Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 181 of 521.
- CVE-2024-57605 Cross-site scripting in thedaylightstudio:fuel cms
- CVE-2024-57604 MaysWind ezBookkeeping has Improper Privilege Management
- CVE-2024-57603 Missing rate limit in MaysWind ezBookkeeping
- CVE-2024-57602 Easy!Appointments Improper Restriction of Excessive Authentication Attempts
- CVE-2024-57601 Remote code execution in alextselegidis/easyappointments
- CVE-2024-5760 Privilege escalation in Samsung Universal Print Driver
- CVE-2024-57599 Cross-site scripting in douco:douphp
- CVE-2024-57598 Denial of service in axiosys:bento4
- CVE-2024-57595 DLINK DIR-825 REVB 2.03 devices have an OS command injection vulnerability in the CGl interface apc_client_pin.cgi, which allows remote atta
- CVE-2024-57590 Command injection in trendnet:tew-632brp firmware
- CVE-2024-5759 Improper privilege management
- CVE-2024-57587 SQL injection in easyvirt:co2scope
- CVE-2024-57583 Command injection in tenda:ac18 firmware
- CVE-2024-57582 Memory corruption in tenda:ac18 firmware
- CVE-2024-57581 Memory corruption in tenda:ac18 firmware
- CVE-2024-57580 Memory corruption in tenda:ac18 firmware
- CVE-2024-57579 Memory corruption in tenda:ac18 firmware
- CVE-2024-57578 Memory corruption in tenda:ac18 firmware
- CVE-2024-57577 Memory corruption in tenda:ac18 firmware
- CVE-2024-57575 Memory corruption in tenda:ac18 firmware
- CVE-2024-5757 Cross-site scripting in Ultimate Addons for Elementor
- CVE-2024-5756 SQL injection in Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress
- CVE-2024-57556 Cross Site Scripting vulnerability in store2
- CVE-2024-5755 Email Validation Bypass in lunary-ai/lunary
- CVE-2024-57549 Path traversal in cmsimple:cmsimple
- CVE-2024-57548 Missing authorization in cmsimple:cmsimple
- CVE-2024-57547 Information disclosure in cmsimple:cmsimple
- CVE-2024-57546 Information disclosure in cmsimple:cmsimple
- CVE-2024-57545 Memory corruption in linksys:e8450 firmware
- CVE-2024-57544 Memory corruption in linksys:e8450 firmware
- CVE-2024-57543 Memory corruption in linksys:e8450 firmware
- CVE-2024-57542 Command injection in linksys:e8450 firmware
- CVE-2024-57541 Memory corruption in linksys:e8450 firmware
- CVE-2024-57540 Memory corruption in linksys:e8450 firmware
- CVE-2024-5754 BT: Encryption procedure host vulnerability
- CVE-2024-57539 Command injection in linksys:e8450 firmware
- CVE-2024-57538 Memory corruption in linksys:e8450 firmware
- CVE-2024-57537 Memory corruption in linksys:e8450 firmware
- CVE-2024-57536 Command injection in linksys:e8450 firmware
- CVE-2024-5753 Local File Read (LFI) by Prompt Injection via Postgres SQL in vanna-ai/vanna
- CVE-2024-57529 Cross-site scripting in jeppesen:jetplanner
- CVE-2024-57523 Cross-site request forgery in oretnom23:packers and movers management system
- CVE-2024-57522 Cross-site scripting in oretnom23:packers and movers management system
- CVE-2024-57521 SQL injection in ruoyi:ruoyi
- CVE-2024-57520 Path traversal in sangoma:asterisk
- CVE-2024-5752 Path Traversal in stitionai/devika
- CVE-2024-57519 Denial of service in open5gs:open5gs
- CVE-2024-57514 The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due to improper handling of directory listing paths in the web interface.
- CVE-2024-57513 A floating-point exception (FPE) vulnerability exists in the AP4_TfraAtom::AP4_TfraAtom function in Bento4.
- CVE-2024-57510 Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code
- CVE-2024-5751 Remote Code Execution in BerriAI/litellm
- CVE-2024-57509 Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code
- CVE-2024-57498 Cross-site scripting in forestblog project:forestblog
- CVE-2024-57494 Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter.
