Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 265 of 521.
- CVE-2024-45654 IBM Security ReaQta improper input validation
- CVE-2024-45653 IBM Sterling Connect:Direct Web Services information disclosure
- CVE-2024-45652 IBM Maximo Asset Management directory traversal
- CVE-2024-45651 IBM Sterling Connect:Direct Web Services session fixation
- CVE-2024-45650 IBM Security Verify Directory denial of service
- CVE-2024-4565 Advanced Custom Fields < 6.3 - Contributor+ Custom Field Access
- CVE-2024-45647 IBM Security Verify Access unverified password change
- CVE-2024-45644 IBM Security ReaQta file upload
- CVE-2024-45643 IBM QRadar EDR information disclosure
- CVE-2024-45642 IBM Security ReaQta information disclosure
- CVE-2024-45641 IBM Security ReaQta improper certificate validation
- CVE-2024-45640 IBM Security QRadar EDR information disclosure
- CVE-2024-4564 Cross-site scripting in CoDesigner – All in One Elementor WooCommerce Builder
- CVE-2024-45638 IBM QRadar EDR information disclosure
- CVE-2024-45636 Information disclosure in Security QRadar EDR
- CVE-2024-4563 The Progress MOVEit Automation Configuration Export Function Uses a Cryptographic Method with Insufficient Bit Length
- CVE-2024-45627 Apache Linkis Metadata Query Service JDBC: JDBC Datasource Module with Mysql has file read vulnerability
- CVE-2024-45626 Apache James: denial of service through JMAP HTML to text conversion
- CVE-2024-45625 Cross-site scripting in Forminator
- CVE-2024-45624 Information disclosure in Pgpool-II
- CVE-2024-45623 D-Link DAP-2310 Hardware A Firmware 1.16RC028 allows remote attackers to execute arbitrary code via a stack-based buffer overflow in the ATP
- CVE-2024-45622 ASIS (aka Aplikasi Sistem Sekolah using CodeIgniter 3) 3.0.0 through 3.2.0 allows index.php username SQL injection for Authentication Bypass.
- CVE-2024-45621 Cross-site scripting in rocket.chat:rocket.chat
- CVE-2024-45620 Libopensc: incorrect handling of the length of buffers or files in pkcs15init
- CVE-2024-4562 WhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via HttpMonitorSettings
- CVE-2024-45619 Libopensc: incorrect handling length of buffers or files in libopensc
- CVE-2024-45618 Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init
- CVE-2024-45617 Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc
- CVE-2024-45616 Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc
- CVE-2024-45615 Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init
- CVE-2024-45614 Header normalization allows for client to clobber proxy set headers in Puma
- CVE-2024-45613 CKEditor 5 has Cross-site Scripting vulnerability in the clipboard package
- CVE-2024-45612 Insert tag injection via canonical URL in Contao
- CVE-2024-45611 GLPI has a stored XSS at src/RSSFeed.php
- CVE-2024-45610 GLPI has a reflected XSS in ajax/cable.php
- CVE-2024-4561 WhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via FaviconController
- CVE-2024-45609 GLPI has a Reflected XSS in /front/stat.graph.php
- CVE-2024-45608 GLPI has an Authenticated SQL Injection
- CVE-2024-45607 whatsapp-api-js fails to validate message's signature
- CVE-2024-45606 Improper authorization on muting of alert rules in sentry
- CVE-2024-45605 Improper authorization on deletion of user issue alert notifications in sentry
- CVE-2024-45604 Directory traversal in the file selector widget in contao/core-bundle
- CVE-2024-45601 Local file Inclusion via static file serving functionality in Mesop
- CVE-2024-45600 Fields GLPI plugin has an Authenticated SQL Injection
- CVE-2024-4560 File upload in Kognetiks Chatbot for WordPress
