Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 216 of 521.
- CVE-2024-52281 Stored Cross-site Scripting vulnerability in Rancher UI
- CVE-2024-52280 Users can issue watch commands for arbitrary resources
- CVE-2024-5228 TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-52279 Apache Zeppelin: Arbitrary file read by adding malicious JDBC connection string
- CVE-2024-52277 PDF Document Spoofing in DocuSeal
- CVE-2024-52276 PDF Document Spoofing in DocuSign
- CVE-2024-52275 Denial of Service on Tenda AC6V2 Due To Stack Overflow
- CVE-2024-52274 Denial of Service on Tenda AC6V2 Due To Stack Overflow
- CVE-2024-52273 Denial of Service on Tenda AC6V2 Due To Stack Overflow
- CVE-2024-52272 Denial of Service on Tenda AC6V2 Due To Stack Overflow
- CVE-2024-52271 PDF Document Spoofing in Documenso
- CVE-2024-52270 PDF Document Spoofing in DropBox Sign(HelloSign)
- CVE-2024-5227 TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability
- CVE-2024-52269 AI Assistant PDF Document Spoofing in DocuSign
- CVE-2024-52268 Cross-site scripting in VK All in One Expansion Unit
- CVE-2024-5226 Fuse Social Floating Sidebar <= 5.4.10 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
- CVE-2024-5225 SQL Injection in berriai/litellm
- CVE-2024-5224 Cross-site scripting in Easy Social Like Box – Popup – Sidebar Widget
- CVE-2024-5223 Cross-site scripting in Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX
- CVE-2024-5222 Cross-site scripting in Responsive Plus – Elementor Templates & Starter Sites
- CVE-2024-5221 Qi Blocks <= 1.2.9 - Authenticated (Author+) Stored Cross-Site Scripting
- CVE-2024-5220 ND Shortcodes <= 7.5 - Authenticated (Author+) Stored Cross-Site Scripting
- CVE-2024-5219 Easy Google Maps <= 1.11.15 - Authenticated (Author+) Stored Cross-Site Scripting
- CVE-2024-5218 Reviews and Rating – Google Reviews <= 5.2 - Authenticated (Author+) Stored Cross-Site Scripting
- CVE-2024-5217 ServiceNow Incomplete List of Disallowed Inputs
- CVE-2024-5216 Denial of Service in mintplex-labs/anything-llm
- CVE-2024-5215 Cross-site scripting in HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- CVE-2024-5213 Exposure of Sensitive Information in mintplex-labs/anything-llm
- CVE-2024-5212 tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
- CVE-2024-5211 Path traversal in mintplex-labs/anything-llm
- CVE-2024-5210 Denial of service in Printers
- CVE-2024-5209 Denial of service in Printers
- CVE-2024-5208 Uncontrolled Resource Consumption in mintplex-labs/anything-llm
- CVE-2024-5207 SQL injection in Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
- CVE-2024-52067 Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log
- CVE-2024-52066 Potential stack corruption in Routing Service when using a malicious XML configuration document
- CVE-2024-52065 Memory corruption in Connext Professional
- CVE-2024-52064 Potential stack buffer write overflow in Connext applications while parsing malicious license file
- CVE-2024-52063 Potential stack buffer write overflow in Connext applications while parsing malicious XML types document
- CVE-2024-52062 Potential stack buffer write overflow in Connext applications while parsing malicious XML types document
- CVE-2024-52061 Potential stack buffer overflow when parsing an XML type
- CVE-2024-52060 Potential stack overflow when using XML configuration file referencing environment variables
- CVE-2024-5206 Sensitive Data Leakage in sklearn.feature_extraction.text.TfidfVectorizer in scikit-learn/scikit-learn
- CVE-2024-52059 Memory corruption in Connext Professional
- CVE-2024-52058 Potential arbitrary command execution in System Designer while parsing malicious HTTP/REST requests
- CVE-2024-52057 SQL injection in Connext Professional
- CVE-2024-52056 Application Delete Path Traversal in Wowza Streaming Engine
