Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 349 of 521.
- CVE-2024-35160 IBM Watson Query on Cloud Pak for Data and IBM Db2 Big SQL on Cloud Pak for Data information disclosure
- CVE-2024-3516 Memory corruption in Chrome
- CVE-2024-35156 IBM MQ information disclosure
- CVE-2024-35155 IBM MQ information disclosure
- CVE-2024-35154 IBM WebSphere Application Server code execution
- CVE-2024-35153 IBM WebSphere Application Server cross-site scripting
- CVE-2024-35152 IBM Db2 denial of service
- CVE-2024-35151 IBM OpenPages information disclosure
- CVE-2024-35150 IBM Maximo Application Suite log manipulation
- CVE-2024-3515 Use after free in Chrome
- CVE-2024-35148 IBM Maximo Application Suite SQL injection
- CVE-2024-35146 IBM Maximo Application Suite cross-site scripting
- CVE-2024-35145 IBM Maximo Application Suite cross-site scripting
- CVE-2024-35144 IBM Maximo Application Suite information disclosure
- CVE-2024-35143 IBM Planning Analytics Local missing authentication
- CVE-2024-35142 IBM Security Verify Access privilege escalation
- CVE-2024-35141 IBM Security Verify Access privilege escalation
- CVE-2024-35140 IBM Security Verify Access privilege escalation
- CVE-2024-35139 IBM Security Access Manager Docker information disclosure
- CVE-2024-35138 IBM Security Verify Access cross-site request forgery
- CVE-2024-35137 IBM Security Access Manager Docker information disclosure
- CVE-2024-35136 IBM Db2 denial of service
- CVE-2024-35134 IBM Analytics Content Hub information disclosure
- CVE-2024-35133 IBM Security Verify Access HTTP open redirect
- CVE-2024-3513 Cross-site scripting in Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor
- CVE-2024-35124 IBM OpenBMC authentication bypass
- CVE-2024-35122 IBM i denial of service
- CVE-2024-35119 IBM InfoSphere Information Server information disclosure
- CVE-2024-35118 IBM MaaS360 information disclosure
- CVE-2024-35117 IBM OpenPages with Watson information disclosure
- CVE-2024-35116 IBM MQ denial of service
- CVE-2024-35114 IBM Control Center information disclosure
- CVE-2024-35113 IBM Control Center information disclosure
- CVE-2024-35112 IBM Control Center cross-site scripting
- CVE-2024-35111 IBM Control Center information disclosure
- CVE-2024-35110 Cross-site scripting in yzmcms:yzmcms
- CVE-2024-3511 Incorrect Authorization in Multiple WSO2 Products Allows Unauthorized Access to Registry Versioned Files
- CVE-2024-35109 Cross-site request forgery in idccms:idccms
- CVE-2024-35108 Cross-site request forgery in idccms:idccms
- CVE-2024-35106 NEXTU FLETA AX1500 WIFI6 v1.0.3 was discovered to contain a buffer overflow at /boafrm/formIpQoS.
- CVE-2024-35102 Insecure Permissions vulnerability in VITEC AvediaServer (Model avsrv-m8105) 8.6.2-1 allows a remote attacker to escalate privileges via a crafted script.
