Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 309 of 521.
- CVE-2024-39896 Directus allows SSO User Enumeration
- CVE-2024-39895 Directus GraphQL Field Duplication Denial of Service (DoS)
- CVE-2024-39894 OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry (e.g., for su and Sudo) because of an Obs
- CVE-2024-39891 Twilio Authy Information Disclosure
- CVE-2024-39890 Memory corruption in samsung:exynos 1080 firmware
- CVE-2024-3989 Cross-site scripting in HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- CVE-2024-39888 Hardcoded credentials in Mendix Encryption
- CVE-2024-39887 Apache Superset: Improper SQL authorisation, parse not checking for specific engine functions
- CVE-2024-39886 Weak cryptography in TONE store App
- CVE-2024-39884 Apache HTTP Server: source code disclosure with handlers configured via AddType
- CVE-2024-39883 Heap-based Buffer Overflow in Delta Electronics CNCSoft-G2
- CVE-2024-39882 Out-of-bounds Read in Delta Electronics CNCSoft-G2
- CVE-2024-39881 Out-of-bounds Write in Delta Electronics CNCSoft-G2
- CVE-2024-39880 Stack-based Buffer Overflow in Delta Electronics CNCSoft-G2
- CVE-2024-3988 Cross-site scripting in Sina Extension for Elementor
- CVE-2024-39879 Information disclosure in TeamCity
- CVE-2024-39878 Information disclosure in TeamCity
- CVE-2024-39877 Apache Airflow: DAG Author Code Execution possibility in airflow-scheduler
- CVE-2024-39876 Denial of service in SINEMA Remote Connect Server
- CVE-2024-39875 Missing authorization in SINEMA Remote Connect Server
- CVE-2024-39874 Security feature bypass in SINEMA Remote Connect Server
- CVE-2024-39873 Security feature bypass in SINEMA Remote Connect Server
- CVE-2024-39872 Privilege escalation in SINEMA Remote Connect Server
- CVE-2024-39871 Missing authorization in SINEMA Remote Connect Server
- CVE-2024-39870 Privilege escalation in SINEMA Remote Connect Server
- CVE-2024-3987 Cross-site scripting in WP Mobile Menu – The Mobile-Friendly Responsive Menu
- CVE-2024-39869 Denial of service in SINEMA Remote Connect Server
- CVE-2024-39868 Missing authorization in SINEMA Remote Connect Server
- CVE-2024-39867 Missing authorization in SINEMA Remote Connect Server
- CVE-2024-39866 Privilege escalation in SINEMA Remote Connect Server
- CVE-2024-39865 File upload in SINEMA Remote Connect Server
- CVE-2024-39864 Apache CloudStack: Integration API service uses dynamic port when disabled
- CVE-2024-39863 Apache Airflow: Potential XSS Vulnerability
- CVE-2024-3986 SportsPress < 2.7.22 - Admin+ Stored XSS
- CVE-2024-39853 Code injection in swiperjs:swiper
- CVE-2024-3985 Exclusive Addons for Elementor <= 2.6.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call to Action
- CVE-2024-39848 Internet2 Grouper before 5.6 allows authentication bypass when LDAP authentication is used in certain ways.
- CVE-2024-39847 Arbitrary File Read and Server Side Request Forgery via XML External Entities in 4D Server SOAP
- CVE-2024-39846 NewPass before 1.2.0 stores passwords (rather than password hashes) directly, which makes it easier to obtain unauthorized access to sensitive information.
- CVE-2024-39844 In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK.
