Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 289 of 521.
- CVE-2024-42624 Cross-site request forgery in frogcms project:frogcms
- CVE-2024-42623 Cross-site request forgery in frogcms project:frogcms
- CVE-2024-42621 Cross-site request forgery in pligg:pligg cms
- CVE-2024-4262 Cross-site scripting in Piotnet Addons For Elementor
- CVE-2024-42619 Cross-site request forgery in pligg:pligg cms
- CVE-2024-42618 Cross-site request forgery in pligg:pligg cms
- CVE-2024-42617 Cross-site request forgery in pligg:pligg cms
- CVE-2024-42616 Cross-site request forgery in pligg:pligg cms
- CVE-2024-42613 Cross-site request forgery in pligg:pligg cms
- CVE-2024-42612 Cross-site request forgery in pligg:pligg cms
- CVE-2024-42611 Cross-site request forgery in pligg:pligg cms
- CVE-2024-42610 Cross-site request forgery in pligg:pligg cms
- CVE-2024-4261 Code injection in Lead Form Builder & Contact Form
- CVE-2024-42609 Cross-site request forgery in pligg:pligg cms
- CVE-2024-42608 Cross-site request forgery in pligg:pligg cms
- CVE-2024-42607 Cross-site request forgery in pligg:pligg cms
- CVE-2024-42606 Cross-site request forgery in pligg:pligg cms
- CVE-2024-42605 Cross-site request forgery in pligg:pligg cms
- CVE-2024-42604 Cross-site request forgery in pligg:pligg cms
- CVE-2024-42603 Cross-site request forgery in pligg:pligg cms
- CVE-2024-4260 CoBlocks < 3.1.12 - Contributor+ SSRF
- CVE-2024-42599 Code injection in seacms:seacms
- CVE-2024-42598 Code injection in seacms:seacms
- CVE-2024-4259 Sensetive Data Exposure in SAMPAS's AKOS
- CVE-2024-42586 Cross-site request forgery in siamonhasan:warehouse inventory system
- CVE-2024-42585 Cross-site request forgery in siamonhasan:warehouse inventory system
- CVE-2024-42584 Cross-site request forgery in siamonhasan:warehouse inventory system
- CVE-2024-42583 Cross-site request forgery in siamonhasan:warehouse inventory system
- CVE-2024-42582 Cross-site request forgery in siamonhasan:warehouse inventory system
- CVE-2024-42581 Cross-site request forgery in siamonhasan:warehouse inventory system
- CVE-2024-42580 Cross-site request forgery in siamonhasan:warehouse inventory system
- CVE-2024-4258 Video Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.13 - Unauthenticated Local File Inclusion
- CVE-2024-42579 Cross-site request forgery in siamonhasan:warehouse inventory system
- CVE-2024-42578 Cross-site request forgery in siamonhasan:warehouse inventory system
- CVE-2024-42577 Cross-site request forgery in siamonhasan:warehouse inventory system
- CVE-2024-42576 Cross-site request forgery in siamonhasan:warehouse inventory system
- CVE-2024-42575 SQL injection in arajajyothibabu:school management system
- CVE-2024-42574 SQL injection in arajajyothibabu:school management system
- CVE-2024-42573 SQL injection in arajajyothibabu:school management system
- CVE-2024-42572 SQL injection in arajajyothibabu:school management system
- CVE-2024-42571 SQL injection in arajajyothibabu:school management system
- CVE-2024-42570 SQL injection in arajajyothibabu:school management system
- CVE-2024-4257 BlueNet Technology Clinical Browsing System deleteStudy.php sql injection
- CVE-2024-42569 SQL injection in arajajyothibabu:school management system
- CVE-2024-42568 SQL injection in arajajyothibabu:school management system
- CVE-2024-42567 SQL injection in arajajyothibabu:school management system
- CVE-2024-42566 SQL injection in arajajyothibabu:school management system
- CVE-2024-42565 SQL injection in jerryhanjj:erp
- CVE-2024-42564 SQL injection in jerryhanjj:erp
- CVE-2024-42563 File upload in jerryhanjj:erp
- CVE-2024-42562 SQL injection in krishna9772:pharmacy management system
- CVE-2024-42561 SQL injection in krishna9772:pharmacy management system
- CVE-2024-42560 Cross-site scripting in varunsardana004:blood bank and donation management system
- CVE-2024-4256 Techkshetra Info Solutions Savsoft Quiz Category Page editCategory cross site scripting
- CVE-2024-42559 An issue in the login component (process_login.php) of Hotel Management System commit 79d688 allows attackers to authenticate without providing a valid password.
