Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 363 of 521.
- CVE-2024-33288 Prison Management System Using PHP v1.0 was discovered to contain a SQL injection vulnerability via the username on the Admin login page.
- CVE-2024-33278 Buffer Overflow vulnerability in ASUS router RT-AX88U with firmware versions v3.0.0.4.388_24198 allows a remote attacker to execute arbitrar
- CVE-2024-33276 SQL Injection vulnerability in FME Modules preorderandnotication v.3.1.0 and before allows a remote attacker to run arbitrary SQL commands v
- CVE-2024-33275 SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super News
- CVE-2024-33274 Directory Traversal vulnerability in FME Modules customfields v.2.2.7 and before allows a remote attacker to obtain sensitive information vi
- CVE-2024-33273 SQL injection vulnerability in shipup before v.3.3.0 allows a remote attacker to escalate privileges via the getShopID function.
- CVE-2024-33272 SQL injection vulnerability in KnowBand for PrestaShop autosuggest before 2.0.0 allows an attacker to run arbitrary SQL commands via the Aut
- CVE-2024-33271 An issue in FME Modules eventsmanager before 4.4.0 allows an attacker to obtain sensitive information from the ps_customer component.
- CVE-2024-33270 An issue in FME Modules fileuploads v.2.0.3 and before and fixed in v2.0.4 allows a remote attacker to obtain sensitive information via the
- CVE-2024-33269 SQL Injection vulnerability in Prestaddons flashsales 1.9.7 and before allows an attacker to run arbitrary SQL commands via the FsModel::getFlashSales method.
- CVE-2024-33268 SQL Injection vulnerability in Digincube mdgiftproduct before 1.4.1 allows an attacker to run arbitrary SQL commands via the MdGiftRule::addGiftToCart method.
- CVE-2024-33267 SQL Injection vulnerability in Hero hfheropayment v.1.2.5 and before allows an attacker to escalate privileges via the HfHeropaymentGatewayB
- CVE-2024-33266 SQL Injection vulnerability in Helloshop deliveryorderautoupdate v.2.8.1 and before allows an attacker to run arbitrary SQL commands via the
- CVE-2024-33263 Denial of service in bellard:quickjs
- CVE-2024-33260 Memory corruption in jerryscript:jerryscript
- CVE-2024-33259 Denial of service in jerryscript:jerryscript
- CVE-2024-33258 Memory corruption in jerryscript:jerryscript
- CVE-2024-33255 Denial of service in jerryscript:jerryscript
- CVE-2024-33253 Cross-site scripting in openeclass:openeclass
- CVE-2024-33250 An issue in Open-Source Technology Committee SRS real-time video server RS/4.0.268(Leo) and SRS/4.0.195(Leo) allows a remote attacker to exe
- CVE-2024-3325 JasperReports Server Driver upload vulnerability
- CVE-2024-33247 SQL injection in oretnom23:employee task management system
- CVE-2024-33231 Cross Site Scripting vulnerability in Ferozo Email version 1.1 allows a local attacker to execute arbitrary code via a crafted payload to th
- CVE-2024-3323 Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-33228 An issue in the component segwindrvx64.sys of Insyde Software Corp SEG Windows Driver v100.00.07.02 allows attackers to escalate privileges
- CVE-2024-33227 An issue in the component ddcdrv.sys of Nicomsoft WinI2C/DDC v3.7.4.0 allows attackers to escalate privileges and execute arbitrary code via
- CVE-2024-33226 An issue in the component Access64.sys of Wistron Corporation TBT Force Power Control v1.0.0.0 allows attackers to escalate privileges and e
- CVE-2024-33225 An issue in the component RTKVHD64.sys of Realtek Semiconductor Corp Realtek(r) High Definition Audio Function Driver v6.0.9549.1 allows att
- CVE-2024-33224 An issue in the component rtkio64.sys of Realtek Semiconductor Corp Realtek lO Driver v1.008.0823.2017 allows attackers to escalate privileg
- CVE-2024-33223 An issue in the component IOMap64.sys of ASUSTeK Computer Inc ASUS GPU TweakII v1.4.5.2 allows attackers to escalate privileges and execute
- CVE-2024-33222 An issue in the component ATSZIO64.sys of ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 allows attackers to escalate privileges and execu
- CVE-2024-33221 An issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0 allows attackers to escalate privileges and
- CVE-2024-33220 Privilege escalation in asus:ai suite
- CVE-2024-3322 Path Traversal in parisneo/lollms-webui
- CVE-2024-33219 Privilege escalation in asus:sabertooth x99 firmware
