Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 201 of 521.
- CVE-2024-54169 IBM EntireX path traversal
- CVE-2024-54160 Cross-site scripting in OpenSearch
- CVE-2024-5416 Cross-site scripting in Elementor Website Builder – more than just a page builder
- CVE-2024-54159 stalld through 1.19.7 allows local users to cause a denial of service (file overwrite) via a /tmp/rtthrottle symlink attack.
- CVE-2024-54158 Other in YouTrack
- CVE-2024-54157 Denial of service in YouTrack
- CVE-2024-54156 Code injection in YouTrack
- CVE-2024-54155 Missing authorization in YouTrack
- CVE-2024-54154 Path traversal in YouTrack
- CVE-2024-54153 Missing authorization in YouTrack
- CVE-2024-54152 Angular Expressions - Remote Code Execution when using locals
- CVE-2024-54151 Directus allows unauthenticated access to WebSocket events and operations
- CVE-2024-54150 Algorithm Confusion Vulnerability in cjwt
- CVE-2024-5415 Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro
- CVE-2024-54149 Winter CMS Modules allows a sandbox bypass in Twig templates leading to data modification and deletion
- CVE-2024-54148 Gogs has a Path Traversal in file editing UI
- CVE-2024-54147 Altair GraphQL Client's desktop app does not validate HTTPS certificates
- CVE-2024-54146 Cacti has a SQL Injection vulnerability when view host template
- CVE-2024-54145 Cacti has a SQL Injection vulnerability when request automation devices
- CVE-2024-54143 openwrt/asu allows build artifact poisoning via truncated SHA-256 hash and command injection
- CVE-2024-54142 Cross-site Scripting via Discourse-ai SharedAiConversation onebox in Discourse
- CVE-2024-54141 phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available
- CVE-2024-54140 sigstore-java has a vulnerability with bundle verification
- CVE-2024-5414 Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro
- CVE-2024-54139 Combodo iTop vulnerable to XSS leading to CSRF breach on _table_id parameter
- CVE-2024-54138 XSS Vulnerability in NuGetGallery's Markdown Autolinks Processing
- CVE-2024-54137 liboqs has a correctness error in HQC decapsulation
- CVE-2024-54136 Untrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Below
- CVE-2024-54135 Untrusted Deserialization in ClipBucket-v5 Version 2.0 to 5.5.1 Revision 199
- CVE-2024-54134 @solana/web3.js modified package published to npm, containing malware that exfiltrates private key material
- CVE-2024-54133 Possible Content Security Policy bypass in Action Dispatch
- CVE-2024-54132 GitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerability
- CVE-2024-54131 Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3)
- CVE-2024-54130 Segmentation Fault in `forwardBundle` Function of ION-DTN BPv7 When Destination EID is `dtn:none` (public)
- CVE-2024-5413 Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro
- CVE-2024-54129 Improper Initialization of `imc` Scheme Leading to `SIGABRT` in ION-DTN BPv7
- CVE-2024-54128 Directus has an HTML Injection in Comment
- CVE-2024-54127 Exposure of Wi-Fi Credentials in Plaintext in TP-Link Archer C50
- CVE-2024-54126 Insufficient Integrity Verification Vulnerability in TP-Link Archer C50
- CVE-2024-54125 Open redirect in "Shonen Jump+" App for Android
- CVE-2024-54124 In Click Studios Passwordstate before build 9920, there is a potential permission escalation on the edit folder screen.
- CVE-2024-54123 Cross-site scripting in backdropcms:backdrop cms
- CVE-2024-54122 Race condition in HarmonyOS
- CVE-2024-54121 Other in HarmonyOS
- CVE-2024-54120 Race condition in HarmonyOS
- CVE-2024-5412 Memory corruption in VMG8825-T50K firmware
- CVE-2024-54119 Information disclosure in HarmonyOS
- CVE-2024-54117 Information disclosure in HarmonyOS
- CVE-2024-54116 Memory corruption in HarmonyOS
- CVE-2024-54115 Memory corruption in HarmonyOS
- CVE-2024-54114 Memory corruption in HarmonyOS
- CVE-2024-54113 Denial of service in HarmonyOS
- CVE-2024-54112 Information disclosure in HarmonyOS
- CVE-2024-54111 Other in HarmonyOS
- CVE-2024-54110 Information disclosure in HarmonyOS
- CVE-2024-5411 Command Injection
- CVE-2024-54109 Memory corruption in HarmonyOS
- CVE-2024-54108 Memory corruption in HarmonyOS
- CVE-2024-54107 Memory corruption in HarmonyOS
- CVE-2024-54106 Null dereference in HarmonyOS
- CVE-2024-54105 Memory corruption in HarmonyOS
- CVE-2024-54104 Information disclosure in HarmonyOS
- CVE-2024-54103 Missing authorization in HarmonyOS
- CVE-2024-54102 Race condition in HarmonyOS
- CVE-2024-54101 Denial of service in EMUI
- CVE-2024-54100 Missing authorization in EMUI
- CVE-2024-5410 Stored Cross-Site Scripting
- CVE-2024-54099 Other in EMUI
- CVE-2024-54098 Business logic in EMUI
- CVE-2024-54097 Other in EMUI
- CVE-2024-54096 Missing authorization in EMUI
- CVE-2024-54095 Integer overflow in Solid Edge SE2024
- CVE-2024-54094 Memory corruption in Solid Edge SE2024
- CVE-2024-54093 Memory corruption in Solid Edge SE2024
- CVE-2024-54092 Auth bypass in Industrial Edge Device Kit - arm64 V1.17
- CVE-2024-54091 Memory corruption in Solid Edge SE2024
- CVE-2024-54090 Memory corruption in APOGEE PXC Series (BACnet)
- CVE-2024-5409 Cross-site Scripting vulnerability in RhinOS from SaltOS
- CVE-2024-54089 Weak cryptography in APOGEE PXC Series (BACnet)
- CVE-2024-54085 AMI MegaRAC SPx Authentication Bypass by Spoofing
- CVE-2024-54084 SMM Arbitrary Write via TOCTOU Vulnerability
- CVE-2024-54083 DoS via lack of type validation in Calls
- CVE-2024-54082 Command injection in Wi-Fi STATION SH-54C
- CVE-2024-5408 Cross-site Scripting vulnerability in RhinOS from SaltOS
- CVE-2024-5407 Code Injection vulnerability in RhinOS from SaltOS
- CVE-2024-5406 Multiple vulnerabilities in WinNMP from Wtriple
- CVE-2024-54051 Adobe Connect | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
- CVE-2024-54050 Adobe Connect | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
- CVE-2024-5405 Multiple vulnerabilities in WinNMP from Wtriple
- CVE-2024-54049 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-54048 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-54047 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-54046 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-54045 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-54044 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-54043 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-54042 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-54041 Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-54040 Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-5404 ifm: moneo prone to weak password recovery mechanism