- CVE-2024-35099 Memory corruption in totolink:lr350 firmware
- CVE-2024-35091 SQL injection in j2eefast:j2eefast
- CVE-2024-35090 SQL injection in j2eefast:j2eefast
- CVE-2024-3509 Stored Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products via Rich Text Editor
- CVE-2024-35086 SQL injection in j2eefast:j2eefast
- CVE-2024-35085 SQL injection in j2eefast:j2eefast
- CVE-2024-35084 SQL injection in j2eefast:j2eefast
- CVE-2024-35083 SQL injection in j2eefast:j2eefast
- CVE-2024-35082 SQL injection in j2eefast:j2eefast
- CVE-2024-35081 Path traversal in luckyframe:luckyframeweb
- CVE-2024-35080 File upload in inxedu:inxedu
- CVE-2024-3508 Bzip2: compressed content bomb leads to denial of service of bombastic api
- CVE-2024-35079 File upload in inxedu:inxedu
- CVE-2024-3507 Privilege escalation vulnerability in Lunar
- CVE-2024-35061 NASA AIT-Core uses unencrypted channels to exchange data over the network
- CVE-2024-35060 Deserialization in nasa:ait core
- CVE-2024-3506 Camera Driver possible Buffer Overflow
- CVE-2024-35059 NASA AIT-Core vulnerable to remote code execution
- CVE-2024-35058 NASA AIT-Core vulnerable to remote code execution
- CVE-2024-35057 NASA AIT-Core vulnerable to remote code execution
- CVE-2024-35056 NASA AIT-Core vulnerable to SQL Injection
- CVE-2024-35050 Auth bypass in surveyking:surveyking
- CVE-2024-3505 JFrog Self-Hosted Artifactory Proxy configuration accessible to low-privilege users
- CVE-2024-35049 Auth bypass in surveyking:surveyking
- CVE-2024-35048 Auth bypass in surveyking:surveyking
- CVE-2024-3504 Improper Access Control in lunary-ai/lunary
- CVE-2024-35039 Cross-site request forgery in idccms:idccms
- CVE-2024-3502 Exposure of Sensitive Information in lunary-ai/lunary
- CVE-2024-35012 Cross-site request forgery in idccms:idccms
- CVE-2024-35011 Cross-site request forgery in idccms:idccms
- CVE-2024-35010 Cross-site request forgery in idccms:idccms
- CVE-2024-3501 Exposure of Sensitive Information in lunary-ai/lunary
- CVE-2024-35009 Cross-site request forgery in idccms:idccms
- CVE-2024-3500 Path traversal in ElementsKit Pro
- CVE-2024-34997 Deserialization in joblib project:joblib
- CVE-2024-34995 svnWebUI v1.8.3 was discovered to contain an arbitrary file deletion vulnerability via the dirTemps parameter under com.cym.controller.UserController#importOver.
- CVE-2024-34994 In the module "Channable" (channable) up to version 3.2.1 from Channable for PrestaShop, a guest can perform SQL injection via `ChannableFee
- CVE-2024-34993 In the module "Bulk Export products to Google Merchant-Google Shopping" (bagoogleshopping) up to version 1.0.26 from Buy Addons for PrestaSh
- CVE-2024-34992 SQL Injection vulnerability in the module "Help Desk - Customer Support Management System" (helpdesk) up to version 2.4.0 from FME Modules f
- CVE-2024-34991 In the module "Axepta" (axepta) before 1.3.4 from Quadra Informatique for PrestaShop, a guest can download partial credit card information (
- CVE-2024-34990 In the module "Help Desk - Customer Support Management System" (helpdesk) up to version 2.4.0 from FME Modules for PrestaShop, a customer can upload .php files.
- CVE-2024-3499 ElementsKit Elementor addons <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module
- CVE-2024-34989 In the module RSI PDF/HTML catalog evolution (prestapdf) <= 7.0.0 from RSI for PrestaShop, a guest can perform SQL injection via `PrestaPDFP
- CVE-2024-34988 SQL injection vulnerability in the module "Complete for Create a Quote in Frontend + Backend Pro" (askforaquotemodul) <= 1.0.51 from Buy Add
- CVE-2024-34987 SQL injection in phpgurukul:online fire reporting system
- CVE-2024-34982 File upload in lylme:lylme spage
- CVE-2024-3498 Incorrect Permission Assignment Privilege Escalation Vulnerability
- CVE-2024-34974 Memory corruption in tenda:ac18 firmware
- CVE-2024-3497 Directory Traversal Remote Code Execution Vulnerability
- CVE-2024-3496 Authentication Bypass Vulnerability
- CVE-2024-34959 Cross-site scripting in dedecms:dedecms
- CVE-2024-34958 Cross-site request forgery in idccms:idccms
- CVE-2024-34957 Cross-site request forgery in idccms:idccms
- CVE-2024-34955 SQL injection in code-projects:budget management
- CVE-2024-34954 Cross-site scripting in code-projects:budget management
- CVE-2024-34953 An issue in taurusxin ncmdump v1.3.2 allows attackers to cause a Denial of Service (DoS) via memory exhaustion by supplying a crafted .ncm f
- CVE-2024-34952 taurusxin ncmdump v1.3.2 was discovered to contain a segmentation violation via the NeteaseCrypt::FixMetadata() function at /src/ncmcrypt.cpp.
- CVE-2024-34950 Memory corruption in dlink:dir-822\+ firmware
- CVE-2024-3495 Country State City Dropdown CF7 <= 2.7.2 - Unauthenticated SQL Injection