Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 364 of 521.
- CVE-2024-33058 Insufficient Granularity of Access Control in Core
- CVE-2024-33057 Buffer Over-read in WLAN Host Communication
- CVE-2024-33056 Buffer Over-read in MProc
- CVE-2024-33055 Use After Free in Computer Vision
- CVE-2024-33054 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision
- CVE-2024-33053 Use After Free in Video
- CVE-2024-33052 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host
- CVE-2024-33051 Buffer Over-read in WLAN Firmware
- CVE-2024-33050 Buffer Over-read in WLAN Host Communication
- CVE-2024-3305 IDOR in Utarit Information's SoliClub
- CVE-2024-33049 Buffer Over-read in WLAN Host Communication
- CVE-2024-33048 Buffer Over-read in WLAN Host
- CVE-2024-33047 Buffer Over-read in Display
- CVE-2024-33045 Return of Stack Variable Address in Buses
- CVE-2024-33044 Improper Validation of Array Index in Hypervisor
- CVE-2024-33043 Buffer Over-read in FM Host
- CVE-2024-33042 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host
- CVE-2024-33041 Use of Out-of-range Pointer Offset in Computer Vision
- CVE-2024-33040 Use After Free in Camera Driver
- CVE-2024-33039 Untrusted Pointer Dereference in Audio
- CVE-2024-33038 Untrusted Pointer Dereference in Computer Vision
- CVE-2024-33037 Buffer Over-read in Neural Processing Unit
- CVE-2024-33036 Use of Out-of-range Pointer Offset in Camera Driver
- CVE-2024-33035 Integer Overflow or Wraparound in Display
- CVE-2024-33034 Use After Free in Graphics Linux
- CVE-2024-33033 Use After Free in ComputerVision
- CVE-2024-33032 Improper Validation of Array Index in Camera_Linux
- CVE-2024-33031 Improper Input Validation in RIL
- CVE-2024-33030 Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Performance
- CVE-2024-3303 Improper Neutralization of Input Used for LLM Prompting in GitLab
- CVE-2024-33029 Use After Free in DSP Services
- CVE-2024-33028 Use After Free in Automotive Telematics
- CVE-2024-33027 Improper Access Control in Graphics Linux
- CVE-2024-33026 Buffer Over-read in WLAN Host
- CVE-2024-33025 Buffer Over-read in WLAN Host
- CVE-2024-33024 Integer Overflow or Wraparound in WLAN Host
- CVE-2024-33023 Use After Free in Graphics Linux
- CVE-2024-33022 Integer Overflow or Wraparound in Automotive GPU
- CVE-2024-33021 Use of Uninitialized Variable in Automotive GPU
- CVE-2024-33020 Buffer Over-read in WLAN HOST
- CVE-2024-3302 Denial of service in Firefox
- CVE-2024-33019 Buffer Over-read in WLAN Host
- CVE-2024-33018 Buffer Over-read in WLAN Host
- CVE-2024-33016 Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage
- CVE-2024-33015 Buffer Over-read in WLAN Host
- CVE-2024-33014 Buffer Over-read in WLAN Host
- CVE-2024-33013 Buffer Over-read in WLAN Host
- CVE-2024-33012 Buffer Over-read in WLAN Host
- CVE-2024-33011 Buffer Over-read in WLAN Host
- CVE-2024-33010 Use After Free in WLAN Host
- CVE-2024-3301 Deserialization in DELMIA Apriso
- CVE-2024-33009 SQL injection vulnerability in SAP Global Label Management (GLM)
- CVE-2024-33008 Memory Corruption vulnerability in SAP Replication Server
- CVE-2024-33007 Client-side script execution vulnerability in SAP UI5(PDFViewer)
- CVE-2024-33006 File upload vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
- CVE-2024-33005 Missing authorization in SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server
- CVE-2024-33004 Insecure Storage vulnerability in SAP BusinessObjects Business Intelligence Platform (Webservices)
- CVE-2024-33003 Information Disclosure Vulnerability in SAP Commerce Cloud
- CVE-2024-33002 Cross-Site Scripting (XSS) Vulnerability in SAP S/4HANA (Document Service Handler for DPS)
- CVE-2024-33001 Denial of service (DOS) in SAP NetWeaver and ABAP platform
- CVE-2024-33000 Missing Authorization check in SAP Bank Account Management
- CVE-2024-3300 Deserialization in DELMIA Apriso
- CVE-2024-32999 Other in EMUI
- CVE-2024-32998 Null dereference in EMUI
- CVE-2024-32997 Race condition in EMUI
- CVE-2024-32996 Privilege escalation in EMUI
- CVE-2024-32995 Denial of service in EMUI
- CVE-2024-32993 Race condition in EMUI
- CVE-2024-32992 Other in EMUI
- CVE-2024-32991 Missing authorization in EMUI
- CVE-2024-32990 Missing authorization in EMUI
- CVE-2024-3299 Memory corruption in eDrawings
- CVE-2024-32989 Other in EMUI
- CVE-2024-32988 Hardcoded credentials in 'OfferBox' App for Android
- CVE-2024-32987 Microsoft SharePoint Server Information Disclosure Vulnerability
- CVE-2024-32986 Arbitrary code execution due to improper sanitization of web app properties in PWAsForFirefox
- CVE-2024-32985 Stellar-core's Overlay - security fix for DDoS mitigation
- CVE-2024-32984 Yamux Memory Exhaustion Vulnerability via Active::pending_frames property
- CVE-2024-32983 Misskey allows the impersonation and takeover of remote accounts with unnormalized signed activities
- CVE-2024-32982 Litestar and Starlite affected by Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CVE-2024-32981 Cross-site Scripting vulnerability with encoded payload in silverstripe/framework
- CVE-2024-32980 Spin contains a potential network sandbox escape for specifically configured Spin applications
- CVE-2024-3298 Memory corruption in eDrawings
- CVE-2024-32979 Reflected Cross-site Scripting potential in all object list views in Nautobot
- CVE-2024-32978 Kaminari Insecure File Permissions Vulnerability
- CVE-2024-32977 OctoPrint Authentication Bypass via X-Forwarded-For Header when autologinLocal is enabled
- CVE-2024-32976 Envoy can enter an endless loop while decompressing Brotli data with extra input
- CVE-2024-32975 Envoy crashes in QuicheDataReader::PeekVarInt62Length()
- CVE-2024-32974 Envoy affected by a crash in EnvoyQuicServerStream::OnInitialHeadersComplete()
- CVE-2024-32973 Remote for TLS session may be trusted despite constraints in Pluto lang
- CVE-2024-32972 go-ethereum denial of service via malicious p2p message
- CVE-2024-32971 Defect in query plan cache may cause incorrect operations to be executed in Apollo Router
- CVE-2024-32970 Cross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex
- CVE-2024-3297 Session establishment lock-up during replay of CASE Sigma1 messages
- CVE-2024-32969 vantage6 collaboration admins can extend their influence by expanding the collaboration
- CVE-2024-32967 Zitadel exposes internal database user name and host information
- CVE-2024-32966 Stored Cross-site Scripting in directory listings via file names in static-web-server
- CVE-2024-32965 ssrf vulnerability in lobe-chat
- CVE-2024-32964 lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability
- CVE-2024-32963 Parameter Tampering vulnerability in Navidrome