Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 310 of 521.
- CVE-2024-39783 Command injection in Wavlink AC3000
- CVE-2024-39782 Command injection in Wavlink AC3000
- CVE-2024-39781 Command injection in Wavlink AC3000
- CVE-2024-39780 Use of unsafe yaml load in dynparam
- CVE-2024-3978 WordPress Jitsi Shortcode <= 0.1 - Contributor+ Stored XSS via Shortcode
- CVE-2024-39779 Memory corruption in Intel(R) Ethernet Connection I219 Series
- CVE-2024-39778 BIG-IP HSB vulnerability
- CVE-2024-39777 Malicious remote can invite itself to an arbitrary local channel
- CVE-2024-39776 Avtec Outpost Storage of File with Sensitive Data Under Web Root
- CVE-2024-39775 Net Manager has an out-of-bounds read permission bypass vulnerability
- CVE-2024-39774 Memory corruption in Wavlink AC3000
- CVE-2024-39773 Information disclosure in Wavlink AC3000
- CVE-2024-39772 Silent Desktop Screenshot Capture
- CVE-2024-39771 Security feature bypass in QBiC CLOUD CC-2L
- CVE-2024-39770 Memory corruption in Wavlink AC3000
- CVE-2024-3977 WordPress Jitsi Shortcode <= 0.1 - Admin+ Stored XSS
- CVE-2024-39769 Memory corruption in Wavlink AC3000
- CVE-2024-39768 Memory corruption in Wavlink AC3000
- CVE-2024-39767 Spoofed push notifications from malicious server
- CVE-2024-39766 SQL injection in Intel(R) Neural Compressor software
- CVE-2024-39765 Command injection in Wavlink AC3000
- CVE-2024-39764 Command injection in Wavlink AC3000
- CVE-2024-39763 Command injection in Wavlink AC3000
- CVE-2024-39762 Command injection in Wavlink AC3000
- CVE-2024-39761 Command injection in Wavlink AC3000
- CVE-2024-39760 Command injection in Wavlink AC3000
- CVE-2024-3976 Missing Authorization in GitLab
- CVE-2024-39759 Command injection in Wavlink AC3000
- CVE-2024-39758 Missing authorization in Intel(R) Arc™ & Iris(R) Xe graphics software
- CVE-2024-39757 Memory corruption in Wavlink AC3000
- CVE-2024-39756 Memory corruption in Wavlink AC3000
- CVE-2024-39755 Privilege escalation in Anka Build
- CVE-2024-39754 Hardcoded credentials in Wavlink AC3000
- CVE-2024-39753 SQL injection in Trend Micro Apex One
- CVE-2024-39752 IBM Analytics Content Hub file upload
- CVE-2024-39751 IBM InfoSphere Information Server information disclosure
- CVE-2024-39750 IBM Analytics Content Hub buffer overflow
- CVE-2024-39747 IBM Sterling Connect:Direct Web Services information disclosure
- CVE-2024-39746 IBM Sterling Connect:Direct Web Services information disclosure
- CVE-2024-39745 IBM Sterling Connect:Direct Web Services information disclosure
- CVE-2024-39744 IBM Sterling Connect:Direct Web Services cross-site request forgery
- CVE-2024-39743 IBM MQ Container denial of service
- CVE-2024-39742 IBM MQ Container authentication bypass
- CVE-2024-39741 IBM Datacap Navigator directory traversal
- CVE-2024-39740 IBM Datacap Navigator information disclosure
- CVE-2024-3974 BuddyPress <= 12.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
- CVE-2024-39739 IBM Datacap Navigator server-side request forgery
- CVE-2024-39737 IBM Datacap Navigator information disclosure
- CVE-2024-39736 IBM Datacap Navigator HTTP HOST header injection
- CVE-2024-39735 IBM Datacap Navigator cross-site scripting
- CVE-2024-39734 IBM Datacap Navigator information disclosure
- CVE-2024-39733 IBM Datacap Navigator information disclosure
- CVE-2024-39732 IBM Datacap Navigator information disclosure
