Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 211 of 521.
- CVE-2024-52893 IBM Concert Software information disclosure
- CVE-2024-52892 IBM Jazz for Service Management Cross-Site Scripting
- CVE-2024-52891 IBM Concert Software log manipulation
- CVE-2024-52890 IBM Engineering Lifecycle Optimization - Publishing cross-site scripting
- CVE-2024-5289 Cross-site scripting in Kadence Blocks — Page Builder Toolkit for Gutenberg Editor
- CVE-2024-52888 Stored-XSS
- CVE-2024-52887 Self-XSS
- CVE-2024-52885 Path Traversal
- CVE-2024-52884 Weak cryptography in audiocodes:mediant session border controller
- CVE-2024-52883 Path traversal in audiocodes:one voice operations center
- CVE-2024-52882 Cross-site scripting in audiocodes:one voice operations center
- CVE-2024-52881 Hardcoded credentials in audiocodes:one voice operations center
- CVE-2024-52880 Memory corruption in insyde:kernel
- CVE-2024-5288 Safe-error attack on TLS 1.3 Protocol
- CVE-2024-52879 Memory corruption in insyde:insydeh2o
- CVE-2024-52878 Memory corruption in insyde:insydeh2o
- CVE-2024-52877 Memory corruption in insyde:insydeh2o
- CVE-2024-52876 Holy Stone Remote ID Module HSRID01, firmware distributed with the Drone Go2 mobile application before 1.1.8, allows unauthenticated "remote
- CVE-2024-52875 Cross-site scripting in Kerio Control
- CVE-2024-52874 SQL injection in infoblox:netmri
- CVE-2024-52872 Missing authorization in flagsmith:flagsmith
- CVE-2024-52871 Security feature bypass in flagsmith:flagsmith
- CVE-2024-52870 Teradata Vantage Editor 1.0.1 is mostly intended for SQL database access and docs.teradata.com access, but provides unintended functionality
- CVE-2024-5287 WP Affiliate Platform < 6.5.1 - Profile Update via CSRF
- CVE-2024-52869 Certain Teradata account-handling code through 2024-11-04, used with SUSE Enterprise Linux Server, mismanages groups.
- CVE-2024-52867 guix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are accessible by local users before file metadata
- CVE-2024-52865 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52864 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52862 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52861 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52860 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-5286 WP Affiliate Platform < 6.5.1 - Reflected XSS via Banner Editing
- CVE-2024-52859 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52858 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52857 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52855 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52854 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52853 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52852 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52851 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52850 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-5285 WP Affiliate Platform < 6.5.2 - Affiliate Deletion via CSRF
- CVE-2024-52849 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52848 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52847 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52846 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52845 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52844 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-52843 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52842 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52841 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52840 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-5284 WP Affiliate Platform < 6.5.1 - Stored XSS via CSRF
- CVE-2024-52839 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-52838 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-52837 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-52836 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52835 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52834 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52833 Substance3D - Modeler | NULL Pointer Dereference (CWE-476)
- CVE-2024-52832 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52831 Adobe Experience Manager | Improper Input Validation (CWE-20)
- CVE-2024-52830 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-5283 WP Affiliate Platform < 6.5.1 - Reflected XSS via Lead Editing
- CVE-2024-52829 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52828 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52827 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52826 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52825 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52824 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52823 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-52822 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-5282 WP Affiliate Platform < 6.5.1 - Reflected XSS via Registration Form
- CVE-2024-52818 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52817 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52816 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-52815 Synapse allows a a malformed invite to break the invitee's `/sync`
- CVE-2024-52814 Helm Lacks Granularity in Workflow Role
- CVE-2024-52813 matrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identity
- CVE-2024-52812 LF Edge eKuiper has Stored XSS in Rules Functionality
- CVE-2024-52811 Acks not validated before logged to qlog leads to buffer overflow in ngtcp2
- CVE-2024-52810 Prototype Pollution in @intlify/shared >=9.7.0 <= 10.0.4
- CVE-2024-5281 WP Affiliate Platform < 6.5.1 - Reflected XSS via Affiliate Editing
- CVE-2024-52809 Cross-site Scripting vulnerability with prototype pollution in vue-i18n
- CVE-2024-52807 XXE vulnerability in XSLT parsing in `org.hl7.fhir.publisher`
- CVE-2024-52806 SimpleSAMLphp SAML2 has an XXE in parsing SAML messages
- CVE-2024-52805 Synapse allows unsupported content types to lead to memory exhaustion
- CVE-2024-52804 Tornado has HTTP cookie parsing DoS vulnerability
- CVE-2024-52803 LLama Factory Remote OS Command Injection Vulnerability
- CVE-2024-52802 RIOT-OS missing dhcpv6_opt_t minimum header length check
- CVE-2024-52801 Brute force takeover of OpenID Connect session cookies in sftpgo
- CVE-2024-52800 Potential XXE (XML External Entity Injection) vulnerability in veraPDF CLI
- CVE-2024-5280 WP Affiliate Platform < 6.5.1 - POST Reflected XSS
- CVE-2024-52799 Argo Workflows Chart: Excessive Privileges in Workflow Role
- CVE-2024-52798 path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x
- CVE-2024-52797 Searching Opencast may cause a denial of service
- CVE-2024-52796 Password Pusher's rate limiter can be bypassed by forging proxy headers
- CVE-2024-52794 Magnific lightbox susceptible to Cross-site Scripting in Discourse
- CVE-2024-52793 XSS vulnerability in serveDir API of @std/http/file-server on POSIX systems
- CVE-2024-52792 Arbitrary config values override in lam