Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 270 of 521.
- CVE-2024-45112 Acrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)
- CVE-2024-45111 Illustrator | Out-of-bounds Read (CWE-125)
- CVE-2024-4511 Shanghai Sunfull Automation BACnet Server HMI1002-ARM Message buffer overflow
- CVE-2024-45109 Photoshop Desktop | Out-of-bounds Write (CWE-787)
- CVE-2024-45108 Photoshop Desktop | Out-of-bounds Write (CWE-787)
- CVE-2024-45107 ZDI-CAN-24186: Adobe Acrobat Reader DC Doc Object Use-After-Free Information Disclosure Vulnerability
- CVE-2024-45106 Apache Ozone: Improper authentication when generating S3 secrets
- CVE-2024-45105 Privilege escalation in HX1331 Certified Node (ThinkAgile) BIOS
- CVE-2024-45104 Missing authorization in XClarity Administrator
- CVE-2024-45103 Missing authorization in XClarity Administrator
- CVE-2024-45102 Privilege escalation in XClarity Administrator
- CVE-2024-45101 Information disclosure in XClarity Administrator
- CVE-2024-45100 IBM Security QRadar EDR denial of service
- CVE-2024-4510 Ruijie RG-UAC arp_add_commit.php os command injection
- CVE-2024-45099 IBM Security ReaQta cross-site scripting
- CVE-2024-45098 IBM Aspera Faspex bypass security
- CVE-2024-45097 IBM Aspera Faspex bypass security
- CVE-2024-45096 IBM Aspera Faspex information disclosure
- CVE-2024-45094 IBM DS8900F and DS8A00 Hardware Management Console (HMC) cross-site scripting
- CVE-2024-45091 IBM UrbanCode Deploy information disclosure
- CVE-2024-4509 Ruijie RG-UAC add_commit.php os command injection
- CVE-2024-45089 IBM Sterling B2B Integrator information disclosure
- CVE-2024-45088 IBM Maximo Asset Management cross-site scripting
- CVE-2024-45087 IBM WebSphere Application Server cross-site scripting
- CVE-2024-45086 IBM WebSphere Application Server XML external entity injection
- CVE-2024-45085 IBM WebSphere Application Server denial of service
- CVE-2024-45084 IBM Cognos Controller CSV injection
- CVE-2024-45082 IBM Cognos Analytics HTTP open redirection
- CVE-2024-45081 IBM Cognos Controller incorrect authorization
- CVE-2024-4508 Ruijie RG-UAC static_route_edit_ipv6.php os command injection
- CVE-2024-45077 IBM Maximo Asset Management file upload
- CVE-2024-45076 IBM webMethods Integration code execution
- CVE-2024-45075 IBM webMethods Integration privilege escalation
- CVE-2024-45074 IBM webMethods Integration directory traversal
- CVE-2024-45073 IBM WebSphere Application Server cross-site scripting
- CVE-2024-45072 IBM WebSphere Application Server XML external entity injection
- CVE-2024-45071 IBM WebSphere Application Server cross-site scripting
- CVE-2024-45070 Liteos_a has an out-of-bounds read vulnerability
- CVE-2024-4507 Ruijie RG-UAC static_route_add_ipv6.php os command injection
- CVE-2024-45068 Authentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center OVA
- CVE-2024-45067 Misconfiguration in Intel(R) Gaudi(R) software installers
- CVE-2024-45066 Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Command Injection
- CVE-2024-45064 Memory corruption in X-CUBE-AZRT-H7RS
- CVE-2024-45063 Multiple issues in ctl(4) CAM Target Layer
- CVE-2024-45062 Memory corruption in ippusbxd
- CVE-2024-45061 Cross-site scripting in Observium
- CVE-2024-45060 Unauthenticated Cross-Site-Scripting (XSS) in sample file in PHPSpreadsheet
- CVE-2024-4506 Ruijie RG-UAC ip_addr_edit_commit.php os command injection
- CVE-2024-45059 Authenticated SQL Injection in i-Educar
- CVE-2024-45058 Privilege escalation in i-Educar
- CVE-2024-45057 Reflected Cross-Site Scripting in i-Educar
- CVE-2024-45056 `fold (xor (shl 1, x), -1) -> (rotl ~1, x)` misoptimization in zksolc
- CVE-2024-45054 Potential Permission Leakage of Cluster Level in hwameistor