- CVE-2024-52055 Application Copy Path Traversal in Wowza Streaming Engine
- CVE-2024-52054 Application Creation Path Traversal in Wowza Streaming Engine
- CVE-2024-52053 Stored Cross-Site Scripting in Wowza Streaming Engine
- CVE-2024-52052 Stream Target Remote Code Execution in Wowza Streaming Engine
- CVE-2024-52051 Command injection in SIMATIC S7-PLCSIM V17
- CVE-2024-52050 Privilege escalation in Trend Micro Apex One
- CVE-2024-5205 Videojs HTML5 Player <= 1.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via videojs_video Shortcode
- CVE-2024-52049 Privilege escalation in Trend Micro Apex One
- CVE-2024-52048 Privilege escalation in Trend Micro Apex One
- CVE-2024-52047 Code injection in Trend Micro Apex One
- CVE-2024-52046 Apache MINA: MINA applications using unbounded deserialization may allow RCE
- CVE-2024-52043 User enumeration in HubHub
- CVE-2024-5204 Swiss Toolkit For WP <= 1.0.7 - Authenticated (Contributor+) Authentication Bypass
- CVE-2024-52035 Integer overflow in catdoc
- CVE-2024-52034 mySCADA myPRO OS Command Injection
- CVE-2024-52033 Information disclosure in Rakuten Turbo 5G
- CVE-2024-52032 Private channel names leaking when Elasticsearch is enabled
- CVE-2024-52030 Memory corruption in netgear:r7000p firmware
- CVE-2024-52029 Memory corruption in netgear:r7000p firmware
- CVE-2024-52028 Memory corruption in netgear:r7000p firmware
- CVE-2024-52026 Memory corruption in netgear:r6400v2 firmware
- CVE-2024-52025 Memory corruption in netgear:r6400v2 firmware
- CVE-2024-52024 Memory corruption in netgear:r6400v2 firmware
- CVE-2024-52023 Memory corruption in netgear:r6400v2 firmware
- CVE-2024-52022 Command injection in netgear:r6400v2 firmware
- CVE-2024-52021 Command injection in netgear:r8500 firmware
- CVE-2024-52020 Command injection in netgear:r8500 firmware
- CVE-2024-5202 Dimensions RM - Arbitrary File Read
- CVE-2024-52019 Command injection in netgear:r8500 firmware
- CVE-2024-52018 Command injection in netgear:xr300 firmware
- CVE-2024-52017 Memory corruption in netgear:xr300 firmware
- CVE-2024-52016 Memory corruption in netgear:r6400v2 firmware
- CVE-2024-52015 Memory corruption in netgear:r6400v2 firmware
- CVE-2024-52014 Memory corruption in netgear:r6400v2 firmware
- CVE-2024-52013 Memory corruption in netgear:r6400v2 firmware
- CVE-2024-52012 Apache Solr: Configset upload on Windows allows arbitrary path write-access
- CVE-2024-52011 launch-editor vulnerable to command injection via the crafted request on Windows
- CVE-2024-52010 Zoraxy has an authenticated command injection in the Web SSH feature
- CVE-2024-5201 Dimensions RM - Privilege Escalation
- CVE-2024-52009 Git credentials are exposed in atlantis logs
- CVE-2024-52008 Password Policy Bypass Vulnerability in Fides Webserver
- CVE-2024-52007 XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`
- CVE-2024-52006 Newline confusion in credential helpers can lead to credential exfiltration in git
- CVE-2024-52005 The sideband payload is passed unfiltered to the terminal in git
- CVE-2024-52004 Remote code execution vulnerabilities in MediaCMS
- CVE-2024-52003 X-Forwarded-Prefix Header still allows for Open Redirect in traefik
- CVE-2024-52002 Cross-Site Request Forgery (CSRF) in several iTop pages
- CVE-2024-52001 Portal user is able to access forbidden services information in Combodo iTop
- CVE-2024-52000 Reflected Cross-site Scripting exploit in Combodo iTop
- CVE-2024-5200 Postie < 1.9.71 - Admin+ Stored XSS
- CVE-2024-51998 Path traversal using file URI scheme without supplying hostname in changedetection.io
- CVE-2024-51997 The Attestation Results Token can be arbitrarily modified without being detected in Trustee
- CVE-2024-51996 Symphony has an Authentication Bypass via RememberMe