Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 238 of 521.
- CVE-2024-4950 Other in Chrome
- CVE-2024-4949 Use after free in Chrome
- CVE-2024-4948 Use after free in Chrome
- CVE-2024-4947 Google Chromium V8 Type Confusion
- CVE-2024-4946 SourceCodester Online Art Gallery Management System adminHome.php unrestricted upload
- CVE-2024-4945 SourceCodester Best Courier Management System view_parcel.php unrestricted upload
- CVE-2024-4944 Mobile VPN with SSL Local Privilege Escalation Vulnerability
- CVE-2024-4943 Blocksy <= 2.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-49422 Security feature bypass in Samsung Mobile Devices
- CVE-2024-49421 Path traversal in Quick Share Agent
- CVE-2024-49420 Other in GamingHub
- CVE-2024-4942 Custom Dash <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2024-49419 Security feature bypass in GamingHub
- CVE-2024-49418 Security feature bypass in GamingHub
- CVE-2024-49417 Privilege escalation in Smart Touch Call
- CVE-2024-49416 Information disclosure in SmartThings
- CVE-2024-49415 Memory corruption in Samsung Mobile Devices
- CVE-2024-49414 Auth bypass in Samsung Mobile Devices
- CVE-2024-49413 Security feature bypass in Samsung Mobile Devices
- CVE-2024-49412 Other in Samsung Mobile Devices
- CVE-2024-49411 Path traversal in Samsung Mobile Devices
- CVE-2024-49410 Memory corruption in Samsung Mobile Devices
- CVE-2024-4941 Local File Inclusion in JSON component in gradio-app/gradio
- CVE-2024-49409 Memory corruption in Samsung Mobile Devices
- CVE-2024-49408 Memory corruption in Samsung Mobile Devices
- CVE-2024-49407 Missing authorization in Samsung Flow
- CVE-2024-49406 Security feature bypass in Blockchain Keystore
- CVE-2024-49405 Auth bypass in Samsung Pass
- CVE-2024-49404 Missing authorization in Samsung Video Player
- CVE-2024-49403 Missing authorization in Samsung Voice Recorder
- CVE-2024-49402 Information disclosure in Samsung Mobile Devices
- CVE-2024-49401 Privilege escalation in Samsung Mobile Devices
- CVE-2024-49400 Security feature bypass in Tacquito
- CVE-2024-4940 Open Redirect in gradio-app/gradio
- CVE-2024-49399 Missing Authentication for Critical Function in Elvaco M-Bus Metering Gateway CMe3100
- CVE-2024-49398 Unrestricted Upload of File with Dangerous Type in Elvaco M-Bus Metering Gateway CMe3100
- CVE-2024-49397 Cross-site Scripting in Elvaco M-Bus Metering Gateway CMe3100
- CVE-2024-49396 Insufficiently Protected Credentials in Elvaco M-Bus Metering Gateway CMe3100
- CVE-2024-49395 Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block
- CVE-2024-49394 Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing
- CVE-2024-49393 Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing
- CVE-2024-49392 Cross-site scripting in Acronis Cyber Files
- CVE-2024-49391 Privilege escalation in Acronis Cyber Files
- CVE-2024-49390 Privilege escalation in Acronis Cyber Files
- CVE-2024-4939 Weaver Xtreme Theme Support <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via div Shortcode
- CVE-2024-49389 Privilege escalation in Acronis Cyber Files
- CVE-2024-49388 Missing authorization in Acronis Cyber Protect 16
- CVE-2024-49387 Information disclosure in Acronis Cyber Protect 16
- CVE-2024-49386 Information disclosure in Acronis Cyber Files
- CVE-2024-49385 Misconfiguration in Acronis True Image
- CVE-2024-49384 Misconfiguration in Acronis Cyber Protect 16
- CVE-2024-49383 Misconfiguration in Acronis Cyber Protect 16
- CVE-2024-49382 Misconfiguration in Acronis Cyber Protect 16
- CVE-2024-49381 Plenti arbitrary file deletion vulnerability
- CVE-2024-49380 Plenti arbitrary file write vulnerability
