Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 223 of 521.
- CVE-2024-51362 The LSC Smart Connect Indoor IP Camera V7.6.32 is vulnerable to an information disclosure issue where live camera footage can be accessed th
- CVE-2024-51360 Code injection in phpgurukul:hospital management system
- CVE-2024-5136 PHPGurukul Directory Management System search-directory.php. cross site scripting
- CVE-2024-51358 An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the Add new application.
- CVE-2024-5135 PHPGurukul Directory Management System index.php sql injection
- CVE-2024-51348 A stack-based buffer overflow vulnerability in the P2P API service in BS Producten Petcam with firmware 33.1.0.0818 allows unauthenticated a
- CVE-2024-51347 A buffer overflow vulnerability in the dgiot binary in LSC Smart Indoor IP Camera V7.6.32.
- CVE-2024-51346 An issue in Eufy Homebase 2 version 3.3.4.1h allows a local attacker to obtain sensitive information via the cryptographic scheme.
- CVE-2024-5134 SourceCodester Electricity Consumption Monitoring Tool delete-bill.php sql injection
- CVE-2024-51337 Cross-site scripting in gibbonedu:gibbon
- CVE-2024-51330 Code injection in ultimaker:ultimaker cura
- CVE-2024-5133 Account Takeover via Exposed Recovery Token in lunary-ai/lunary
- CVE-2024-51329 Other in idrsdev:agile-board
- CVE-2024-51328 Cross-site scripting in projectworlds:travel management system
- CVE-2024-51327 SQL injection in projectworlds:travel management system
- CVE-2024-51326 SQL injection in projectworlds:travel management system
- CVE-2024-51324 An issue in the BdApiUtil driver of Baidu Antivirus v5.2.3.116083 allows attackers to terminate arbitrary process via executing a BYOVD (Bri
- CVE-2024-51322 Cross-site scripting in zucchetti:ad hoc infinity
- CVE-2024-51321 Open redirect in zucchetti:ad hoc infinity
- CVE-2024-51320 Cross-site scripting in zucchetti:ad hoc infinity
- CVE-2024-51319 File upload in zucchetti:ad hoc infinity
- CVE-2024-51317 Command injection in netsurf-browser:netsurf
- CVE-2024-51316 The Tenda TX9 V22.03.02.20 firmware has a denial of service vulnerability in the update_dev_name function of the file /goform/SetOnlineDevNa
- CVE-2024-51315 The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_425964 function of the file /goform/SetOnlineDevName
- CVE-2024-51314 The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_424CE0 function of the file /goform/setMacFilterCfg.
- CVE-2024-51313 The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EA38 function of the file /goform/SetVirtualServerCfg.
- CVE-2024-51312 The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EEE0 function of the file /goform/SetStaticRouteCfg.
- CVE-2024-51311 The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the sub_4418CC function of the file /goform/SetNetControlList.
- CVE-2024-5131 Improper Access Control in lunary-ai/lunary
- CVE-2024-51304 Command injection in draytek:vigor3900 firmware
- CVE-2024-51301 Command injection in draytek:vigor3900 firmware
- CVE-2024-51300 Command injection in draytek:vigor3900 firmware
- CVE-2024-5130 Incorrect Authorization in lunary-ai/lunary
- CVE-2024-51299 Command injection in draytek:vigor3900 firmware
- CVE-2024-51298 Command injection in draytek:vigor3900 firmware
- CVE-2024-51296 Command injection in draytek:vigor3900 firmware
- CVE-2024-5129 Privilege Escalation Vulnerability in lunary-ai/lunary
- CVE-2024-5128 IDOR Vulnerability in lunary-ai/lunary
- CVE-2024-5127 Improper Access Control in lunary-ai/lunary
- CVE-2024-51260 Command injection in draytek:vigor3900 firmware
- CVE-2024-5126 Improper Access Control in lunary-ai/lunary
- CVE-2024-51259 Command injection in draytek:vigor3900 firmware
- CVE-2024-51258 Command injection in draytek:vigor3900 firmware
- CVE-2024-51257 Command injection in draytek:vigor3900 firmware
- CVE-2024-51255 Command injection in draytek:vigor3900 firmware
- CVE-2024-51254 Command injection in draytek:vigor3900 firmware
- CVE-2024-51253 Command injection in draytek:vigor3900 firmware
