Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 225 of 521.
- CVE-2024-5098 SourceCodester Simple Inventory System login.php sql injection
- CVE-2024-50972 SQL injection in angeljudesuarez:construction management system
- CVE-2024-50971 SQL injection in angeljudesuarez:construction management system
- CVE-2024-50970 SQL injection in nikoarroyocuraza:online furniture shopping project
- CVE-2024-5097 SourceCodester Simple Inventory System tableedit.php#page=editprice cross-site request forgery
- CVE-2024-50969 Cross-site scripting in anisha:jonnys liquor
- CVE-2024-50968 Business logic in adonesevangelista:agri-trading online shopping system
- CVE-2024-50967 The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability.
- CVE-2024-50966 Cross-site request forgery in timgreen:dingfanzu cms
- CVE-2024-50965 Cross Site Scripting vulnerability in Public Knowledge Project PKP Platform OJS/OMP/OPS- before v.3.3.0.16 allows an attacker to execute arb
- CVE-2024-50960 Command injection in extron:sme 211 firmware
- CVE-2024-5096 Hipcam Device MAC Address wifi.mac information disclosure
- CVE-2024-50956 A buffer overflow in the RecvSocketData function of Inovance HCPLC_AM401-CPU1608TPTN 21.38.0.0, HCPLC_AM402-CPU1608TPTN 41.38.0.0, and HCPLC
- CVE-2024-50955 An issue in how XINJE XD5E-24R and XL5E-16T v3.5.3b handles TCP protocol messages allows attackers to cause a Denial of Service (DoS) via a crafted TCP message.
- CVE-2024-50954 The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a vulnerability in handling Modbus messages.
- CVE-2024-50953 An issue in XINJE XL5E-16T V3.7.2a allows attackers to cause a Denial of Service (DoS) via a crafted Modbus message.
- CVE-2024-5095 Victor Zsviot Camera MQTT Packet denial of service
- CVE-2024-50948 mochiMQTT v2.6.3 is vulnerable to Denial of Service (DoS) due to improper resource management.
- CVE-2024-50947 Denial of service in davidepianca98:kmqtt
- CVE-2024-50945 An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submi
- CVE-2024-50944 Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functionality.
- CVE-2024-50942 qiwen-file v1.4.0 was discovered to contain a SQL injection vulnerability via the component /mapper/NoticeMapper.xml.
- CVE-2024-5094 SourceCodester Best House Rental Management System view_payment.php sql injection
- CVE-2024-50931 Misconfiguration in silabs:z-wave software development kit
- CVE-2024-50930 Other in silabs:z-wave software development kit
- CVE-2024-5093 SourceCodester Best House Rental Management System login.php sql injection
- CVE-2024-50929 Missing authorization in silabs:z-wave software development kit
- CVE-2024-50928 Missing authorization in silabs:z-wave software development kit
- CVE-2024-50924 Denial of service in silabs:z-wave software development kit
- CVE-2024-50921 Denial of service in silabs:z-wave software development kit
- CVE-2024-50920 Auth bypass in silabs:z-wave software development kit
- CVE-2024-5092 Cross-site scripting in Elegant Addons for elementor
- CVE-2024-50919 File upload in jpress:jpress
- CVE-2024-5091 Cross-site scripting in SKT Addons for Elementor
- CVE-2024-5090 Cross-site scripting in SiteOrigin Widgets Bundle
- CVE-2024-5088 Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-5087 Minimal Coming Soon – Coming Soon Page <= 2.38 - Missing Authorization to Limited Settings Change
- CVE-2024-50861 Cross-site scripting in gestioip:gestioip
- CVE-2024-5086 Cross-site scripting in Essential Addons for Elementor Pro
- CVE-2024-50859 Cross-site scripting in gestioip:gestioip
- CVE-2024-50858 Cross-site request forgery in gestioip:gestioip
- CVE-2024-50857 Cross-site scripting in gestioip:gestioip
- CVE-2024-50854 Memory corruption in tendacn:g3 firmware
- CVE-2024-50853 Command injection in tendacn:g3 firmware
- CVE-2024-50852 Command injection in tendacn:g3 firmware
- CVE-2024-5085 Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated PHP Object Injection
- CVE-2024-50849 Cross-site scripting in rws:worldserver
- CVE-2024-50848 XML external entity in rws:worldserver
- CVE-2024-50843 Information disclosure in phpgurukul:user registration \& login and user management system
