Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 195 of 521.
- CVE-2024-5514 MinMax CMS - Hidden Functionality
- CVE-2024-5513 Kofax Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-5512 Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-5511 Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-55104 SQL injection in phpgurukul:online nurse hiring system
- CVE-2024-55103 SQL injection in phpgurukul:online nurse hiring system
- CVE-2024-55100 Cross-site scripting in phpgurukul:online nurse hiring system
- CVE-2024-5510 Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-55099 SQL injection in phpgurukul:online nurse hiring system
- CVE-2024-55093 Cross-site scripting in phpIPAM
- CVE-2024-5509 Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability
- CVE-2024-55089 Server-side request forgery in Rhymix
- CVE-2024-55088 Server-side request forgery in getsimple-ce:getsimple cms
- CVE-2024-55086 Server-side request forgery in getsimple-ce:getsimple cms
- CVE-2024-55085 Code injection in getsimple-ce:getsimple cms
- CVE-2024-55082 A Server-Side Request Forgery (SSRF) in the endpoint http://{your-server}/url-to-pdf of Stirling-PDF 0.35.1 allows attackers to access sensi
- CVE-2024-55081 An XML External Entity (XXE) injection vulnerability in the component /datagrip/upload of Chat2DB v0.3.5 allows attackers to execute arbitra
- CVE-2024-5508 Luxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-55078 An arbitrary file upload vulnerability in the component /adminUser/updateImg of WukongCRM-11.0-JAVA v11.3.3 allows attackers to execute arbi
- CVE-2024-55076 Cross-site request forgery in Grocy
- CVE-2024-55075 Information disclosure in Grocy
- CVE-2024-55074 Cross-site scripting in Grocy
- CVE-2024-55073 Missing authorization in mealie:mealie
- CVE-2024-55072 Missing authorization in mealie:mealie
- CVE-2024-55070 Missing authorization in mealie:mealie
- CVE-2024-5507 Luxion KeyShot Viewer KSP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-55069 Null dereference in ffmpeg:ffmpeg
- CVE-2024-55064 Cross-site scripting in easyvirt:dc netscope
- CVE-2024-55063 Code injection in easyvirt:dc netscope
- CVE-2024-55062 Code injection in easyvirt:co2scope
- CVE-2024-55060 Cross-site scripting in rafed-system:rafed cms website
- CVE-2024-5506 Luxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-55059 Cross-site scripting in phpgurukul:online birth certificate system
- CVE-2024-55058 Missing authorization in phpgurukul:online birth certificate system
- CVE-2024-55057 Weak cryptography in phpgurukul:online birth certificate system
- CVE-2024-55056 Cross-site scripting in phpgurukul:online birth certificate system
- CVE-2024-5505 NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability
- CVE-2024-55045 Firmament-Autopilot FMT-Firmware commit de5aec was discovered to contain a buffer overflow via the task_mavobc_entry function at /comm/task_comm.c.
