Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 269 of 521.
- CVE-2024-4521 Campcodes Complete Web-Based School Management System teacher_salary_details2.php cross site scripting
- CVE-2024-45208 Missing authorization in Director
- CVE-2024-45207 Code injection in Agent for Windows
- CVE-2024-45206 Server-side request forgery in Service Provider Console
- CVE-2024-45205 Security feature bypass in UniFi iOS App
- CVE-2024-45204 Information disclosure in Backup & Replication
- CVE-2024-45203 Open redirect in "@cosme" App for Android
- CVE-2024-45201 LlamaIndex includes an exec call for `import {cls_name}`
- CVE-2024-45200 In Nintendo Mario Kart 8 Deluxe before 3.0.3, the LAN/LDN local multiplayer implementation allows a remote attacker to exploit a stack-based
- CVE-2024-4520 Improper Access Control in gaizhenbiao/chuanhuchatgpt
- CVE-2024-45199 insightsoftware Hive JDBC through 2.6.13 has a remote code execution vulnerability.
- CVE-2024-45198 insightsoftware Spark JDBC 2.6.21 has a remote code execution vulnerability.
- CVE-2024-45195 Apache OFBiz Forced Browsing
- CVE-2024-45194 Cross-site scripting in synacor:zimbra collaboration suite
- CVE-2024-45193 Weak cryptography in matrix:olm
- CVE-2024-45192 Weak cryptography in matrix:olm
- CVE-2024-45191 Weak cryptography in matrix:olm
- CVE-2024-45190 Mage AI pipeline interaction request remote arbitrary file leak
- CVE-2024-4519 Campcodes Complete Web-Based School Management System teacher_salary_details3.php cross site scripting
- CVE-2024-45189 Mage AI git content request remote arbitrary file leak
- CVE-2024-45188 Mage AI file content request remote arbitrary file leak
- CVE-2024-45187 Mage AI allows deleted users to use the terminal server with admin access, leading to remote code execution
- CVE-2024-45186 FileSender before 2.49 allows server-side template injection (SSTI) for retrieving credentials.
- CVE-2024-45185 Memory corruption in samsung:exynos 1080 firmware
- CVE-2024-45184 Memory corruption in samsung:exynos 1080 firmware
- CVE-2024-45183 Memory corruption in samsung:exynos 1280 firmware
- CVE-2024-45182 Memory corruption in wibu:wibukey
- CVE-2024-45181 Memory corruption in wibu:wibukey
- CVE-2024-45180 Cross-site scripting in squaredup:squaredup ds for scom
- CVE-2024-4518 Campcodes Complete Web-Based School Management System teacher_salary_invoice.php cross site scripting
- CVE-2024-45179 Command injection in c-mor:c-mor video surveillance
- CVE-2024-45178 Path traversal in c-mor:c-mor video surveillance
- CVE-2024-45177 Cross-site scripting in c-mor:c-mor video surveillance
- CVE-2024-45176 Cross-site scripting in c-mor:c-mor video surveillance
- CVE-2024-45175 Information disclosure in c-mor:c-mor video surveillance
- CVE-2024-45174 SQL injection in c-mor:c-mor video surveillance
- CVE-2024-45173 Privilege escalation in c-mor:c-mor video surveillance
- CVE-2024-45172 Cross-site request forgery in c-mor:c-mor video surveillance
- CVE-2024-45171 File upload in c-mor:c-mor video surveillance
- CVE-2024-45170 Missing authorization in c-mor:c-mor video surveillance
- CVE-2024-4517 Campcodes Complete Web-Based School Management System teacher_salary_invoice1.php cross site scripting
- CVE-2024-45169 Memory corruption in uci:idol2
- CVE-2024-45168 Missing authorization in uci:idol2
- CVE-2024-45167 Denial of service in uci:idol2
- CVE-2024-45166 Memory corruption in uci:idol2
- CVE-2024-45165 Hardcoded credentials in uci:idol2
- CVE-2024-45164 Missing authorization in akamai:secure internet access enterprise threatavert
- CVE-2024-45163 The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC (command and control) server.
