Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 361 of 521.
- CVE-2024-3359 SourceCodester Online Library System login.php sql injection
- CVE-2024-33589 WordPress KB Support plugin <= 1.6.0 - Broken Access Control vulnerability
- CVE-2024-33588 WordPress basepress plugin <= 2.16.1 - Broken Access Control vulnerability
- CVE-2024-33587 WordPress Secure Copy Content Protection and Content Locking plugin <= 3.9.0 - Broken Access Control vulnerability
- CVE-2024-33586 WordPress Photo Gallery by 10Web plugin <= 1.8.20 - Broken Access Control vulnerability
- CVE-2024-33585 Missing authorization in Payment Gateway Based Fees and Discounts for WooCommerce
- CVE-2024-33584 WordPress Video Conferencing with Zoom plugin <= 4.4.4 - Open Redirection vulnerability
- CVE-2024-33583 Misconfiguration in SIMATIC RTLS Locating Manager
- CVE-2024-33582 Privilege escalation in Service Framework
- CVE-2024-33581 Privilege escalation in PC Manager AI intelligent scenario
- CVE-2024-33580 Privilege escalation in Personal Cloud
- CVE-2024-3358 SourceCodester Aplaya Beach Resort Online Reservation System index.php cross site scripting
- CVE-2024-33579 Privilege escalation in Baiying
- CVE-2024-33578 Privilege escalation in Leyun
- CVE-2024-33577 Memory corruption in Simcenter Femap
- CVE-2024-33576 WordPress WPPizza plugin <= 3.18.10 - Broken Access Control vulnerability
- CVE-2024-33575 WordPress User Meta plugin <= 3.0 - Sensitive Data Exposure vulnerability
- CVE-2024-33574 WordPress Vitepos plugin <= 3.0.1 - Broken Access Control vulnerability
- CVE-2024-33573 WordPress EPROLO Dropshipping plugin <= 1.7.1 - Broken Access Control vulnerability
- CVE-2024-33572 WordPress Nexter Blocks plugin <= 3.2.5 - Broken Access Control vulnerability
- CVE-2024-33571 WordPress VOD Infomaniak plugin <= 1.5.6 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-33570 WordPress MetForm plugin <= 3.8.3 - Broken Access Control vulnerability
- CVE-2024-3357 SourceCodester Aplaya Beach Resort Online Reservation System index.php cross site scripting
- CVE-2024-33569 WordPress Instant Images plugin <= 6.1.0 - Arbitrary Option Update to Privilege Escalation vulnerability
- CVE-2024-33568 WordPress Element Pack Pro plugin < 7.19.3 - Arbitrary File Read and Phar Deserialization vulnerability
- CVE-2024-33567 Privilege escalation in Barcode Scanner with Inventory & Order Manager
- CVE-2024-33566 WordPress OrderConvo plugin <= 12.4 - Unauthenticated API Access to Arbitrary File Upload vulnerability
- CVE-2024-33565 Missing authorization in Barcode Scanner with Inventory & Order Manager
- CVE-2024-33564 WordPress XStore theme <= 9.3.8 - Arbitrary Option Update vulnerability
- CVE-2024-33563 WordPress XStore theme <= 9.3.8 - Broken Access Control vulnerability
- CVE-2024-33562 WordPress XStore theme <= 9.3.5 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-33561 WordPress XStore theme <= 9.3.8 - Unauthenticated Broken Access Control vulnerability
- CVE-2024-33560 WordPress XStore theme <= 9.3.8 - Unauthenticated Local File Inclusion vulnerability
- CVE-2024-3356 SourceCodester Aplaya Beach Resort Online Reservation System sql injection
- CVE-2024-33559 WordPress XStore theme <= 9.3.5 - Unauthenticated SQL Injection vulnerability
- CVE-2024-33558 WordPress XStore Core plugin <= 5.3.5 - Limited Arbitrary File Download vulnerability
- CVE-2024-33557 WordPress XStore Core plugin <= 5.3.8 - Local File Inclusion vulnerability
- CVE-2024-33556 WordPress XStore Core plugin <= 5.3.8 - Limited Arbitrary File Upload vulnerability
- CVE-2024-33555 WordPress XStore Core plugin <= 5.3.8 - Multiple Authenticated Broken Access Control vulnerability
- CVE-2024-33554 WordPress XStore Core plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-33553 WordPress XStore Core plugin <= 5.3.5 - Unauthenticated PHP Object Injection vulnerability
- CVE-2024-33552 WordPress XStore Core plugin <= 5.3.8 - Unauthenticated Account Takeover vulnerability
- CVE-2024-33551 WordPress XStore Core plugin <= 5.3.5 - Unauthenticated SQL Injection vulnerability
- CVE-2024-33550 WordPress WP Masquerade plugin <= 1.1.0 - Authenticated Account Takeover vulnerability
- CVE-2024-3355 SourceCodester Aplaya Beach Resort Online Reservation System sql injection
- CVE-2024-33549 WordPress WZone plugin <= 14.0.10 - Privilege Escalation vulnerability