- CVE-2024-39731 IBM Datacap Navigator information disclosure
- CVE-2024-39730 IBM Datacap clickjacking
- CVE-2024-3973 House Manager <= 1.0.8.4 - Reflected XSS
- CVE-2024-39729 IBM Datacap Navigator information disclosure
- CVE-2024-39728 IBM Datacap Navigator cross-site scripting
- CVE-2024-39727 IBM Engineering Lifecycle Optimization - Engineering Insights tabnabbing
- CVE-2024-39726 IBM Engineering Insights XML external entity injection
- CVE-2024-39725 IBM Engineering Lifecycle Optimization - Engineering Insights information disclosure
- CVE-2024-39724 IBM Db2 Big SQL on Cloud Pak for Data is vulnerable to a denial of service due to lack of throttling on an API
- CVE-2024-39723 IBM FlashSystem denial of service
- CVE-2024-39722 Path traversal in ollama:ollama
- CVE-2024-39721 Denial of service in ollama:ollama
- CVE-2024-39720 Ollama Out-of-bounds Read
- CVE-2024-3972 Similarity <= 3.0 - Stored XSS via CSRF
- CVE-2024-39719 Information disclosure in ollama:ollama
- CVE-2024-39718 Other in Backup and Recovery
- CVE-2024-39717 Versa Director Dangerous File Type Upload
- CVE-2024-39715 Code injection in Veeam Service Provider Console
- CVE-2024-39714 Code injection in Veeam Service Provider Console
- CVE-2024-39713 Rocket.Chat Server-Side Request Forgery (SSRF) vulnerability
- CVE-2024-39712 Command injection in Connect Secure
- CVE-2024-39711 Command injection in Connect Secure
- CVE-2024-39710 Command injection in Connect Secure
- CVE-2024-3971 Similarity <= 3.0 - Plugin Reset via CSRF
- CVE-2024-39709 Privilege escalation in Connect Secure
- CVE-2024-39708 An issue was discovered in the Agent in Delinea Privilege Manager (formerly Thycotic Privilege Manager) before 12.0.1096 on Windows.
- CVE-2024-39707 Insyde IHISI function 0x49 can restore factory defaults for certain UEFI variables without further authentication by default, which could le
- CVE-2024-39705 ntlk unsafe deserialization vulnerability
- CVE-2024-39704 Code injection in unknown-corp:melty blood actress again current code
- CVE-2024-39703 Command injection in ThreatQ
- CVE-2024-39702 Denial of service in openresty:openresty
- CVE-2024-39701 Directus Incorrectly handles _in` filter
- CVE-2024-39700 Remote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Action
- CVE-2024-3970 Server-Side Request Forgery vulnerability in iManager
- CVE-2024-39699 Directus has a Blind SSRF On File Import
- CVE-2024-39698 Code Signing Bypass on Windows in electron-updater < 6.3.0-alpha.6
- CVE-2024-39697 phonenumber panics on parsing crafted phonenumber inputs
- CVE-2024-39696 Evmos vulnerable to exploit of smart contract account and vesting
- CVE-2024-39695 Exiv2 has an out-of-bounds read in AsfVideo::streamProperties
- CVE-2024-39694 Duende IdentityServer Open Redirect vulnerability
- CVE-2024-39693 Next.js Denial of Service (DoS) condition
- CVE-2024-39691 Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to
- CVE-2024-39690 Capsule tenant owner with "patch namespace" permission can hijack system namespaces
- CVE-2024-3969 XML External Entity injection vulnerability in iManager
- CVE-2024-39689 Certifi removes GLOBALTRUST root certificate
- CVE-2024-39688 fishaudio/Bert-VITS2 Limited File Write in webui_preprocess.py generate_config function
- CVE-2024-39687 Fedify vulnerable to allowing access to internal network resources