- CVE-2024-55040 Cross-site scripting in sensaphone:web600 firmware
- CVE-2024-5504 Cross-site scripting in Rife Extensions & Templates for Elementor
- CVE-2024-55030 Command injection in nasa:fprime
- CVE-2024-5503 WP Blog Post Layouts <= 1.1.3 - Authenticated (Contributor+) Local File Inlcusion
- CVE-2024-55029 Cross-site scripting in nasa:fprime
- CVE-2024-55028 Code injection in nasa:fprime
- CVE-2024-55027 Information disclosure in weintek:cmt-3072xh2 firmware
- CVE-2024-55026 Command injection in weintek:cmt-3072xh2 firmware
- CVE-2024-55025 Missing authorization in weintek:cmt-3072xh2 firmware
- CVE-2024-55024 Auth bypass in weintek:cmt-3072xh2 firmware
- CVE-2024-55023 Hardcoded credentials in weintek:cmt-3072xh2 firmware
- CVE-2024-55022 Command injection in weintek:cmt-3072xh2 firmware
- CVE-2024-55021 Hardcoded credentials in weintek:cmt-3072xh2 firmware
- CVE-2024-55020 Command injection in weintek:cmt-3072xh2 firmware
- CVE-2024-5502 Piotnet Addons For Elementor <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
- CVE-2024-55019 Missing authorization in weintek:cmt-3072xh2 firmware
- CVE-2024-55017 Account Takeover in Corezoid 6.6.0 in the OAuth2 implementation via an open redirect in the redirect_uri parameter allows attackers to inter
- CVE-2024-55016 SQL injection in phpgurukul:student record system
- CVE-2024-5501 Cross-site scripting in Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder
- CVE-2024-55009 Cross-site scripting in datax:autobib
- CVE-2024-55008 Denial of service in jatos:jatos
- CVE-2024-55000 Cross-site scripting in mayurik:house rental management system
- CVE-2024-5500 Security feature bypass in Chrome
- CVE-2024-54999 Cross-site scripting in monicahq:monica
- CVE-2024-54998 Cross-site scripting in monicahq:monica
- CVE-2024-54997 Cross-site scripting in monicahq:monica
- CVE-2024-54996 Cross-site scripting in monicahq:monica
- CVE-2024-54994 Cross-site scripting in monicahq:monica
- CVE-2024-5499 Memory corruption in Chrome
- CVE-2024-54984 An issue in Quectel BG96 BG96MAR02A08M1G allows attackers to bypass authentication via a crafted NAS message.
- CVE-2024-54983 An issue in Quectel BC95-CNV V100R001C00SPC051 allows attackers to bypass authentication via a crafted NAS message.
- CVE-2024-54982 An issue in Quectel BC25 with firmware version BC25PAR01A06 allows attackers to bypass authentication via a crafted NAS message.
- CVE-2024-5498 Use after free in Chrome
- CVE-2024-5497 Memory corruption in Chrome
- CVE-2024-54961 Information disclosure in nagios:nagios xi
- CVE-2024-54960 SQL injection in nagios:nagios xi
- CVE-2024-5496 Use after free in Chrome
- CVE-2024-54959 Cross-site request forgery in nagios:nagios xi
- CVE-2024-54958 Cross-site scripting in nagios:nagios xi
- CVE-2024-54957 Open redirect in nagios:nagios xi
- CVE-2024-54954 Code injection in zhyd:oneblog
- CVE-2024-54952 Null dereference in mikrotik:routeros
- CVE-2024-54951 Cross-site scripting in monicahq:monica
- CVE-2024-5495 Use after free in Chrome
- CVE-2024-5494 Use after free in Chrome
- CVE-2024-54938 Information disclosure in lopalopa:e-learning management system
- CVE-2024-54937 Information disclosure in lopalopa:e-learning management system
- CVE-2024-54936 Cross-site scripting in lopalopa:e-learning management system
- CVE-2024-54935 Cross-site scripting in lopalopa:e-learning management system
- CVE-2024-54934 SQL injection in lopalopa:e-learning management system
- CVE-2024-54933 SQL injection in lopalopa:e-learning management system
- CVE-2024-54932 SQL injection in lopalopa:e-learning management system
- CVE-2024-54931 SQL injection in lopalopa:e-learning management system
- CVE-2024-54930 SQL injection in lopalopa:e-learning management system
- CVE-2024-5493 Memory corruption in Chrome
- CVE-2024-54929 SQL injection in lopalopa:e-learning management system
- CVE-2024-54928 SQL injection in lopalopa:e-learning management system
- CVE-2024-54927 SQL injection in lopalopa:e-learning management system
- CVE-2024-54926 SQL injection in lopalopa:e-learning management system
- CVE-2024-54925 SQL injection in lopalopa:e-learning management system
- CVE-2024-54924 SQL injection in lopalopa:e-learning management system
- CVE-2024-54923 SQL injection in lopalopa:e-learning management system