Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 210 of 521.
- CVE-2024-53006 Substance3D - Modeler | NULL Pointer Dereference (CWE-476)
- CVE-2024-53005 Substance3D - Modeler | Out-of-bounds Read (CWE-125)
- CVE-2024-53004 Substance3D - Modeler | Out-of-bounds Read (CWE-125)
- CVE-2024-53003 Substance3D - Modeler | Out-of-bounds Write (CWE-787)
- CVE-2024-53002 Substance3D - Modeler | Out-of-bounds Write (CWE-787)
- CVE-2024-53001 Substance3D - Modeler | Out-of-bounds Write (CWE-787)
- CVE-2024-53000 Substance3D - Modeler | Out-of-bounds Write (CWE-787)
- CVE-2024-5300 Security feature bypass in Ubuntu 16.04 LTS
- CVE-2024-52999 Substance3D - Modeler | Heap-based Buffer Overflow (CWE-122)
- CVE-2024-52998 Substance3D - Stager | Out-of-bounds Read (CWE-125)
- CVE-2024-52997 Photoshop Desktop | Use After Free (CWE-416)
- CVE-2024-52996 Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)
- CVE-2024-52995 Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)
- CVE-2024-52994 Substance3D - Sampler | Out-of-bounds Write (CWE-787)
- CVE-2024-52993 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52992 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52991 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52990 Animate | Buffer Underwrite ('Buffer Underflow') (CWE-124)
- CVE-2024-5299 D-Link D-View execMonitorScript Exposed Dangerous Method Remote Code Execution Vulnerability
- CVE-2024-52989 Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)
- CVE-2024-52988 Animate | Out-of-bounds Write (CWE-787)
- CVE-2024-52987 Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)
- CVE-2024-52986 Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)
- CVE-2024-52985 Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)
- CVE-2024-52984 Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)
- CVE-2024-52983 Animate | Integer Overflow or Wraparound (CWE-190)
- CVE-2024-52982 Animate | Improper Input Validation (CWE-20)
- CVE-2024-52981 Elasticsearch Vulnerable to Stack Overflow due to a Large Recursion
- CVE-2024-52980 Elasticsearch Uncontrolled Resource Consumption vulnerability
- CVE-2024-5298 D-Link D-View queryDeviceCustomMonitorResult Exposed Dangerous Method Remote Code Execution Vulnerability
- CVE-2024-52979 Elasticsearch Uncontrolled Resource Consumption vulnerability
- CVE-2024-52976 Elastic Agent Inclusion of Functionality from Untrusted Control Sphere
- CVE-2024-52975 Fleet Server sensitive information exposure via logs
- CVE-2024-52974 Denial of service in Kibana
- CVE-2024-52973 Kibana allocation of resources without limits or throttling leads to crash
- CVE-2024-52972 Kibana allocation of resources without limits or throttling leads to crash
- CVE-2024-5297 D-Link D-View executeWmicCmd Command Injection Remote Code Execution Vulnerability
- CVE-2024-52969 SQL injection in FortiSIEM
- CVE-2024-52968 Auth bypass in FortiClientMac
- CVE-2024-52967 Cross-site scripting in FortiPortal
- CVE-2024-52966 Information disclosure in FortiAnalyzer
- CVE-2024-52965 Auth bypass in FortiOS
- CVE-2024-52964 Path traversal in FortiManager
- CVE-2024-52963 Memory corruption in FortiOS
- CVE-2024-52962 Other in FortiAnalyzer
- CVE-2024-52961 Command injection in FortiSandbox
- CVE-2024-52960 Security feature bypass in FortiSandbox
- CVE-2024-5296 D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability
- CVE-2024-52959 iota C.ai Conversational Platform - Improper Control of Generation of Code ('Code Injection')
- CVE-2024-52958 iota C.ai Conversational Platform - Improper Verification of Cryptographic Signature
- CVE-2024-52951 Stored Cross-Site Scripting in the Access Request History in Omada Identity before version 15 update 1 allows an authenticated attacker to e
- CVE-2024-5295 D-Link G416 flupl self Command Injection Remote Code Execution Vulnerability
- CVE-2024-52949 Memory corruption in iptraf-ng:iptraf-ng
- CVE-2024-52947 A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.20.1 allows remote attackers to inject arbitrary web script or HTML via
- CVE-2024-52946 An issue was discovered in LemonLDAP::NG before 2.20.1.
