphersuite used on a client-side TLS1.3 Downgrade
- CVE-2024-58136 Yiiframework Yii Improper Protection of Alternate Path
- CVE-2024-58135 Weak cryptography in Mojolicious
- CVE-2024-58134 Weak cryptography in Mojolicious
- CVE-2024-58133 Race condition in chainmaker-go
- CVE-2024-58132 Race condition in chainmaker-go
- CVE-2024-58131 Race condition in FISCO-BCOS
- CVE-2024-58130 Cross-site scripting in MISP
- CVE-2024-5813 SSH Private Key Leak in BeyondInsight PasswordSafe
- CVE-2024-58129 Cross-site scripting in MISP
- CVE-2024-58128 Cross-site scripting in MISP
- CVE-2024-58127 Auth bypass in EMUI
- CVE-2024-58126 Auth bypass in EMUI
- CVE-2024-58125 Auth bypass in EMUI
- CVE-2024-58124 Auth bypass in EMUI
- CVE-2024-5812 Smart Rule Overwrite Bypass in BeyondInsight PasswordSafe
- CVE-2024-58117 Memory corruption in HarmonyOS
- CVE-2024-58116 Memory corruption in HarmonyOS
- CVE-2024-58115 Memory corruption in HarmonyOS
- CVE-2024-58114 Denial of service in HarmonyOS
- CVE-2024-58113 Denial of service in HarmonyOS
- CVE-2024-58112 Denial of service in HarmonyOS
- CVE-2024-58111 Denial of service in HarmonyOS
- CVE-2024-58110 Memory corruption in HarmonyOS
- CVE-2024-5811 Simple Video Directory < 1.4.4 - Contributor+ Stored XSS
- CVE-2024-58109 Memory corruption in HarmonyOS
- CVE-2024-58108 Memory corruption in HarmonyOS
- CVE-2024-58107 Memory corruption in HarmonyOS