Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 359 of 521.
- CVE-2024-3387 PAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information Disclosure
- CVE-2024-33869 Path traversal in artifex:ghostscript
- CVE-2024-33868 Other in linqi:linqi
- CVE-2024-33867 Hardcoded credentials in linqi:linqi
- CVE-2024-33866 Cross-site scripting in linqi:linqi
- CVE-2024-33865 Information disclosure in linqi:linqi
- CVE-2024-33864 Server-side request forgery in linqi:linqi
- CVE-2024-33863 Path traversal in linqi:linqi
- CVE-2024-33862 OPCFoundation.NetStandard.Opc.Ua.Core buffer-management vulnerability
- CVE-2024-33860 Path traversal in logpoint:siem
- CVE-2024-3386 PAN-OS: Predefined Decryption Exclusions Does Not Work as Intended
- CVE-2024-33859 Cross-site scripting in logpoint:siem
- CVE-2024-33858 Path traversal in logpoint:siem
- CVE-2024-33857 Server-side request forgery in logpoint:siem
- CVE-2024-33856 Information disclosure in logpoint:siem
- CVE-2024-33854 SQL injection in centreon:centreon web
- CVE-2024-33853 SQL injection in centreon:centreon web
- CVE-2024-33852 SQL injection in centreon:centreon web
- CVE-2024-33851 mdanter/ecc affected by timing vulnerability in cryptographic side-channels
- CVE-2024-33850 Missing authorization in pexip:pexip infinity
- CVE-2024-3385 PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled
- CVE-2024-33849 ci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key.
- CVE-2024-33848 Denial of service in Intel(R) RAID Web Console software
- CVE-2024-33847 f2fs: compress: don't allow unaligned truncation on released compress inode
- CVE-2024-33844 Denial of service in parrot:anafi firmware
- CVE-2024-3384 PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets
- CVE-2024-33836 In the module "JA Marketplace" (jamarketplace) up to version 9.0.1 from JA Module for PrestaShop, a guest can upload files with extensions .php.
- CVE-2024-33835 Memory corruption in tenda:ac18 firmware
- CVE-2024-33832 OneNav v0.9.35-20240318 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /index.php?c=api&method=get_link_info.
- CVE-2024-33831 A stored cross-site scripting (XSS) vulnerability in the Advanced Expectation - Response module of yapi v1.10.2 allows attackers to execute
- CVE-2024-33830 Cross-site request forgery in idccms:idccms
- CVE-2024-3383 PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)
- CVE-2024-33829 Cross-site request forgery in idccms:idccms
- CVE-2024-33820 Memory corruption in totolink:a3002r firmware
- CVE-2024-3382 PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets
- CVE-2024-33819 Globitel KSA SpeechLog v8.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Save Query function.
- CVE-2024-33818 Globitel KSA SpeechLog v8.1 was discovered to contain an Insecure Direct Object Reference (IDOR) via the userID parameter.
