Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 327 of 521.
- CVE-2024-37858 SQL injection in oretnom23:lost and found information system
- CVE-2024-37857 SQL injection in oretnom23:lost and found information system
- CVE-2024-37856 Cross-site scripting in oretnom23:lost and found information system
- CVE-2024-37855 An issue in Nepstech Wifi Router xpon (terminal) NTPL-Xpon1GFEVN, hardware verstion 1.0 firmware 2.0.1 allows a remote attacker to execute a
- CVE-2024-3785 Improper Neutralization of Server-Side Includes (SSI) vulnerability in WBSAirback
- CVE-2024-37849 SQL injection in itsourcecode:billing system
- CVE-2024-37848 SQL injection in angeljudesuarez:online book store project
- CVE-2024-37847 File upload in radixiot:mango
- CVE-2024-37846 Code injection in radixiot:mango
- CVE-2024-37845 Command injection in radixiot:mango
- CVE-2024-37844 Cross-site scripting in radixiot:mango
- CVE-2024-37843 Craft CMS SQL injection vulnerability via the GraphQL API endpoint
- CVE-2024-37840 SQL injection in itsourcecode:learning management system
- CVE-2024-3784 Improper Neutralization of Server-Side Includes (SSI) vulnerability in WBSAirback
- CVE-2024-37831 SQL injection in itsourcecode:payroll management system
- CVE-2024-37830 Open redirect in getoutline:outline
- CVE-2024-3783 Path Traversal vulnerability in WBSAirback
- CVE-2024-37829 Auth bypass in getoutline:outline
- CVE-2024-37828 A stored cross-site scripting (XSS) in Vermeg Agile Reporter v23.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted
- CVE-2024-37826 Null dereference in vercot:serva
- CVE-2024-37825 An issue in EnvisionWare Computer Access & Reservation Control SelfCheck v1.0 (fixed in OneStop 3.2.0.27184 Hotfix May 2024) allows unauthen
- CVE-2024-37821 Dolibarr arbitrary file upload vulnerability
- CVE-2024-37820 PingCAP TiDB nil pointer dereference
- CVE-2024-3782 Cross-Site Request Forgery (CSRF) vulnerability in WBSAirback
- CVE-2024-37818 Strapi Server-Side Request Forgery (SSRF)
- CVE-2024-37816 Quectel EC25-EUX EC25EUXGAR08A05M1G was discovered to contain a stack overflow.
- CVE-2024-3781 OS Command Injection vulnerability in WBSAirback
- CVE-2024-37803 Cross-site scripting in health care hospital management system project:health care hospital management system
- CVE-2024-37802 SQL injection in health care hospital management system project:health care hospital management system
- CVE-2024-37800 Cross-site scripting in code-projects:restaurant reservation system
- CVE-2024-3780 Information exposure vulnerability on Technicolor CGA2121
- CVE-2024-37799 SQL injection in code-projects:restaurant reservation system
- CVE-2024-37798 Cross-site scripting in phpgurukul:beauty parlour management system
- CVE-2024-37795 A segmentation fault in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service (DoS) via a crafted SMT-LIB input file containing t
- CVE-2024-37794 Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service (DoS) via a crafted SMT2 input file.
- CVE-2024-37791 DuxCMS3 v3.1.3 was discovered to contain a SQL injection vulnerability via the keyword parameter at /article/Content/index?class_id.
- CVE-2024-3779 Denial of Service in ESET products for Windows
- CVE-2024-37783 A reflected cross-site scripting (XSS) vulnerability in Gladinet CentreStack v13.12.9934.54690 allows attackers to inject malicious JavaScri
- CVE-2024-37782 An LDAP injection vulnerability in the login page of Gladinet CentreStack v13.12.9934.54690 allows attackers to access sensitive data or exe
- CVE-2024-3778 Ai3 QbiBot - Unrestricted File Upload
- CVE-2024-37779 WoodWing Elvis DAM v6.98.1 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the Apache Ant script functionality.
- CVE-2024-37777 Code injection in zoneland:o2oa
- CVE-2024-37776 Cross-site scripting in sunbirddcim:dctrack
- CVE-2024-37775 Missing authorization in sunbirddcim:dctrack
- CVE-2024-37774 Cross-site request forgery in sunbirddcim:dctrack
- CVE-2024-37773 Cross-site scripting in sunbirddcim:dctrack
- CVE-2024-37770 Code injection in b1ackc4t:14finger
- CVE-2024-3777 Ai3 QbiBot - Broken Access Control
- CVE-2024-37769 Privilege escalation in b1ackc4t:14finger
- CVE-2024-37768 Missing authorization in b1ackc4t:14finger
- CVE-2024-37767 Missing authorization in b1ackc4t:14finger
- CVE-2024-37765 SQL injection in machform:machform
- CVE-2024-37764 Cross-site scripting in machform:machform
- CVE-2024-37763 Cross-site scripting in machform:machform
- CVE-2024-37762 File upload in machform:machform
- CVE-2024-3776 Netvision airPASS - Reflected XSS
- CVE-2024-37759 Code injection in datagear:datagear
- CVE-2024-37758 Improper access control in the endpoint /RoleMenuMapping/AddRoleMenu of Digiteam v4.21.0.0 allows authenticated attackers to escalate privileges.
