Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 367 of 521.
- CVE-2024-32771 QTS, QuTS hero
- CVE-2024-32770 Photo Station
- CVE-2024-3277 Yumpu ePaper publishing <= 2.0.24 - Missing Authorization to PDF Upload, Publishing, and API Key Modification
- CVE-2024-32769 Photo Station
- CVE-2024-32768 Photo Station
- CVE-2024-32767 Photo Station
- CVE-2024-32766 QTS, QuTS hero, QuTScloud
- CVE-2024-32765 QTS, QuTS hero
- CVE-2024-32764 myQNAPcloud Link
- CVE-2024-32763 QTS, QuTS hero
- CVE-2024-32762 QuLog Center
- CVE-2024-32761 BIG-IP TMM tenants on VELOS and rSeries vulnerability
- CVE-2024-32760 NGINX HTTP/3 QUIC vulnerability
- CVE-2024-3276 FooBox (Free and Premium) < 2.7.28 - Admin+ Stored XSS
- CVE-2024-32759 Johnson Controls Software House C●CURE 9000 installer password strength
- CVE-2024-32758 exacqVision - Key exchanges
- CVE-2024-32757 American Dynamics Illustra Essentials Gen 4 - Linux Credential Leak
- CVE-2024-32756 American Dynamics Illustra Essentials Gen 4 - Reversible User Credential - Linux
- CVE-2024-32755 American Dynamics Illustra Essentials Gen 4 - Log Filter Input Validation
- CVE-2024-32754 Johnson Controls Kantech KT1, KT2, and KT400 Door Controllers - Exposure of Sensitive Information
- CVE-2024-32753 TYCO Illustra Pro Gen 4 - JQuery version
- CVE-2024-32752 Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool
- CVE-2024-3275 eRoom – Zoom Meetings & Webinar <= 1.4.18 - Missing Authorization to Information Exposure
- CVE-2024-32746 Cross-site scripting in wondercms:wondercms
- CVE-2024-32745 Cross-site scripting in wondercms:wondercms
- CVE-2024-32744 Cross-site scripting in wondercms:wondercms
- CVE-2024-32743 Cross-site scripting in wondercms:wondercms
- CVE-2024-32742 Misconfiguration in SIMATIC CN 4100
- CVE-2024-32741 Hardcoded credentials in SIMATIC CN 4100
- CVE-2024-32740 Hardcoded credentials in SIMATIC CN 4100
- CVE-2024-3274 D-Link DNS-320L/DNS-320LW/DNS-327L HTTP GET Request info.cgi information disclosure
- CVE-2024-32739 CyberPower PowerPanel Enterprise SQL Injection
- CVE-2024-32738 CyberPower PowerPanel Enterprise SQL Injection
- CVE-2024-32737 CyberPower PowerPanel Enterprise SQL Injection
- CVE-2024-32736 CyberPower PowerPanel Enterprise SQL Injection
- CVE-2024-32735 CyberPower PowerPanel Enterprise Missing Authentication
- CVE-2024-32733 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
- CVE-2024-32732 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform
- CVE-2024-32731 Missing Authorization check in SAP My Travel Requests
- CVE-2024-32730 Missing authorization check in SAP Enable Now Manager
- CVE-2024-3273 D-Link Multiple NAS Devices Command Injection
- CVE-2024-32729 WordPress ChatBot Conversational Forms plugin <= 1.1.8 - Arbitrary File Download vulnerability
- CVE-2024-32728 WordPress Paid Membership Subscriptions plugin <= 2.11.0 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-32727 WordPress RomethemeForm For Elementor plugin <= 1.1.2 - Broken Access Control vulnerability
- CVE-2024-32726 WordPress Frontend Dashboard plugin <= 2.2.2 - Sensitive Data Exposure on PII vulnerability
- CVE-2024-32725 WordPress 5 Stars Rating Funnel plugin 1.2.67 - Broken Access Control vulnerability
- CVE-2024-32724 Missing authorization in Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy
- CVE-2024-32723 WordPress Advanced Floating Content plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32722 WordPress Coupon & Discount Code Reveal Button plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32721 WordPress Jeg Elementor Kit plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32720 WordPress Appointment Hour Booking plugin <= 1.4.56 - Captcha Bypass vulnerability
- CVE-2024-3272 D-Link Multiple NAS Devices Use of Hard-Coded Credentials
- CVE-2024-32719 WordPress WP Club Manager plugin <= 2.2.11 - Broken Access Control vulnerability
- CVE-2024-32718 WordPress The Pack Elementor addons plugin <= 2.0.8.2 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2024-32717 WordPress SchedulePress plugin <= 5.0.8 - Broken Access Control vulnerability
- CVE-2024-32716 WordPress StreamWeasels Twitch Integration plugin <= 1.7.8 - API Sensitive Data Exposure vulnerability