- CVE-2024-33218 An issue in the component AsUpIO64.sys of ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver 5.30.20.0 allows attackers to escalate priv
- CVE-2024-33217 Memory corruption in tenda:fh1206 firmware
- CVE-2024-33215 Memory corruption in tenda:fh1206 firmware
- CVE-2024-33214 Memory corruption in tenda:fh1206 firmware
- CVE-2024-33213 Memory corruption in tenda:fh1206 firmware
- CVE-2024-33212 Memory corruption in tenda:fh1206 firmware
- CVE-2024-33211 Memory corruption in tenda:fh1206 firmware
- CVE-2024-33210 Cross-site scripting in flatpress:flatpress
- CVE-2024-3321 SourceCodester eLearning System Maintenance Module cross site scripting
- CVE-2024-33209 Cross-site scripting in flatpress:flatpress
- CVE-2024-3320 SourceCodester eLearning System cross site scripting
- CVE-2024-3319 Security implication in SailPoint Identity Security Cloud IdentityProfile API Endpoints
- CVE-2024-33182 Memory corruption in tendacn:ac18 firmware
- CVE-2024-33181 Memory corruption in tenda:ac18 firmware
- CVE-2024-33180 Memory corruption in tendacn:ac18 firmware
- CVE-2024-3318 SailPoint Identity Security Cloud Connector File Path Traversal Vulnerability
- CVE-2024-3317 SailPoint Identity Security Cloud Improper Access Control
- CVE-2024-33164 SQL injection in j2eefast:j2eefast
- CVE-2024-33161 SQL injection in j2eefast:j2eefast
- CVE-2024-3316 SourceCodester Computer Laboratory Management System view_category.php sql injection
- CVE-2024-33155 SQL injection in j2eefast:j2eefast
- CVE-2024-33153 SQL injection in j2eefast:j2eefast
- CVE-2024-3315 SourceCodester Computer Laboratory Management System user.php sql injection
- CVE-2024-33149 SQL injection in j2eefast:j2eefast
- CVE-2024-33148 SQL injection in j2eefast:j2eefast
- CVE-2024-33147 SQL injection in j2eefast:j2eefast
- CVE-2024-33146 SQL injection in j2eefast:j2eefast
- CVE-2024-33144 SQL injection in j2eefast:j2eefast
- CVE-2024-3314 SourceCodester Computer Laboratory Management System Users.php sql injection
- CVE-2024-33139 SQL injection in j2eefast:j2eefast
- CVE-2024-3313 SUBNET PowerSYSTEM Server and Substation Server Reliance on Insufficiently Trustworthy Component
- CVE-2024-33124 SQL injection in roothub:roothub
- CVE-2024-33122 SQL injection in roothub:roothub
- CVE-2024-33121 SQL injection in roothub:roothub
- CVE-2024-33120 File upload in roothub:roothub
- CVE-2024-3312 Easy Custom Auto Excerpt <= 2.4.12 - Sensitive Information Exposure
- CVE-2024-33118 Path traversal in luckyframe:luckyframeweb
- CVE-2024-33117 Server-side request forgery in crmeb:crmeb java
- CVE-2024-33113 Cross-site scripting in dlink:dir-845l firmware
- CVE-2024-33112 Command injection in dlink:dir-845l firmware
- CVE-2024-33111 Cross-site scripting in dlink:dir-845l firmware
- CVE-2024-33110 Auth bypass in dlink:dir-845l firmware
- CVE-2024-3311 Dreamer CMS ThemesController.java ZipUtils.unZipFiles path traversal
- CVE-2024-33109 Path traversal in ergophone:tiptel ip 286 firmware
- CVE-2024-33103 An arbitrary file upload vulnerability in the Media Manager component of DokuWiki 2024-02-06a allows attackers to execute arbitrary code by
- CVE-2024-33102 Cross-site scripting in thinksaas:thinksaas
- CVE-2024-33101 Cross-site scripting in thinksaas:thinksaas
- CVE-2024-3309 Qi Addons For Elementor <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown widget
- CVE-2024-3308 Cross-site scripting in HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- CVE-2024-33078 Memory corruption in tencent:libpag
- CVE-2024-33073 Buffer Over-read in WLAN Host Communication
- CVE-2024-33071 Buffer Over-read in WLAN Host Communication
- CVE-2024-33070 Buffer Over-read in WLAN Host Communication
- CVE-2024-3307 Cross-site scripting in HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- CVE-2024-33069 Use After Free in WLAN Host
- CVE-2024-33068 Use After Free in WLAN Host Communication
- CVE-2024-33067 Buffer Over-read in Audio
- CVE-2024-33066 Improper Input Validation in WLAN Resource Manager
- CVE-2024-33065 Improper Input Validation in Camera
- CVE-2024-33064 Buffer Over-read in WLAN Host Communication
- CVE-2024-33063 Integer Overflow or Wraparound in WLAN Host Communication
- CVE-2024-33061 Buffer Over-read in DSP Service
- CVE-2024-33060 Use After Free in DSP Service
- CVE-2024-3306 IDOR in Utarit Information's SoliClub
- CVE-2024-33059 Use After Free in Computer Vision