- CVE-2024-33809 Memory corruption in pingcap:tidb
- CVE-2024-33808 SQL injection in campcodes:complete web-based school management system
- CVE-2024-33807 SQL injection in campcodes:complete web-based school management system
- CVE-2024-33806 SQL injection in campcodes:complete web-based school management system
- CVE-2024-33805 SQL injection in campcodes:complete web-based school management system
- CVE-2024-33804 SQL injection in campcodes:complete web-based school management system
- CVE-2024-33803 SQL injection in campcodes:complete web-based school management system
- CVE-2024-33802 SQL injection in campcodes:complete web-based school management system
- CVE-2024-33801 SQL injection in campcodes:complete web-based school management system
- CVE-2024-33800 SQL injection in campcodes:complete web-based school management system
- CVE-2024-33799 SQL injection in campcodes:complete web-based school management system
- CVE-2024-33793 Command injection in netis-systems:mex605 firmware
- CVE-2024-33792 Command injection in netis-systems:mex605 firmware
- CVE-2024-33791 Cross-site scripting in netis-systems:mex605 firmware
- CVE-2024-3379 Incorrect Authorization in lunary-ai/lunary
- CVE-2024-33789 Command injection in linksys:e5600 firmware
- CVE-2024-33788 Command injection in linksys:e5600 firmware
- CVE-2024-33787 Hengan Weighing Management Information Query Platform 2019-2021 53.25 was discovered to contain a SQL injection vulnerability via the tuser_
- CVE-2024-33786 An arbitrary file upload vulnerability in Zhongcheng Kexin Ticketing Management Platform 20.04 allows attackers to execute arbitrary code vi
- CVE-2024-33783 Memory corruption in csiro:multi-protocol spdz
- CVE-2024-33782 Memory corruption in csiro:multi-protocol spdz
- CVE-2024-33781 Memory corruption in csiro:multi-protocol spdz
- CVE-2024-33780 Memory corruption in csiro:multi-protocol spdz
- CVE-2024-3378 iboss Secure Web Gateway Login Portal login cross site scripting
- CVE-2024-33775 Privilege escalation in nagios:nagios xi
- CVE-2024-33774 Memory corruption in dlink:dir-619l firmware
- CVE-2024-33773 Memory corruption in dlink:dir-619l firmware
- CVE-2024-33772 Memory corruption in dlink:dir-619l firmware
- CVE-2024-33771 Memory corruption in dlink:dir-619l firmware
- CVE-2024-3377 SourceCodester Computer Laboratory Management System cross site scripting
- CVE-2024-33768 Memory corruption in sammycage:lunasvg
- CVE-2024-33767 Memory corruption in sammycage:lunasvg
- CVE-2024-33766 Denial of service in sammycage:lunasvg
- CVE-2024-33764 Memory corruption in sammycage:lunasvg
- CVE-2024-33763 Memory corruption in sammycage:lunasvg
- CVE-2024-3376 SourceCodester Computer Laboratory Management System config.php redirect
- CVE-2024-33753 Section Camera V2.5.5.3116-S50-SMA-B20160811 and earlier versions allow the accounts and passwords of administrators and users to be changed
- CVE-2024-33752 File upload in emlog:emlog
- CVE-2024-3375 Broken Access Control in Havelsan's Dialogue
- CVE-2024-33749 Missing authorization in dedecms:dedecms
- CVE-2024-33748 MS Basic Cross-site Scripting vulnerability
- CVE-2024-3374 MongoDB Server (mongod) may crash when generating ftdc
- CVE-2024-3373 SQLi in RSM Design's Website Template
- CVE-2024-33724 SOPlanning 1.52.00 is vulnerable to Cross Site Scripting (XSS) via the groupe_id parameter to process/groupe_save.php.
- CVE-2024-33722 SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php with statut[].
- CVE-2024-3372 MongoDB Server may have unexpected application behaviour due to invalid BSON
- CVE-2024-3371 Insufficient validation of external input in Compass may enable MITM attacks
- CVE-2024-33700 Denial of service in WBR-6012
- CVE-2024-3370 SQLi in Egebilgi Software's Website Template
- CVE-2024-33699 Auth bypass in WBR-6012
- CVE-2024-33698 Memory corruption in Opcenter Quality
- CVE-2024-33697 WordPress CF7 File Download plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-33696 WordPress WordPress Ad Widget plugin <= 2.20.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-33695 WordPress Fan Page Widget by ThemeNcode plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-33694 WordPress Meks ThemeForest Smart Widget plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-33693 WordPress Meks Smart Social Widget plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-33692 WordPress Smart Recent Posts Widget plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-33691 Cross-site request forgery in OptinMonster
- CVE-2024-33690 WordPress Financio theme <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-3369 code-projects Car Rental add-vehicle.php unrestricted upload
- CVE-2024-33689 WordPress Radio Station plugin <= 2.5.7 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-33688 WordPress Teluro theme <= 1.0.31 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-33687 Security feature bypass in NJ Series CPU Unit