Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 266 of 521.
- CVE-2024-45547 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host
- CVE-2024-45546 Buffer Over-read in WLAN Windows Host
- CVE-2024-45544 Use After Free in Data Network Stack & Connectivity
- CVE-2024-45543 Out-of-bounds Write in Audio
- CVE-2024-45542 Stack-based Buffer Overflow in WLAN Windows Host
- CVE-2024-45541 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host
- CVE-2024-45540 Use After Free in HLOS
- CVE-2024-4554 Multiple xss vulnerability in NetIQ Access Manager
- CVE-2024-45539 Memory corruption in DiskStation Manager (DSM)
- CVE-2024-45538 Cross-site request forgery in DiskStation Manager (DSM)
- CVE-2024-45537 Apache Druid: Users can provide MySQL JDBC properties not on allow list
- CVE-2024-4553 Cross-site scripting in WP Shortcodes Plugin — Shortcodes Ultimate
- CVE-2024-45528 Cross-site scripting in codeastro:membership management system
- CVE-2024-45527 Cross-site scripting in vanderbilt:redcap
- CVE-2024-45526 Security Update for the OPC UA .NET Standard Stack
- CVE-2024-45523 An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.359
- CVE-2024-45522 Business logic in linen:linen
- CVE-2024-45520 WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a remote Denial of Service because of memory corruption during scanning of a PE32 file.
- CVE-2024-4552 Social Login Lite For WooCommerce <= 1.6.0 - Authentication Bypass
- CVE-2024-45519 Synacor Zimbra Collaboration Suite (ZCS) Command Execution
- CVE-2024-45518 Server-side request forgery in zimbra:collaboration
- CVE-2024-45517 Cross-site scripting in synacor:zimbra collaboration suite
- CVE-2024-45516 Cross-site scripting in synacor:zimbra collaboration suite
- CVE-2024-45515 Cross-site scripting in zimbra:collaboration
- CVE-2024-45514 Cross-site scripting in synacor:zimbra collaboration suite
- CVE-2024-45513 Cross-site scripting in synacor:zimbra collaboration suite
- CVE-2024-45512 Cross-site scripting in synacor:zimbra collaboration suite
- CVE-2024-45511 Cross-site scripting in synacor:zimbra collaboration suite
- CVE-2024-45510 Cross-site scripting in synacor:zimbra collaboration suite
- CVE-2024-4551 Path traversal in Video Gallery – YouTube Playlist, Channel Gallery by YotuWP
- CVE-2024-45509 Missing authorization in misp-project:misp
- CVE-2024-45508 Memory corruption in htmldoc project:htmldoc
- CVE-2024-45507 Apache OFBiz: Prevent use of URLs in files when loading them from Java or Groovy, leading to a RCE
- CVE-2024-45506 Denial of service in haproxy:haproxy
- CVE-2024-45505 Apache HertzBeat: Exists Native Deser RCE and file writing vulnerabilities
- CVE-2024-45504 Cross-site request forgery in AssetView F
- CVE-2024-4550 Memory corruption in P360 Workstation (ThinkStation) BIOS
- CVE-2024-45498 Apache Airflow: Command Injection in an example DAG
- CVE-2024-45497 Misconfiguration in Red Hat Fuse 7
- CVE-2024-45496 Openshift-controller-manager: elevated build pods can lead to node compromise in openshift
- CVE-2024-45495 MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking.
- CVE-2024-45494 An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 (Fixed in 7.0.0).
- CVE-2024-45493 An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 (Fixed in 7.0.0).
- CVE-2024-45492 Integer overflow in libexpat project:libexpat
- CVE-2024-45491 Integer overflow in libexpat project:libexpat
- CVE-2024-45490 Integer overflow in libexpat project:libexpat
- CVE-2024-4549 Delta Electronics DIAEnergie SQL Injection
- CVE-2024-45489 Arc before 2024-08-26 allows remote code execution in JavaScript boosts.
