Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 203 of 521.
- CVE-2024-53934 The com.windymob.callscreen.ringtone.callcolor.colorphone (aka Color Phone Call Screen Themes) application through 1.1.2 for Android enables
- CVE-2024-53933 The com.callerscreen.colorphone.themes.callflash (aka Color Call Theme & Call Screen) application through 1.0.7 for Android enables any appl
- CVE-2024-53932 The com.remi.colorphone.callscreen.calltheme.callerscreen (aka Color Phone: Call Screen Theme) application through 21.1.9 for Android enable
- CVE-2024-53931 The com.glitter.caller.screen (aka iCaller, Caller Theme & Dialer) application through 1.1 for Android enables any application (with no perm
- CVE-2024-53930 WikiDocs before 1.0.65 allows stored XSS by authenticated users via data that comes after $$\\, which is mishandled by a KaTeX parser.
- CVE-2024-5393 itsourcecode Online Student Enrollment System listofcourse.php sql injection
- CVE-2024-53924 Pycel allows code injection via a crafted formula
- CVE-2024-53923 SQL injection in centreon:centreon web
- CVE-2024-53922 Denial of service in Exynos 8890 firmware
- CVE-2024-53921 Privilege escalation in samsung:magician
- CVE-2024-53920 Code injection in gnu:emacs
- CVE-2024-5392 itsourcecode Online Student Enrollment System editSubject.php sql injection
- CVE-2024-53919 An injection vulnerability in Barco ClickShare CX-30/20, C-5/10, and ClickShare Bar Pro and Core models, running firmware before 2.21.1, all
- CVE-2024-53916 OpenStack Neutron can use an incorrect ID during policy enforcement
- CVE-2024-53915 Deserialization in veritas:enterprise vault
- CVE-2024-53914 Deserialization in veritas:enterprise vault
- CVE-2024-53913 Deserialization in veritas:enterprise vault
- CVE-2024-53912 Deserialization in veritas:enterprise vault
- CVE-2024-53911 Deserialization in veritas:enterprise vault
- CVE-2024-53910 Deserialization in veritas:enterprise vault
- CVE-2024-5391 itsourcecode Online Student Enrollment System listofsubject.php sql injection
- CVE-2024-53909 Deserialization in veritas:enterprise vault
- CVE-2024-53908 Django SQL injection in HasKey(lhs, rhs) on Oracle
- CVE-2024-53907 Django denial-of-service in django.utils.html.strip_tags()
- CVE-2024-53901 Memory corruption in tonycoz:imager
- CVE-2024-53900 Mongoose search injection vulnerability
- CVE-2024-5390 itsourcecode Online Student Enrollment System listofstudent.php sql injection
- CVE-2024-53899 virtualenv allows command injection through activation scripts for a virtual environment
- CVE-2024-5389 Insufficient Access Control in lunary-ai/lunary
- CVE-2024-53881 Denial of service in NVIDIA vGPU software
- CVE-2024-53880 Integer overflow in Triton Inference Server
- CVE-2024-53879 Denial of service in CUDA Toolkit
- CVE-2024-53878 Denial of service in CUDA Toolkit
- CVE-2024-53877 Null dereference in CUDA Toolkit
- CVE-2024-53876 Memory corruption in CUDA Toolkit
- CVE-2024-53875 Memory corruption in CUDA Toolkit
- CVE-2024-53874 Memory corruption in CUDA Toolkit
- CVE-2024-53873 Memory corruption in CUDA Toolkit
- CVE-2024-53872 Memory corruption in CUDA Toolkit
- CVE-2024-53871 Memory corruption in CUDA Toolkit
- CVE-2024-53870 Memory corruption in CUDA Toolkit
- CVE-2024-53869 Information disclosure in NVIDIA GPU Display Driver, vGPU software
- CVE-2024-53868 Apache Traffic Server: Malformed chunked message body allows request smuggling
- CVE-2024-53867 Synapse Matrix has a partial room state leak via Sliding Sync
- CVE-2024-53866 pnpm vulnerable to no-script global cache poisoning via overrides / `ignore-scripts` evasion
- CVE-2024-53865 Python package "zhmcclient" has passwords in clear text in its HMC and API logs
- CVE-2024-53864 Cross-site Scripting in a field that is used in the Content name pattern in ibexa/admin-ui
- CVE-2024-53863 Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders
- CVE-2024-53862 Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode
- CVE-2024-53861 Issuer field partial matches allowed in pyjwt
