Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 264 of 521.
- CVE-2024-45782 Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)
- CVE-2024-45781 Grub2: fs/ufs: oob write in the heap
- CVE-2024-45780 Grub2: fs/tar: integer overflow causes heap oob write
- CVE-2024-4578 Privilege escalation in Arista Wireless Access Points
- CVE-2024-45779 Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser
- CVE-2024-45778 Grub2: fs/bfs: integer overflow in the bfs parser.
- CVE-2024-45777 Grub2: grub-core/gettext: integer overflow leads to heap oob write.
- CVE-2024-45776 Grub2: grub-core/gettext: integer overflow leads to heap oob write and read.
- CVE-2024-45775 Grub2: commands/extcmd: missing check for failed allocation
- CVE-2024-45774 Grub2: reader/jpeg: heap oob write during jpeg parsing
- CVE-2024-45773 Use after free in Facebook Thrift
- CVE-2024-45772 Apache Lucene Replicator: Security Vulnerability in Lucene Replicator - Deserialization Issue
- CVE-2024-45771 SQL injection in openrapid:rapidcms
- CVE-2024-45770 Pcp: pmpost symlink attack allows escalating pcp to root user
- CVE-2024-4577 PHP-CGI OS Command Injection
- CVE-2024-45769 Pcp: pmcd heap corruption through metric pmstore operations
- CVE-2024-45767 SQL injection in Dell OpenManage Enterprise
- CVE-2024-45766 Code injection in Dell OpenManage Enterprise
- CVE-2024-45765 Command injection in Enterprise SONiC OS
- CVE-2024-45764 Auth bypass in Enterprise SONiC OS
- CVE-2024-45763 Command injection in Enterprise SONiC OS
- CVE-2024-45761 Code injection in Dell OpenManage Server Administrator
- CVE-2024-45760 Missing authorization in Dell OpenManage Server Administrator
- CVE-2024-4576 TIBCO EBX File Inclusion Vulnerability
- CVE-2024-45759 Privilege escalation in PowerProtect DD
- CVE-2024-45758 H2O.ai H2O vulnerable to deserialization attacks via a JDBC Connection URL
- CVE-2024-45757 An issue was discovered in Centreon centreon-bam 24.04, 23.10, 23.04, and 22.10.
- CVE-2024-45756 An issue was discovered in Centreon centreon-open-tickets 24.10.x before 24.10.0, 24.04.x before 24.04.2, 23.10.x before 23.10.1, 23.04.x be
- CVE-2024-45755 An issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 23.10.1, 23.04.x befo
- CVE-2024-45754 An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x be
- CVE-2024-45753 Cross-site scripting in mahara:mahara
- CVE-2024-45752 Privilege escalation in pixlone:logiops
- CVE-2024-45751 tgt (aka Linux target framework) before 1.0.93 attempts to achieve entropy by calling rand without srand.
- CVE-2024-45750 An issue in TheGreenBow Windows Standard VPN Client 6.87.108 (and older), Windows Enterprise VPN Client 6.87.109 (and older), Windows Enterp
- CVE-2024-4575 LayerSlider 7.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ls_search_form Shortcode
- CVE-2024-45746 An issue was discovered in Trusted Firmware-M through 2.1.0.
