Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 254 of 521.
- CVE-2024-4729 Campcodes Legal Case Management System expense-type cross site scripting
- CVE-2024-4728 Campcodes Legal Case Management System court cross site scripting
- CVE-2024-47273 Path traversal in Hyper Backup
- CVE-2024-47272 Missing authorization in Surveillance Station
- CVE-2024-47271 Information disclosure in Surveillance Station
- CVE-2024-47270 Missing authorization in Surveillance Station
- CVE-2024-4727 Campcodes Legal Case Management System court-type cross site scripting
- CVE-2024-47269 Information disclosure in Surveillance Station
- CVE-2024-47268 Missing authorization in Surveillance Station
- CVE-2024-47267 Path traversal in Surveillance Station
- CVE-2024-47266 Path traversal in Active Backup for Business
- CVE-2024-47265 Path traversal in Active Backup for Business
- CVE-2024-47264 Path traversal in Active Backup for Business
- CVE-2024-47263 Path traversal in Hyper Backup
- CVE-2024-47262 Race condition in AXIS OS
- CVE-2024-47261 File upload in AXIS OS
- CVE-2024-47260 Denial of service in AXIS OS
- CVE-2024-4726 Campcodes Legal Case Management System clients cross site scripting
- CVE-2024-47259 Command injection in AXIS OS
- CVE-2024-47258 Security feature bypass in 2N Access Commander
- CVE-2024-47257 Denial of service in AXIS P1428-E Network Camera
- CVE-2024-47256 Hardcoded credentials in 2N Access Commander
- CVE-2024-47255 Privilege escalation in 2N Access Commander
- CVE-2024-47254 Privilege escalation in 2N Access Commander
- CVE-2024-47253 Path traversal in 2N Access Commander
- CVE-2024-47252 Apache HTTP Server: mod_ssl error log variable escaping
- CVE-2024-47250 Apache NimBLE: Lack of input validation in HCI advertising report could lead to potential out-of-bound access
- CVE-2024-4725 Campcodes Legal Case Management System client_user cross site scripting
- CVE-2024-47249 Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler
- CVE-2024-47248 Apache NimBLE: Buffer overflow in NimBLE MESH Bluetooth stack
- CVE-2024-47241 Security feature bypass in Secure Connect Gateway (SCG) 5.0 Appliance - SRS
- CVE-2024-47240 Misconfiguration in Secure Connect Gateway (SCG) 5.0 Appliance - SRS
- CVE-2024-4724 Campcodes Legal Case Management System case-type cross site scripting
- CVE-2024-47239 Denial of service in PowerScale OneFS
- CVE-2024-47238 Other in Dell Client Platform BIOS
- CVE-2024-4723 Campcodes Legal Case Management System case-status cross site scripting
- CVE-2024-47227 Cross-site scripting in iredmail:iredadmin
- CVE-2024-47226 Cross-site scripting in netbox:netbox
- CVE-2024-47224 Other in mitel:micollab
- CVE-2024-47223 SQL injection in mitel:micollab
- CVE-2024-47222 Server-side request forgery in myoffice:my office sdk
- CVE-2024-47221 Auth bypass in rapidscada:rapid scada
- CVE-2024-4722 Campcodes Complete Web-Based School Management System index.php cross site scripting
- CVE-2024-47219 Command injection in vesoft:nebulagraph database
- CVE-2024-47218 Auth bypass in vesoft:nebulagraph database
- CVE-2024-47217 Denial of service in snowplow:iglu server
- CVE-2024-47215 Denial of service in snowplow:snowbridge
- CVE-2024-47214 Denial of service in snowplow:iglu server
- CVE-2024-47213 Denial of service in snowplow:enrich
- CVE-2024-47212 Denial of service in snowplow:iglu server
- CVE-2024-47211 OpenStack Ironic fails to verify checksums of supplied image_source URLs
- CVE-2024-47210 Gladys Assistant before 4.45.1 allows Privilege Escalation (a user changing their own role) because req.body.role can be used in updateMySel
- CVE-2024-4721 Campcodes Complete Web-Based School Management System add_student_subject.php cross site scripting
- CVE-2024-47208 Apache OFBiz: URLs allowing remote use of Groovy expressions, leading to RCE
- CVE-2024-4720 Campcodes Complete Web-Based School Management System approve_petty_cash.php cross site scripting
- CVE-2024-47197 Maven Archetype Plugin: Maven Archetype integration-test may package local settings into the published artifact, possibly containing credentials
- CVE-2024-47196 Privilege escalation in ModelSim
- CVE-2024-47195 Privilege escalation in ModelSim
- CVE-2024-47194 Privilege escalation in ModelSim
- CVE-2024-47193 WithSecure Elements Agent for Mac before 24.3, MDR before 24.3, and Elements Client Security for Mac before 16.10 allow a remote Denial of Service.