- CVE-2024-49379 Remote Code Execution (RCE) via Cross-Site Scripting (XSS) in Umbrel
- CVE-2024-49378 smartUp Cross-site Scripting vulnerability
- CVE-2024-49377 Jinja2 Templates are vulnerable to XSS attacks due to their configuration in OctoPrint
- CVE-2024-49376 Autolab Has Misconfigured Reset Password Permissions
- CVE-2024-49375 Remote Code Execution via Remote Model Loading in Rasa
- CVE-2024-49373 Centurion ERP user can view projects from organizations they're not apart of
- CVE-2024-49370 Change-Password via Portal-Profile sets PimcoreBackendUser password without hashing
- CVE-2024-49369 Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections
- CVE-2024-49368 Unchecked logrotate settings lead to arbitrary command execution
- CVE-2024-49367 Nginx UI's log path can be controlled
- CVE-2024-49366 Nginx UI's json field can construct a directory traversal payload, causing arbitrary files to be written
- CVE-2024-49365 tiny-secp256k1 allows for verify() bypass when running in bundled environment
- CVE-2024-49364 tiny-secp256k1 vulnerable to private key extraction when signing a malicious JSON-stringifyable message in bundled environment
- CVE-2024-49363 Uncontrolled Recursion and Asymmetric Resource Consumption (Amplification) in media/file proxy in Misskey
- CVE-2024-49362 Remote Code Execution on click of <a> Link in markdown preview
- CVE-2024-49361 Potential Vulnerability in ACON Library: Improper Input Validation Leading to Malicious Code Execution
- CVE-2024-49360 Path traversal in Sandboxie
- CVE-2024-4936 Canto <= 3.0.8 - Unauthenticated Remote File Inclusion
- CVE-2024-49359 ZimaOS vulnerable to Directory Listing via Parameter Manipulation
- CVE-2024-49358 ZimaOS vulnerable to Username Enumeration via API Responses
- CVE-2024-49357 ZimaOS (Installed Applications and System Information) has Unauthorized Sensitive Data Leak
- CVE-2024-49355 IBM OpenPages log manipulation
- CVE-2024-49354 IBM Concert information disclosure
- CVE-2024-49353 IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data denial of service
- CVE-2024-49352 IBM Cognos Anaytics XML external entity injection
- CVE-2024-49351 IBM Workload Scheduler information disclosure
- CVE-2024-49350 IBM Db2 denial of service
- CVE-2024-49349 IBM Financial Transaction Manager cross-site scripting
- CVE-2024-49348 IBM Cloud Pak for Business Automation incorrect privilege assignment
- CVE-2024-49344 IBM OpenPages session fixation
- CVE-2024-49343 IBM Informix Dynamic Server HTML injection
- CVE-2024-49342 IBM Informix Dynamic Server information disclosure
- CVE-2024-49340 IBM Watson Studio Local cross-site request forgery
- CVE-2024-4934 Quiz And Survey Master < 9.0.2 - Contributor+ Stored XSS
- CVE-2024-49339 IBM Financial Transaction Manager cross-site scripting
- CVE-2024-49338 IBM App Connect Enterprise information disclosure
- CVE-2024-49337 IBM OpenPages HTML injection
- CVE-2024-49336 IBM Security Guardium server-side request forgery
- CVE-2024-49335 WordPress GoogleDrive folder list plugin <= 2.2.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-49334 WordPress jLayer Parallax Slider plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-49333 WordPress Hero Menu plugin <= 1.16.5 - SQL Injection vulnerability
- CVE-2024-49332 WordPress Giveaway Boost plugin <= 2.1.4 - PHP Object Injection vulnerability
- CVE-2024-49331 WordPress Property Lot Management System plugin <= 4.2.38 - Arbitrary File Upload vulnerability
- CVE-2024-49330 WordPress Nice Backgrounds plugin <= 1.0 - Arbitrary File Upload vulnerability
- CVE-2024-4933 SourceCodester Simple Online Bidding System sql injection