- CVE-2024-45745 TopQuadrant TopBraid EDG JavaScript console XXE
- CVE-2024-45744 TopQuadrant TopBraid EDG password manager stores external credentials insecurely
- CVE-2024-45741 Persistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise
- CVE-2024-45740 Persistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise
- CVE-2024-4574 Cross-site scripting in Graphina – Charts and Graphs For Elementor
- CVE-2024-45739 Sensitive information disclosure in AdminManager logging channel
- CVE-2024-45738 Sensitive information disclosure in REST_Calls logging channel
- CVE-2024-45737 Maintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)
- CVE-2024-45736 Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon
- CVE-2024-45735 Improper Access Control for low-privileged user in Splunk Secure Gateway App
- CVE-2024-45734 Low Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard
- CVE-2024-45733 Remote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows
- CVE-2024-45732 Low-privileged user could run search as nobody in SplunkDeploymentServerConfig app
- CVE-2024-45731 Path traversal in Splunk Enterprise
- CVE-2024-45723 goTenna Pro ATAK Plugin Use of Cryptographically Weak Pseudo-Random Number Generator
- CVE-2024-45722 Ruijie Reyee OS Use of Weak Credentials
- CVE-2024-45721 Command injection in Wi-Fi STATION SH-52B
- CVE-2024-45720 Apache Subversion: Command line argument injection on Windows platforms
- CVE-2024-45719 Apache Answer: Predictable Authorization Token Using UUIDv1
- CVE-2024-45718 Sensitive data disclosure vulnerability
- CVE-2024-45717 SolarWinds Platform Cross- Site Scripting Vulnerability
- CVE-2024-45715 SolarWinds Platform Edit Function Cross-Site Scripting Vulnerability
- CVE-2024-45714 SolarWinds Serv-U Stored XSS Vulnerability
- CVE-2024-45713 SolarWinds Kiwi CatTools Sensitive Information Disclosure Vulnerability
- CVE-2024-45712 SolarWinds Serv-U Client-Side Cross-Site Scripting Vulnerability
- CVE-2024-45711 SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability
- CVE-2024-45710 SolarWinds Platform Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- CVE-2024-45709 SolarWinds Web Help Desk Local File Read Vulnerability
- CVE-2024-45700 DoS vulnerability due to uncontrolled resource exhaustion
- CVE-2024-4570 Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-45699 Reflected XSS vulnerability in /zabbix.php?action=export.valuemaps
- CVE-2024-45698 D-Link WiFi router - OS Command Injection
- CVE-2024-45697 D-Link WiFi router - Hidden Functionality
- CVE-2024-45696 D-Link WiFi router - Hidden Functionality
- CVE-2024-45695 D-Link WiFi router - Stack-based Buffer Overflow
- CVE-2024-45694 D-Link WiFi router - Stack-based Buffer Overflow
- CVE-2024-45693 Apache CloudStack: Request origin validation bypass makes account takeover possible
- CVE-2024-45692 Denial of service in virtualmin:virtualmin
- CVE-2024-45691 Moodle: lesson activity password bypass through php loose comparison
- CVE-2024-45690 Moodle: idor when deleting oauth2 linked accounts
- CVE-2024-4569 Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-45689 Moodle: unprotected access to sensitive information via dynamic tables
- CVE-2024-45687 HTTP Server incorrectly accepting disallowed characters within header values
- CVE-2024-45682 Millbeck Communications Proroute H685t-w Command Injection.
- CVE-2024-4568 Stack overflow in Xpdf 4.05 due to object loop in PDF resources
- CVE-2024-45679 Memory corruption in Assimp
- CVE-2024-45678 Weak cryptography in yubico:security key c nfc by yubico firmware
- CVE-2024-45676 IBM Cognos Controller file upload
- CVE-2024-45675 IBM Informix Dynamic Server Authentication Bypass
- CVE-2024-45674 IBM Security Verify Bridge information disclosure
- CVE-2024-45673 IBM Security Verify Bridge information disclosure
- CVE-2024-45672 IBM Security Verify Bridge data manipulation
- CVE-2024-45671 IBM Security Verify Information Queue information disclosure
- CVE-2024-45670 IBM Security SOAR weak password recovery mechanism
- CVE-2024-4567 Themify Shortcodes <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via themify_button Shortcode
- CVE-2024-45669 IBM Security Verify Information Queue denial of service
- CVE-2024-45663 IBM Db2 denial of service
- CVE-2024-45662 IBM Safer Payments denial of service
- CVE-2024-4566 ShopLentor <= 2.8.8 - Missing Authorization to WordPress Option Modification
- CVE-2024-45659 IBM Security Verify Access information disclosure
- CVE-2024-45658 IBM Security Verify Access information disclosure
- CVE-2024-45657 IBM Security Verify Access incorrect privilege assignment
- CVE-2024-45656 IBM Flexible Service Processor hard coded credentials
- CVE-2024-45655 IBM Application Gateway incorrect permission assignment