Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 299 of 521.
- CVE-2024-41492 Memory corruption in tenda:ax1806 firmware
- CVE-2024-4149 Floating Chat Widget < 3.2.3 - Admin+ Stored XSS
- CVE-2024-41482 Cross-site scripting in typora:typora
- CVE-2024-41481 Cross-site scripting in typora:typora
- CVE-2024-4148 Redos (Regular Expression Denial of Service) in lunary-ai/lunary
- CVE-2024-41476 SQL injection in amttgroup:hibos
- CVE-2024-41475 Misconfiguration in sir:gnuboard
- CVE-2024-41473 Command injection in tendacn:fh1201 firmware
- CVE-2024-4147 Insufficient Access Control in lunary-ai/lunary
- CVE-2024-41468 Command injection in tendacn:fh1201 firmware
- CVE-2024-41466 Memory corruption in tendacn:fh1201 firmware
- CVE-2024-41465 Memory corruption in tendacn:fh1201 firmware
- CVE-2024-41464 Memory corruption in tendacn:fh1201 firmware
- CVE-2024-41463 Memory corruption in tendacn:fh1201 firmware
- CVE-2024-41462 Memory corruption in tendacn:fh1201 firmware
- CVE-2024-41461 Memory corruption in tendacn:fh1201 firmware
- CVE-2024-41460 Memory corruption in tendacn:fh1201 firmware
- CVE-2024-4146 Incorrect Authorization in lunary-ai/lunary
- CVE-2024-41459 Memory corruption in tendacn:fh1201 firmware
- CVE-2024-41454 An arbitrary file upload vulnerability in the UI login page logo upload function of Process Maker pm4core-docker 4.1.21-RC7 allows attackers
- CVE-2024-41453 A cross-site scripting (XSS) vulnerability in Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary web scripts or H
- CVE-2024-4145 Search & Replace < 3.2.2 - Admin+ SQL injection
- CVE-2024-41447 Alkacon OpenCMS stored cross-site scripting (XSS) vulnerability
- CVE-2024-41446 OpenCMS cross-site scripting (XSS) vulnerability
- CVE-2024-41445 Memory corruption in ihedvall:mdf library
- CVE-2024-41444 SQL injection in seacms:seacms
- CVE-2024-41443 Memory corruption in dbohdan:hicolor
- CVE-2024-41440 Memory corruption in dbohdan:hicolor
- CVE-2024-4144 Simple Basic Contact Form <= 20240502 - Unauthenticated Arbitrary Shortcode Execution
- CVE-2024-41439 Memory corruption in dbohdan:hicolor
- CVE-2024-41438 Memory corruption in dbohdan:hicolor
- CVE-2024-41437 Memory corruption in dbohdan:hicolor
- CVE-2024-41436 Memory corruption in clickhouse:clickhouse
- CVE-2024-41435 Memory corruption in yugabyte:yugabytedb
- CVE-2024-41434 Denial of service in pingcap:tidb
- CVE-2024-41433 Memory corruption in pingcap:tidb
- CVE-2024-41432 Auth bypass in likeshop:likeshop
- CVE-2024-4143 Certain HP PC products using AMI BIOS – Buffer Overflow
- CVE-2024-4142 JFrog Artifactory Improper input validation within token creation flow
- CVE-2024-4141 Out-of-bounds array write in Xpdf 4.05 due to incorrect bounds check
- CVE-2024-4140 Denial of service in Email-MIME
- CVE-2024-4139 Missing Authorization Checks in SAP S/4 HANA (Manage Bank Statement Reprocessing Rules)
- CVE-2024-41381 Microweber Cross Site Scripting (XSS) vulnerability
- CVE-2024-41380 Microweber Cross Site Scripting (XSS) vulnerability
- CVE-2024-4138 Missing Authorization Checks in SAP S/4 HANA (Manage Bank Statement Reprocessing Rules)
- CVE-2024-41376 Path traversal in dzzoffice:dzzoffice
- CVE-2024-41375 ICEcoder vulnerable to Cross Site Scripting
