Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 288 of 521.
- CVE-2024-42787 Cross-site scripting in lopalopa:music management system
- CVE-2024-42786 SQL injection in lopalopa:music management system
- CVE-2024-42785 SQL injection in lopalopa:music management system
- CVE-2024-42784 SQL injection in lopalopa:music management system
- CVE-2024-42783 SQL injection in lopalopa:music management system
- CVE-2024-42782 SQL injection in lopalopa:music management system
- CVE-2024-42781 SQL injection in lopalopa:music management system
- CVE-2024-42780 File upload in lopalopa:music management system
- CVE-2024-4278 Incorrect Synchronization in GitLab
- CVE-2024-42779 File upload in lopalopa:music management system
- CVE-2024-42778 File upload in lopalopa:music management system
- CVE-2024-42777 File upload in lopalopa:music management system
- CVE-2024-42776 Missing authorization in jayesh:hotel management system
- CVE-2024-42775 Missing authorization in jayesh:hotel management system
- CVE-2024-42774 Missing authorization in jayesh:hotel management system
- CVE-2024-42773 Missing authorization in jayesh:hotel management system
- CVE-2024-42772 Missing authorization in jayesh:hotel management system
- CVE-2024-42771 Cross-site scripting in jayesh:hotel management system
- CVE-2024-42770 Cross-site scripting in jayesh:hotel management system
- CVE-2024-4277 Cross-site scripting in LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
- CVE-2024-42769 Cross-site scripting in jayesh:hotel management system
- CVE-2024-42768 Cross-site request forgery in jayesh:hotel management system
- CVE-2024-42767 File upload in jayesh:hotel management system
- CVE-2024-42766 Missing authorization in kjayvik:bus ticket reservation system
- CVE-2024-42765 SQL injection in kjayvik:bus ticket reservation system
- CVE-2024-42764 Cross-site request forgery in kjayvik:bus ticket reservation system
- CVE-2024-42763 Cross-site scripting in kjayvik:bus ticket reservation system
- CVE-2024-42762 Cross-site scripting in kjayvik:bus ticket reservation system
- CVE-2024-42761 Cross-site scripting in kjayvik:bus ticket reservation system
- CVE-2024-42760 SQL injection in ellevo:ellevo
- CVE-2024-42759 Privilege escalation in ellevo:ellevo
- CVE-2024-42758 A Cross-site Scripting (XSS) vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki (Open Source Wiki Engine).
- CVE-2024-42757 Command injection vulnerability in Asus RT-N15U 3.0.0.4.376_3754 allows a remote attacker to execute arbitrary code via the netstat function page.
- CVE-2024-42756 Code injection in netgear:dgn1000ww firmware
- CVE-2024-4275 Cross-site scripting in Essential Addons for Elementor – Popular Elementor Templates & Widgets
- CVE-2024-42749 Cross-site scripting in altocms:alto cms
- CVE-2024-42748 Command injection in totolink:x5000r firmware
- CVE-2024-42747 Command injection in totolink:x5000r firmware
- CVE-2024-42745 Command injection in totolink:x5000r firmware
- CVE-2024-42744 Command injection in totolink:x5000r firmware
- CVE-2024-42743 Command injection in totolink:x5000r firmware
- CVE-2024-42742 Command injection in totolink:x5000r firmware
- CVE-2024-42741 Command injection in totolink:x5000r firmware
- CVE-2024-42740 Command injection in totolink:x5000r firmware
- CVE-2024-4274 Essential Real Estate <= 4.4.2 - Insecure Direct Object Reference to Arbitrary Attachment Deletion
- CVE-2024-42739 Command injection in totolink:x5000r firmware
- CVE-2024-42738 Command injection in totolink:x5000r firmware
- CVE-2024-42737 Command injection in totolink:x5000r firmware
- CVE-2024-42736 Command injection in totolink:x5000r firmware
