Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 262 of 521.
- CVE-2024-46241 Cross-site scripting in phpgurukul:dairy farm shop management system
- CVE-2024-46240 Cross-site scripting in o-dyn:collabtive
- CVE-2024-4624 Cross-site scripting in Essential Addons for Elementor – Popular Elementor Templates & Widgets
- CVE-2024-46239 Cross-site scripting in phpgurukul:hospital management system
- CVE-2024-46238 Cross-site scripting in phpgurukul:hospital management system
- CVE-2024-46237 Cross-site scripting in phpgurukul:hospital management system
- CVE-2024-46236 Cross-site scripting in codeastro:membership management system
- CVE-2024-4623 Cross-site scripting in Blogmentor – Blog Layouts for Elementor
- CVE-2024-46226 Cross-site scripting in helpdeskz:helpdeskz
- CVE-2024-4622 alpitronic Hypercharger EV Charger Use of Default Credentials
- CVE-2024-46215 A vulnerability was discovered in KM08-708H-v1.1, There is a buffer overflow in the sub_445BDC() function within the /usr/sbin/goahead progr
- CVE-2024-46213 Code injection in redaxo:redaxo
- CVE-2024-46212 Path traversal in redaxo
- CVE-2024-46210 File upload in redaxo:redaxo
- CVE-2024-4621 ArForms < 6.6 - Admin+ Stored XSS
- CVE-2024-46209 REDAXO CMS Cross-site Scripting vulnerability
- CVE-2024-4620 ArForms < 6.6 - Unauthenticated RCE
- CVE-2024-4619 Cross-site scripting in Elementor Website Builder – more than just a page builder
- CVE-2024-4618 Cross-site scripting in Exclusive Addons for Elementor
- CVE-2024-4617 Rank Math SEO with AI Best SEO Tools <= 1.0.218 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-4616 Widget Bundle <= 2.0.0 - Unauthencated Reflected XSS
- CVE-2024-4615 Cross-site scripting in EleSpare – News, Magazine and Blog Addons for Elementor
- CVE-2024-4612 URL Redirection to Untrusted Site ('Open Redirect') in GitLab
- CVE-2024-4611 AppPresser <= 4.3.2 - Improper Missing Encryption Exception Handling to Authentication Bypass
- CVE-2024-46103 SQL injection in sem-cms:semcms
- CVE-2024-46101 File upload in gdidees:gdidees cms
- CVE-2024-4610 Arm Mali GPU Kernel Driver Use-After-Free
- CVE-2024-46097 Missing authorization in testlink:testlink
- CVE-2024-4609 Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability
- CVE-2024-46089 Command injection in 74cms:74cms
- CVE-2024-46088 An arbitrary file upload vulnerability in the ProductAction.entphone interface of Zhejiang University Entersoft Customer Resource Management
- CVE-2024-46086 Cross-site request forgery in frogcms project:frogcms
- CVE-2024-46085 Cross-site request forgery in frogcms project:frogcms
- CVE-2024-46084 Command injection in scriptcase:scriptcase
- CVE-2024-46083 Cross-site scripting in scriptcase:scriptcase
- CVE-2024-46082 Cross-site scripting in scriptcase:scriptcase
- CVE-2024-46081 Cross-site scripting in scriptcase:scriptcase
- CVE-2024-46080 Code injection in scriptcase:scriptcase
- CVE-2024-4608 Cross-site scripting in SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster
- CVE-2024-46079 Cross-site scripting in scriptcase:scriptcase
- CVE-2024-46078 SQL injection in adonesevangelista:sports management system
- CVE-2024-46077 Cross-site scripting in mayurik:online tours and travels management system
- CVE-2024-46076 Code injection in ruoyi:ruoyi
- CVE-2024-46073 A reflected Cross-Site Scripting (XSS) vulnerability exists in the login page of IceHRM v32.4.0.OS.
- CVE-2024-4607 Mali GPU Kernel Driver allows improper GPU memory processing operations
- CVE-2024-46062 Privilege escalation in conda:miniconda3
- CVE-2024-46060 Privilege escalation in anaconda:anaconda3
- CVE-2024-4606 Deserialization in Ultimate Store Kit Elementor Addons
- CVE-2024-46055 Cross-site scripting in davidguva:openvidreview
- CVE-2024-46054 Missing authorization in davidguva:openvidreview
- CVE-2024-4605 Breakdance <= 1.7.1 - Authenticated (Contributor+) Remote Code Execution
- CVE-2024-46049 Memory corruption in tenda:o6 firmware
- CVE-2024-46048 Command injection in tenda:fh451 firmware
- CVE-2024-46047 Memory corruption in tenda:fh451 firmware
- CVE-2024-46046 Memory corruption in tenda:fh451 firmware
- CVE-2024-46045 Memory corruption in tenda:ch22 firmware
- CVE-2024-46044 Memory corruption in tenda:ch22 firmware
- CVE-2024-46041 IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay.
