Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 347 of 521.
- CVE-2024-35397 Command injection in totolink:cp900l firmware
- CVE-2024-35396 Hardcoded credentials in totolink:cp900l firmware
- CVE-2024-35395 Hardcoded credentials in totolink:cp900l firmware
- CVE-2024-3539 Campcodes Church Management System addgiving.php sql injection
- CVE-2024-35388 Memory corruption in totolink:nr1800x firmware
- CVE-2024-35387 Memory corruption in totolink:lr350 firmware
- CVE-2024-35386 Denial of service in cesanta:mjs
- CVE-2024-35385 Memory corruption in cesanta:mjs
- CVE-2024-35384 Denial of service in cesanta:mjs
- CVE-2024-3538 Campcodes Church Management System addTithes.php sql injection
- CVE-2024-35375 File upload in dedecms:dedecms
- CVE-2024-35374 Mocodo vulnerable to SQL injection in `/web/generate.php`
- CVE-2024-35373 Code injection in mocodo:mocodo online
- CVE-2024-35371 Ant-Media-Server vulnerable to Improper Output Neutralization for Logs
- CVE-2024-3537 Campcodes Church Management System admin_user.php sql injection
- CVE-2024-35369 Integer overflow in ffmpeg:ffmpeg
- CVE-2024-35368 Memory corruption in ffmpeg:ffmpeg
- CVE-2024-35367 Memory corruption in ffmpeg:ffmpeg
- CVE-2024-35366 Integer overflow in ffmpeg:ffmpeg
- CVE-2024-35365 Memory corruption in ffmpeg:ffmpeg
- CVE-2024-35362 Cross-site scripting in shopex:ecshop
- CVE-2024-35361 MTab Bookmark v1.9.5 has an SQL injection vulnerability in /LinkStore/getIcon.
- CVE-2024-3536 Campcodes Church Management System delete_log.php sql injection
- CVE-2024-35359 SQL injection in dino physics school assistant project:dino physics school assistant
- CVE-2024-35358 SQL injection in dino physics school assistant project:dino physics school assistant
- CVE-2024-35357 SQL injection in dino physics school assistant project:dino physics school assistant
- CVE-2024-35356 SQL injection in dino physics school assistant project:dino physics school assistant
- CVE-2024-35355 SQL injection in dino physics school assistant project:dino physics school assistant
- CVE-2024-35354 SQL injection in dino physics school assistant project:dino physics school assistant
- CVE-2024-35353 Missing authorization in dino physics school assistant project:dino physics school assistant
- CVE-2024-35352 Cross-site scripting in dino physics school assistant project:dino physics school assistant
- CVE-2024-35351 Cross-site scripting in dino physics school assistant project:dino physics school assistant
- CVE-2024-35350 SQL injection in dino physics school assistant project:dino physics school assistant
- CVE-2024-3535 Campcodes Church Management System index.php sql injection
- CVE-2024-35349 SQL injection in dino physics school assistant project:dino physics school assistant
- CVE-2024-35345 Cross-site scripting in dino physics school assistant project:dino physics school assistant
- CVE-2024-35344 Certain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device.
- CVE-2024-35343 Certain Anpviz products allow unauthenticated users to download arbitrary files from the device's filesystem via a HTTP GET request to the /playback/ URI.
- CVE-2024-35342 Certain Anpviz products allow unauthenticated users to modify or disable camera related settings such as microphone volume, speaker volume,
- CVE-2024-35341 Certain Anpviz products allow unauthenticated users to download the running configuration of the device via a HTTP GET request to /ConfigFil
- CVE-2024-35340 Command injection in tenda:fh1206 firmware
- CVE-2024-3534 Campcodes Church Management System login.php sql injection
- CVE-2024-35339 Command injection in tenda:fh1206 firmware
- CVE-2024-35338 Hardcoded credentials in tendacn:i29 firmware
- CVE-2024-35333 A stack-buffer-overflow vulnerability exists in the read_charset_decl function of html2xhtml 1.3.
