Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 290 of 521.
- CVE-2024-42490 authentik has Insufficient Authorization for several API endpoints
- CVE-2024-4249 Tenda i21 wifiSSIDget formwrlSSIDget stack-based overflow
- CVE-2024-42489 Pro Macros Remote Code Execution via Viewpdf and similar macros
- CVE-2024-42488 Cilium agent's race condition may lead to policy bypass for Host Firewall policy
- CVE-2024-42487 Cilium's Gateway API route matching order contradicts specification
- CVE-2024-42486 Cilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway API
- CVE-2024-42485 Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint
- CVE-2024-42484 ESP-NOW OOB Vulnerability In Group Type Message
- CVE-2024-42483 ESP-NOW Replay Attacks Vulnerability
- CVE-2024-42482 fish-shop/syntax-check Improper Neutralization of Delimiters
- CVE-2024-42481 Complete crash of host system due to calculateDirectorySize in skyportd
- CVE-2024-42480 Kamaji's RBAC Roles for `etcd` are not disjunct
- CVE-2024-4248 Tenda i21 formQosManage_user stack-based overflow
- CVE-2024-42479 llama.cpp allows write-what-where in rpc_server::set_tensor
- CVE-2024-42478 llama.cpp allows Arbitrary Address Read in rpc_server::get_tensor
- CVE-2024-42477 llama.cpp global-buffer-overflow in ggml_type_size
- CVE-2024-42476 oauth CSRF vulnerability
- CVE-2024-42475 Weak cryptography in oauth
- CVE-2024-42474 Streamlit Path Traversal Security Vulnerability on Windows
- CVE-2024-42473 OpenFGA Authorization Bypass
- CVE-2024-42472 Flatpak may allow access to files outside sandbox for certain apps
- CVE-2024-42471 Arbitrary File Write via artifact extraction in actions/artifact
- CVE-2024-42470 CometVisu Backend for openHAB has a sensitive information disclosure vulnerability
- CVE-2024-4247 Tenda i21 formQosManage_auto stack-based overflow
- CVE-2024-42469 CometVisu Backend for openHAB affected by RCE through path traversal
- CVE-2024-42468 Path traversal (CometVisu)
- CVE-2024-42467 CometVisu Backend for openHAB affected by SSRF/XSS
- CVE-2024-42466 Lack of resources and rate limiting - login
- CVE-2024-42465 Lack of resources and rate limiting - two factor authentication
- CVE-2024-42464 Leak of user information
- CVE-2024-42463 Leak of organizations messages
- CVE-2024-42462 Bypass multifactor authentication
- CVE-2024-42461 Elliptic allows BER-encoded signatures
- CVE-2024-42460 Elliptic's ECDSA missing check for whether leading bit of r and s is zero
- CVE-2024-4246 Tenda i21 formQosManageDouble_auto stack-based overflow
- CVE-2024-42459 Elliptic's EDDSA missing signature length check
- CVE-2024-42458 Security feature bypass in any1:neatvnc
- CVE-2024-42457 Information disclosure in Backup & Replication
- CVE-2024-42456 Missing authorization in Backup & Replication
- CVE-2024-42455 Deserialization in Backup & Replication
- CVE-2024-42453 Missing authorization in Backup & Replication
- CVE-2024-42452 Missing authorization in Backup & Replication
- CVE-2024-42451 Information disclosure in Backup & Replication
- CVE-2024-42450 Hardcoded credentials in Director
- CVE-2024-4245 Tenda i21 formQosManageDouble_user stack-based overflow
- CVE-2024-42449 Path traversal in Service Provider Console
- CVE-2024-42448 Code injection in Service Provider Console
- CVE-2024-42447 Apache Airflow Providers FAB: FAB provider 1.2.1 and 1.2.0 did not let user to logout for Airflow
- CVE-2024-42446 TOCTOU in SmmWhea
- CVE-2024-42444 TOCTOU Race Condition between DMA and SMM
- CVE-2024-42442 Runtime Service Access outside SMRAM
- CVE-2024-42441 Privilege escalation in Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS
