Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 305 of 521.
- CVE-2024-40725 Apache HTTP Server: source code disclosure with handlers configured via AddType
- CVE-2024-40724 Memory corruption in Assimp
- CVE-2024-40723 CHANGING Information Technology HWATAIServiSign Windows Version - Stack-based Buffer Overflow
- CVE-2024-40722 CHANGING Information Technology TCBServiSign Windows Version - Stack-based Buffer Overflow
- CVE-2024-40721 CHANGING Information Technology TCBServiSign Windows Version - Improper Input Validation
- CVE-2024-40720 CHANGING Information Technology TCBServiSign Windows Version - Improper Input Validation
- CVE-2024-4072 Kashipara Online Furniture Shopping Ecommerce Website search.php cross site scripting
- CVE-2024-40719 CHANGING Information Technology TCBServiSign Windows Version - Inadequate Encryption Strength
- CVE-2024-40718 Server-side request forgery in Nutanix AHV
- CVE-2024-40717 Missing authorization in Backup & Replication
- CVE-2024-40715 Auth bypass in Enterprise Manager
- CVE-2024-40714 Security feature bypass in Backup and Recovery
- CVE-2024-40713 Auth bypass in Backup and Recovery
- CVE-2024-40712 Path traversal in Backup and Recovery
- CVE-2024-40711 Veeam Backup and Replication Deserialization
- CVE-2024-40710 Information disclosure in Backup and Recovery
- CVE-2024-4071 Kashipara Online Furniture Shopping Ecommerce Website prodInfo.php sql injection
- CVE-2024-40709 Missing authorization in Backup and Recovery
- CVE-2024-40706 IBM InfoSphere Information Server information disclosure
- CVE-2024-40705 IBM InfoSphere Information Server denial of service
- CVE-2024-40704 IBM InfoSphere Information Server information disclosure
- CVE-2024-40703 IBM Cognos Analytics information disclosure
- CVE-2024-40702 IBM Cognos Controller improper certificate validation
- CVE-2024-40700 IBM Security Verify Access cross-site scripting
- CVE-2024-4070 Kashipara Online Furniture Shopping Ecommerce Website prodList.php sql injection
- CVE-2024-40697 IBM Common Licensing information disclosure
- CVE-2024-40696 IBM Sterling B2B Integrator cross-site scripting
- CVE-2024-40695 IBM Cognos Analytics file upload
- CVE-2024-40693 IBM Planning Analytics file upload
- CVE-2024-40691 IBM Cognos Controller file upload
- CVE-2024-40690 IBM InfoSphere Server cross-site scripting
- CVE-2024-4069 Kashipara Online Furniture Shopping Ecommerce Website search.php sql injection
- CVE-2024-40689 IBM InfoSphere Information Server SQL injection
- CVE-2024-40686 IBM SmartCloud Analytics - Log Analysis HOST header injection
- CVE-2024-40685 IBM Operations Analytics - Log Analysis is affected by CSRF Token Replay Attack
- CVE-2024-40684 IBM Operations Analytics - Log Analysis is affected by Weak Password Policy and Inadequate Account Lockout Mechanism
- CVE-2024-40683 Auth bypass in Operations Analytics - Log Analysis
- CVE-2024-40682 IBM SmartCloud Analytics - Log Analysis denial of service
- CVE-2024-40681 IBM MQ security bypass
- CVE-2024-40680 IBM MQ denial of service
- CVE-2024-4068 Memory Exhaustion in braces
- CVE-2024-40679 IBM Db2 information disclosure
- CVE-2024-40677 Missing authorization in Android
- CVE-2024-40676 Security feature bypass in Android
- CVE-2024-40675 Denial of service in Android
- CVE-2024-40674 Memory corruption in Android
- CVE-2024-40673 Code injection in Android
- CVE-2024-40672 Missing authorization in Android
- CVE-2024-40671 Missing authorization in Android
- CVE-2024-40670 Use after free in Android