- CVE-2024-3533 Campcodes Complete Online Student Management System academic_year_view.php cross site scripting
- CVE-2024-35324 File upload in douchat:douchat
- CVE-2024-35322 Cross-site scripting in airc:mynet
- CVE-2024-35321 Cross-site scripting in airc:mynet
- CVE-2024-3532 Campcodes Complete Online Student Management System attendance_view.php cross site scripting
- CVE-2024-35315 Privilege escalation in mitel:micollab
- CVE-2024-35314 Command injection in mitel:micollab
- CVE-2024-35313 In Tor Arti before 1.2.3, circuits sometimes incorrectly have a length of 3 (with full vanguards), aka TROVE-2024-004.
- CVE-2024-35312 In Tor Arti before 1.2.3, STUB circuits incorrectly have a length of 2 (with lite vanguards), aka TROVE-2024-003.
- CVE-2024-35311 Yubico YubiKey 5 Series before 5.7.0, Security Key Series before 5.7.0, YubiKey Bio Series before 5.6.4, and YubiKey 5 FIPS before 5.7.2 hav
- CVE-2024-3531 Campcodes Complete Online Student Management System courses_view.php cross site scripting
- CVE-2024-35308 Post-auth Arbitrary File Read in the Server Plugins Section
- CVE-2024-35307 Argument Injection Leading to Remote Code Execution in Realtime Graph Extension
- CVE-2024-35306 OS Command injection in Ajax PHP files through HTTP Request
- CVE-2024-35305 Unauth Time-Based SQL Injection via API
- CVE-2024-35304 System command injection through Netflow function
- CVE-2024-35303 Memory corruption in Tecnomatix Plant Simulation V2302
- CVE-2024-35302 Cross-site scripting in TeamCity
- CVE-2024-35301 Missing authorization in TeamCity
- CVE-2024-35300 Cross-site scripting in TeamCity
- CVE-2024-3530 Campcodes Complete Online Student Management System Marks_view.php cross site scripting
- CVE-2024-35299 Security feature bypass in YouTrack
- CVE-2024-35298 Open redirect in 'ZOZOTOWN' App for Android
- CVE-2024-35297 Cross-site scripting in WP Booking
- CVE-2024-35296 Apache Traffic Server: Invalid Accept-Encoding can force forwarding requests
- CVE-2024-35295 Missing authorization in Perfect Harmony GH180
- CVE-2024-35294 Schneider Elektronik Series 700 prone to missing authentication for traffic capture function
- CVE-2024-35293 Schneider Elektronik Series 700 prone to missing authentication for critical reset function
- CVE-2024-35292 Weak cryptography in SIMATIC S7-200 SMART CPU CR40
- CVE-2024-35291 Cross-site scripting in Splunk Config Explorer
- CVE-2024-3529 Campcodes Complete Online Student Management System students_view.php cross site scripting
- CVE-2024-35288 Nitro PDF Pro before 13.70.8.82 and 14.x before 14.26.1.0 allows Local Privilege Escalation in the MSI Installer because custom actions occu
- CVE-2024-35287 Privilege escalation in mitel:micollab
- CVE-2024-35286 SQL injection in mitel:micollab
- CVE-2024-35285 Command injection in mitel:micollab
- CVE-2024-35284 Cross-site scripting in mitel:micontact center business
- CVE-2024-35283 Cross-site scripting in mitel:micontact center business
- CVE-2024-35282 Information disclosure in FortiClientiOS
- CVE-2024-35281 Code injection in FortiClientMac
- CVE-2024-35280 Cross-site scripting in FortiDeceptor
- CVE-2024-3528 Campcodes Complete Online Student Management System units_view.php cross site scripting
- CVE-2024-35279 Memory corruption in FortiOS
- CVE-2024-35278 SQL injection in FortiPortal
- CVE-2024-35277 Missing authorization in FortiManager
- CVE-2024-35276 Memory corruption in FortiAnalyzer
- CVE-2024-35275 SQL injection in FortiAnalyzer
- CVE-2024-35274 Path traversal in FortiAnalyzer
- CVE-2024-35273 Memory corruption in FortiAnalyzer
- CVE-2024-35272 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- CVE-2024-35271 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- CVE-2024-35270 Windows iSCSI Service Denial of Service Vulnerability
- CVE-2024-35267 Azure DevOps Server Spoofing Vulnerability
- CVE-2024-35266 Azure DevOps Server Spoofing Vulnerability
- CVE-2024-35265 Windows Perception Service Elevation of Privilege Vulnerability
- CVE-2024-35264 .NET and Visual Studio Remote Code Execution Vulnerability