- CVE-2024-57493 Denial of service in redox-os:redox
- CVE-2024-57492 Integer overflow in redox-os:redox
- CVE-2024-57491 Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to access sensitive API w
- CVE-2024-57490 Auth bypass in ioffice:ioffice20
- CVE-2024-5749 Certain HP DesignJet products – Credential reflection
- CVE-2024-57488 Cross-site scripting in code-projects:online car rental system
- CVE-2024-57487 File upload in code-projects:online car rental system
- CVE-2024-57483 Memory corruption in tenda:i24 firmware
- CVE-2024-57482 Memory corruption in h3c:n12 firmware
- CVE-2024-57480 Memory corruption in h3c:n12 firmware
- CVE-2024-57479 Memory corruption in h3c:n12 firmware
- CVE-2024-57473 Memory corruption in h3c:n12 firmware
- CVE-2024-57471 Memory corruption in h3c:n12 firmware
- CVE-2024-5746 Server-side request forgery in GitHub Enterprise Server
- CVE-2024-57459 SQL injection in vishalmathur:cloudclassroom-php project
- CVE-2024-57452 Path traversal in 1000mz:chestnutcms
- CVE-2024-57451 Path traversal in 1000mz:chestnutcms
- CVE-2024-57450 File upload in 1000mz:chestnutcms
- CVE-2024-5745 itsourcecode Bakery Online Ordering System unrestricted upload
- CVE-2024-57440 Memory corruption in dlink:dsl-3788 firmware
- CVE-2024-5744 WP eMember < 10.6.7 - Reflected XSS
- CVE-2024-57439 RuoYi vulnerable to Denial of Service by attackers with admin privileges
- CVE-2024-57438 RuoYi has insecure permissions
- CVE-2024-57437 SQL injection in ruoyi:ruoyi
- CVE-2024-57436 RuoYi allowed unauthorized attackers to view the session ID of the admin in the system monitoring
- CVE-2024-57435 Null dereference in macrozheng:mall-tiny
- CVE-2024-57434 Hardcoded credentials in macrozheng:mall-tiny
- CVE-2024-57433 Auth bypass in macrozheng:mall-tiny
- CVE-2024-57432 Hardcoded credentials in macrozheng:mall-tiny
- CVE-2024-57430 SQL injection in phpjabbers:cinema booking system
- CVE-2024-5743 Command Injection Vulnerability
- CVE-2024-57429 Cross-site request forgery in phpjabbers:cinema booking system
- CVE-2024-57428 Cross-site scripting in phpjabbers:cinema booking system
- CVE-2024-57427 Cross-site scripting in phpjabbers:cinema booking system
- CVE-2024-57426 NetMod VPN Client 5.3.1 is vulnerable to DLL injection, allowing an attacker to execute arbitrary code by placing a malicious DLL in a direc
- CVE-2024-57423 Cross-site scripting in vishalmathur:cloudclassroom-php project
- CVE-2024-5742 Privilege escalation in Red Hat Enterprise Linux 10
- CVE-2024-57412 An issue in SunOS Omnios v5.11 allows attackers to cause a Denial of Service (DoS) via repeatedly sending crafted TCP packets.
- CVE-2024-5741 XSS in inventory view
- CVE-2024-57409 Cross-site scripting in beian.miit:cool-admin-java
- CVE-2024-57408 File upload in beian.miit:cool-admin-java
- CVE-2024-57407 An arbitrary file upload vulnerability in the component /userPicture of Timo v2.0.3 allows attackers to execute arbitrary code via uploading a crafted file.
- CVE-2024-57401 SQL Injection vulnerability in Uniclare Student portal v.2 and before allows a remote attacker to execute arbitrary code via the Forgot Password function.
- CVE-2024-57395 Password Vulnerability in Safety production process management system v1.0 allows a remote attacker to escalate privileges, execute arbitrar
- CVE-2024-57394 Privilege escalation in qianxin:tianqing endpoint security management system
- CVE-2024-57392 Buffer Overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cause a Denial of Servic