- CVE-2024-53860 Potential Abuse for Sending Arbitrary Emails in sp-php-email-handler
- CVE-2024-5386 Account Hijacking via Password Reset Token Leak in lunary-ai/lunary
- CVE-2024-53859 go-gh `auth.TokenForHost` violates GitHub host security boundary within a codespace
- CVE-2024-53858 Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli
- CVE-2024-53857 rPGP Potential Resource Exhaustion when handling Untrusted Messages
- CVE-2024-53856 rPGP Panics on Malformed Untrusted Input
- CVE-2024-53855 User can view tickets from organizations they're not apart of in centurion_erp
- CVE-2024-53851 Partial denial of service via inline oneboxes in Discourse
- CVE-2024-53850 The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation
- CVE-2024-5385 oretnom23 Online Car Wash Booking System cross site scripting
- CVE-2024-53849 Several stack buffer overflows and pointer overflows in editorconfig-core-c
- CVE-2024-53848 check-jsonschema default caching for remote schemas allows for cache confusion
- CVE-2024-53847 Trix vulnerable to Cross-site Scripting on copy & paste
- CVE-2024-53846 ssl fails to validate incorrect extened key usage
- CVE-2024-53845 AES/CBC Constant IV Vulnerability in ESPTouch v2
- CVE-2024-53844 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in labsai/eddi
- CVE-2024-53843 Reflected XSS Vulnerability in Authentication Flow URL Handling in @dapperduckling/keycloak-connector-server
- CVE-2024-53842 Memory corruption in Android
- CVE-2024-53841 Privilege escalation in Android
- CVE-2024-53840 Security feature bypass in Android
- CVE-2024-5384 SourceCodester Facebook News Feed Like index.php sql injection
- CVE-2024-53839 Memory corruption in Android
- CVE-2024-53838 Memory corruption in Android
- CVE-2024-53837 Integer overflow in Android
- CVE-2024-53836 Memory corruption in Android
- CVE-2024-53835 Security feature bypass in Android
- CVE-2024-53834 Memory corruption in Android
- CVE-2024-53833 Memory corruption in Android
- CVE-2024-53832 Information disclosure in CPCI85 Central Processing/Communication
- CVE-2024-5383 lakernote EasyAdmin upload cross site scripting
- CVE-2024-53829 Cross-Site Request Forgery in CodeChecker API
- CVE-2024-53828 Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure Vulnerability
- CVE-2024-53827 Ericsson Packet Core Controller (PCC) - Improper Input Validation Vulnerability
- CVE-2024-53826 WordPress WPCasa plugin <= 1.2.13 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2024-53825 WordPress FileBird Lite plugin <= 6.3.2 - Broken Access Control vulnerability
- CVE-2024-53824 WordPress All Bootstrap Blocks plugin <= 1.3.20 - Local File Inclusion vulnerability
- CVE-2024-53823 WordPress The Plus Addons for Elementor plugin <= 5.6.14 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-53822 WordPress Pie Register Premium plugin < 3.8.3.3 - Arbitrary File Upload vulnerability
- CVE-2024-53821 WordPress Pie Register Premium plugin < 3.8.3.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-53820 WordPress Captivate Sync plugin <= 2.0.22 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-5382 Missing authorization in Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits
- CVE-2024-53819 WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.0 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2024-53818 WordPress PostX plugin <= 4.1.15 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-53817 WordPress Acowebs Product Labels For Woocommerce plugin <= 1.5.8 - SQL Injection vulnerability
- CVE-2024-53816 WordPress Tutor LMS Elementor Addons plugin <= 2.1.5 - Broken Access Control vulnerability
- CVE-2024-53815 WordPress Pinpoint Booking System plugin <= 2.9.9.5.2 - SQL Injection vulnerability
- CVE-2024-53814 WordPress Analytify plugin <= 5.4.3 - Broken Access Control vulnerability
- CVE-2024-53813 WordPress WP Travel plugin <= 9.6.0 - Broken Access Control vulnerability
- CVE-2024-53812 WordPress WP GeoNames plugin <= 1.8 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-53811 WordPress WDesignKit plugin <= 1.0.40 - Arbitrary File Upload vulnerability