- CVE-2024-52945 Code injection in veritas:netbackup
- CVE-2024-52944 Cross-site scripting in veritas:enterprise vault
- CVE-2024-52943 Cross-site scripting in veritas:enterprise vault
- CVE-2024-52942 Cross-site scripting in veritas:enterprise vault
- CVE-2024-52941 An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24695.
- CVE-2024-52940 AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address within network traffic.
- CVE-2024-5294 D-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Denial-of-Service Vulnerability
- CVE-2024-52939 GPU DDK - RGXFWIF_HWPERF_CTL_BLK.uiNumCounters OOB write
- CVE-2024-52938 GPU DDK - rgxfw_pm_add_freelist_for_reconstruction OOB write
- CVE-2024-52937 GPU DDK - rgxfw_kernel_CMD_DISABLE_ZSSTORE OOB write via ui32WriteOffsetOfDisableZSStore
- CVE-2024-52936 GPU DDK - rgxfw_hwperf_config OOB read & write
- CVE-2024-52935 GPU DDK - psContext->eDM gives OOB write
- CVE-2024-5293 D-Link DIR-2640 HTTP Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-52928 Security feature bypass in thebrowser:arc
- CVE-2024-52926 Privilege escalation in Privilege Manager
- CVE-2024-52925 Code injection in MetaDefender Kiosk
- CVE-2024-52924 Memory corruption in samsung:exynos 1080 firmware
- CVE-2024-52923 Memory corruption in samsung:exynos 1080 firmware
- CVE-2024-52922 Denial of service in bitcoin:bitcoin core
- CVE-2024-52921 Missing authorization in bitcoin:bitcoin core
- CVE-2024-52920 Denial of service in bitcoin:bitcoin core
- CVE-2024-5292 D-Link Network Assistant Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- CVE-2024-52919 Integer overflow in bitcoin:bitcoin core
- CVE-2024-52918 Bitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption and application crash) via
- CVE-2024-52917 Denial of service in bitcoin:bitcoin core
- CVE-2024-52916 Denial of service in bitcoin:bitcoin core
- CVE-2024-52915 Denial of service in bitcoin:bitcoin core
- CVE-2024-52914 Denial of service in bitcoin:bitcoin core
- CVE-2024-52913 Denial of service in bitcoin:bitcoin core
- CVE-2024-52912 Integer overflow in bitcoin:bitcoin core
- CVE-2024-52911 Bitcoin Core through 28.x has a security issue, the details of which are not disclosed.
- CVE-2024-5291 D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability
- CVE-2024-52906 IBM AIX denial of service
- CVE-2024-52905 IBM Sterling B2B Integrator information disclosure
- CVE-2024-52903 IBM Db2 denial of service
- CVE-2024-52902 IBM Cognos Controller information disclosure
- CVE-2024-52901 IBM InfoSphere Information Server denial of service
- CVE-2024-52900 IBM Cognos Analytics cross-site scripting
- CVE-2024-5290 Privilege escalation in wpa supplicant
- CVE-2024-52899 IBM Data Virtualization Manager code execution
- CVE-2024-52898 IBM MQ information disclosure
- CVE-2024-52897 IBM MQ information disclosure
- CVE-2024-52896 IBM MQ information disclosure
- CVE-2024-52895 IBM i denial of service
- CVE-2024-52894 IBM Db2 for Linux, UNIX and Windows denial of service