- CVE-2024-51252 Command injection in draytek:vigor3900 firmware
- CVE-2024-51251 Command injection in draytek:vigor3900 firmware
- CVE-2024-5125 XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui
- CVE-2024-51249 Command injection in draytek:vigor3900 firmware
- CVE-2024-51248 Command injection in draytek:vigor3900 firmware
- CVE-2024-51247 Command injection in draytek:vigor3900 firmware
- CVE-2024-51246 Command injection in draytek:vigor3900 firmware
- CVE-2024-51245 Command injection in draytek:vigor3900 firmware
- CVE-2024-51244 Command injection in draytek:vigor3900 firmware
- CVE-2024-51243 Code injection in eladmin:eladmin
- CVE-2024-51242 Server-side request forgery in eladmin:eladmin
- CVE-2024-51240 An issue in the luci-mod-rpc package in OpenWRT Luci LTS allows for privilege escalation from an admin account to root via the JSON-RPC-API,
- CVE-2024-5124 Timing Attack Vulnerability in gaizhenbiao/chuanhuchatgpt
- CVE-2024-5123 SourceCodester Event Registration System cross site scripting
- CVE-2024-51229 Cross-site scripting in pb-cms project:pb-cms
- CVE-2024-51228 An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300RT V2.1.6-B20170724.1
- CVE-2024-51226 Cross-site scripting in phpgurukul:vehicle record management system
- CVE-2024-51225 Cross-site scripting in phpgurukul:vehicle record management system
- CVE-2024-51224 Cross-site scripting in phpgurukul:vehicle record management system
- CVE-2024-51223 Cross-site scripting in phpgurukul:vehicle record management system
- CVE-2024-51222 Cross-site scripting in phpgurukul:vehicle record management system
- CVE-2024-5122 SourceCodester Event Registration System sql injection
- CVE-2024-51213 Cross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute arbitrary code via the login.php component.
- CVE-2024-51211 SQL injection in os4ed:opensis
- CVE-2024-51210 Firepad allows insecure document access
- CVE-2024-5121 SourceCodester Event Registration System cross site scripting
- CVE-2024-51209 Cross-site scripting in phpgurukul:client management system
- CVE-2024-51208 File upload in phpgurukul:boat booking system
- CVE-2024-5120 SourceCodester Event Registration System sql injection
- CVE-2024-51190 Cross-site scripting in trendnet:tew-651br firmware
- CVE-2024-5119 SourceCodester Event Registration System sql injection
- CVE-2024-51189 Cross-site scripting in trendnet:tew-651br firmware
- CVE-2024-51188 Cross-site scripting in trendnet:tew-651br firmware
- CVE-2024-51187 Cross-site scripting in trendnet:tew-651br firmware
- CVE-2024-51186 Command injection in dlink:dir-820l firmware
- CVE-2024-51182 Cross-site scripting in celk:celk saude
- CVE-2024-51181 Cross-site scripting in phpgurukul:ifsc code finder
- CVE-2024-51180 Cross-site scripting in phpgurukul:ifsc code finder
- CVE-2024-5118 SourceCodester Event Registration System login.php sql injection
- CVE-2024-51179 Denial of service in open5gs:open5gs
- CVE-2024-51175 An issue in H3C switch h3c-S1526 allows a remote attacker to obtain sensitive information via the S1526.cfg component.
- CVE-2024-5117 SourceCodester Event Registration System portal.php sql injection
- CVE-2024-51165 SQL injection in ketr:jepaas
- CVE-2024-51164 SQL injection in ketr:jepaas
- CVE-2024-51163 A Local File Inclusion vulnerability in Vegam Solutions Vegam 4i versions 6.3.47.0 and earlier allows a remote attacker to obtain sensitive
- CVE-2024-51162 An issue in Audimex EE versions 15.1.20 and earlier allowing a remote attacker to escalate privileges.
- CVE-2024-5116 SourceCodester Online Examination System save.php sql injection
- CVE-2024-51157 Cross-site request forgery in 07fly:07flycms
- CVE-2024-51156 Cross-site request forgery in 07fly:07flycms
- CVE-2024-51152 File upload in alexstack:laravel cms
- CVE-2024-51151 Command injection in dlink:di-8200 firmware
- CVE-2024-5115 Campcodes Complete Web-Based School Management System teacher_profile.php sql injection
- CVE-2024-51144 Cross Site Request Forgery (CSRF) vulnerability exists in the 'pvmsg.php?action=add_message', pvmsg.php?action=confirm_delete , and ajax.ser