- CVE-2024-4067 Regular Expression Denial of Service in micromatch
- CVE-2024-40669 Use after free in Android
- CVE-2024-40664 Business logic in Android
- CVE-2024-40662 Privilege escalation in Android
- CVE-2024-40661 Missing authorization in Android
- CVE-2024-40660 Privilege escalation in Android
- CVE-2024-4066 Tenda AC8 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflow
- CVE-2024-40659 Denial of service in Android
- CVE-2024-40658 Memory corruption in Android
- CVE-2024-40657 Privilege escalation in Android
- CVE-2024-40656 Information disclosure in Android
- CVE-2024-40655 Privilege escalation in Android
- CVE-2024-40654 Privilege escalation in Android
- CVE-2024-40653 Privilege escalation in Android
- CVE-2024-40652 Missing authorization in Android
- CVE-2024-40651 Use after free in Android
- CVE-2024-40650 Security feature bypass in Android
- CVE-2024-4065 Tenda AC8 SetRebootTimer formSetRebootTimer stack-based overflow
- CVE-2024-40649 Use after free in Android
- CVE-2024-40648 matrix-sdk-crypto's `UserIdentity::is_verified` not checking verification status of own user identity while performing the check
- CVE-2024-40647 Unintentional exposure of environment variables to subprocesses in sentry-sdk
- CVE-2024-40646 Vertex Vulnerable to Path Traversal
- CVE-2024-40645 FOG Authenticated File Upload RCE
- CVE-2024-40644 gitoxide's gix-path can use a fake program files location
- CVE-2024-40643 Joplin has a parsing error leading to Cross-site Scripting (XSS)
- CVE-2024-40642 Absent Input Validation in BinaryHttpParser in the netty incubator codec.bhttp
- CVE-2024-40641 Unsigned code template execution through workflows in projectdiscovery/nuclei
- CVE-2024-40640 Usage of non-constant time base64 decoder could lead to leakage of secret key material in vodozemac
- CVE-2024-4064 Tenda AC8 execCommand R7WebsSecurityHandler stack-based overflow
- CVE-2024-40638 GLPI allows account takeover via SQL Injection in AJAX scripts
- CVE-2024-40637 Implicit override for built-in materializations from installed packages in dbt-core
- CVE-2024-40636 Basic Auth Credential Leakage to Logs After Fetch Registry Error in Steeltoe.Discovery.Eureka with Peer Awareness
- CVE-2024-40635 containerd has an integer overflow in User ID handling
- CVE-2024-40634 Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint
- CVE-2024-40633 Customer data leak via adjustments API endpoint in Sylius
- CVE-2024-40632 Linkerd potential access to the shutdown endpoint
- CVE-2024-40631 Cross-site Scripting (XSS) in media embed element when using custom URL parsers in plate media
- CVE-2024-40630 HEIF Heap OOB Read in OpenImageIO
- CVE-2024-4063 EZVIZ CS-C6-21WFR-8 Davinci Application certificate validation
- CVE-2024-40629 Arbitrary File Write in Ansible Playbooks leads to RCE in Jumpserver
- CVE-2024-40628 Arbitrary File Read in Ansible Playbooks in Jumpserver
- CVE-2024-40627 OpaMiddleware does not filter HTTP OPTIONS requests
- CVE-2024-40626 Stored Cross-site Scripting (XSS) vulnerability in Outline editor
- CVE-2024-40625 GeoServer Coverage REST API Allows Server Side Request Forgery
- CVE-2024-40624 Deserialization of untrusted data in torrentpier/torrentpier
- CVE-2024-40620 Rockwell Automation Pavilion8® Unencrypted Data Vulnerability via HTTP protocol
- CVE-2024-4062 Hualai Xiaofang iSC5 certificate validation
- CVE-2024-40619 Denial of service in ControlLogix® 5580
- CVE-2024-40618 Cross-site scripting in NAVER Whale browser
- CVE-2024-40617 Path traversal in FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS)