Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 240 of 521.
- CVE-2024-49238 WordPress ADIF Log Search Widget plugin <= 1.0f - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-49237 WordPress Ahmeti Wp Timeline plugin <= 5.1 - CSRF to Stored XSS vulnerability
- CVE-2024-49236 WordPress Crazy Call To Action Box plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-49235 WordPress Contact Forms, Live Support, CRM, Video Messages plugin <= 1.10.2 - Sensitive Data Exposure vulnerability
- CVE-2024-49234 WordPress Plexx Elementor Extension plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-49233 WordPress MAS Elementor plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-49232 WordPress El mejor Cluster plugin <= 1.1.15 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-49231 WordPress WordPress Video plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-49230 WordPress Ajax Custom CSS/JS plugin <= 2.0.4 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-4923 Codezips E-Commerce Site addproduct.php unrestricted upload
- CVE-2024-49229 WordPress Better Author Bio plugin <= 2.7.10.11 - CSRF to Cross Site Scripting (XSS) vulnerability
- CVE-2024-49228 WordPress bVerse Convert plugin <= 1.3.7.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-49227 WordPress Free Stock Photos Foter plugin <= 1.5.4 - PHP Object Injection vulnerability
- CVE-2024-49226 WordPress TAKETIN To WP Membership plugin <= 2.8.17 - PHP Object Injection vulnerability
- CVE-2024-49225 WordPress wpPricing Builder plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-49224 WordPress Mitm Bug Tracker plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-49223 WordPress CJ Change Howdy plugin <= 3.3.1 - CSRF to Stored XSS vulnerability
- CVE-2024-49222 WordPress WPGuppy plugin <= 1.1.0 - PHP Object Injection vulnerability
- CVE-2024-49221 WordPress cSlider plugin <= 2.4.2 - CSRF to Stored XSS vulnerability
- CVE-2024-49220 WordPress Cookie Scanner plugin <= 1.1 - CSRF to Stored XSS vulnerability
- CVE-2024-4922 SourceCodester Simple Image Stack Website cross site scripting
- CVE-2024-49219 WordPress RS-Members plugin <= 1.0.3 - Privilege Escalation vulnerability
- CVE-2024-49218 WordPress Recently plugin <= 1.1 - PHP Object Injection vulnerability
- CVE-2024-49217 WordPress Adding drop down roles in registration plugin <= 1.1 - Privilege Escalation vulnerability
- CVE-2024-49216 WordPress Feed Comments Number plugin <= 0.2.1 - Arbitrary File Upload vulnerability
- CVE-2024-49214 QUIC in HAProxy 3.1.x before 3.1-dev7, 3.0.x before 3.0.5, and 2.9.x before 2.9.11 allows opening a 0-RTT session with a spoofed IP address.
- CVE-2024-49211 Cross-site scripting in archerirm:archer
- CVE-2024-49210 Cross-site scripting in archerirm:archer
- CVE-2024-4921 SourceCodester Employee and Visitor Gate Pass Logging System unrestricted upload
- CVE-2024-49209 Missing authorization in archerirm:archer
- CVE-2024-49208 Missing authorization in archerirm:archer
- CVE-2024-49203 Querydsl vulnerable to HQL injection through orderBy
- CVE-2024-49202 Keyfactor Command before 12.5.0 has Incorrect Access Control: access tokens are over permissioned, aka 64099.
- CVE-2024-49201 Keyfactor Remote File Orchestrator (aka remote-file-orchestrator) 2.8 before 2.8.1 allows Information Disclosure: sensitive information coul
- CVE-2024-49200 Memory corruption in insyde:kernel
- CVE-2024-4920 SourceCodester Online Discussion Forum Site registerH.php unrestricted upload
- CVE-2024-49197 Memory corruption in samsung:exynos 1080 firmware
- CVE-2024-49196 Memory corruption in samsung:exynos 1480 firmware
- CVE-2024-49195 Memory corruption in trustedfirmware:mbed tls
- CVE-2024-49194 Databricks JDBC Driver Command Injection vulnerability
- CVE-2024-49193 Zendesk before 2024-07-02 allows remote attackers to read ticket history via e-mail spoofing, because Cc fields are extracted from incoming
- CVE-2024-4919 Campcodes Online Examination System addCourseExe.php sql injection
- CVE-2024-4918 Campcodes Online Examination System updateQuestion.php sql injection
- CVE-2024-4917 Campcodes Online Examination System submitAnswerExe.php sql injection
- CVE-2024-4916 Campcodes Online Examination System selExamAttemptExe.php sql injection
- CVE-2024-4915 Campcodes Online Examination System result.php sql injection
- CVE-2024-49147 Microsoft Update Catalog Elevation of Privilege Vulnerability
- CVE-2024-49142 Microsoft Access Remote Code Execution Vulnerability
- CVE-2024-4914 Campcodes Online Examination System ranking-exam.php sql injection
- CVE-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow
- CVE-2024-49132 Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2024-4913 Campcodes Online Examination System exam.php sql injection
- CVE-2024-49129 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
- CVE-2024-49128 Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2024-49127 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- CVE-2024-49126 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
- CVE-2024-49125 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-49124 Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
- CVE-2024-49123 Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2024-49122 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2024-49121 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- CVE-2024-49120 Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2024-4912 Campcodes Online Examination System addExamExe.php sql injection
- CVE-2024-49119 Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2024-49118 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2024-49117 Windows Hyper-V Remote Code Execution Vulnerability
- CVE-2024-49116 Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2024-49115 Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2024-49114 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- CVE-2024-49113 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- CVE-2024-49112 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- CVE-2024-49111 Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- CVE-2024-49110 Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- CVE-2024-4911 Campcodes Complete Web-Based School Management System student_exam_mark_update_form.php sql injection
- CVE-2024-49109 Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- CVE-2024-49108 Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2024-49107 WmsRepair Service Elevation of Privilege Vulnerability
- CVE-2024-49106 Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2024-49105 Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2024-49104 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-49103 Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
- CVE-2024-49102 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-49101 Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- CVE-2024-4910 Campcodes Complete Web-Based School Management System student_exam_mark_insert_form1.php sql injection
- CVE-2024-49099 Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
- CVE-2024-49098 Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
- CVE-2024-49097 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- CVE-2024-49096 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- CVE-2024-49095 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- CVE-2024-49094 Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- CVE-2024-49093 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
- CVE-2024-49092 Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- CVE-2024-49091 Windows Domain Name Service Remote Code Execution Vulnerability
- CVE-2024-49090 Windows Common Log File System Driver Elevation of Privilege Vulnerability
- CVE-2024-4909 Campcodes Complete Web-Based School Management System student_due_payment.php sql injection
- CVE-2024-49089 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-49088 Windows Common Log File System Driver Elevation of Privilege Vulnerability
- CVE-2024-49087 Windows Mobile Broadband Driver Information Disclosure Vulnerability
- CVE-2024-49086 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-49085 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability