Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 321 of 521.
- CVE-2024-38485 Open redirect in ECS
- CVE-2024-38483 Other in Dell Client Platform BIOS
- CVE-2024-38482 Other in CloudLink
- CVE-2024-38481 Memory corruption in iDRAC Service Module (iSM)
- CVE-2024-38480 Hardcoded credentials in "Piccoma" App for Android
- CVE-2024-3848 Path Traversal Bypass in mlflow/mlflow
- CVE-2024-38479 Apache Traffic Server: Cache key plugin is vulnerable to cache poisoning attack
- CVE-2024-38477 Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request
- CVE-2024-38476 Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect
- CVE-2024-38475 Apache HTTP Server Improper Escaping of Output
- CVE-2024-38474 Apache HTTP Server weakness with encoded question marks in backreferences
- CVE-2024-38473 Apache HTTP Server proxy encoding problem
- CVE-2024-38472 Apache HTTP Server on WIndows UNC SSRF
- CVE-2024-38471 Command injection in Archer AX3000
- CVE-2024-38470 Cross-site scripting in ibarn project:ibarn
- CVE-2024-3847 Security feature bypass in Chrome
- CVE-2024-38469 Cross-site scripting in ibarn project:ibarn
- CVE-2024-38468 Auth bypass in guoxinled:synthesis image system
- CVE-2024-38467 Missing authorization in guoxinled:synthesis image system
- CVE-2024-38466 Hardcoded credentials in guoxinled:synthesis image system
- CVE-2024-38465 Information disclosure in guoxinled:synthesis image system
- CVE-2024-38462 Other in irods:irods
- CVE-2024-38461 Other in irods:irods
- CVE-2024-38460 SonarQube logs sensitive information
- CVE-2024-3846 Other in Chrome
- CVE-2024-38459 langchain_experimental Code Execution via Python REPL access
- CVE-2024-38458 Code injection in xenforo:xenforo
- CVE-2024-38457 Xenforo before 2.2.16 allows CSRF.
- CVE-2024-38456 HIGH-LEIT V05.08.01.03 and HIGH-LEIT V04.25.00.00 to 4.25.01.01 for Windows from Vivavis contain an insecure file and folder permissions vul
- CVE-2024-38454 Cross-site scripting in expressionengine:expressionengine
- CVE-2024-38453 The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key.
- CVE-2024-3845 Security feature bypass in Chrome
- CVE-2024-38449 A Directory Traversal vulnerability in KasmVNC 1.3.1.230e50f7b89663316c70de7b0e3db6f6b9340489 and possibly earlier versions allows remote au
- CVE-2024-38448 htags in GNU Global through 6.6.12 allows code execution in situations where dbpath (aka -d) is untrusted, because shell metacharacters may be used.
- CVE-2024-38447 Missing authorization in ncia:advisor network
- CVE-2024-38446 Missing authorization in ncia:advisor network
- CVE-2024-38443 C/sorting/binary_insertion_sort.c in The Algorithms - C through e5dad3f has a segmentation fault for deep recursion, which may affect common
- CVE-2024-38441 Memory corruption in netatalk:netatalk
- CVE-2024-38440 Memory corruption in netatalk:netatalk
- CVE-2024-3844 Other in Chrome
- CVE-2024-38439 Memory corruption in netatalk:netatalk
- CVE-2024-38438 D-Link - CWE-294: Authentication Bypass by Capture-replay
- CVE-2024-38437 D-Link - CWE-288: Authentication Bypass Using an Alternate Path or Channel
- CVE-2024-38436 Commugen SOX 365 – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- CVE-2024-38435 Unitronics Vision PLC - CWE-703: Improper Check or Handling of Exceptional Conditions
- CVE-2024-38434 Unitronics Vision PLC - CWE-676: Use of Potentially Dangerous Function
- CVE-2024-38433 Nuvoton - CWE-305: Authentication Bypass by Primary Weakness
- CVE-2024-38432 Matrix – Tafnit v8 CWE-646: Reliance on File Name or Extension of Externally-Supplied File
- CVE-2024-38431 Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy
- CVE-2024-38430 Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- CVE-2024-3843 Other in Chrome
- CVE-2024-38429 Matrix - CWE-552: Files or Directories Accessible to External Parties
- CVE-2024-38428 Security feature bypass in gnu:wget
- CVE-2024-38427 In International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in CIccTagXmlProfileSequenceId::ParseXml in IccXML/IccLibXML/IccTa
- CVE-2024-38426 Improper Authentication in Modem
- CVE-2024-38425 Improper Authorization in Performance
- CVE-2024-38424 Use After Free in GPS
- CVE-2024-38423 Buffer Copy Without Checking Size of Input in Graphics Linux
- CVE-2024-38422 Integer Overflow to Buffer Overflow in Audio
- CVE-2024-38421 Use After Free in Graphics Linux
- CVE-2024-38420 Improper Input Validation in Hypervisor
- CVE-2024-38419 Use After Free in Automotive GPU
- CVE-2024-38418 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux
- CVE-2024-38417 Buffer Over-read in Automotive Multimedia
- CVE-2024-38416 Buffer Over-read in Audio
- CVE-2024-38415 Use After Free in Computer Vision
- CVE-2024-38414 Buffer Over-read in Computer Vision
- CVE-2024-38413 Improper Input Validation in Computer Vision
- CVE-2024-38412 Use After Free in Computer Vision
- CVE-2024-38411 Use After Free in Computer Vision
- CVE-2024-38410 Stack-based Buffer Overflow in WLAN Windows Host
- CVE-2024-3841 Cross-site scripting in Chrome
- CVE-2024-38409 Buffer Copy Without Checking Size of Input in WLAN Windows Host
- CVE-2024-38408 Cryptographic Issues in BT Controller
- CVE-2024-38407 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera
- CVE-2024-38406 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera
- CVE-2024-38405 Buffer Over-read in WLAN Host
- CVE-2024-38404 Buffer Over-read in Multi Mode Call Processor
- CVE-2024-38403 Buffer Over-read in WLAN Firmware
- CVE-2024-38402 Use After Free in DSP Services
- CVE-2024-38401 Use After Free in Qualcomm IPC
- CVE-2024-3840 Security feature bypass in Chrome
- CVE-2024-38399 Use After Free in Graphics
- CVE-2024-38397 Buffer Over-read in WLAN Host Communication
- CVE-2024-38396 Code injection in iterm2:iterm2
- CVE-2024-38395 Code injection in iterm2:iterm2
- CVE-2024-38394 Mismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kernel's underlying devic
- CVE-2024-38392 Pexip Infinity Connect before 1.13.0 lacks sufficient authenticity checks during the loading of resources, and thus remote attackers can cau
- CVE-2024-38390 drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails
- CVE-2024-3839 Memory corruption in Chrome
- CVE-2024-38389 Memory corruption in TELLUS
- CVE-2024-38388 ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup
- CVE-2024-38387 Privilege escalation in Intel(R) Graphics Driver installers
- CVE-2024-38386 Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
- CVE-2024-38385 genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after()
- CVE-2024-38384 blk-cgroup: fix list corruption from reorder of WRITE ->lqueued
- CVE-2024-38383 Privilege escalation in Intel(R) Quartus(R) Prime Pro Edition software for Windows
- CVE-2024-38382 Ability Runtime has an out-of-bounds read permission bypass vulnerability
- CVE-2024-38381 nfc: nci: Fix uninit-value in nci_rx_work
- CVE-2024-38380 Millbeck Communications Proroute H685t-w Cross-site Scripting.