- CVE-2024-50842 Cross-site scripting in lopalopa:e-learning management system
- CVE-2024-50841 Cross-site scripting in lopalopa:e-learning management system
- CVE-2024-50840 Cross-site scripting in lopalopa:e-learning management system
- CVE-2024-5084 Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution
- CVE-2024-50839 Cross-site scripting in lopalopa:e-learning management system
- CVE-2024-50838 Cross-site scripting in lopalopa:e-learning management system
- CVE-2024-50837 Cross-site scripting in lopalopa:e-learning management system
- CVE-2024-50836 Cross-site scripting in lopalopa:e-learning management system
- CVE-2024-50835 SQL injection in lopalopa:e-learning management system
- CVE-2024-50834 SQL injection in lopalopa:e-learning management system
- CVE-2024-50833 SQL injection in lopalopa:e-learning management system
- CVE-2024-50832 SQL injection in lopalopa:e-learning management system
- CVE-2024-50831 SQL injection in lopalopa:e-learning management system
- CVE-2024-50830 SQL injection in lopalopa:e-learning management system
- CVE-2024-5083 Nexus Repository 2 - Stored XSS
- CVE-2024-50829 SQL injection in lopalopa:e-learning management system
- CVE-2024-50828 SQL injection in lopalopa:e-learning management system
- CVE-2024-50827 SQL injection in lopalopa:e-learning management system
- CVE-2024-50826 SQL injection in lopalopa:e-learning management system
- CVE-2024-50825 SQL injection in lopalopa:e-learning management system
- CVE-2024-50824 SQL injection in lopalopa:e-learning management system
- CVE-2024-50823 SQL injection in lopalopa:e-learning management system
- CVE-2024-5082 Nexus Repository 2 - Remote Code Execution
- CVE-2024-50811 hopetree izone lts c011b48 contains a server-side request forgery (SSRF) vulnerability in the active push function as \\apps\\tool\\apis\\bd
- CVE-2024-50810 hopetree izone lts c011b48 contains a Cross Site Scripting (XSS) vulnerability in the article comment function.
- CVE-2024-5081 WP eMember <= v10.7.0 - Stored XSS via CSRF
- CVE-2024-50809 The theme.php file in SDCMS 2.8 has a command execution vulnerability that allows for the execution of system commands
- CVE-2024-50808 Code injection in seacms:seacms
- CVE-2024-50807 Trippo Responsive Filemanager 9.14.0 is vulnerable to Cross Site Scripting (XSS) via file upload using the svg and pdf extensions.
- CVE-2024-50804 Insecure Permissions vulnerability in Micro-star International MSI Center Pro 2.1.37.0 allows a local attacker to execute arbitrary code via
- CVE-2024-50803 Redaxo Core CMS Cross Site Scripting (XSS)
- CVE-2024-50802 SQL injection in abantecart:abantecart
- CVE-2024-50801 SQL injection in abantecart:abantecart
- CVE-2024-50800 Cross Site Scripting vulnerability in M2000 Smart4Web before v.5.020241004 allows a remote attacker to execute arbitrary code via the error
- CVE-2024-5080 WP eMember < 10.6.6 - Admin+ Arbitrary File Upload
- CVE-2024-5079 WP eMember < 10.6.7 - Unauthenticated Stored XSS via Member Registration
- CVE-2024-5077 WP eMember < 10.6.6 - Stored XSS in Blacklist via CSRF
- CVE-2024-50766 SQL injection in oretnom23:survey application system
- CVE-2024-5076 WP eMember < 10.6.6 - Bulk Delete via CSRF
- CVE-2024-5075 WP eMember < 10.6.6 - Reflected XSS
- CVE-2024-5074 WP eMember < 10.6.6 - Reflected XSS
- CVE-2024-5073 Essential Addons for Elementor <= 5.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Feed
- CVE-2024-50724 KASO v9.0 was discovered to contain a SQL injection vulnerability via the person_id parameter at /cardcase/editcard.jsp.
- CVE-2024-5072 Other in Server
- CVE-2024-50717 SQL injection in smarts-srl:smart agent
- CVE-2024-50716 SQL injection in smarts-srl:smart agent
- CVE-2024-50715 Command injection in smarts-srl:smart agent
- CVE-2024-50714 A Server-Side Request Forgery (SSRF) in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via a cr
- CVE-2024-50713 SQL injection in smarts-srl:smart agent
- CVE-2024-5071 Bookster <= 1.1.0 - Unauthenticated Appointment Status Update
- CVE-2024-50707 Code injection in uniguest:tripleplay