Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 356 of 521.
- CVE-2024-34206 Command injection in totolink:cp450 firmware
- CVE-2024-34205 Command injection in totolink:cp450 firmware
- CVE-2024-34204 Command injection in totolink:cp450 firmware
- CVE-2024-34203 Memory corruption in totolink:cp450 firmware
- CVE-2024-34202 Memory corruption in totolink:cp450 firmware
- CVE-2024-34201 Memory corruption in totolink:cp450 firmware
- CVE-2024-34200 Memory corruption in totolink:cp450 firmware
- CVE-2024-3420 SourceCodester Online Courseware saveedit.php sql injection
- CVE-2024-34199 Memory corruption in ritlabs:tinyweb
- CVE-2024-34198 Memory corruption in totolink:a3002ru firmware
- CVE-2024-34196 Memory corruption in totolink:a3002ru-v3 firmware
- CVE-2024-34195 Memory corruption in totolink:a3002r firmware
- CVE-2024-34193 Path traversal in lkw199711:smanga
- CVE-2024-34191 Path traversal in htmly:htmly
- CVE-2024-3419 SourceCodester Online Courseware edit.php sql injection
- CVE-2024-3418 SourceCodester Online Courseware deactivateteach.php sql injection
- CVE-2024-34171 Fuji Electric Monitouch V-SFT Stack-Based Buffer Overflow
- CVE-2024-34170 Memory corruption in Intel(R) Graphics Drivers
- CVE-2024-3417 SourceCodester Online Courseware saveeditt.php sql injection
- CVE-2024-34167 Privilege escalation in Intel(R) Server Board S2600ST Family BIOS and Firmware Update software
- CVE-2024-34166 Command injection in Wavlink AC3000
- CVE-2024-34165 Privilege escalation in Intel(R) oneAPI DPC++/C++ Compiler
- CVE-2024-34164 Privilege escalation in Intel(R) MAS software
- CVE-2024-34163 Privilege escalation in Intel(R) NUC
- CVE-2024-34162 Information disclosure in Multiple MFPs (multifunction printers)
- CVE-2024-34161 NGINX HTTP/3 QUIC vulnerability
- CVE-2024-3416 SourceCodester Online Courseware editt.php sql injection
- CVE-2024-34158 Stack exhaustion in Parse in go/build/constraint
- CVE-2024-34156 Stack exhaustion in Decoder.Decode in encoding/gob
- CVE-2024-34155 Stack exhaustion in all Parse functions in go/parser
- CVE-2024-34153 Privilege escalation in Intel(R) RAID Web Console software
- CVE-2024-34152 Playbook Run Metadata leak to Guest
- CVE-2024-3415 SourceCodester Human Resource Information System addbranches_process.php cross site scripting
- CVE-2024-34149 In Bitcoin Core through 27.0 and Bitcoin Knots before 25.1.knots20231115, tapscript lacks a policy size limit check, a different issue than CVE-2023-50428.
