Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 286 of 521.
- CVE-2024-43126 Cross-site scripting in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce
- CVE-2024-43125 WordPress WP Table Builder plugin <= 1.4.15 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43124 WordPress Graphina plugin <= 1.8.10 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43123 WordPress Card Elements for Elementor plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43122 WordPress Robin image optimizer plugin <= 1.6.9 - Broken Access Control vulnerability
- CVE-2024-43121 WordPress HUSKY plugin <= 1.3.6.1 - Privilege Escalation vulnerability
- CVE-2024-43120 WordPress TypeSquare Webfonts plugin <= 2.0.7 - Broken Access Control vulnerability
- CVE-2024-4312 Soccer Engine – Soccer Plugin for WordPress <= 1.12 - Cross-Site Request Forgery
- CVE-2024-43119 WordPress Aruba HiSpeed Cache plugin <= 2.0.12 - Broken Access Control vulnerability
- CVE-2024-43118 WordPress Hummingbird plugin <= 3.9.1 - Broken Access Control vulnerability
- CVE-2024-43117 WordPress Hummingbird plugin <= 3.9.1 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-43116 WordPress Simple Local Avatars plugin <= 2.7.10 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-43115 Apache DolphinScheduler: Alert Script Attack
- CVE-2024-43114 Privilege escalation in TeamCity
- CVE-2024-43113 Cross-site scripting in Firefox for iOS
- CVE-2024-43112 Cross-site scripting in Firefox for iOS
- CVE-2024-43111 Cross-site scripting in Firefox for iOS
- CVE-2024-43110 Multiple issues in ctl(4) CAM Target Layer
- CVE-2024-4311 Lack of login attempt rate-limiting in zenml-io/zenml
- CVE-2024-43108 goTenna Pro ATAK Plugin Missing Support for Integrity Check
- CVE-2024-43107 Security feature bypass in Milestone Integration Plugin
- CVE-2024-43106 Security feature bypass in Excel
- CVE-2024-43105 Excessive Resource Consumption via `/export`
- CVE-2024-43102 umtx Kernel panic or Use-After-Free
- CVE-2024-43101 Missing authorization in Intel(R) Data Center GPU Flex Series for Windows driver software
- CVE-2024-4310 Cross-site Scripting (XSS) vulnerability in HubBank
- CVE-2024-43099 AutomationDirect DirectLogic H2-DM1E Authentication Bypass by Capture-replay
- CVE-2024-43098 i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock
- CVE-2024-43097 Integer overflow in Android
- CVE-2024-43096 Memory corruption in Android
- CVE-2024-43095 Privilege escalation in Android
- CVE-2024-43093 Android Framework Privilege Escalation
- CVE-2024-43091 Integer overflow in Android
- CVE-2024-43090 Missing authorization in Android
- CVE-2024-4309 SQL injection vulnerability in HubBank
- CVE-2024-43089 Missing authorization in Android
- CVE-2024-43088 Missing authorization in Android
- CVE-2024-43087 Business logic in Android
- CVE-2024-43086 Information disclosure in Android
- CVE-2024-43085 Security feature bypass in Android
- CVE-2024-43084 Information disclosure in Android
- CVE-2024-43083 Denial of service in Android
- CVE-2024-43082 Information disclosure in Android
- CVE-2024-43081 Privilege escalation in Android
- CVE-2024-43080 Deserialization in Android
- CVE-2024-4308 SQL injection vulnerability in HubBank
- CVE-2024-43077 Memory corruption in Android
- CVE-2024-4307 SQL injection vulnerability in HubBank
- CVE-2024-43067 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera
- CVE-2024-43066 Use After Free in HLOS
- CVE-2024-43065 Exposed Dangerous Method or Function in HLOS
- CVE-2024-43064 Permissions, Privileges, and Access Controls issue in Automotive OS Platform
- CVE-2024-43063 Buffer Over-read in Automotive Autonomy
- CVE-2024-43062 Use After Free in Camera Linux
- CVE-2024-43061 Use After Free in Audio
- CVE-2024-43060 Use of Out-of-range Pointer Offset in Automotive Audio
- CVE-2024-4306 Unrestricted Upload of File with Dangerous Type vulnerability in HubBank
- CVE-2024-43059 Use After Free in Automotive Multimedia
- CVE-2024-43058 Incorrect Type Conversion or Cast in Multimedia Frameworks
- CVE-2024-43057 Use After Free in MProc
- CVE-2024-43056 Buffer Over-read in Hypervisor
- CVE-2024-43055 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux
- CVE-2024-43053 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host
- CVE-2024-43052 Improper Input Validation in Video Analytics and Processing
- CVE-2024-43051 Improper Authorization in SPS-HLOS
- CVE-2024-43050 Stack-based Buffer Overflow in WLAN Windows Host
- CVE-2024-4305 PostX < 4.1.0 - Contributor+ Stored XSS
- CVE-2024-43049 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host
- CVE-2024-43048 Stack-based Buffer Overflow in Performance
- CVE-2024-43047 Qualcomm Multiple Chipsets Use-After-Free
- CVE-2024-43046 Information Exposure in TZ Secure OS
- CVE-2024-43045 Jenkins does not perform a permission check in an HTTP endpoint
- CVE-2024-43044 Jenkins Remoting library arbitrary file read vulnerability
- CVE-2024-43042 Auth bypass in pluck-cms:pluck
- CVE-2024-43040 Renwoxing Enterprise Intelligent Management System before v3.0 was discovered to contain a SQL injection vulnerability via the parid paramet
- CVE-2024-4304 Vulnerability on SWAL platform from GT3 Soluciones
- CVE-2024-43035 Fonoster is vulnerable to directory traversal
- CVE-2024-43033 File upload in jpress:jpress
- CVE-2024-43032 Auth bypass in autman:autman
- CVE-2024-43031 Missing authorization in autman:autman
- CVE-2024-4303 ArmorX Android APP - MFA Bypass
- CVE-2024-43028 Command injection in jeecg:jeecg boot
- CVE-2024-43027 Command injection in draytek:vigor2960 firmware
- CVE-2024-43025 Cross-site scripting in rws:multitrans
- CVE-2024-43024 Cross-site scripting in rws:multitrans
- CVE-2024-43022 An issue in the downloader.php component of TOSEI online store management system v4.02, v4.03, and v4.04 allows attackers to execute a directory traversal.
- CVE-2024-4302 Super 8 livechat SDK - Cross-site Scripting
- CVE-2024-43018 SQL injection in piwigo:piwigo
- CVE-2024-43011 Path traversal in zzcms:zzcms
- CVE-2024-4301 N-Reporter and N-Cloud from N-Partner - Os Command Injection
- CVE-2024-43009 Cross-site scripting in zzcms:zzcms
- CVE-2024-43006 Cross-site scripting in zzcms:zzcms
- CVE-2024-43005 Cross-site scripting in zzcms:zzcms
- CVE-2024-4300 E-WEBInformationCo. FS-EZViewer(Web) - Sensitive Data Exposure
- CVE-2024-42995 Missing authorization in vtiger:vtiger crm
- CVE-2024-42994 SQL injection in vtiger:vtiger crm
- CVE-2024-42991 File upload in mingsoft:mcms
- CVE-2024-4299 HGiga iSherlock - Command Injection
- CVE-2024-42988 Lack of access control in ChallengeSolves (/api/v1/challenges/<challenge id>/solves) of CTFd v2.0.0 - v3.7.2 allows authenticated users to r
- CVE-2024-42987 Memory corruption in tenda:fh1206 firmware