Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 331 of 521.
- CVE-2024-37322 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- CVE-2024-37321 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- CVE-2024-37320 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- CVE-2024-3732 Cross-site scripting in GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
- CVE-2024-37319 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- CVE-2024-37318 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- CVE-2024-37317 Nextcloud Notes app can be tricked into using a received share created before the user logged in
- CVE-2024-37316 Nextcloud Calendar's event create can create attachments that link to other websites
- CVE-2024-37315 Nextcloud Server's read-only users can restore old versions
- CVE-2024-37314 Nextcloud Photos' shared albums have no restriction on photo removal
- CVE-2024-37313 Nextcloud server allows the by-pass the second factor
- CVE-2024-37312 Nextcloud user_oidc app's ID4me feature is available even when disabled
- CVE-2024-37311 Collabora Online's remote host TLS certificates are not fully verified
- CVE-2024-37310 EVerest has an integer overflow in the "v2g_incoming_v2gtp" function
- CVE-2024-3731 Customer Reviews for WooCommerce <= 5.47.0 - Reflected Cross-Site Scripting via 's'
- CVE-2024-37309 Client initialized Session-Renegotiation DoS
- CVE-2024-37308 WordPress Cooked Plugin - Authenticated (Contributor+) Persistent Cross-Site Scripting Vulnerability
- CVE-2024-37307 Cilium leaks sensitive information in cilium-bugtool
- CVE-2024-37306 CVAT's export and backup-related API endpoints are susceptible to CSRF
- CVE-2024-37305 Buffer overflow in deserialization in oqs-provider
- CVE-2024-37304 NuGetGallery's Markdown Autolinks Processing Vulnerable to Cross-site Scripting
- CVE-2024-37303 Synapse unauthenticated writes to the media repository allow planting of problematic content
- CVE-2024-37302 Synapse denial of service through media disk space consumption
- CVE-2024-37301 document-merge-service vulnerable to Remote Code Execution via Server-Side Template Injection
- CVE-2024-37300 Globus `identity_provider` restriction ignored when used with `allow_all` in JupyterHub 5.0
- CVE-2024-3730 Simple Membership <= 4.4.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-37299 Discourse vulnerable to DoS via Tag Group
- CVE-2024-37298 Potential memory exhaustion attack due to sparse slice deserialization
- CVE-2024-37297 WooCommerce has a Cross-Site Scripting Vulnerability in checkout & registration forms
- CVE-2024-37296 Aimeos HTML client vulnerable to digital products download without proper payment status check
- CVE-2024-37295 Aimeos Core remote code execution in web server context
- CVE-2024-37294 Aimeos denial of service vulnerability in SaaS and marketplace setups
- CVE-2024-37293 aws-deployment-framework's potential risk can lead to privilege escalation
- CVE-2024-3729 Frontend Admin by DynamiApps <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulation
- CVE-2024-37289 Privilege escalation in Trend Micro Apex One
- CVE-2024-37288 Deserialization in Kibana
- CVE-2024-37287 Kibana arbitrary code execution via prototype pollution
- CVE-2024-37286 APM Server Insertion of Sensitive Information into Log File
- CVE-2024-37285 Kibana arbitrary code execution via YAML deserialization
- CVE-2024-37284 Elastic Defend Improper Handling of Alternate Encoding Leads to Crash
- CVE-2024-37283 Elastic Agent Insertion of Sensitive Information into Log File
- CVE-2024-37282 Privilege escalation in Elastic Cloud Enterprise
- CVE-2024-37281 Kibana Denial of Service issue
- CVE-2024-37280 Elasticsearch StackOverflow vulnerability
- CVE-2024-3728 Cross-site scripting in Essential Addons for Elementor – Popular Elementor Templates & Widgets
- CVE-2024-37279 Kibana Broken Access Control issue
- CVE-2024-37278 WordPress Cards for Beaver Builder plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37277 WordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2024-37276 WordPress Featured Image from URL (FIFU) plugin <= 4.8.1 - Broken Access Control vulnerability
- CVE-2024-37275 WordPress NextScripts plugin <= 4.4.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37274 WordPress WP Mobile Menu plugin <= 2.8.4.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-37273 Jan path traversal vulnerability