- CVE-2024-46040 IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration.
- CVE-2024-4604 Open Redirect in Magarsus Consultancy's SSO
- CVE-2024-4603 Excessive time spent checking DSA keys and parameters
- CVE-2024-4602 Embed Peertube Playlist < 1.10 - Editor+ Stored XSS
- CVE-2024-4601 Improper Authentication vulnerability in Socomec Net Vision
- CVE-2024-4600 Cross-Site Request Forgery vulnerability in Socomec Net Vision
- CVE-2024-45999 SQL injection in magicbug:cloudlog
- CVE-2024-45993 Memory corruption in giflib project:giflib
- CVE-2024-4599 Denial of service vulnerability in LAN Messenger
- CVE-2024-45989 Monica AI Assistant desktop application v2.3.0 is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor.
- CVE-2024-45987 Cross-site request forgery in online voting system project:online voting system
- CVE-2024-45986 Cross-site scripting in projectworlds:online voting system project
- CVE-2024-45985 Cross-site scripting in varunsardana004:blood bank and donation management system
- CVE-2024-45984 Cross-site scripting in varunsardana004:blood bank and donation management system
- CVE-2024-45983 Cross-site request forgery in kishan0725:hospital management system
- CVE-2024-45982 A host header injection vulnerability in scheduleR v0.0.18 allows attackers to obtain the password reset token via user interaction with a c
- CVE-2024-45981 A host header injection vulnerability in BookReviewLibrary 1.0 allows attackers to obtain the password reset token via user interaction with
- CVE-2024-45980 A host header injection vulnerability in MEANStore 1.0 allows attackers to obtain the password reset token via user interaction with a craft
- CVE-2024-4598 Information Disclosure in Multiple WSO2 Products Due to Improper Handling in Enrich Mediator
- CVE-2024-45979 A host header injection vulnerability in Lines Police CAD 1.0 allows attackers to obtain the password reset token via user interaction with
- CVE-2024-45971 Memory corruption in mz-automation:libiec61850
- CVE-2024-45970 Memory corruption in mz-automation:libiec61850
- CVE-2024-4597 Cross-Site Request Forgery (CSRF) in GitLab
- CVE-2024-45969 NULL pointer dereference in the MMS Client in MZ Automation LibIEC1850 before commit 7afa40390b26ad1f4cf93deaa0052fe7e357ef33 allows a malic
- CVE-2024-45967 Pagekit Cross-site Scripting vulnerability
- CVE-2024-45965 Cross-site scripting in Contao
- CVE-2024-45964 Zenario Cross Site Scripting in the Image library
- CVE-2024-45962 October allows an admin account to upload PDF containing malicious JavaScript
- CVE-2024-45960 Zenario allows authenticated admin users to upload PDF files containing malicious code
- CVE-2024-4596 Kimai Session information disclosure
- CVE-2024-45955 SQL injection in rocketsoftware:zena
- CVE-2024-4595 SEMCMS function.php locate sql injection
- CVE-2024-45944 Code injection in j2eefast:j2eefast
- CVE-2024-4594 DedeCMS sys_safe.php cross-site request forgery
- CVE-2024-45933 OnlineNewsSite v1.0 is vulnerable to Cross Site Scripting (XSS) which allows attackers to execute arbitrary code via the Title and summary f
- CVE-2024-45932 Krayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name
- CVE-2024-4593 DedeCMS sys_multiserv.php cross-site request forgery
- CVE-2024-45920 Cross-site scripting in solvait:solvait
- CVE-2024-4592 DedeCMS sys_group_edit.php cross-site request forgery
- CVE-2024-45919 Privilege escalation in solvait:solvait
- CVE-2024-45918 Fujian Kelixin Communication Command and Dispatch Platform <=7.6.6.4391 is vulnerable to SQL Injection via /client/get_gis_fence.php.
- CVE-2024-4591 DedeCMS sys_group_add.php cross-site request forgery