Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 184 of 521.
- CVE-2024-56951 An issue in Hangzhou Bobo Technology Co Ltd UU Game Booster iOS 10.6.13 allows attackers to access sensitive user information via supplying a crafted link.
- CVE-2024-56950 An issue in KuGou Technology Co., Ltd KuGou Concept iOS 4.0.61 allows attackers to access sensitive user information via supplying a crafted link.
- CVE-2024-5695 Memory corruption in Firefox
- CVE-2024-56949 An issue in Guangzhou Polar Future Culture Technology Co., Ltd University Search iOS 2.27.0 allows attackers to access sensitive user inform
- CVE-2024-56948 An issue in KuGou Technology CO.
- CVE-2024-56947 An issue in Xiamen Meitu Technology Co., Ltd.
- CVE-2024-56946 Denial of service in technitium:dnsserver
- CVE-2024-56940 Denial of service in learndash:learndash
- CVE-2024-5694 Use after free in Firefox
- CVE-2024-56939 Cross-site scripting in learndash:learndash
- CVE-2024-56938 Cross-site scripting in learndash:learndash
- CVE-2024-5693 Security feature bypass in Firefox
- CVE-2024-56924 Cross-site request forgery in codeastro:internet banking system
- CVE-2024-56923 Cross site scripting in Silverpeas Core
- CVE-2024-56921 Denial of service in open5gs:open5gs
- CVE-2024-5692 Security feature bypass in Firefox
- CVE-2024-56918 Cross-site scripting in netbox:netbox
- CVE-2024-56917 Cross-site scripting in netbox:netbox
- CVE-2024-56916 Cross-site scripting in netbox:netbox
- CVE-2024-56915 Cross-site scripting in netbox:netbox
- CVE-2024-56914 Memory corruption in dlink:dsl-3782 firmware
- CVE-2024-5691 Security feature bypass in Firefox
- CVE-2024-56908 In Perfex Crm < 3.2.1, an authenticated attacker can send a crafted HTTP POST request to the affected upload_sales_file endpoint.
- CVE-2024-56903 Geovision GV-ASWeb with the version 6.1.1.0 or less allows attackers to modify POST request method with the GET against critical functionali
- CVE-2024-56902 Information disclosure vulnerability in Geovision GV-ASManager web application with the version v6.1.0.0 or less, which discloses account in
- CVE-2024-56901 A Cross-Site Request Forgery (CSRF) vulnerability in Geovision GV-ASWeb application with the version 6.1.1.0 or less that allows attackers t
- CVE-2024-5690 Information disclosure in Firefox
- CVE-2024-56898 Broken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less.
- CVE-2024-56897 Missing authorization in yitechnology:yi car dashcam firmware
- CVE-2024-5689 Other in Firefox
- CVE-2024-56889 Missing authorization in codeastro:complaint management system
- CVE-2024-56883 Missing authorization in sagedpw:sage dpw
- CVE-2024-56882 Cross-site scripting in sagedpw:sage dpw
- CVE-2024-5688 Use after free in Firefox
- CVE-2024-5687 Security feature bypass in Firefox
- CVE-2024-5686 Cross-site scripting in WPZOOM Addons for Elementor – Starter Templates & Widgets
- CVE-2024-5685 Broken Function Level Authorization (BFLA) in snipe/snipe-it
- CVE-2024-56841 Auth bypass in Mendix LDAP
- CVE-2024-56840 Code injection in RUGGEDCOM ROX MX5000
- CVE-2024-5684 ID Charger Connect & Pro - JWT-Null-Algorithm
- CVE-2024-56839 Code injection in RUGGEDCOM ROX MX5000
- CVE-2024-56838 Code injection in RUGGEDCOM ROX MX5000
- CVE-2024-56837 Command injection in RUGGEDCOM ROX MX5000
- CVE-2024-56836 Command injection in RUGGEDCOM ROX MX5000
- CVE-2024-56835 Code injection in RUGGEDCOM ROX MX5000
- CVE-2024-56830 The Net::EasyTCP package 0.15 through 0.26 for Perl uses Perl's builtin rand() if no strong randomization module is present.
