Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 330 of 521.
- CVE-2024-37420 WordPress Zita Elementor Site Library plugin <= 1.6.1 - Arbitrary Code Execution vulnerability
- CVE-2024-3742 Electrolink FM/DAB/TV Transmitter Cleartext Storage of Sensitive Information
- CVE-2024-37419 WordPress Cowidgets – Elementor Addons plugin <= 1.1.1 - Local File Inclusion vulnerability
- CVE-2024-37418 WordPress Church Admin plugin <= 4.4.6 - Arbitrary File Upload vulnerability
- CVE-2024-37417 WordPress Coachify theme <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-37416 WordPress WP Photo Album Plus plugin <= 8.8.00.002 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-37415 WordPress E2Pdf plugin <= 1.20.27 - Broken Access Control vulnerability
- CVE-2024-37414 WordPress Depicter Slider plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37413 WordPress Preschool and Kindergarten theme <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-37412 WordPress Blossom Shop theme <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-37411 WordPress Progress Planner plugin <= 0.9.1 - Broken Access Control vulnerability
- CVE-2024-37410 WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.3 - Local File Inclusion vulnerability
- CVE-2024-3741 Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data
- CVE-2024-37409 WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37408 fprintd through 1.94.3 lacks a security attention mechanism, and thus unexpected actions might be authorized by "auth sufficient pam_fprintd.so" for Sudo.
- CVE-2024-37407 Memory corruption in libarchive:libarchive
- CVE-2024-37406 Other in Android Browser
- CVE-2024-37405 SQL injection in Rocket.Chat
- CVE-2024-37404 Other in Connect Secure
- CVE-2024-37403 Path traversal in Docs@Work
- CVE-2024-37401 Memory corruption in Connect Secure
- CVE-2024-37400 Denial of service in Connect Secure
- CVE-2024-3740 cym1102 nginxWebUI reload exec deserialization
- CVE-2024-37399 Null dereference in Avalanche
- CVE-2024-37398 Privilege escalation in Secure Access Client
- CVE-2024-37397 XML external entity in EPM
- CVE-2024-37396 Cross-site scripting in vanderbilt:redcap
- CVE-2024-37395 Cross-site scripting in vanderbilt:redcap
- CVE-2024-37394 Cross-site scripting in vanderbilt:redcap
- CVE-2024-37393 Other in securenvoy:multi-factor authentication solutions
- CVE-2024-37392 Cross-site scripting in smseagle:smseagle
- CVE-2024-37391 Command injection in proton:protonvpn
- CVE-2024-3739 cym1102 nginxWebUI upload os command injection
- CVE-2024-37389 Apache NiFi: Improper Neutralization of Input in Parameter Context Description
- CVE-2024-37388 ebookmeta XML External Entity vulnerability
- CVE-2024-37387 Other in Ricoh Streamline NX PC Client
- CVE-2024-37386 An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.25, 4.4.0 through 4.7.5, and 4.8.0.
- CVE-2024-37385 Command injection in roundcube:webmail
- CVE-2024-37384 Cross-site scripting in debian:debian linux
- CVE-2024-37383 RoundCube Webmail Cross-Site Scripting (XSS)
- CVE-2024-37382 Code injection in abinitio:authorization gateway
- CVE-2024-37381 SQL injection in EPM
- CVE-2024-37380 Misconfiguration in UniFi U6+ Access Point
- CVE-2024-3738 cym1102 nginxWebUI saveCmd handlePath certificate validation
- CVE-2024-37377 Memory corruption in Connect Secure
- CVE-2024-37376 SQL injection in EPM
- CVE-2024-37373 Code injection in Avalanche
- CVE-2024-37372 Path traversal in Node
- CVE-2024-37371 Memory corruption in debian:debian linux
- CVE-2024-37370 Security feature bypass in mit:kerberos 5
- CVE-2024-3737 cym1102 nginxWebUI addOver findCountByQuery path traversal
- CVE-2024-37369 Rockwell Automation FactoryTalk® View SE Local Privilege Escalation Vulnerability via Local File Permissions
- CVE-2024-37368 Rockwell Automation FactoryTalk® View SE v11 Information Leakage Vulnerability via Authentication Restriction
- CVE-2024-37367 Rockwell Automation FactoryTalk® View SE v12 Information Leakage Vulnerability via Authentication Restriction
- CVE-2024-37365 FactoryTalk View ME Remote Code Execution Vulnerability via Project Save Path
- CVE-2024-37364 Ariane Allegro Scenario Player through 2024-03-05, when Ariane Duo kiosk mode is used, allows physically proximate attackers to obtain sensi
- CVE-2024-37363 Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
- CVE-2024-37362 Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials
- CVE-2024-37361 Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data
- CVE-2024-37360 Cross-site scripting in Pentaho Business Analytics Server
- CVE-2024-3736 cym1102 nginxWebUI upload unrestricted upload
- CVE-2024-37359 Hitachi Vantara Pentaho Business Analytics Server – Server Side Request Forgery
- CVE-2024-37358 Apache James: denial of service through the use of IMAP literals
- CVE-2024-37357 Memory corruption in Wavlink AC3000
- CVE-2024-37356 tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- CVE-2024-37355 Privilege escalation in Intel(R) Graphics software
- CVE-2024-37354 btrfs: fix crash on racing fsync and size-extending write into prealloc
- CVE-2024-37352 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06
- CVE-2024-37351 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06
- CVE-2024-37350 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06
- CVE-2024-3735 Smart Office Main.aspx weak password
- CVE-2024-37349 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06
- CVE-2024-37348 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06
- CVE-2024-37347 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06
- CVE-2024-37346 Insufficient input validation vulnerability in the Absolute Secure Access Warehouse prior to 13.06
- CVE-2024-37345 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06
- CVE-2024-37344 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06
- CVE-2024-37343 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06
- CVE-2024-37342 Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
- CVE-2024-37341 Microsoft SQL Server Elevation of Privilege Vulnerability
- CVE-2024-37340 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- CVE-2024-3734 FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.8 - Unauthenticated Arbitrary Shortcode Execution
- CVE-2024-37339 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- CVE-2024-37338 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- CVE-2024-37337 Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
- CVE-2024-37336 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- CVE-2024-37335 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- CVE-2024-37334 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-37333 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- CVE-2024-37332 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- CVE-2024-37331 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- CVE-2024-37330 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- CVE-2024-3733 Information disclosure in Essential Addons for Elementor – Popular Elementor Templates & Widgets
- CVE-2024-37329 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- CVE-2024-37328 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- CVE-2024-37327 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- CVE-2024-37326 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- CVE-2024-37325 Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability
- CVE-2024-37324 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- CVE-2024-37323 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability