Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 217 of 521.
- CVE-2024-51995 Logic bug in ajax.render.php allows for bypass of 'backOffice' access control in Combodo iTop
- CVE-2024-51994 Cross-site Scripting in portal picture upload in Combodo iTop
- CVE-2024-51993 Password is stored in clear in the database in Combodo iTop
- CVE-2024-51992 Method Exposure Vulnerability in Modals in orchid/platform
- CVE-2024-51991 October CMS Allows Unprotected SVG Rename in Media Manager
- CVE-2024-51990 Path traversal via crafted Git repositories in jj
- CVE-2024-5199 Spotify Play Button <= 1.0 - Contributor+ Stored XSS
- CVE-2024-51989 Cross-site Scripting (XSS) Vulnerability in PasswordPusher
- CVE-2024-51988 HTTP API's queue deletion endpoint does not verify that the user has a required permission
- CVE-2024-51987 HTTP Client uses incorrect token after refresh in Duende.AccessTokenManagement.OpenIdConnect
- CVE-2024-51984 Information disclosure in ADS-1700W
- CVE-2024-51983 Denial of service in ADS-1250W
- CVE-2024-51982 Denial of service in ADS-2400N
- CVE-2024-51981 Server-side request forgery in ADS-2400N
- CVE-2024-51980 Server-side request forgery in ADS-2400N
- CVE-2024-5198 Null dereference in OpenVPN-GUI
- CVE-2024-51979 Memory corruption in ADS-2400N
- CVE-2024-51978 Auth bypass in ADS-1250W
- CVE-2024-51977 Information disclosure in DCP-1610W
- CVE-2024-5197 Integer overflow in libvpx
- CVE-2024-51966 Directory traversal vulnerability in ArcGIS Server
- CVE-2024-51963 Stored XSS in ArcGIS Server Manager
- CVE-2024-51962 SQL injection vulnerability in ArcGIS Server
- CVE-2024-51961 Local file inclusion (LFI) vulnerability in ArcGIS Server
- CVE-2024-51960 Stored XSS in ArcGIS Server Administrator Directory
- CVE-2024-5196 Arris VAP2500 tools_command.php command injection
- CVE-2024-51959 Stored XSS issue in Server Admin API
- CVE-2024-51958 Directory traversal vulnerability in the admin api for service thumbnails
- CVE-2024-51957 Stored XSS vulnerability in ArcGIS Rest Services Directory
- CVE-2024-51956 Stored XSS vulnerability in ArcGIS Server Administrator Directory
- CVE-2024-51954 Unauthorized access to secure services in ArcGIS Server
- CVE-2024-51953 Stored XSS in ArcGIS Server Rest services
- CVE-2024-51952 Stored XSS issue in ArcGIS Server
- CVE-2024-51951 Stored XSS in Server Admin API
- CVE-2024-51950 Stored XSS in Server Admin under Services > lifecycleinfos
- CVE-2024-5195 Arris VAP2500 diag_s.php command injection
- CVE-2024-51949 Stored XSS vulnerability in Rest Services under OGCFeature Service and Map Service
- CVE-2024-51948 Stored XSS vulnerability in Rest Services under Job ID
- CVE-2024-51947 Stored XSS vulnerability in Rest Services under Layer name
- CVE-2024-51946 Stored XSS in Rest Services Directory under Identify operation
- CVE-2024-51945 Stored XSS issues in Server Admin API
- CVE-2024-51944 Stored XSS in Rest Services Directory
- CVE-2024-51942 Stored XSS vulnerability in Rest Admin API under Hosted Feature Services page
- CVE-2024-51941 Apache Ambari: Remote Code Injection in Ambari Metrics and AMS Alerts
- CVE-2024-51940 WordPress WP Responsive Video plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-5194 Arris VAP2500 assoc_table.php command injection
- CVE-2024-51939 WordPress Stylish Internal Links plugin <= 1.9 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51938 WordPress Charity Addon for Elementor plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51937 WordPress IA Map Analytics Basic plugin <= 20170413 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51936 WordPress ESB Testimonials plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51935 WordPress Fast Video and Image Display plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51934 WordPress Ekiline Block Collection plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51933 WordPress Cookie Nonsense for YT plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51932 WordPress Kings Tab Slider plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51931 WordPress AzonBox plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51930 WordPress Custom URL Shortener plugin <= 0.3.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-5193 Ritlabs TinyWeb Server Request crlf injection
- CVE-2024-51929 WordPress Icon Widget plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51928 WordPress Blocks Post Grid plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51927 WordPress Rig Elements For Elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51926 WordPress GreenCon plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51925 WordPress Testimonial Slider Shortcode plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51924 WordPress WP Agenda plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51923 WordPress Websand Subscription Form plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51922 WordPress VP Sitemap plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51921 WordPress scrollup plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51920 WordPress Map Store Locator plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-5192 Cross-site scripting in FunnelKit – Funnel Builder for WooCommerce Checkout
- CVE-2024-51919 WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated Arbitrary File Upload vulnerability
- CVE-2024-51918 WordPress Pay With Stripe plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51917 WordPress Multiple Votes in one page plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51916 WordPress Multifox Plus plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51915 WordPress LiteSpeed Cache plugin <= 6.5.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51914 WordPress drop in image slideshow gallery plugin <= 12.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51913 WordPress Mapme plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51912 WordPress IntelliWidget Elements plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51911 WordPress Featured product by category name plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51910 WordPress Assist24 Help Desk plugin <= 20150401.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-5191 Cross-site scripting in Branda – White Label & Branding, Free Login Page Customizer
- CVE-2024-51909 WordPress audioCase plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51908 WordPress Adventure Bucket List plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51907 WordPress WP Virtual Room Configurator plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51906 WordPress RSV 360 View plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51905 WordPress RSV PDF Preview plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51904 WordPress Embed documents shortcode plugin <= 1.5 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51903 WordPress WP Listings Pro plugin <= 3.0.14 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51902 WordPress TinyCode plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51901 WordPress Smooth Maps plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51900 WordPress What Would Seth Godin Do plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51899 WordPress Simple Pricing Table plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51898 WordPress Semantic Shortcode plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51897 WordPress News Articles plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51896 WordPress Magic Slider plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51895 WordPress Minical Hotel Booking Plugin plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51894 WordPress Topbar ID for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51893 WordPress Postify: Post Layout For Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51892 WordPress Sell Media File with Stripe plugin <= 1.0.6 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51891 WordPress Official SalesWizard CRM Plugin plugin <= 1.0.3 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51890 WordPress Geoportail Shortcode plugin <= 2.4.4 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-5189 Cross-site scripting in Essential Addons for Elementor – Popular Elementor Templates & Widgets