Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 202 of 521.
- CVE-2024-54039 Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-54038 Adobe Connect | Improper Access Control (CWE-284)
- CVE-2024-54037 Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-54036 Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-54034 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-54032 Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-54031 netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
- CVE-2024-54030 Communication_dsoftbus has an UAF vulnerability
- CVE-2024-5403 ASKEY 5G NR Small Cell - Command Injection
- CVE-2024-54028 Integer overflow in catdoc
- CVE-2024-54027 Hardcoded credentials in FortiSandbox
- CVE-2024-54026 SQL injection in FortiSandbox
- CVE-2024-54025 Command injection in FortiIsolator
- CVE-2024-54024 Command injection in FortiIsolator
- CVE-2024-54021 Security feature bypass in FortiOS
- CVE-2024-54020 Missing authorization in FortiManager
- CVE-2024-5402 Mint Workbench I Unquoted Service Path Enumeration
- CVE-2024-54019 Security feature bypass in FortiClientWindows
- CVE-2024-54018 Command injection in FortiSandbox
- CVE-2024-54017 Other in SIPROTEC 5 6MD84 (CP300)
- CVE-2024-54016 compression bomb attack in Apache Seata Server
- CVE-2024-54015 Other in SIPROTEC 5 6MD84 (CP300)
- CVE-2024-54014 Open redirect in 'Skylark' App for Android
- CVE-2024-54013 Authentication Bypass
- CVE-2024-54012 Command Injection
- CVE-2024-54011 Missing Error/Exception Handling
- CVE-2024-54010 Unauthenticated Traffic Handling Flaw Allows Packet Leakage on HPE Aruba Networking CX 10000 series switches
- CVE-2024-5401 Privilege escalation in DiskStation Manager (DSM)
- CVE-2024-54009 Auth bypass in HPE Alletra Storage MP B10000
- CVE-2024-54008 Authenticated Remote Code Execution (RCE) in HPE Aruba Networking AirWave Management Platform
- CVE-2024-54007 Authenticated Remote Command Injection Vulnerability in the Web Interface of a 501 Wireless Client Bridge
- CVE-2024-54006 Authenticated Remote Command Injection Vulnerability in the Web Interface of a 501 Wireless Client Bridge
- CVE-2024-54005 XML external entity in COMOS V10.3
- CVE-2024-54004 Jenkins Filesystem List Parameter Plugin has Path Traversal vulnerability
- CVE-2024-54003 Jenkins Simple Queue Plugin has stored cross-site scripting (XSS) vulnerability
- CVE-2024-54002 Dependency-Track allows enumeration of managed users via /api/v1/user/login endpoint
- CVE-2024-54001 Kanboard allows a persistent HTML injection site scripting in settings page date format
- CVE-2024-54000 Mobile Security Framework (MobSF) bypass of SSRF fix
- CVE-2024-5400 Openfind Mail2000 - OS Command Injection
- CVE-2024-53999 Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality
- CVE-2024-53995 GHSL-2024-288: SickChill open redirect in login
- CVE-2024-53994 Potential bypass of chat permissions in Discourse
- CVE-2024-53992 unzip-bot Allows Remote Code Execution (RCE) via archive extraction, password prompt, or video upload
- CVE-2024-53991 Potential Backup file leaked via Nginx in Discourse
- CVE-2024-53990 AsyncHttpClient (AHC) library's `CookieStore` replaces explicitly defined `Cookie`s
- CVE-2024-5399 Openfind Mail2000 - OS Command Injection
- CVE-2024-53989 Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0
- CVE-2024-53988 Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0
- CVE-2024-53987 Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0
- CVE-2024-53986 Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0
- CVE-2024-53985 Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0
- CVE-2024-53984 Nanopb does not release memory on error return when using PB_DECODE_DELIMITED
- CVE-2024-53983 Server-side request forgery in Backstage Scaffolder plugin
- CVE-2024-53982 Arbitrary file download in Zoo-Project Echo Example
- CVE-2024-53981 python-multipart has a Denial of service (DoS) via deformation `multipart/form-data` boundary
- CVE-2024-53980 Spoofed length byte traps CC2538 in endless loop
- CVE-2024-53979 Information disclosure in zhmc-ansible-modules
- CVE-2024-53977 Privilege escalation in ModelSim
- CVE-2024-53976 Other in Firefox for iOS
- CVE-2024-53975 Security feature bypass in Firefox for iOS
- CVE-2024-53974 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-53970 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-5397 itsourcecode Online Student Enrollment System instructorSubjects.php sql injection
- CVE-2024-53969 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-53968 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-53967 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-53966 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-53965 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-53964 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-53963 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-53962 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-53961 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2024-53960 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-5396 itsourcecode Online Student Enrollment System newfaculty.php sql injection
- CVE-2024-53959 Adobe Framemaker | Stack-based Buffer Overflow (CWE-121)
- CVE-2024-53958 Substance3D - Painter | Out-of-bounds Write (CWE-787)
- CVE-2024-53957 Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)
- CVE-2024-53956 Premiere Pro | Heap-based Buffer Overflow (CWE-122)
- CVE-2024-53955 Bridge | Integer Underflow (Wrap or Wraparound) (CWE-191)
- CVE-2024-53954 Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)
- CVE-2024-53953 Animate | Use After Free (CWE-416)
- CVE-2024-53952 InDesign Desktop | NULL Pointer Dereference (CWE-476)
- CVE-2024-53951 InDesign Desktop | Out-of-bounds Read (CWE-125)
- CVE-2024-5395 itsourcecode Online Student Enrollment System listofinstructor.php sql injection
- CVE-2024-53949 Apache Superset: Lower privilege users are able to create Role when FAB_ADD_SECURITY_API is enabled
- CVE-2024-53948 Apache Superset: Error verbosity exposes metadata in analytics databases
- CVE-2024-53947 Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions
- CVE-2024-53946 The KuWFi 4G LTE AC900 router 1.0.13 is vulnerable to Cross-Site Request Forgery (CSRF) on its web management interface.
- CVE-2024-53945 The KuWFi 4G AC900 LTE router 1.0.13 is vulnerable to command injection on the HTTP API endpoints /goform/formMultiApnSetting and /goform/atCmd.
- CVE-2024-53944 An issue was discovered on Tuoshi/Dionlink LT15D 4G Wi-Fi devices through M7628NNxlSPv2xUI_v1.0.1802.10.08_P4 and LT21B devices through M762
- CVE-2024-53943 An issue was discovered in NRadio N8-180 NROS-1.9.2.n3.c5 devices.
- CVE-2024-53942 An issue was discovered on NRadio N8-180 NROS-1.9.2.n3.c5 devices.
- CVE-2024-53941 An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices.
- CVE-2024-53940 An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices.
- CVE-2024-5394 itsourcecode Online Student Enrollment System newDept.php sql injection
- CVE-2024-53939 An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices.
- CVE-2024-53938 An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices.
- CVE-2024-53937 An issue was discovered on Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices.
- CVE-2024-53936 The com.asianmobile.callcolor (aka Color Phone Call Screen App) application through 24 for Android enables any application (with no permissi
- CVE-2024-53935 The com.callos14.callscreen.colorphone (aka iCall OS17 - Color Phone Flash) application through 4.3 for Android enables any application (wit