Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 221 of 521.
- CVE-2024-51603 WordPress NMR Strava activities plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51602 WordPress Simple Job Manager plugin <= 1.1 - SQL Injection vulnerability
- CVE-2024-51601 WordPress Website price calculator plugin <= 4.1 - SQL Injection vulnerability
- CVE-2024-5160 Memory corruption in Chrome
- CVE-2024-51599 WordPress Simple Business Manager plugin <= 4.6.7.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51598 WordPress Selar.co Widget plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51597 Cross-site scripting in ThemeShark Templates & Widgets for Elementor
- CVE-2024-51596 WordPress Business plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51595 WordPress SKSDEV Toolkit plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51594 WordPress Gmap Point List plugin <= 1.1.2 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51593 WordPress Курс валют UAH plugin <= 2.0 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51592 WordPress Meta Store Elements plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51591 WordPress Slicko plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51590 WordPress Hoo Addons for Elementor plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-5159 Memory corruption in Chrome
- CVE-2024-51589 WordPress Bigmart Elements plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51588 WordPress Super Addons for Elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51587 WordPress Definitive Addons for Elementor plugin <= 1.5.16 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51586 WordPress Elementary Addons plugin <= 2.0.4 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51585 WordPress Sales Page Addon plugin <= 1.4.5 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51584 WordPress Marquee Elementor with Posts plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51583 WordPress Kento Ads Rotator plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51582 WordPress WP Hotel Booking plugin <= 2.2.9 - Local File Inclusion vulnerability
- CVE-2024-51581 WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51580 WordPress Clever Addons for Elementor plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-5158 Memory corruption in Chrome
- CVE-2024-51579 WordPress 5 Stars Rating Funnel plugin <=1.4.01 - SQL Injection vulnerability
- CVE-2024-51578 WordPress 3D Presentation plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51577 WordPress bpmn.io plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51576 WordPress AMP Img Shortcode plugin <= 1.0.1 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51575 WordPress Extender All In One For Elementor plugin <= 1.0.3 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51574 WordPress Simple Goods plugin <= 0.1.3 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51573 WordPress ML Responsive Audio plugin <= 0.2 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51572 WordPress LH QR Codes plugin <= 1.06 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-51571 WordPress MasterBip para Elementor plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-51570 WordPress Easy Gallery plugin <= 1.4 - SQL Injection vulnerability
- CVE-2024-5157 Use after free in Chrome
- CVE-2024-51569 Memory corruption in Apache NimBLE
- CVE-2024-51568 Command injection in cyberpanel:cyberpanel
- CVE-2024-51567 CyberPanel Incorrect Default Permissions
- CVE-2024-51566 bhyve(8) NVMe driver to guest-induced infinite loops.
- CVE-2024-51565 bhyve(8) hda driver buffer over-read
- CVE-2024-51564 bhyve(8) infinite loop in the hda audio driver
- CVE-2024-51563 bhyve(8) virtio_vq_recordon time-of-check to time-of-use race
- CVE-2024-51562 bhyve(8) nvme_opc_get_log_page buffer over-read
- CVE-2024-51561 Authentication bypass Vulnerability in Aero
- CVE-2024-51560 Improper Error Handling Vulnerability in Wave 2.0
- CVE-2024-5156 Flatsome <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-51559 Improper Access Control Vulnerability in Wave 2.0
- CVE-2024-51558 Brute Force Attack Vulnerability in Wave 2.0
- CVE-2024-51557 No Rate Limiting Vulnerability in Wave 2.0
- CVE-2024-51556 Sensitive Information Disclosure Vulnerability in Wave 2.0
- CVE-2024-51555 Force Change of Default Credentials
- CVE-2024-51554 off-by-one-error
- CVE-2024-51553 Predictable Filename
- CVE-2024-51552 Weak Password Storage
- CVE-2024-51551 Default Credentials
- CVE-2024-51550 Data Validation / Sanitization
- CVE-2024-5155 Inquiry Cart <= 3.4.2 - Stored XSS via CSRF
- CVE-2024-51549 Absolute Path Traversal
- CVE-2024-51548 Dangerous File Upload
- CVE-2024-51547 Credentials Disclosure - keys
- CVE-2024-51546 Credentails Disclosure
- CVE-2024-51545 Username Enumeration
- CVE-2024-51544 Service Control
- CVE-2024-51543 Information Disclosure
- CVE-2024-51542 Configuration Download
- CVE-2024-51541 Local File Inclusion
- CVE-2024-51540 Integer overflow in ECS
- CVE-2024-5154 Cri-o: malicious container can create symlink on host
- CVE-2024-51539 SQL injection in Secure Connect Gateway - Appliance
- CVE-2024-51534 Path traversal in PowerProtect DD
- CVE-2024-51532 Command injection in PowerStore
- CVE-2024-51530 Other in HarmonyOS
- CVE-2024-5153 Startklar Elementor Addons <= 1.7.15 - Unauthenticated Path Traversal to Arbitrary Directory Deletion
- CVE-2024-51529 Other in HarmonyOS
- CVE-2024-51528 Information disclosure in EMUI
- CVE-2024-51527 Missing authorization in EMUI
- CVE-2024-51526 Missing authorization in HarmonyOS
- CVE-2024-51525 Missing authorization in HarmonyOS
- CVE-2024-51524 Missing authorization in HarmonyOS
- CVE-2024-51523 Information disclosure in HarmonyOS
- CVE-2024-51522 Other in HarmonyOS
- CVE-2024-51521 Other in HarmonyOS
- CVE-2024-51520 Other in HarmonyOS
- CVE-2024-5152 ElementsReady Addons for Elementor <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-51519 Other in HarmonyOS
- CVE-2024-51518 Other in HarmonyOS
- CVE-2024-51517 Memory corruption in HarmonyOS
- CVE-2024-51516 Missing authorization in HarmonyOS
- CVE-2024-51515 Race condition in HarmonyOS
- CVE-2024-51514 Other in HarmonyOS
- CVE-2024-51513 Denial of service in HarmonyOS
- CVE-2024-51512 Other in HarmonyOS
- CVE-2024-51511 Other in HarmonyOS
- CVE-2024-51510 Memory corruption in EMUI
- CVE-2024-5151 SULly < 4.3.1 - Admin+ Stored XSS
- CVE-2024-51509 Cross-site scripting in tiki:tiki
- CVE-2024-51508 Cross-site scripting in tiki:tiki
- CVE-2024-51507 Cross-site scripting in tiki:tiki