- CVE-2024-45488 One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because of an issue related to cookies.
- CVE-2024-45484 Enabled ICMP redirection in B&R APROL
- CVE-2024-45483 Missing GRUB password in B&R APROL
- CVE-2024-45482 Privilege escalation in B&R APROL
- CVE-2024-45481 Improper authentication in SSH of B&R APROL
- CVE-2024-45480 Unauthorized local file reading in B&R APROL
- CVE-2024-4548 Delta Electronics DIAEnergie SQL Injection
- CVE-2024-45479 Apache Ranger: SSRF in Edit Service page - Add logic to filter requests to localhost
- CVE-2024-45478 Apache Ranger: Stored XSS in Edit Service page - Add logic to validate user input
- CVE-2024-45477 Apache NiFi: Improper Neutralization of Input in Parameter Description
- CVE-2024-45476 Null dereference in Teamcenter Visualization V14.2
- CVE-2024-45475 Memory corruption in Teamcenter Visualization V14.2
- CVE-2024-45474 Memory corruption in Teamcenter Visualization V14.2
- CVE-2024-45473 Memory corruption in Teamcenter Visualization V14.2
- CVE-2024-45472 Memory corruption in Teamcenter Visualization V14.2
- CVE-2024-45471 Memory corruption in Teamcenter Visualization V14.2
- CVE-2024-45470 Memory corruption in Teamcenter Visualization V14.2
- CVE-2024-4547 Delta Electronics DIAEnergie Unauthenticated SQL Injection
- CVE-2024-45469 Memory corruption in Teamcenter Visualization V14.2
- CVE-2024-45468 Memory corruption in Teamcenter Visualization V14.2
- CVE-2024-45467 Memory corruption in Teamcenter Visualization V14.2
- CVE-2024-45466 Memory corruption in Teamcenter Visualization V14.2
- CVE-2024-45465 Memory corruption in Teamcenter Visualization V14.2
- CVE-2024-45464 Memory corruption in Teamcenter Visualization V14.2
- CVE-2024-45463 Memory corruption in Teamcenter Visualization V14.2
- CVE-2024-45462 Apache CloudStack: Incomplete session invalidation on web interface logout
- CVE-2024-45461 Apache CloudStack Quota plugin: Access checks not enforced in Quota
- CVE-2024-45460 WordPress Flipping Cards plugin <= 1.30 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-4546 Cross-site scripting in Custom Post Type Attachment
- CVE-2024-45459 Cross-site scripting in Product Slider for WooCommerce
- CVE-2024-45458 WordPress Spiffy Calendar plugin <= 4.9.13 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-45457 WordPress Spiffy Calendar plugin <= 4.9.13 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-45456 WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-45455 WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-45454 WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-45453 WordPress Maintenance Redirect plugin <= 2.0.1 - IP Bypass vulnerability
- CVE-2024-45452 WordPress Septera theme <= 1.5.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-45451 WordPress Roseta theme <= 1.3.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-45450 Missing authorization in EMUI
- CVE-2024-4545 EDB Postgres Advanced Server (EPAS) authenticated file read permissions bypass using edbldr
- CVE-2024-45449 Missing authorization in EMUI
- CVE-2024-45448 Misconfiguration in EMUI
- CVE-2024-45447 Missing authorization in EMUI
- CVE-2024-45446 Missing authorization in EMUI
- CVE-2024-45445 Denial of service in EMUI
- CVE-2024-45444 Missing authorization in EMUI
- CVE-2024-45443 Path traversal in HarmonyOS
- CVE-2024-45442 Missing authorization in EMUI
- CVE-2024-45441 Other in EMUI
- CVE-2024-45440 Drupal Full Path Disclosure
- CVE-2024-4544 Pie Register - Social Sites Login (Add on) <= 1.7.7 - Authentication Bypass
- CVE-2024-45438 An issue was discovered in TitanHQ SpamTitan Email Security Gateway 8.00.x before 8.00.101 and 8.01.x before 8.01.14.