- CVE-2024-3775 aEnrich Technology a+HRD - Argument Injection
- CVE-2024-37743 Code injection in mmz-001:knowledgegpt
- CVE-2024-37742 Insecure Access Control in Safe Exam Browser (SEB) = 3.5.0 on Windows.
- CVE-2024-37741 Cross-site scripting in openplcproject:openplc v3 firmware
- CVE-2024-3774 aEnrich Technology a+HRD - Exposure of Sensitive Data
- CVE-2024-37734 Privilege escalation in open-emr:openemr
- CVE-2024-37732 Cross-site scripting in anchorcms:anchor cms
- CVE-2024-3773 LiveJournal Shortcode <= 1.1.1 - Contributor+ Stored XSS via Shortcode
- CVE-2024-37728 Arbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd OfficeWeb365 v.7.18.23.0 and v8.6.1.0 allows a remote attack
- CVE-2024-37726 Insecure Permissions vulnerability in Micro-Star International Co., Ltd MSI Center v.2.0.36.0 allows a local attacker to escalate privileges
- CVE-2024-3772 Regular expression denial of service in Pydantic < 2.4.0
- CVE-2024-3771 PHPGurukul Student Record System edit-subject.php sql injection
- CVE-2024-3770 PHPGurukul Student Record System sql injection
- CVE-2024-37699 An issue in DataLife Engine v.17.1 and before is vulnerable to SQL Injection in dboption.
- CVE-2024-3769 PHPGurukul Student Record System login.php sql injection
- CVE-2024-37681 An issue the background management system of Shanxi Internet Chuangxiang Technology Co., Ltd v1.0.1 allows a remote attacker to cause a deni
- CVE-2024-37680 Cross-site scripting in finesoft project:finesoft
- CVE-2024-3768 PHPGurukul/itsourcecode News Portal search.php sql injection
- CVE-2024-37679 Cross-site scripting in finesoft project:finesoft
- CVE-2024-37678 Cross-site scripting in finesoft project:finesoft
- CVE-2024-37677 Missing authorization in access management specialist project:access management specialist
- CVE-2024-37676 An issue in htop-dev htop v.2.20 allows a local attacker to cause an out-of-bounds access in the Header_populateFromSettings function.
- CVE-2024-37675 Cross-site scripting in tessi:docubase
- CVE-2024-37674 Cross-site scripting in moodle:moodle
- CVE-2024-37673 Cross-site scripting in tessi:docubase
- CVE-2024-37672 Cross-site scripting in tessi:docubase
- CVE-2024-37671 Cross-site scripting in tessi:docubase
- CVE-2024-3767 PHPGurukul News Portal edit-post.php sql injection
- CVE-2024-37665 Privilege escalation in wvp-pro:gb28181
- CVE-2024-37664 Denial of service in mi:redmi ax6s firmware
- CVE-2024-37663 Other in mi:redmi ax6s firmware
- CVE-2024-37662 Denial of service in tp-link:tl-7dr5130 firmware
- CVE-2024-37661 Security feature bypass in tp-link:tl-7dr5130 firmware
- CVE-2024-3766 slowlyo OwlAdmin Image File Upload upload_image cross site scripting
- CVE-2024-37658 Open redirect in sir:gnuboard
- CVE-2024-37657 Open redirect in sir:gnuboard
- CVE-2024-37656 Open redirect in sir:gnuboard
- CVE-2024-37654 An issue in BAS-IP AV-01D, AV-01MD, AV-01MFD, AV-01ED, AV-01KD, AV-01BD, AV-01KBD, AV-02D, AV-02IDE, AV-02IDR, AV-02IPD, AV-02FDE, AV-02FDR,
- CVE-2024-3765 Xiongmai AHB7804R-MH-V2 Sofia Service access control
- CVE-2024-37649 Insecure Permissions vulnerability in SecureSTATION v.2.5.5.3116-S50-SMA-B20160811A and before allows a physically proximate attacker to obt
- CVE-2024-37645 Memory corruption in trendnet:tew-814dap firmware
- CVE-2024-37644 Hardcoded credentials in trendnet:tew-814dap firmware