- CVE-2024-41374 ICEcoder vulnerable to Cross Site Scripting
- CVE-2024-41373 ICEcoder Path Traversal vulnerability
- CVE-2024-41372 SQL injection in organizr:organizr
- CVE-2024-41371 Cross-site scripting in organizr:organizr
- CVE-2024-41370 SQL injection in organizr:organizr
- CVE-2024-41369 Code injection in sourcefabric:phoniebox
- CVE-2024-41368 Code injection in sourcefabric:phoniebox
- CVE-2024-41367 Code injection in sourcefabric:phoniebox
- CVE-2024-41366 Code injection in sourcefabric:phoniebox
- CVE-2024-41364 Code injection in sourcefabric:phoniebox
- CVE-2024-41361 Code injection in sourcefabric:phoniebox
- CVE-2024-41358 Cross-site scripting in phpipam:phpipam
- CVE-2024-41357 Cross-site scripting in phpipam:phpipam
- CVE-2024-41356 Cross-site scripting in phpipam:phpipam
- CVE-2024-41355 Cross-site scripting in phpipam:phpipam
- CVE-2024-41354 Cross-site scripting in phpipam:phpipam
- CVE-2024-41353 Cross-site scripting in phpipam:phpipam
- CVE-2024-41351 Cross-site scripting in baijunyao:bjyadmin
- CVE-2024-41350 Cross-site scripting in baijunyao:bjyadmin
- CVE-2024-4135 WP Latest Posts <= 5.0.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
- CVE-2024-41349 Cross-site scripting in unmark:unmark
- CVE-2024-41348 Cross-site scripting in jpatokal:openflights
- CVE-2024-41347 Cross-site scripting in jpatokal:openflights
- CVE-2024-41346 Cross-site scripting in jpatokal:openflights
- CVE-2024-41345 Cross-site scripting in jpatokal:openflights
- CVE-2024-41344 Cross-site request forgery in codeigniter:codeigniter
- CVE-2024-41340 File upload in draytek:vigor165 firmware
- CVE-2024-41339 File upload in draytek:vigor165 firmware
- CVE-2024-41338 Null dereference in draytek:vigor165 firmware
- CVE-2024-41336 Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior
- CVE-2024-41335 Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior
- CVE-2024-41334 Security feature bypass in draytek:vigor165 firmware
- CVE-2024-41333 Cross-site scripting in phpgurukul:tourism management system
- CVE-2024-41332 Missing authorization in oretnom23:computer laboratory management system
- CVE-2024-4133 ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.30 - Open Redirect
- CVE-2024-41320 Command injection in totolink:a6000r firmware
- CVE-2024-4132 Privilege escalation in Lock Screen
- CVE-2024-41319 Command injection in totolink:a6000r firmware
- CVE-2024-41318 Command injection in totolink:a6000r firmware
- CVE-2024-41317 Command injection in totolink:a6000r firmware
- CVE-2024-41316 Command injection in totolink:a6000r firmware
- CVE-2024-41315 Command injection in totolink:a6000r firmware
- CVE-2024-41314 Command injection in totolink:a6000r firmware
- CVE-2024-41311 Memory corruption in debian:debian linux
- CVE-2024-41310 Path traversal in yanzhenjie:andserver
- CVE-2024-4131 Privilege escalation in Emulator
- CVE-2024-41309 Privilege escalation in enjayworld:enjay crm
- CVE-2024-41308 Privilege escalation in enjayworld:enjay crm
- CVE-2024-41305 Server-side request forgery in wondercms:wondercms
- CVE-2024-41304 File upload in wondercms:wondercms
- CVE-2024-4130 Privilege escalation in App Store
- CVE-2024-41290 Weak cryptography in flatpress:flatpress
- CVE-2024-4129 Authentication bypass in Snow License Manager