Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 280 of 521.
- CVE-2024-43737 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-43736 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-43735 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-43734 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-43733 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-43732 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-43731 Adobe Experience Manager | Improper Authorization (CWE-285)
- CVE-2024-43730 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-4373 Cross-site scripting in Sina Extension for Elementor
- CVE-2024-43729 Adobe Experience Manager | Improper Authorization (CWE-285)
- CVE-2024-43728 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-43727 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-43726 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-43725 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-43724 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-43723 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-43722 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-43721 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-43720 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-4372 Carousel Slider < 2.2.11 - Editor+ Stored XSS
- CVE-2024-43719 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-43718 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-43717 Adobe Experience Manager | Improper Access Control (CWE-284)
- CVE-2024-43716 Adobe Experience Manager | Improper Access Control (CWE-284)
- CVE-2024-43715 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-43714 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-43713 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-43712 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-43710 Kibana server-side request forgery
- CVE-2024-4371 Deserialization in CoDesigner – All in One Elementor WooCommerce Builder
- CVE-2024-43709 Elasticsearch allocation of resources without limits or throttling leads to crash
- CVE-2024-43708 Denial of service in Kibana
- CVE-2024-43707 Kibana exposure of sensitive information to an unauthorized actor
- CVE-2024-43706 Kibana Improper Authorization
- CVE-2024-43705 Security feature bypass in Graphics DDK
- CVE-2024-43704 GPU DDK - PowerVR: PVRSRVAcquireProcessHandleBase can cause psProcessHandleBase reuse when PIDs are reused
- CVE-2024-43703 GPU DDK - Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAF
- CVE-2024-43702 GPU DDK - MLIST/PM render state buffers writable allowing arbitrary writes to kernel memory pages
- CVE-2024-43701 GPU DDK - PowerVR: TLB invalidate UAF of dma_buf imported into multiple GPU devices
- CVE-2024-43700 Memory corruption in xfpt
- CVE-2024-4370 Cross-site scripting in WPZOOM Addons for Elementor – Starter Templates & Widgets
- CVE-2024-43699 Delta Electronics DIAEnergie SQL Injection
- CVE-2024-43698 Kieback&Peter DDC4000 Series Use of Weak Credentials
- CVE-2024-43697 Liteos_a has an Improper Input Validation vulnerability
- CVE-2024-43696 Liteos_a has an Memory Leak vulnerability
- CVE-2024-43694 goTenna Pro ATAK Plugin Insecure Storage of Sensitive Information
- CVE-2024-43693 Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Command Injection
- CVE-2024-43692 Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Authentication Bypass Using an Alternate Path or Channel
- CVE-2024-43690 Code injection in Command Centre Server
- CVE-2024-4369 Cluster-image-registry-operator: exposes a secret via env variable in pod definition on azure
- CVE-2024-43689 Memory corruption in WAB-I1750-PS
- CVE-2024-43688 cron/entry.c in vixie cron before 9cc8ab1, as used in OpenBSD 7.4 and 7.5, allows a heap-based buffer underflow and memory corruption.
- CVE-2024-43687 XSS vulnerability in bannerconfig endpoint in TimeProvider 4100
- CVE-2024-43686 Reflected XSS in TimeProvider 4100 chart component
- CVE-2024-43685 Session token fixation in TimeProvider 4100
- CVE-2024-43684 Cross-Site Request Forgery vulnerability in TimeProvider 4100
- CVE-2024-43683 Improper verification of the Host header in TimeProvider 4100
- CVE-2024-4368 Use after free in Chrome
- CVE-2024-4367 PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF
- CVE-2024-43663 Buffer overflow vulnerabilities in CGI scripts lead to segfault
- CVE-2024-43662 Authenticated arbitrary file upload to /tmp/ and /tmp/upload/
- CVE-2024-43661 Buffer overflow in <redacted>.so leads to DoS of OCPP service
- CVE-2024-43660 Arbitrary file download using <redacted>.sh
- CVE-2024-4366 Spectra – WordPress Gutenberg Blocks <= 2.13.0 - Authenticated (Author+) Stored Cross-Site Scripting
- CVE-2024-43659 Plaintext default credentials in firmware
- CVE-2024-43658 Path traversal in Iocharger firmware for AC models
- CVE-2024-43657 Command injection in Iocharger firmware for AC models
- CVE-2024-43656 Command injection in Iocharger firmware for AC models
- CVE-2024-43655 Any authenticated users can execute OS commands as root using the <redacted>.sh CGI script.
- CVE-2024-43654 Command injection in Iocharger firmware for AC models
- CVE-2024-43653 Command injection in Iocharger firmware for AC models
- CVE-2024-43652 Command injection in Iocharger firmware for AC chargers
- CVE-2024-43651 Command injection in Iocharger firmware for AC models
- CVE-2024-43650 Command injection in Iocharger firmware for AC models
- CVE-2024-4365 Advanced iFrame <= 2024.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-43649 Authenticated command injection via <redacted>.exe <redacted> parameter
- CVE-2024-43648 Authenticated command injection via <redacted>.exe <redacted> parameter
- CVE-2024-43647 Denial of service in SIMATIC S7-200 SMART CPU CR40
- CVE-2024-43646 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- CVE-2024-43645 Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability
- CVE-2024-43644 Windows Client-Side Caching Elevation of Privilege Vulnerability
- CVE-2024-43643 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- CVE-2024-43642 Windows SMB Denial of Service Vulnerability
- CVE-2024-43641 Windows Registry Elevation of Privilege Vulnerability
- CVE-2024-43640 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- CVE-2024-4364 Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
- CVE-2024-43639 Windows KDC Proxy Remote Code Execution Vulnerability
- CVE-2024-43638 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- CVE-2024-43637 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- CVE-2024-43636 Win32k Elevation of Privilege Vulnerability
- CVE-2024-43635 Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2024-43634 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- CVE-2024-43633 Windows Hyper-V Denial of Service Vulnerability
- CVE-2024-43631 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- CVE-2024-43630 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2024-4363 Cross-site scripting in Visual Portfolio, Photo Gallery & Post Grid
- CVE-2024-43629 Windows DWM Core Library Elevation of Privilege Vulnerability
- CVE-2024-43628 Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2024-43627 Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2024-43626 Windows Telephony Service Elevation of Privilege Vulnerability