- CVE-2024-5683 Remote Code Execution in Next4Biz's BPM
- CVE-2024-56829 Huang Yaoshi Pharmaceutical Management Software through 16.0 allows arbitrary file upload via a .asp filename in the fileName element of the
- CVE-2024-56828 File upload in 1000mz:chestnutcms
- CVE-2024-56827 Openjpeg: heap buffer overflow in lib/openjp2/j2k.c
- CVE-2024-56826 Openjpeg: heap buffer overflow in bin/common/color.c
- CVE-2024-5682 User Enumeration in Yordam Information Technology's Yordam Library Automation System
- CVE-2024-56812 IBM EntireX information disclosure
- CVE-2024-56811 IBM EntireX information disclosure
- CVE-2024-56810 IBM EntireX information disclosure
- CVE-2024-5681 Other in EcoStruxure Foxboro DCS Core Control Services
- CVE-2024-56808 Media Streaming add-on
- CVE-2024-56807 Media Streaming add-on
- CVE-2024-56805 QTS, QuTS hero
- CVE-2024-56804 Video Station
- CVE-2024-56803 Ghostty improperly handles window title sequences which can lead to arbitrary command execution
- CVE-2024-56802 Tapir allows DeployKey exposure
- CVE-2024-56801 Tasklists has Blind SQL Injection in /ajax/reorder.php
- CVE-2024-56800 Firecrawl has SSRF Vulnerability via malicious scrape target
- CVE-2024-5680 Denial of service in EcoStruxure Foxboro DCS Core Control Services
- CVE-2024-56799 Simofa Allows Unauthenticated Access to API Routes
- CVE-2024-5679 Memory corruption in EcoStruxure Foxboro DCS Core Control Services
- CVE-2024-56788 net: ethernet: oa_tc6: fix tx skb race condition between reference pointers
- CVE-2024-56787 soc: imx8m: Probe the SoC driver as platform driver
- CVE-2024-56785 MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
- CVE-2024-56784 drm/amd/display: Adding array index check to prevent memory corruption
- CVE-2024-56783 netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
- CVE-2024-56782 ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration()
- CVE-2024-56780 quota: flush quota_release_work upon quota writeback
- CVE-2024-5678 SQL Injection
- CVE-2024-56779 nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
- CVE-2024-56778 drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check
- CVE-2024-56777 drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- CVE-2024-56776 drm/sti: avoid potential dereference of error pointers
- CVE-2024-56775 drm/amd/display: Fix handling of plane refcount
- CVE-2024-56774 btrfs: add a sanity check for btrfs root in btrfs_search_slot()
- CVE-2024-56773 kunit: Fix potential null dereference in kunit_device_driver_test()
- CVE-2024-56772 kunit: string-stream: Fix a UAF bug in kunit_init_suite()
- CVE-2024-56771 mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information
- CVE-2024-56770 net/sched: netem: account for backlog updates from child qdisc
- CVE-2024-5677 Featured Image Generator <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Images Upload
- CVE-2024-56769 media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
- CVE-2024-56768 bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP
- CVE-2024-56767 dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
- CVE-2024-56766 mtd: rawnand: fix double free in atmel_pmecc_create_user()
- CVE-2024-56765 powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
- CVE-2024-56764 ublk: detach gendisk from ublk device if add_disk() fails
- CVE-2024-56763 tracing: Prevent bad count for tracing_cpumask_write
- CVE-2024-56761 x86/fred: Clear WFE in missing-ENDBRANCH #CPs
- CVE-2024-56760 PCI/MSI: Handle lack of irqdomain gracefully
- CVE-2024-5676 Paradox IP150 Internet Module Cross-Site Request Forgery
- CVE-2024-56759 btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- CVE-2024-56758 btrfs: check folio mapping after unlock in relocate_one_folio()
- CVE-2024-56757 Bluetooth: btusb: mediatek: add intf release flow when usb disconnect
- CVE-2024-56756 nvme-pci: fix freeing of the HMB descriptor table