- CVE-2024-42558 SQL injection in vaibhavverma9999:hotel management system
- CVE-2024-42557 Cross-site request forgery in vaibhavverma9999:hotel management system
- CVE-2024-42556 SQL injection in vaibhavverma9999:hotel management system
- CVE-2024-42555 Cross-site request forgery in vaibhavverma9999:hotel management system
- CVE-2024-42554 SQL injection in vaibhavverma9999:hotel management system
- CVE-2024-42553 Cross-site request forgery in vaibhavverma9999:hotel management system
- CVE-2024-42552 SQL injection in vaibhavverma9999:hotel management system
- CVE-2024-42550 A cross-site scripting (XSS) vulnerability in the component /email/welcome.php of Mini Inventory and Sales Management System commit 18aa3d a
- CVE-2024-4255 Ruijie RG-UAC gre_edit_commit.php os command injection
- CVE-2024-42547 Memory corruption in totolink:a3100r firmware
- CVE-2024-42546 Memory corruption in totolink:a3100r firmware
- CVE-2024-42545 Memory corruption in totolink:a3700r firmware
- CVE-2024-42543 Memory corruption in totolink:a3700r firmware
- CVE-2024-4254 Secrets Exfiltration in gradio-app/gradio
- CVE-2024-42533 SQL injection vulnerability in the authentication module in Convivance StandVoice 4.5 through 6.2 allows remote attackers to execute arbitra
- CVE-2024-42531 Ezviz Internet PT Camera CS-CV246 D15655150 allows an unauthenticated host to access its live video stream by crafting a set of RTSP packets
- CVE-2024-4253 Command Injection in gradio-app/gradio
- CVE-2024-42523 File upload in publiccms:publiccms
- CVE-2024-42520 Memory corruption in totolink:a3002r firmware
- CVE-2024-4252 Tenda i22 formSetUrlFilterRule stack-based overflow
- CVE-2024-42516 Apache HTTP Server: HTTP response splitting
- CVE-2024-42515 Glossarizer Cross-site Scripting vulnerability
- CVE-2024-42514 Missing authorization in mitel:micontact center business
- CVE-2024-42513 Security Update for the OPC UA .NET Standard Stack
- CVE-2024-42512 Security Update for the OPC UA .NET Standard Stack
- CVE-2024-4251 Tenda i21 DhcpSetSe fromDhcpSetSer stack-based overflow
- CVE-2024-42509 Unauthenticated Command Injection Vulnerability in the CLI Service Accessed by the PAPI Protocol
- CVE-2024-42508 Information disclosure in HPE OneView
- CVE-2024-42507 Unauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI Protocol
- CVE-2024-42506 Unauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI Protocol
- CVE-2024-42505 Unauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI Protocol
- CVE-2024-42504 HPE IceWall Agent products, Cross-Site Request Forgery (CSRF)
- CVE-2024-42503 Command injection in Aruba OS
- CVE-2024-42502 Authenticated Remote Command Execution (RCE) Vulnerability in the AOS Command Line Interface
- CVE-2024-42501 Authenticated Path Traversal Vulnerability Leads to a Remote Command Execution (RCE)
- CVE-2024-42500 Denial of service in HPE HP-UX ONCplus
- CVE-2024-4250 Tenda i21 wifiSSIDset formwrlSSIDset stack-based overflow
- CVE-2024-42499 FitNesse Path Traversal
- CVE-2024-42497 Insufficient permissions checks on teams
- CVE-2024-42496 Information disclosure in Smart-tab Android app
- CVE-2024-42495 Hughes Network Systems WL3000 Missing Encryption of Sensitive Data
- CVE-2024-42494 Ruijie Reyee OS Exposure of Private Personal Information to an Unauthorized Actor
- CVE-2024-42493 Dorsett Controls InfoScan Exposure of Sensitive Information To An Unauthorized Actor
- CVE-2024-42492 Privilege escalation in BIOS and System Firmware Update Package for Intel(R) Server M50FCP family
- CVE-2024-42491 Null dereference in asterisk