- CVE-2024-37272 WordPress Travel Monster theme <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-37271 WordPress Print My Blog plugin <= 3.27.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37270 WordPress TrustedLogin Vendor plugin < 1.1.1 - Sensitive Data Exposure vulnerability
- CVE-2024-3727 Containers/image: digest type does not guarantee valid type
- CVE-2024-37269 WordPress Masterstudy Elementor Widgets plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerability
- CVE-2024-37268 WordPress Striking theme <= 2.3.4 - Local File Inclusion vulnerability
- CVE-2024-37267 WordPress Striking theme <= 2.3.4 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-37266 WordPress Tutor LMS plugin <= 2.7.1 - Path Traversal vulnerability
- CVE-2024-37265 WordPress IdeaPush plugin <= 8.60 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37264 WordPress Groundhogg plugin <= 3.4.2.3 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-37263 Cross-site scripting in Enter Addons
- CVE-2024-37262 WordPress Online Booking & Scheduling Calendar plugin <= 4.4.2 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-37261 WordPress WP-Lister Lite for Amazon plugin <= 2.6.16 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-37260 WordPress Foxiz Theme theme <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2024-3726 Cross-site scripting in Login Logout Register Menu
- CVE-2024-37259 WordPress WP Extended plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37258 WordPress Social Rocket plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-37257 WordPress Permalink Manager Lite plugin <= 2.4.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-37256 WordPress Tutor LMS plugin <= 2.7.1 - SQL Injection vulnerability
- CVE-2024-37255 WordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerability
- CVE-2024-37254 WordPress WP File Manager plugin <= 7.2.7 - Broken Access Control vulnerability
- CVE-2024-37253 WordPress WPDirectoryKit plugin <= 1.3.6 - HTML Injection vulnerability
- CVE-2024-37252 WordPress Email Subscribers by Icegram Express plugin <= 5.7.25 - SQL Injection vulnerability
- CVE-2024-37251 WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2024-37250 WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Subscriber+ Broken Access Control vulnerability
- CVE-2024-3725 Cross-site scripting in Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
- CVE-2024-37249 WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Contributor+ Broken Access Control vulnerability
- CVE-2024-37248 WordPress Anima theme <= 1.4.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37247 WordPress jQuery T(-) Countdown Widget plugin <= 2.3.25 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37246 WordPress Gallery Slideshow plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37245 WordPress All In One Redirection plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37244 WordPress Ninja Beaver Add-ons for Beaver Builder plugin <= 2.4.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37243 WordPress Vandana Lite theme <= 1.1.9 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-37242 WordPress Newspack Newsletters plugin <= 2.13.2 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-37241 WordPress WP Job Manager Resume Manager plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-37240 WordPress Falang multilanguage for WordPress plugin <= 1.3.51 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-3724 Cross-site scripting in Happy Addons for Elementor
- CVE-2024-37239 WordPress Branda plugin <= 3.4.17 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37238 WordPress WPAdverts plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-37237 WordPress FS Poster plugin <= 6.5.8 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-37236 WordPress Loco Translate plugin <= 2.6.9 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-37235 WordPress Groundhogg plugin <= 3.4.2.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-37234 WordPress Academy LMS plugin <= 2.0.4 - Open Redirection vulnerability
- CVE-2024-37233 WordPress Play.ht plugin <= 3.6.4 - Broken Access Control vulnerability
- CVE-2024-37232 WordPress Hercules Core plugin <= 6.5 - Subscriber+ Arbitrary Settings Change/Access vulnerability
- CVE-2024-37231 WordPress Salon booking system plugin <= 9.9 - Arbitrary File Deletion vulnerability
- CVE-2024-37230 WordPress Book Landing Page theme <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-3723 Advanced Contact form 7 DB <= 2.0.2 - Sensitive Information Exposure