- CVE-2024-33548 WordPress WZone plugin <= 14.0.10 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-33547 WordPress WZone plugin <= 14.0.10 - Site Wide Broken Access Control vulnerability
- CVE-2024-33546 WordPress WZone plugin <= 14.0.10 - Arbitrary SQL Update Execution vulnerability
- CVE-2024-33545 WordPress WZone plugin <= 14.0.10 - Unauthenticated Broken Access Control vulnerability
- CVE-2024-33544 WordPress WZone plugin <= 14.0.10 - Unauthenticated SQL Injection vulnerability
- CVE-2024-33543 WordPress WP Time Slots Booking Form plugin <= 1.2.06 - Broken Access Control vulnerability
- CVE-2024-33542 WordPress Crelly Slider plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2024-33541 WordPress Better Elementor Addons plugin <= 1.4.1 - Local File Inclusion vulnerability
- CVE-2024-33540 WordPress ColorNews theme <= 1.2.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-3354 SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection
- CVE-2024-33539 WordPress WPZOOM Addons for Elementor plugin <= 1.1.35 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-33538 WordPress Assistant – Every Day Productivity Apps plugin <= 1.4.9.1 - Sensitive Data Exposure vulnerability
- CVE-2024-33537 WordPress WP Portfolio theme <= 2.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-33536 Cross-site scripting in zimbra:collaboration
- CVE-2024-33535 Path traversal in zimbra:collaboration
- CVE-2024-33533 Cross-site scripting in zimbra:collaboration
- CVE-2024-33531 cdbattags lua-resty-jwt 0.2.3 allows attackers to bypass all JWT-parsing signature checks by crafting a JWT with an enc header with the value A256GCM.
- CVE-2024-33530 In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings (that make use of a lobby) leads to the disclosure of the meeti
- CVE-2024-3353 SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection
- CVE-2024-33529 Command injection in ilias:ilias
- CVE-2024-33528 Cross-site scripting in ilias:ilias
- CVE-2024-33527 Cross-site scripting in ilias:ilias
- CVE-2024-33526 Cross-site scripting in ilias:ilias
- CVE-2024-33525 A Stored Cross-site Scripting (XSS) vulnerability in the "Import of organizational units and title of organizational unit" feature in ILIAS
- CVE-2024-33522 Privilege escalation in Calico CNI install binary
- CVE-2024-3352 SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection
- CVE-2024-33519 Authenticated Server-Side prototype pollution Leading to Information Disclosure
- CVE-2024-33518 Memory corruption in Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
- CVE-2024-33517 Memory corruption in Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
- CVE-2024-33516 Memory corruption in Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
- CVE-2024-33515 Memory corruption in Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
- CVE-2024-33514 Memory corruption in Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
- CVE-2024-33513 Memory corruption in Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
- CVE-2024-33512 Memory corruption in Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
- CVE-2024-33511 Memory corruption in Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
- CVE-2024-33510 Other in FortiOS
- CVE-2024-3351 SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection
- CVE-2024-33509 Security feature bypass in FortiWeb
- CVE-2024-33508 Command injection in FortiClientEMS
- CVE-2024-33507 Auth bypass in FortiIsolator
- CVE-2024-33506 Information disclosure in FortiManager
- CVE-2024-33505 Memory corruption in FortiAnalyzer
- CVE-2024-33504 Hardcoded credentials in FortiManager
- CVE-2024-33503 Privilege escalation in FortiManager
- CVE-2024-33502 Path traversal in FortiAnalyzer
- CVE-2024-33501 SQL injection in FortiManager
- CVE-2024-33500 Privilege escalation in Mendix Applications using Mendix 10
- CVE-2024-3350 SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection
- CVE-2024-33499 Privilege escalation in SIMATIC RTLS Locating Manager
- CVE-2024-33498 Denial of service in SIMATIC RTLS Locating Manager
- CVE-2024-33497 Information disclosure in SIMATIC RTLS Locating Manager
- CVE-2024-33496 Information disclosure in SIMATIC RTLS Locating Manager
- CVE-2024-33495 Denial of service in SIMATIC RTLS Locating Manager
- CVE-2024-33494 Auth bypass in SIMATIC RTLS Locating Manager