Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 317 of 521.
- CVE-2024-38879 Auth bypass in Omnivise T3000 Application Server R9.2
- CVE-2024-38878 Path traversal in Omnivise T3000 Application Server R9.2
- CVE-2024-38877 Information disclosure in Omnivise T3000 Application Server R9.2
- CVE-2024-38876 Privilege escalation in Omnivise T3000 Application Server R9.2
- CVE-2024-38875 Django vulnerable to Denial of Service
- CVE-2024-38874 events2 TYPO3 extension insecure direct object reference (IDOR) vulnerability
- CVE-2024-38873 FriendlyCaptcha Plugin for TYPO3 Captcha Check Bypass
- CVE-2024-38872 SQL Injection
- CVE-2024-38871 SQL Injection
- CVE-2024-38870 Stored XSS
- CVE-2024-3887 Cross-site scripting in Royal Addons for Elementor – Addons and Templates Kit for Elementor
- CVE-2024-38869 Incorrect Authorization
- CVE-2024-38868 Incorrect Authorization
- CVE-2024-38867 Weak cryptography in SIPROTEC 5 6MD84 (CP300)
- CVE-2024-38866 Livestatus Injection in dynmaps
- CVE-2024-38865 Livestatus command injection in RestAPI
- CVE-2024-38864 User-Readable Private Key in Windows Agent
- CVE-2024-38863 CSRF token leaked in URL parameters
- CVE-2024-38862 SNMP and IMPI secrets written to audit log
- CVE-2024-38861 Lack of TLS validation in plugin MikroTik on Checkmk Exchange
- CVE-2024-38860 Reflected links in error message facilitate phishing attacks
- CVE-2024-3886 tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
- CVE-2024-38859 XSS in view page with SLA column
- CVE-2024-38858 Cross-site scripting in Robotmk logs view
- CVE-2024-38857 Reflected links in visuals facilitate phishing attacks
- CVE-2024-38856 Apache OFBiz Incorrect Authorization
- CVE-2024-3885 Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-3884 Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded
- CVE-2024-38834 Stored cross-site scripting vulnerability (CVE-2024-38834)
- CVE-2024-38833 Stored cross-site scripting vulnerability (CVE-2024-38833)
- CVE-2024-38832 Stored cross-site scripting vulnerability (CVE-2024-38832)
- CVE-2024-38831 Local privilege escalation vulnerability (CVE-2024-38831)
- CVE-2024-38830 Local privilege escalation vulnerability
- CVE-2024-3883 3D FlipBook <= 1.15.4 - Authenticated (Author+) Stored Cross-Site Scritping via Bookmark URL
- CVE-2024-38829 Spring LDAP sensitive data exposure for case-sensitive comparisons
- CVE-2024-38828 CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter
- CVE-2024-38827 Spring Security Authorization Bypass for Case Sensitive Comparisons
- CVE-2024-38826 CVE-2024-38826 Cloud Controller Denial of Service Attack
- CVE-2024-38825 CVE-2024-38825 Salt Advisory
- CVE-2024-38824 CVE-2024-38824 salt advisory
- CVE-2024-38823 CVE-2024-38823 Salt Advisory
- CVE-2024-38822 CVE-2024-38822 Salt Advisory
- CVE-2024-38821 Authorization Bypass of Static Resources in WebFlux Applications
- CVE-2024-38820 CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception
- CVE-2024-3882 Tenda W30E fromRouteStatic stack-based overflow
- CVE-2024-38819 Spring Framework Path Traversal vulnerability
- CVE-2024-38818 Privilege escalation in VMware NSX, VMware Cloud Foundation
- CVE-2024-38817 Command injection in VMware NSX, VMware Cloud Foundation
- CVE-2024-38816 CVE-2024-38816: Path traversal vulnerability in functional web frameworks
- CVE-2024-38815 Open redirect in VMware NSX, VMware Cloud Foundation
- CVE-2024-38814 SQL injection in VMware HCX
- CVE-2024-38813 VMware vCenter Server Privilege Escalation
- CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow
- CVE-2024-38811 Code-execution vulnerability
- CVE-2024-38810 Missing Authorization When Using @AuthorizeReturnObject
- CVE-2024-3881 Tenda W30E frmL7ProtForm frmL7PlotForm stack-based overflow
- CVE-2024-38809 Spring Framework DoS via conditional HTTP request