- CVE-2024-42440 Privilege escalation in Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS
- CVE-2024-4244 Tenda W9 DhcpSetSer fromDhcpSetSer stack-based overflow
- CVE-2024-42439 Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS - Untrusted Search Path
- CVE-2024-42438 Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow
- CVE-2024-42437 Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow
- CVE-2024-42436 Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow
- CVE-2024-42435 Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information Exposure
- CVE-2024-42434 Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization
- CVE-2024-4243 Tenda W9 wifiSSIDset formwrlSSIDset stack-based overflow
- CVE-2024-42427 Command injection in Wyse Proprietary OS (Modern ThinOS)
- CVE-2024-42426 Denial of service in PowerScale OneFS
- CVE-2024-42425 Memory corruption in Dell Precision Rack BIOS
- CVE-2024-42424 Information disclosure in Dell Precision Rack BIOS
- CVE-2024-42423 Missing authorization in Wyse Proprietary OS (Modern ThinOS)
- CVE-2024-42422 Missing authorization in NetWorker
- CVE-2024-42420 Memory corruption in Sharp Digital Full-color MFPs and Monochrome MFPs
- CVE-2024-4242 Tenda W9 wifiSSIDget formwrlSSIDget stack-based overflow
- CVE-2024-42419 Misconfiguration in Intel(R) GPA and Intel(R) GPA Framework software installers
- CVE-2024-42418 Avtec Outpost Use of Hard-coded Cryptographic Key
- CVE-2024-42417 Delta Electronics DIAEnergie SQL Injection
- CVE-2024-42416 Multiple issues in ctl(4) CAM Target Layer
- CVE-2024-42415 Integer overflow in G Structured File Library (libgsf)
- CVE-2024-42412 Cross-site scripting in WAB-I1750-PS
- CVE-2024-42411 User creation date manipulation in POST /api/v4/users
- CVE-2024-42410 Denial of service in Intel(R) Graphics Drivers
- CVE-2024-4241 Tenda W9 formQosManageDouble_auto stack-based overflow
- CVE-2024-42408 Dorsett Controls InfoScan Path Traversal
- CVE-2024-42407 Information disclosure in Command Centre Server
- CVE-2024-42406 Unauthorized access on archived channels
- CVE-2024-42405 Privilege escalation in Intel(R) Quartus(R) Prime Software
- CVE-2024-42404 SQL injection in Welcart e-Commerce
- CVE-2024-42400 Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI Protocol
- CVE-2024-4240 Tenda W9 formQosManageDouble_user stack-based overflow
- CVE-2024-42399 Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI Protocol
- CVE-2024-42398 Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI Protocol
- CVE-2024-42397 Denial of service in HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10
- CVE-2024-42396 Denial of service in HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10
- CVE-2024-42395 Memory corruption in HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10
- CVE-2024-42394 Memory corruption in HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10
- CVE-2024-42393 Memory corruption in Hpe Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10
- CVE-2024-42392 Improper Neutralization of Delimiters in Mongoose Web Server library
- CVE-2024-42391 Use of Out-of-range Pointer Offset in Mongoose Web Server library
- CVE-2024-42390 Use of Out-of-range Pointer Offset in Mongoose Web Server library
- CVE-2024-4239 Tenda AX1806 SetRebootTimer formSetRebootTimer stack-based overflow
- CVE-2024-42389 Use of Out-of-range Pointer Offset in Mongoose Web Server library
- CVE-2024-42388 Use of Out-of-range Pointer Offset in Mongoose Web Server library
- CVE-2024-42387 Use of Out-of-range Pointer Offset in Mongoose Web Server library
- CVE-2024-42386 Use of Out-of-range Pointer Offset in Mongoose Web Server library