- CVE-2024-42733 Code injection in docmosis:tornado
- CVE-2024-4273 Essential Real Estate <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-4272 Support SVG < 1.1.0 - Stored XSS via SVG Upload
- CVE-2024-42718 Croogo CMS has a path traversal vulnerability
- CVE-2024-4271 SVGator <= 1.2.6 - Stored XSS via SVG Upload
- CVE-2024-4270 SVGMagic <= 1.1 - Stored XSS via SVG Upload
- CVE-2024-42699 OpenCMS Cross-Site Scripting vulnerability
- CVE-2024-42698 Business logic in shedaniel:roughlyenoughitems
- CVE-2024-42697 Cross Site Scripting vulnerability in Leotheme Leo Product Search Module v.2.1.6 and earlier allows a remote attacker to execute arbitrary c
- CVE-2024-4269 SVG Block < 1.1.20 - Author+ Stored XSS via SVG File Upload
- CVE-2024-42681 Improper Preservation of Permissions in xxl-job
- CVE-2024-42680 Information disclosure in cysoft168:super easy enterprise management system
- CVE-2024-4268 Cross-site scripting in Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor
- CVE-2024-42679 SQL injection in cysoft168:super easy enterprise management system
- CVE-2024-42678 Cross-site scripting in cysoft168:super easy enterprise management system
- CVE-2024-42677 Information disclosure in isellerpal:enterprise resource management system
- CVE-2024-42676 File upload in isellerpal:enterprise resource management system
- CVE-2024-42671 A Host Header Poisoning Open Redirect issue in slabiak Appointment Scheduler v.1.0.5 allows a remote attacker to redirect users to a malicio
- CVE-2024-4267 Remote Code Execution in parisneo/lollms-webui
- CVE-2024-42662 Information disclosure in apolloconfig:apollo
- CVE-2024-4266 Information disclosure in MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor
- CVE-2024-42658 Information disclosure in nepstech:ntpl-xpon1gfevn firmware
- CVE-2024-42657 Information disclosure in nepstech:ntpl-xpon1gfevn firmware
- CVE-2024-42655 Auth bypass in emqx:nanomq
- CVE-2024-42651 Use after free in emqx:nanomq
- CVE-2024-42650 Denial of service in emqx:nanomq
- CVE-2024-4265 Cross-site scripting in Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits
- CVE-2024-42649 Denial of service in emqx:nanomq
- CVE-2024-42648 Memory corruption in emqx:nanomq
- CVE-2024-42646 Memory corruption in emqx:nanomq
- CVE-2024-42645 Denial of service in flashmq:flashmq
- CVE-2024-42644 Denial of service in flashmq:flashmq
- CVE-2024-42643 Integer Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial of Service via misaligned memory access.
- CVE-2024-42642 Memory corruption in crucial:mx500 firmware
- CVE-2024-42640 angular-base64-upload vulnerable to unauthenticated remote code execution
- CVE-2024-4264 Remote Code Execution in berriai/litellm
- CVE-2024-42639 Hardcoded credentials in h3c:gr1100-p firmware
- CVE-2024-42638 Hardcoded credentials in h3c:magic b1st firmware
- CVE-2024-42637 Hardcoded credentials in h3c:r3010 firmware
- CVE-2024-42636 Command injection in dedecms:dedecms
- CVE-2024-42634 Command injection in tenda:ac9 firmware
- CVE-2024-42633 Command injection in linksys:e1500 firmware
- CVE-2024-42632 Cross-site request forgery in frogcms project:frogcms
- CVE-2024-42631 Cross-site request forgery in frogcms project:frogcms
- CVE-2024-42630 Cross-site request forgery in frogcms project:frogcms
- CVE-2024-4263 Improper Access Control in mlflow/mlflow
- CVE-2024-42629 Cross-site request forgery in frogcms project:frogcms
- CVE-2024-42628 Cross-site request forgery in frogcms project:frogcms
- CVE-2024-42627 Cross-site request forgery in frogcms project:frogcms
- CVE-2024-42626 Cross-site request forgery in frogcms project:frogcms
- CVE-2024-42625 Cross-site request forgery in frogcms project:frogcms