- CVE-2024-38808 CVE-2024-38808: Spring Expression DoS Vulnerability
- CVE-2024-38807 CVE-2024-38807: Signature Forgery Vulnerability in Spring Boot's Loader
- CVE-2024-38806 UAA Failure to Remove Shadow User’s Access
- CVE-2024-38805 iSCSI Remote Memory Corruption and Denial of Service
- CVE-2024-3880 Tenda W30E WriteFacMac formWriteFacMac os command injection
- CVE-2024-38798 Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege
- CVE-2024-38797 Out-of-bounds Read in HashPeImageByType()
- CVE-2024-38796 Integer overflow in PeCoffLoaderRelocateImage
- CVE-2024-38795 WordPress ListingPro plugin <= 2.9.4 - Unauthenticated SQL Injection vulnerability
- CVE-2024-38794 WordPress Custom Query Blocks plugin <= 5.2.0 - Broken Access Control vulnerability
- CVE-2024-38793 WordPress Best Restaurant Menu by Pricelisto plugin <= 1.4.1 - SQL Injection vulnerability
- CVE-2024-38792 WordPress ConveyThis Translate plugin <= 234 - Non-arbitrary Options Update vulnerability
- CVE-2024-38791 WordPress AI ENGINE plugin <= 2.4.7 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2024-38790 WordPress Smartsupp plugin <= 3.6 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-3879 Tenda W30E setcfm formSetCfm stack-based overflow
- CVE-2024-38789 WordPress Telegram Bot & Channel plugin <= 3.8.2 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-38788 WordPress UiPress lite plugin <= 3.4.06 - SQL Injection vulnerability
- CVE-2024-38787 Information disclosure in Import and export users and customers
- CVE-2024-38786 WordPress CoziPress theme <= 1.0.30 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-38785 WordPress Gutenverse plugin <= 1.9.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-38784 WordPress Livemesh Addons for Beaver Builder plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-38783 WordPress Arconix FAQ plugin <= 1.9.4 - Broken Access Control vulnerability
- CVE-2024-38782 WordPress Leaflet Maps Marker plugin <= 3.12.9 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-38781 WordPress CopySafe Web Protection plugin <= 3.15 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-38780 dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- CVE-2024-3878 Tenda F1202 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflow
- CVE-2024-38778 WordPress WP Fast Total Search <= 1.69.234 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-38777 WordPress Titan Anti-spam & Security plugin <= 7.3.6 - Broken Access Control vulnerability
- CVE-2024-38776 WordPress WP GoToWebinar plugin <= 15.7 - CSRF to XSS vulnerability
- CVE-2024-38775 WordPress CTX Feed plugin <= 6.5.6 - Arbitrary Options Update vulnerability
- CVE-2024-38774 WordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerability
- CVE-2024-38773 WordPress formlift plugin <= 7.5.17 - Unauthenticated Blind SQL Injection vulnerability
- CVE-2024-38772 Path traversal in JetWidgets for Elementor and WooCommerce
- CVE-2024-38771 WordPress Atarim plugin <= 4.0 - Broken Access Control vulnerability
- CVE-2024-38770 Privilege escalation in Backup and Staging by WP Time Capsule
- CVE-2024-3877 Tenda F1202 fromqossetting stack-based overflow
- CVE-2024-38769 WordPress Arconix Shortcodes plugin <= 2.1.11 - Broken Access Control vulnerability
- CVE-2024-38768 WordPress The Pack Elementor addons plugin <= 2.0.8.6 - Local File Inclusion vulnerability
- CVE-2024-38767 WordPress BSK PDF Manager plugin <= 3.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-38766 Cross-site request forgery in Matomo Analytics
- CVE-2024-38765 WordPress Oceanic theme <= 1.0.48 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-38764 WordPress i-transform theme <= 3.0.9 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-38763 WordPress Popularis Verse theme <= 1.1.1 - Cross Site Request Forgery (CSRF) vulnerability