- CVE-2024-45162 A stack-based buffer overflow issue was discovered in the phddns client in Blu-Castle BCUM221E 1.0.0P220507 via the password field.
- CVE-2024-45161 A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220507.
- CVE-2024-45160 Incorrect credential validation in LemonLDAP::NG 2.18.x and 2.19.x before 2.19.2 allows attackers to bypass OAuth2 client authentication via
- CVE-2024-4516 Campcodes Complete Web-Based School Management System timetable.php cross site scripting
- CVE-2024-45159 Security feature bypass in trustedfirmware:mbed tls
- CVE-2024-45158 Memory corruption in trustedfirmware:mbed tls
- CVE-2024-45157 Weak cryptography in trustedfirmware:mbed tls
- CVE-2024-45156 Animate | NULL Pointer Dereference (CWE-476)
- CVE-2024-45155 Animate | Access of Uninitialized Pointer (CWE-824)
- CVE-2024-45153 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-45152 Substance3D - Stager | Out-of-bounds Write (CWE-787)
- CVE-2024-45150 Dimension | Out-of-bounds Write (CWE-787)
- CVE-2024-4515 Campcodes Complete Web-Based School Management System timetable_grade_wise.php cross site scripting
- CVE-2024-45149 Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2024-45148 Adobe Commerce | Improper Authentication (CWE-287)
- CVE-2024-45147 Bridge | Out-of-bounds Read (CWE-125)
- CVE-2024-45146 Dimension | Use After Free (CWE-416)
- CVE-2024-45145 Lightroom Desktop | Out-of-bounds Read (CWE-125)
- CVE-2024-45144 Substance3D - Stager | Out-of-bounds Write (CWE-787)
- CVE-2024-45143 Substance3D - Stager | Heap-based Buffer Overflow (CWE-122)
- CVE-2024-45142 Substance3D - Stager | Write-what-where Condition (CWE-123)
- CVE-2024-45141 Substance3D - Stager | Out-of-bounds Write (CWE-787)
- CVE-2024-45140 Substance3D - Stager | Out-of-bounds Write (CWE-787)
- CVE-2024-4514 Campcodes Complete Web-Based School Management System timetable_insert_form.php cross site scripting
- CVE-2024-45139 Substance3D - Stager | Heap-based Buffer Overflow (CWE-122)
- CVE-2024-45138 Substance3D - Stager | Use After Free (CWE-416)
- CVE-2024-45137 InDesign Desktop | Unrestricted Upload of File with Dangerous Type (CWE-434)
- CVE-2024-45136 InCopy | Unrestricted Upload of File with Dangerous Type (CWE-434)
- CVE-2024-45135 Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2024-45134 Adobe Commerce | Information Exposure (CWE-200)
- CVE-2024-45133 Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2024-45132 Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2024-45131 Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2024-45130 Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2024-4513 Campcodes Complete Web-Based School Management System timetable_update_form.php cross site scripting
- CVE-2024-45129 Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2024-45128 Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2024-45127 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-45125 Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2024-45124 Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2024-45123 Adobe Commerce | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-45122 Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2024-45121 Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2024-45120 Adobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
- CVE-2024-4512 SourceCodester Prison Management System edit-profile.php cross site scripting
- CVE-2024-45119 Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2024-45118 Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2024-45117 Adobe Commerce | Improper Input Validation (CWE-20)
- CVE-2024-45116 Adobe Commerce | Cross-site Scripting (XSS) (CWE-79)
- CVE-2024-45115 Adobe Commerce | Improper Authentication (CWE-287)
- CVE-2024-45114 Illustrator | Out-of-bounds Write (CWE-787)
- CVE-2024-45113 ColdFusion | Improper Authentication (CWE-287)