- CVE-2024-39843 SQL injection in centreon:centreon
- CVE-2024-39842 SQL injection in centreon:centreon
- CVE-2024-39841 SQL injection in centreon:centreon web
- CVE-2024-39840 Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain
- CVE-2024-3984 Cross-site scripting in EmbedSocial – Social Media Feeds, Reviews and Galleries
- CVE-2024-39839 Remote username set to an arbitrary string by remote user
- CVE-2024-39838 Hardcoded credentials in ZWX-2000CSW2-HN
- CVE-2024-39837 Malicious remote can create arbitrary channels
- CVE-2024-39836 Munged email address used for password resets and notifications
- CVE-2024-39835 Unsafe use of eval() method in roslaunch tool
- CVE-2024-39833 Privilege escalation in Intel(R) QAT software
- CVE-2024-39832 Permanently local data deletion by malicious remote
- CVE-2024-39831 AccessTokenManager has an use after free vulnerability
- CVE-2024-39830 Timing attack during remote cluster token comparison when shared channels are enabled
- CVE-2024-3983 WooCommerce Customers Manager < 30.1 - Bulk Action via CSRF
- CVE-2024-39828 R74n Sandboxels 1.9 through 1.9.5 allows XSS via a message in a modified saved-game file.
- CVE-2024-39827 Zoom Workplace Desktop App for Windows - Improper Input Validation
- CVE-2024-39826 Zoom Workplace Apps and SDKs - Path traversal
- CVE-2024-39825 Zoom Workplace Apps and Rooms Clients - Buffer Overflow
- CVE-2024-39824 Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization
- CVE-2024-39823 Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization
- CVE-2024-39822 Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information Exposure
- CVE-2024-39821 Zoom Workplace App for Windows and Zoom Rooms App for Windows - Race Condition
- CVE-2024-39820 Zoom Workplace Desktop App for macOS - Uncontrolled Search Path Element
- CVE-2024-3982 Misconfiguration in MicroSCADA SYS600
- CVE-2024-39819 Zoom Workplace Apps and SDK for Windows - Improper Privilege Management
- CVE-2024-39818 Zoom Workplace Apps and SDKs - Protection Mechanism Failure
- CVE-2024-39817 Information disclosure in Cybozu Office
- CVE-2024-39816 Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
- CVE-2024-39815 Vonets WiFi Bridges Improper Check or Handling of Exceptional Conditions
- CVE-2024-39813 Privilege escalation in EPCT software
- CVE-2024-39811 Other in Intel(R) Server M20NTP Family UEFI
- CVE-2024-39810 Server crash via Elasticsearch certificate file
- CVE-2024-39809 BIG-IP Next Central Manager vulnerability
- CVE-2024-39808 Memory corruption in Controller 6000 and Controller 7000
- CVE-2024-39807 Channel IDs of archived/restored channels leaked via webhook events
- CVE-2024-39806 Liteos_a has an out-of-bounds Read vulnerability
- CVE-2024-39805 Privilege escalation in Intel(R) DSA software
- CVE-2024-39804 Security feature bypass in PowerPoint
- CVE-2024-39803 Memory corruption in Wavlink AC3000
- CVE-2024-39802 Memory corruption in Wavlink AC3000
- CVE-2024-39801 Memory corruption in Wavlink AC3000
- CVE-2024-39800 Command injection in Wavlink AC3000
- CVE-2024-3980 Path traversal in MicroSCADA Pro SYS600
- CVE-2024-39799 Command injection in Wavlink AC3000
- CVE-2024-39798 Command injection in Wavlink AC3000
- CVE-2024-39797 Missing authorization in Intel(R) Ethernet Connection I219 Series
- CVE-2024-39795 Other in Wavlink AC3000
- CVE-2024-39794 Other in Wavlink AC3000
- CVE-2024-39793 Other in Wavlink AC3000
- CVE-2024-39792 NGINX Plus MQTT vulnerability
- CVE-2024-39791 Vonets WiFi Bridges Stack-based Buffer Overflow
- CVE-2024-39790 Other in Wavlink AC3000
- CVE-2024-3979 COVESA vsomeip race condition
- CVE-2024-39789 Other in Wavlink AC3000
- CVE-2024-39788 Other in Wavlink AC3000
- CVE-2024-39787 Path traversal in Wavlink AC3000
- CVE-2024-39786 Path traversal in Wavlink AC3000
- CVE-2024-39785 Command injection in Wavlink AC3000
- CVE-2024-39784 Command injection in Wavlink AC3000