- CVE-2024-45053 Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine
- CVE-2024-45052 Fides Webserver Authentication Timing-Based Username Enumeration Vulnerability
- CVE-2024-45051 Bypass of email address validation via encoded email addresses in Discourse
- CVE-2024-45050 Ringer Server Does Not Check Members When Loading Messages
- CVE-2024-4505 Ruijie RG-UAC ip_addr_add_commit.php os command injection
- CVE-2024-45049 Nix Hydra Missing authentication when triggering evaluations
- CVE-2024-45048 XML External Entity Reference (XXE) in PHPSpreadsheet
- CVE-2024-45047 Potential mXSS vulnerability due to improper HTML escaping in svelte
- CVE-2024-45046 PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via style information
- CVE-2024-45045 JavaScript Injection via url encoded values in links in Collabora Office Android
- CVE-2024-45044 Bareos's negative command ACLs can be circumvented by abbreviating commands
- CVE-2024-45043 OpenTelemetry Collector AWS Firehose Receiver Authentication Bypass Vulnerability
- CVE-2024-45042 Ory Kratos's `highest_available` setting does not properly respect code + mfa credentials
- CVE-2024-45041 External Secrets Operator vulnerable to privilege escalation
- CVE-2024-45040 gnark's commitments to private witnesses in Groth16 as implemented break zero-knowledge property
- CVE-2024-4504 Ruijie RG-UAC commit.php os command injection
- CVE-2024-45039 gnark's Groth16 commitment extension unsound for more than one commitment
- CVE-2024-45038 Device crash via malformed MQTT packet when downlink is enabled in Meshtastic device firmware
- CVE-2024-45037 AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template
- CVE-2024-45036 Improper Access Control Vulnerability When Accessing a Maliciously Crafted Tophat Link
- CVE-2024-45034 Apache Airflow: Authenticated DAG authors could execute code on scheduler nodes
- CVE-2024-45033 Apache Airflow Fab Provider: Application does not invalidate session after password change via Airflow cli
- CVE-2024-45032 Auth bypass in Industrial Edge Management Pro
- CVE-2024-45031 Apache Syncope: Stored XSS in Console and Enduser
- CVE-2024-45030 igb: cope with large MAX_SKB_FRAGS
- CVE-2024-4503 Ruijie RG-UAC dhcp_relay_commit.php os command injection
- CVE-2024-45029 i2c: tegra: Do not mark ACPI devices as irq safe
- CVE-2024-45028 mmc: mmc_test: Fix NULL dereference on allocation failure
- CVE-2024-45027 usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup()
- CVE-2024-45026 s390/dasd: fix error recovery leading to data corruption on ESE devices
- CVE-2024-45025 fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- CVE-2024-45024 mm/hugetlb: fix hugetlb vs. core-mm PT locking
- CVE-2024-45023 md/raid1: Fix data corruption for degraded array with slow disk
- CVE-2024-45022 mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
- CVE-2024-45021 memcg_write_event_control(): fix a user-triggerable oops
- CVE-2024-45020 bpf: Fix a kernel verifier crash in stacksafe()
- CVE-2024-4502 Ruijie RG-UAC dhcp_client_commit.php os command injection
- CVE-2024-45019 net/mlx5e: Take state lock during tx timeout reporter
- CVE-2024-45018 netfilter: flowtable: initialise extack before use
- CVE-2024-45017 net/mlx5: Fix IPsec RoCE MPV trace call
- CVE-2024-45016 netem: fix return value if duplicate enqueue fails
- CVE-2024-45015 drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- CVE-2024-45014 s390/boot: Avoid possible physmem_info segment corruption
- CVE-2024-45013 nvme: move stopping keep-alive into nvme_uninit_ctrl()
- CVE-2024-45012 nouveau/firmware: use dma non-coherent allocator
- CVE-2024-45011 char: xillybus: Check USB endpoints when probing device
- CVE-2024-45010 mptcp: pm: only mark 'subflow' endp as available