- CVE-2024-45599 TCC Bypass in Cursor's macOS Application
- CVE-2024-45598 Cacti has a Local File Inclusion (LFI) Vulnerability via Poller Standard Error Log Path
- CVE-2024-45597 Pluto's http.request allows CR and LF in header values
- CVE-2024-45596 Directus's session is cached for OpenID and OAuth2 if `redirect` is not used
- CVE-2024-45595 D-Tale allows Remote Code Execution through the Query input on Chart Builder
- CVE-2024-45594 Decidim allows cross-site scripting (XSS) in the online or hybrid meeting embeds
- CVE-2024-45593 Nix affected by unsafe NAR unpacking
- CVE-2024-45592 auditor-bundle vulnerable to Cross-site Scripting because name of entity does not get escaped
- CVE-2024-45591 XWiki Platform document history including authors of any page exposed to unauthorized actors
- CVE-2024-45590 body-parser vulnerable to denial of service when url encoding is enabled
- CVE-2024-4559 Memory corruption in Chrome
- CVE-2024-45589 Denial of service in identityautomation:rapididentity
- CVE-2024-45588 Information Disclosure Vulnerability
- CVE-2024-45587 Unauthorized Modification Vulnerability
- CVE-2024-45586 Account Take Over Vulnerability
- CVE-2024-45584 Untrusted Pointer Dereference in Automotive Android OS
- CVE-2024-45583 Use After Free in Secure Processor
- CVE-2024-45582 Improper Validation of Array Index in Camera Driver
- CVE-2024-45581 Out-of-bounds Write in Audio
- CVE-2024-45580 Use After Free in DSP Service
- CVE-2024-4558 Use after free in Chrome
- CVE-2024-45579 Improper Input Validation in Camera Driver
- CVE-2024-45578 Improper Validation of Array Index in Camera Driver
- CVE-2024-45577 Improper Input Validation in Camera Driver
- CVE-2024-45576 Improper Validation of Array Index in Camera Driver
- CVE-2024-45575 Integer Overflow or Wraparound in Camera Driver
- CVE-2024-45574 Improper Validation of Array Index in Camera Driver
- CVE-2024-45573 Use of Out-of-range Pointer Offset in Display
- CVE-2024-45571 Use After Free in WLAN Host Communication
- CVE-2024-45570 Use of Out-of-range Pointer Offset in Camera Driver
- CVE-2024-4557 Uncontrolled Resource Consumption in GitLab
- CVE-2024-45569 Improper Validation of Array Index in WLAN Host Communication
- CVE-2024-45568 Buffer Over-read in Camera Driver
- CVE-2024-45567 Use After Free in Camera Driver
- CVE-2024-45566 Use After Free in Camera Driver
- CVE-2024-45565 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
- CVE-2024-45564 Use After Free in HLOS
- CVE-2024-45563 Out-of-bounds Write in Camera Driver
- CVE-2024-45562 Use After Free in HLOS
- CVE-2024-45561 Use After Free in Windows WLAN Host
- CVE-2024-45560 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera
- CVE-2024-4556 Directory traversal vulnerability in NetIQ Access Manager
- CVE-2024-45559 Buffer Over-read in Automotive OS Platform
- CVE-2024-45558 Buffer Over-read in WLAN Host Cmn
- CVE-2024-45557 Use of Out-of-range Pointer Offset in Trust Management Engine
- CVE-2024-45556 Improper Access Control for Register Interface in TZ Firmware
- CVE-2024-45555 Integer Overflow to Buffer Overflow in Automotive OS Platform
- CVE-2024-45554 Use After Free in DSP Service
- CVE-2024-45553 Use After Free in DSP Services
- CVE-2024-45552 Buffer Over-read in Data Network Stack & Connectivity
- CVE-2024-45551 Weak Authentication in HLOS
- CVE-2024-45550 Improper Validation of Array Index in DSP Services
- CVE-2024-4555 User impersonation with MFA when configure in specific way
- CVE-2024-45549 Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL
- CVE-2024-45548 Buffer Over-read in WLAN Windows Host