- CVE-2024-32715 WordPress Olive One Click Demo Import plugin <= 1.1.1 - Arbitrary File Download vulnerability
- CVE-2024-32714 WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control vulnerability
- CVE-2024-32713 WordPress AI Post Generator | AutoWriter plugin <= 3.3 - Broken Access Control vulnerability
- CVE-2024-32712 WordPress Podlove Podcast Publisher plugin <= 4.0.14 - Broken Access Control vulnerability
- CVE-2024-32711 WordPress myCred plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32710 WordPress WP-Recall plugin <= 16.26.5 - SQL Injection vulnerability
- CVE-2024-3271 Command Injection in run-llama/llama_index
- CVE-2024-32709 WordPress WP-Recall plugin <= 16.26.5 - SQL Injection vulnerability
- CVE-2024-32708 WordPress Maintenance Mode plugin <= 3.0.1 - IP Bypass vulnerability
- CVE-2024-32707 WordPress Image Slider plugin <= 1.1.125 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32706 WordPress ARForms plugin <= 6.4 - Subscriber+ SQL Injection vulnerability
- CVE-2024-32705 WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary Plugin Activation/Deactivation Vulnerability
- CVE-2024-32704 WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary WordPress Options Removal vulnerability
- CVE-2024-32703 WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary File Deletion vulnerability
- CVE-2024-32702 WordPress ARForms plugin <= 6.4 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-32701 WordPress InstaWP Connect plugin <= 0.1.0.24 - Broken Access Control vulnerability
- CVE-2024-32700 WordPress Kognetiks Chatbot for WordPress plugin <= 2.0.0 - Arbitrary File Upload vulnerability
- CVE-2024-3270 ThingsBoard AdvancedFeature access control
- CVE-2024-32699 WordPress YITH WooCommerce Compare plugin <= 2.37.0 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-32698 WordPress Happy Addons for Elementor plugin <= 3.10.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32697 WordPress HelloAsso plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32696 WordPress AI Infographic Maker OpenAI plugin <= 4.6.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32695 WordPress Language Switcher for Transposh plugin <= 1.5.9 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-32694 WordPress 3D FlipBook, PDF Viewer, PDF Embedder plugin <= 3.62 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-32693 WordPress Automatic plugin < 3.93.0 - Multiple Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-32692 WordPress Chauffeur Taxi Booking System for WordPress plugin <= 6.9 - Broken Authentication vulnerability
- CVE-2024-32691 WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.2 - Broken Access Control vulnerability
- CVE-2024-32690 WordPress RSS Feed Widget plugin <= 2.9.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-3269 Download Monitor <= 4.9.13 - Missing Authorization
- CVE-2024-32689 WordPress WP Social Comments plugin <= 1.7.3 - Broken Access Control vulnerability
- CVE-2024-32688 WordPress MyRewards plugin <= 5.3.0 - Broken Access Control vulnerability
- CVE-2024-32687 WordPress WPC Frequently Bought Together for WooCommerce plugin <= 7.0.3 - Broken Access Control vulnerability
- CVE-2024-32686 WordPress Backup Migration plugin <= 1.4.3 - Sensitive Data Exposure via Log vulnerability
- CVE-2024-32685 WordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability
- CVE-2024-32684 WordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerability
- CVE-2024-32683 WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2024-32682 WordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability
- CVE-2024-32681 WordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability
- CVE-2024-32680 WordPress HUSKY plugin <= 1.3.5.2 - Remote Code Execution (RCE) vulnerability
- CVE-2024-3268 Missing authorization in Video Gallery – YouTube Gallery & Responsive Video Playlist
- CVE-2024-32679 WordPress Shared Files plugin <= 1.7.16 - Broken Access Control vulnerability
- CVE-2024-32678 WordPress TrackShip for WooCommerce plugin <= 1.7.5 - Broken Access Control vulnerability
- CVE-2024-32677 WordPress LoginPress Pro plugin < 3.0.0 - Unauth. License Activation/Deactivation vulnerability
- CVE-2024-32676 WordPress LoginPress Pro plugin < 3.0.0 - Captcha Bypass vulnerability