Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 333 of 521.
- CVE-2024-37125 Denial of service in SmartFabric OS10 Software
- CVE-2024-37124 Code injection in Ricoh Streamline NX PC Client
- CVE-2024-37123 WordPress Ibtana – WordPress Website Builder plugin <= 1.2.3.3 - Broken Access Control vulnerability
- CVE-2024-37122 WordPress Accordions plugin <= 2.3.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37121 WordPress Shortcode Addons plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37120 WordPress Tabs plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37119 WordPress Uncanny Automator Pro plugin < 5.3.0.1 - Unauthenticated License Settings Reset vulnerability
- CVE-2024-37118 Cross-site request forgery in Uncanny Automator Pro
- CVE-2024-37117 WordPress Uncanny Automator Pro plugin <= 5.3 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-37116 WordPress Sinatra theme <= 1.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37115 WordPress Newspack Blocks plugin <= 3.0.8 - Sensitive Data Exposure vulnerability
- CVE-2024-37114 WordPress My Favorites plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37113 WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Database Backup Download vulnerability
- CVE-2024-37112 WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Arbitrary SQL Query Execution vulnerability
- CVE-2024-37111 WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Denial of Service Attack vulnerability
- CVE-2024-37110 WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Settings & Users Data Dump vulnerability
- CVE-2024-3711 Brizy – Page Builder <= 2.4.43 - Missing Authorization
- CVE-2024-37109 WordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary PHP Code Execution vulnerability
- CVE-2024-37108 WordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary File Deletion vulnerability
- CVE-2024-37107 WordPress WishList Member X plugin < 3.26.7 - Authenticated Privilege Escalation vulnerability
- CVE-2024-37106 WordPress WishList Member X plugin < 3.26.7 - Unautenticated Plugin Settings Change Leading to Stored XSS vulnerability
- CVE-2024-37104 WordPress Chic Lite theme <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-37103 WordPress Education Zone theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-37102 WordPress Vilva theme <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-37101 WordPress WP Post Author plugin <= 3.6.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37100 WordPress Elegant Themes Icons plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-3710 Image Photo Gallery Final Tiles Grid < 3.6.0 - Contributor+ Stored XSS
- CVE-2024-37099 WordPress GiveWP plugin <= 3.14.1 - Unauthenticated PHP Object Injection vulnerability
- CVE-2024-37098 WordPress BlossomThemes Email Newsletter plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2024-37097 WordPress Shortcodes by United Themes plugin < 5.0.5 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-37096 WordPress Popup box plugin <= 4.5.1 - Broken Access Control vulnerability
- CVE-2024-37095 WordPress Envira Photo Gallery plugin <= 1.8.7.3 - CSRF leading to notice dismissal vulnerability
- CVE-2024-37094 WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerability
- CVE-2024-37093 WordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-37092 WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Local File Inclusion vulnerability
- CVE-2024-37091 WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Remote Code Execution (RCE) vulnerability
- CVE-2024-37090 SQL Injection vulnerability in multiple StylemixThemes premium themes
- CVE-2024-37089 WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Unauthenticated Local File Inclusion vulnerability
- CVE-2024-37087 Denial of service in VMware Cloud Foundation
- CVE-2024-37086 Memory corruption in ESXi
- CVE-2024-37085 VMware ESXi Authentication Bypass
- CVE-2024-37084 CVE-2024-37084: Remote code execution in Spring Cloud Data Flow
- CVE-2024-37082 Auth bypass in haproxy-boshrelease
- CVE-2024-37081 Privilege escalation in VMware Cloud Foundation
- CVE-2024-37080 Memory corruption in VMware Cloud Foundation
- CVE-2024-37079 Broadcom VMware vCenter Server Out-of-bounds Write
- CVE-2024-37078 nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- CVE-2024-37077 Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
- CVE-2024-37071 IBM Db2 denial of service
- CVE-2024-37070 IBM Concert Software information disclosure
- CVE-2024-3707 Exposure of Information Through Directory Listing vulnerability in OpenGnsys
- CVE-2024-37068 IBM Maximo Application Suite information disclosure
- CVE-2024-37066 Command injection in Wyze Cam V4 Pro
- CVE-2024-37065 Skops unsafe deserialization
- CVE-2024-37064 ydata unsafe deserialization
- CVE-2024-37063 ydata cross-site scripting
- CVE-2024-37062 ydata unsafe deserialization
- CVE-2024-37061 MLFlow improper input validation
- CVE-2024-37060 MLFlow unsafe deserialization
- CVE-2024-3706 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in OpenGnsys
- CVE-2024-37059 MLFlow unsafe deserialization
- CVE-2024-37058 MLFlow unsafe deserialization
- CVE-2024-37057 MLFlow unsafe deserialization
- CVE-2024-37056 MLFlow unsafe deserialization
- CVE-2024-37055 MLFlow unsafe deserialization
- CVE-2024-37054 MLFlow unsafe deserialization
- CVE-2024-37053 MLFlow unsafe deserialization
- CVE-2024-37052 MLFlow unsafe deserialization
- CVE-2024-37051 Information disclosure in Aqua
- CVE-2024-37050 QTS, QuTS hero
- CVE-2024-3705 Unrestricted Upload of File with Dangerous Type vulnerability in OpenGnsys
- CVE-2024-37049 QTS, QuTS hero
- CVE-2024-37048 QTS, QuTS hero
- CVE-2024-37047 QTS, QuTS hero
- CVE-2024-37046 QTS, QuTS hero
- CVE-2024-37045 QTS, QuTS hero
- CVE-2024-37044 QTS, QuTS hero
- CVE-2024-37043 QTS, QuTS hero
- CVE-2024-37042 QTS, QuTS hero
- CVE-2024-37041 QTS, QuTS hero
- CVE-2024-37040 Memory corruption in Sage 1410
- CVE-2024-3704 SQL Injection vulnerability in OpenGnsys
- CVE-2024-37039 Denial of service in Sage 1410
- CVE-2024-37038 Misconfiguration in Sage 1410
- CVE-2024-37037 Path traversal in Sage 1410
- CVE-2024-37036 Memory corruption in Sage 1410
- CVE-2024-37034 Weak cryptography in couchbase:couchbase server
- CVE-2024-37032 Ollama does not validate the format of the digest (sha256 with 64 hex digits)
- CVE-2024-37031 activeadmin vulnerable to stored persistent cross-site scripting (XSS) in dynamic form legends
- CVE-2024-37030 Arkcompiler Ets Runtime has a use after free vulnerability
- CVE-2024-3703 Carousel Slider < 2.2.10 - Editor+ Stored XSS
- CVE-2024-37029 Fuji Electric Tellus Lite V-Simulator Stack-based Buffer Overflow
- CVE-2024-37028 BIG-IP Next Central Manager vulnerability
- CVE-2024-37027 Denial of service in Intel(R) VTune(TM) Profiler software
- CVE-2024-37026 drm/xe: Only use reserved BCS instances for usm migrate exec queue
- CVE-2024-37025 Privilege escalation in Intel(R) Advanced Link Analyzer Standard Edition software installer
- CVE-2024-37024 Privilege escalation in ACAT software maintained by Intel(R) for Windows
- CVE-2024-37023 Vonets WiFi Bridges Command Injection
- CVE-2024-37022 Fuji Electric Tellus Lite V-Simulator Out-of-bounds Write
- CVE-2024-37021 fpga: manager: add owner module and take its refcount