- CVE-2024-34148 Jenkins Subversion Partial Release Manager Plugin programmatically disables the fix for CVE-2016-3721
- CVE-2024-34147 Jenkins Telegram Bot Plugin stores the Telegram Bot token in plaintext
- CVE-2024-34146 Jenkins Git server Plugin does not perform a permission check
- CVE-2024-34145 Jenkins Script Security Plugin sandbox bypass vulnerability
- CVE-2024-34144 Jenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodies
- CVE-2024-34142 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-34141 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-34140 Adobe Bridge PDF File Parsing Memory Corruption
- CVE-2024-3414 SourceCodester Human Resource Information System addcorporate_process.php cross site scripting
- CVE-2024-34139 Adobe Bridge has an integer overflow vulnerability when parsing SVG file
- CVE-2024-34138 Adobe Illustrator CGM File Parsing Division By zero
- CVE-2024-34137 Adobe Illustrator 2024 CGM File Parsing Null Pointer Dereference
- CVE-2024-34136 Adobe Illustrator PSD File Parsing Null Pointer dereference
- CVE-2024-34135 Adobe Illustrator CC 2023 v27.9 Vulnerability II
- CVE-2024-34134 Illustrator | Out-of-bounds Read (CWE-125)
- CVE-2024-34133 Adobe Illustrator CC 2023 v27.9 Vulnerability I
- CVE-2024-34130 Acrobat Android : OverSecured Finding : Access to arbitrary* content providers via insecure Intent configuration
- CVE-2024-3413 SourceCodester Human Resource Information System login_process.php sql injection
- CVE-2024-34129 Acrobat Android : OverSecured Finding : Overwriting arbitrary files via attacker-controlled output file paths
- CVE-2024-34128 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-34127 Adobe Indesign TIF File Parsing Out Of Bound Read
- CVE-2024-34126 ZDI-CAN-24028: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-34125 ZDI-CAN-24027: Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-34124 ZDI-CAN-24031: Adobe Dimension SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-34123 Adobe Premiere Pro arbitrary DLL loading lead to remote code execution
- CVE-2024-34122 T5 Acrobat Vulnerability - Exploitable crash in DecodeTile
- CVE-2024-34121 Illustrator | Integer Overflow or Wraparound (CWE-190)
- CVE-2024-34120 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-3412 WP STAGING WordPress Backup Plugin – Migration Backup Restore <= 3.4.3 - Authenticated (Admin+) Arbitrary File Upload
- CVE-2024-34119 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-34118 Adobe illustrator 2024 TIF File parsing Division by zero denial of service
- CVE-2024-34117 Adobe Photoshop 2024 MPO File Parsing Use-After-Free vulnerability
- CVE-2024-34116 Adobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege Escalation
- CVE-2024-34115 ZDI-CAN-24054: Adobe Substance 3D Stager SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-34113 ColdFusion | Weak Cryptography for Passwords (CWE-261)
- CVE-2024-34112 ColdFusion CFDOCUMENT file retrieval / access control bypass
- CVE-2024-34111 SSRF in service connector
- CVE-2024-34110 RCE in the Adobe Commerce Webhook module through a legit webhook definition
- CVE-2024-3411 Insufficient Randomness When Validating an IPMI Authenticated Session
- CVE-2024-34109 Adobe Commerce | Improper Input Validation (CWE-20)
- CVE-2024-34108 Large attack surface through legit webhook usage in Adobe Commerce
- CVE-2024-34107 Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2024-34106 Insecure Direct Object Reference - An attacker can able to erase the victim quote details
- CVE-2024-34105 Stored Cross Site Scripting in Order Comment
- CVE-2024-34104 Adobe Commerce | Improper Authorization (CWE-285)
- CVE-2024-34103 Customer account takeover via web API call & subsequent password reset
- CVE-2024-34102 Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE)
- CVE-2024-34101 ZDI-CAN-23614: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-34100 Use-After-Free vulnerability in the latest Adobe Acrobat Reader DC when open malicious PDF file
- CVE-2024-3410 DN Footer Contacts < 1.6.3 - Admin+ Stored XSS
- CVE-2024-34099 ZDI-CAN-XXXX: [Pwn2Own] Acrobat sandbox bypass part 2 of 2
- CVE-2024-34098 ZDI-CAN-XXXX: [Pwn2Own] Acrobat sandbox bypass part 1 of 2
- CVE-2024-34097 ZDI-CAN-23473: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-34096 ZDI-CAN-23472: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-34095 ZDI-CAN-23475: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-34094 ZDI-CAN-23474: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-34093 Security feature bypass in archerirm:archer
- CVE-2024-34092 Auth bypass in archerirm:archer
- CVE-2024-34091 Cross-site scripting in archerirm:archer
- CVE-2024-34090 Cross-site scripting in archerirm:archer
- CVE-2024-34089 Cross-site scripting in archerirm:archer
- CVE-2024-34088 Null dereference in frrouting:frrouting
- CVE-2024-34087 An SEH-based buffer overflow in the BPQ32 HTTP Server in BPQ32 6.0.24.1 allows remote attackers with access to the Web Terminal to achieve r
- CVE-2024-34086 Memory corruption in JT2Go
- CVE-2024-34085 Memory corruption in JT2Go
- CVE-2024-34084 Minder's Github Webhook Handler vulnerable to denial of service from un-validated requests