Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 297 of 521.
- CVE-2024-41778 IBM Controller information disclosure
- CVE-2024-41777 IBM Cognos Controller hard coded credentials
- CVE-2024-41776 IBM Cognos Controller cross-site request forgery
- CVE-2024-41775 IBM Cognos Controller information disclosure
- CVE-2024-41774 IBM Common Licensing cross-site scripting
- CVE-2024-41773 IBM Global Configuration Management incorrect ownership assignment
- CVE-2024-41771 IBM Engineering Requirements Management DOORS Next information disclosure
- CVE-2024-41770 IBM Engineering Requirements Management DOORS Next information disclosure
- CVE-2024-4177 Host whitelist parser issue in GravityZone Console On-Premise (VA-11554)
- CVE-2024-41768 IBM Engineering Lifecycle Optimization - Publishing unhandled SLL exception
- CVE-2024-41767 IBM Engineering Lifecycle Optimization - Publishing SQL injection
- CVE-2024-41766 IBM Engineering Lifecycle Optimization - Publishing denial of service
- CVE-2024-41765 IBM Engineering Lifecycle Optimization - Publishing directory traversal
- CVE-2024-41763 IBM Engineering Lifecycle Optimization - Publishing information disclosure
- CVE-2024-41762 IBM Db2 denial of service
- CVE-2024-41761 IBM Db2 denial of service
- CVE-2024-41760 IBM Common Cryptographic Architecture information disclosure
- CVE-2024-4176 Cross-site scripting in Trellix EDR UI (XConsole)
- CVE-2024-41757 IBM Concert Software information disclosure
- CVE-2024-41753 IBM Cloud Pak for Business Automation cross-site scripting
- CVE-2024-41752 IBM Cognos Analytics HTML injection
- CVE-2024-41751 IBM SmartCloud Analytics - Log Analysis security bypass
- CVE-2024-41750 IBM SmartCloud Analytics - Log Analysis security bypass
- CVE-2024-4175 Improper Input Validation vulnerability in Hyperion Web Server
- CVE-2024-41746 IBM CICS TX cross-site scripting
- CVE-2024-41745 IBM CICS TX Standard cross-site scripting
- CVE-2024-41744 IBM CICS TX Standard cross-site request forgery
- CVE-2024-41743 IBM TXSeries for Multiplatforms denial of service
- CVE-2024-41742 IBM TXSeries for Multiplatforms denial of service
- CVE-2024-41741 IBM TXSeries for Multiplatforms information disclosure
- CVE-2024-4174 Cross-Site Scripting (XSS) vulnerability in Hyperion Web Server
- CVE-2024-41739 IBM Cognos Dashboards on Cloud Pak for Data privilege escalation
- CVE-2024-41738 IBM TXSeries for Multiplatforms information disclosure
- CVE-2024-41737 Server-Side Request Forgery (SSRF) in SAP CRM ABAP (Insights Management)
- CVE-2024-41736 Information Disclosure vulnerability in SAP Permit to Work
- CVE-2024-41735 Cross-Site Scripting (XSS) vulnerability in SAP Commerce Backoffice
- CVE-2024-41734 Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
- CVE-2024-41733 Information Disclosure Vulnerability in SAP Commerce
- CVE-2024-41732 Improper Access Control in SAP Netweaver Application Server ABAP
- CVE-2024-41731 Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform
- CVE-2024-41730 Missing Authentication check in SAP BusinessObjects Business Intelligence Platform
- CVE-2024-4173 SANnav versions exposes Kafka in the wan interface.