- CVE-2024-47192 Missing authorization in mahara:mahara
- CVE-2024-47191 pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running
- CVE-2024-47190 Northern.tech Hosted Mender before 2024.07.11 allows SSRF.
- CVE-2024-4719 Campcodes Complete Web-Based School Management System delete_record.php cross site scripting
- CVE-2024-47189 SQL injection in mitel:micollab
- CVE-2024-47188 Suricata http/byte-ranges: missing hashtable random seed leads to potential DoS
- CVE-2024-47187 Suricata datasets: missing hashtable random seed leads to potential DoS
- CVE-2024-47186 Filament has unvalidated ColorColumn and ColorEntry values that can be used for Cross-site Scripting
- CVE-2024-47184 Ampache vulnerable to Stored XSS via Democratic Playlist Name
- CVE-2024-47183 Parse Server's custom object ID allows to acquire role privileges
- CVE-2024-47182 Dozzle uses unsafe hash for passwords
- CVE-2024-47181 Unaligned memory access in RPL option processing in Contiki-NG
- CVE-2024-47180 Shields.io Remote Code Execution vulnerability in Dynamic JSON/TOML/YAML badges
- CVE-2024-4718 Campcodes Complete Web-Based School Management System delete_student_grade_subject.php cross site scripting
- CVE-2024-47179 Supply chain in RSSHub
- CVE-2024-47178 basic-auth-connect's callback uses time unsafe string comparison
- CVE-2024-47176 cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source
- CVE-2024-47175 libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer
- CVE-2024-47174 Credential leak when credentials are used with `<nix/fetchurl.nix>`
- CVE-2024-47173 Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups
- CVE-2024-47172 Computer Vision Annotation Tool (CVAT) access control is broken in several PATCH endpoints
- CVE-2024-47171 Agnai vulnerable to Relative Path Traversal in Image Upload
- CVE-2024-47170 Agnai File Disclosure Vulnerability: JSON via Path Traversal
- CVE-2024-4717 Campcodes Complete Web-Based School Management System update_classroom.php cross site scripting
- CVE-2024-47169 Agnai vulnerable to Remote Code Execution via JS Upload using Directory Traversal
- CVE-2024-47168 The `enable_monitoring` flag set to `False` does not disable monitoring in Gradio
- CVE-2024-47167 SSRF in the path parameter of /queue/join in Gradio
- CVE-2024-47166 One-level read path traversal in `/custom_component` in Gradio
- CVE-2024-47165 CORS origin validation accepts the null origin in Gradio
- CVE-2024-47164 The `is_in_or_equal` function may be bypassed in Gradio
- CVE-2024-47162 Information disclosure in YouTrack
- CVE-2024-47161 Information disclosure in TeamCity
- CVE-2024-47160 Missing authorization in YouTrack
- CVE-2024-4716 Campcodes Complete Web-Based School Management System update_exam.php cross site scripting
- CVE-2024-47159 Missing authorization in YouTrack
- CVE-2024-47158 Code injection in N-LINE
- CVE-2024-47157 Privilege escalation in Magic OS
- CVE-2024-47156 Information Leak Vulnerability in Honor Product
- CVE-2024-47155 Information disclosure in Magic OS
- CVE-2024-47154 Information disclosure in Magic OS