Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 235 of 521.
- CVE-2024-49829 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera
- CVE-2024-49828 IBM Db2 for Linux, UNIX and Windows denial of service
- CVE-2024-49827 IBM Concert Software information disclosure
- CVE-2024-49825 IBM Robotic Process Automation session fixation
- CVE-2024-49824 IBM Robotic Process Automation security bypass
- CVE-2024-49823 IBM Common Cryptographic Architecture denial of service
- CVE-2024-49822 IBM QRadar Advisor server-side request forgery
- CVE-2024-49820 IBM Security Guardium Key Lifecycle Manager information disclosure
- CVE-2024-4982 Pagure: path traversal in view_issue_raw_file()
- CVE-2024-49819 IBM Security Guardium Key Lifecycle Manager information disclosure
- CVE-2024-49818 IBM Security Guardium Key Lifecycle Manager information disclosure
- CVE-2024-49817 IBM Security Guardium Key Lifecycle Manager information disclosure
- CVE-2024-49816 IBM Security Guardium Key Lifecycle Manager information disclosure
- CVE-2024-49814 IBM Security Verify Access Appliance Privilege Escalation
- CVE-2024-4981 Pagure: _update_file_in_git() follows symbolic links in temporary clones
- CVE-2024-49808 IBM Sterling Connect:Direct Web Services improper authorization
- CVE-2024-49807 IBM Sterling B2B Integrator cross-site scripting
- CVE-2024-49806 IBM Security Verify Access Appliance hard coded credentials
- CVE-2024-49805 IBM Security Verify Access Appliance hard coded credentials
- CVE-2024-49804 IBM Security Verify Access Appliance privilege escalation
- CVE-2024-49803 IBM Security Verify Access Appliance command execution
- CVE-2024-49800 IBM ApplinX Information Disclosure
- CVE-2024-4980 Cross-site scripting in WPKoi Templates for Elementor
- CVE-2024-49798 IBM ApplinX Information Disclosure
- CVE-2024-49797 IBM ApplinX Information Disclosure
- CVE-2024-49796 IBM ApplinX Clickjacking
- CVE-2024-49795 IBM ApplinX Cross-Site Request Forgery
- CVE-2024-49794 IBM ApplinX Cross-Site Request Forgery
- CVE-2024-49793 IBM ApplinX Cross-Site Scripting
- CVE-2024-49792 IBM ApplinX Cross-Site Scripting
- CVE-2024-49791 IBM ApplinX Cross-Site Scripting
- CVE-2024-49790 IBM Watson Studio on Cloud Pak for Data cross-site scripting
- CVE-2024-49785 IBM watsonx.ai cross-site scripting
- CVE-2024-49784 IBM OpenPages with Watson information disclosure
- CVE-2024-49783 IBM OpenPages with Watson information disclosure
- CVE-2024-49782 IBM OpenPages improper certificate validation
- CVE-2024-49781 IBM OpenPages XML external entity injection
- CVE-2024-49780 IBM OpenPages path traversal
- CVE-2024-4978 Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code
- CVE-2024-49779 IBM OpenPages cross-site request forgery
- CVE-2024-49778 Memory corruption in justdan96:tsmuxer
- CVE-2024-49777 Memory corruption in justdan96:tsmuxer
- CVE-2024-49776 Memory corruption in justdan96:tsmuxer
- CVE-2024-49775 Memory corruption in Opcenter Execution Foundation
- CVE-2024-49774 ModuleScanner flaws in SuiteCRM
- CVE-2024-49773 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SuiteCRM
- CVE-2024-49772 Authenticated SQL injection in AM_ProjectTemplates controller in SuiteCRM
- CVE-2024-49771 MPXJ has a Potential Path Traversal Vulnerability
- CVE-2024-49770 oak's path traversal allows transfer of hidden files within the served root directory
- CVE-2024-4977 Index WP MySQL For Speed < 1.4.18 - Admin+ Reflected XSS
- CVE-2024-49769 Waitress has a denial of service leading to high CPU usage/resource exhaustion
- CVE-2024-49768 Waitress has request processing race condition in HTTP pipelining with invalid first request
- CVE-2024-49767 Werkzeug possible resource exhaustion when parsing file data in forms
- CVE-2024-49766 Werkzeug safe_join not safe on Windows
- CVE-2024-49765 Bypass of Discourse Connect using other login paths if enabled in Discourse
- CVE-2024-49764 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.php
- CVE-2024-49763 PlexRipper allows API leak due to open CORS policy
- CVE-2024-49762 Pterodactyl Panel has plain-text logging of user passwords when two-factor authentication is disabled
- CVE-2024-49761 REXML ReDoS vulnerability
- CVE-2024-49760 OpenRefine has a path traversal in LoadLanguageCommand
- CVE-2024-4976 Out-of-bounds array write in Xpdf 4.05 due to missing object type check
- CVE-2024-49759 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/edituser.inc.php
- CVE-2024-49758 LibreNMS has a stored XSS in ExamplePlugin with Device's Notes
- CVE-2024-49757 Zitadel User Registration Bypass Vulnerability
- CVE-2024-49756 AshPostgres empty, atomic, non-bulk actions, policy bypass for side-effects vulnerability.
- CVE-2024-49755 Duende IdentityServer has insufficient validation of DPoP cnf claim in Local APIs
- CVE-2024-49754 LibreNMS has a stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/api-access.inc.php
- CVE-2024-49753 Denied Host Validation Bypass in Zitadel Actions
- CVE-2024-49751 Frappe Press possible HTML injection through SaaS Signup inputs
- CVE-2024-49750 Snowflake Connector for Python has sensitive data in logs
- CVE-2024-4975 code-projects Simple Chat System Message cross site scripting
- CVE-2024-49749 Integer overflow in Android
- CVE-2024-49748 Memory corruption in Android
- CVE-2024-49747 Memory corruption in Android
- CVE-2024-49745 Memory corruption in Android
- CVE-2024-49744 Deserialization in Android
- CVE-2024-49742 Missing authorization in Android
- CVE-2024-49740 Denial of service in Android
- CVE-2024-4974 code-projects Simple Chat System register.php cross site scripting
- CVE-2024-49739 Memory corruption in Android
- CVE-2024-49738 Memory corruption in Android
- CVE-2024-49737 Privilege escalation in Android
- CVE-2024-49736 Business logic in Android
- CVE-2024-49735 Privilege escalation in Android
- CVE-2024-49734 Information disclosure in Android
- CVE-2024-49733 Information disclosure in Android
- CVE-2024-49732 Missing authorization in Android
- CVE-2024-49731 Business logic in Android
- CVE-2024-49730 Memory corruption in Android
- CVE-2024-4973 code-projects Simple Chat System register.php sql injection
- CVE-2024-49728 Information disclosure in Android
- CVE-2024-49724 Race condition in Android
- CVE-2024-49722 Information disclosure in Android
- CVE-2024-49720 Business logic in Android
- CVE-2024-4972 code-projects Simple Chat System login.php sql injection
- CVE-2024-49714 Memory corruption in Android
- CVE-2024-4971 Cross-site scripting in LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
- CVE-2024-49709 XSS in iKSORIS
- CVE-2024-49708 XSS in iKSORIS
- CVE-2024-49707 XSS in iKSORIS