- CVE-2024-41729 Information Disclosure vulnerability in the SAP NetWeaver BW (BEx Analyzer)
- CVE-2024-41728 Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2024-41727 BIG-IP TMM vulnerability
- CVE-2024-41726 Path traversal in SKYSEA Client View
- CVE-2024-41725 Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Cross-site Scripting
- CVE-2024-41724 Security feature bypass in Command Centre Server
- CVE-2024-41723 BIG-IP iControl REST vulnerability
- CVE-2024-41722 goTenna Pro ATAK Plugin Weak Authentication
- CVE-2024-41721 bhyve(8) out-of-bounds read access via XHCI emulation
- CVE-2024-41720 Misconfiguration in ZWX-2000CSW2-HN
- CVE-2024-4172 idcCMS cross-site request forgery
- CVE-2024-41719 BIG-IP Next Central Manager vulnerability
- CVE-2024-41717 Kieback&Peter DDC4000 Series Path Traversal
- CVE-2024-41716 Information disclosure in WindLDR
- CVE-2024-41715 goTenna Pro ATAK Plugin Observable Response Discrepancy
- CVE-2024-41714 Command injection in mitel:micollab
- CVE-2024-41713 Mitel MiCollab Path Traversal
- CVE-2024-41712 Command injection in mitel:micollab
- CVE-2024-41711 A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (
- CVE-2024-41710 Mitel SIP Phones Argument Injection
- CVE-2024-4171 Tenda W30E WizardHandle fromWizardHandle stack-based overflow
- CVE-2024-41709 Backdrop CMS does not sufficiently sanitize field labels before they are displayed in certain places
- CVE-2024-41708 An issue was discovered in AdaCore ada_web_services 20.0 allows an attacker to escalate privileges and steal sessions via the Random_String(
- CVE-2024-41707 Cross-site scripting in archerirm:archer
- CVE-2024-41706 Cross-site scripting in archerirm:archer
- CVE-2024-41705 Cross-site scripting in archerirm:archer
- CVE-2024-41704 Path traversal in librechat:librechat
- CVE-2024-41703 Missing authorization in librechat:librechat
- CVE-2024-41702 SiberianCMS – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- CVE-2024-41701 AccuPOS – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
- CVE-2024-41700 Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
- CVE-2024-4170 Tenda 4G300 sub_429A30 stack-based overflow
- CVE-2024-41699 Priority – CWE-552: Files or Directories Accessible to External Parties
- CVE-2024-41698 Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
- CVE-2024-41697 Priority – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
- CVE-2024-41696 Information disclosure in PRI WEB Portal Add-On for Priority ERP on prem
- CVE-2024-41695 Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory
- CVE-2024-41694 Cybonet – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
- CVE-2024-41693 Mashov - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
- CVE-2024-41692 Incorrect Access Control Vulnerability
- CVE-2024-41691 Insecure Storage of Sensitive Information Vulnerability
- CVE-2024-41690 Default Credential Storage in Plaintext Vulnerability
- CVE-2024-4169 Tenda 4G300 sub_4279CC stack-based overflow
- CVE-2024-41689 Hard-coded Credentials Vulnerability
- CVE-2024-41688 Cleartext Storage of Sensitive Information Vulnerability
- CVE-2024-41687 Cleartext Transmission of Sensitive Information Vulnerability
- CVE-2024-41686 Password Policy Bypass Vulnerability
- CVE-2024-41685 Cookie Without HTTPOnly Flag Set Vulnerability
- CVE-2024-41684 Cookie Without Secure Flag Set Vulnerability
- CVE-2024-41683 Weak cryptography in Location Intelligence family
- CVE-2024-41682 Auth bypass in Location Intelligence family
- CVE-2024-41681 Weak cryptography in Location Intelligence family
- CVE-2024-4168 Tenda 4G300 sub_4260F0 stack-based overflow
- CVE-2024-41679 Authenticated SQL injection in ticket form
- CVE-2024-41678 GLPI has multiple reflected XSS
- CVE-2024-41677 Cross-site Scripting (XSS) vulnerability due to improper HTML escaping in qwik
- CVE-2024-41676 Magento LTS vulnerable to stored Cross-site Scripting (XSS) in admin system configs
- CVE-2024-41675 CKAN has a Cross-site Scripting vector in the Datatables view plugin