Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 368 of 521.
- CVE-2024-32675 WordPress Order Limit for WooCommerce plugin <= 2.0.0 - Broken Access Control vulnerability
- CVE-2024-32674 Cross-site scripting in Heateor Social Login WordPress
- CVE-2024-32673 Memory corruption in Walrus
- CVE-2024-32672 Memory corruption in Escargot
- CVE-2024-32671 Memory corruption in Escargot
- CVE-2024-32670 Information disclosure in Galaxy SmartTag2
- CVE-2024-3267 Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode
- CVE-2024-32669 Possible stack overflow due to a string encoding processing error
- CVE-2024-32668 bhyve(8) privileged guest escape via USB controller
- CVE-2024-32667 Memory corruption in OpenCL(TM) software
- CVE-2024-32666 Null dereference in Intel(R) RAID Web Console software
- CVE-2024-32664 Suricata's base64 contains an out of bounds write
- CVE-2024-32663 Suricata 's http2 parser contains an improper compressed header handling can lead to resource starvation
- CVE-2024-32662 FreeRDP rdp_redirection_read_base64_wchar out of bound read
- CVE-2024-32661 FreeRDP rdp_write_logon_info_v1 NULL access
- CVE-2024-32660 FreeRDP zgfx_decompress out of memory vulnerability
- CVE-2024-3266 Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute
- CVE-2024-32659 freerdp_image_copy out of bound read
- CVE-2024-32658 FreeRDP ExtractRunLengthRegular* out of bound read
- CVE-2024-32657 Hydra has persistent XSS vulnerability serving HTML build outputs
- CVE-2024-32656 Ant Media Server vulnerable to local privilege escalation
- CVE-2024-32655 Npgsql Vulnerable to SQL Injection via Protocol Message Size Overflow
- CVE-2024-32653 Insufficient input filtering of "package name" allows command execution in the device with shell privileges
- CVE-2024-32652 @hono/node-server contains Denial of Service risk when receiving Host header that cannot be parsed
- CVE-2024-32651 Server Side Template Injection in Jinja2 allows Remote Command Execution
- CVE-2024-32650 Rustls vulnerable to an infinite loop in rustls::conn::ConnectionCommon::complete_io() with proper client input
- CVE-2024-3265 WP Advanced Search <= 1.1.6 - Admin+ SQL Injection
- CVE-2024-32649 vyper performs double eval of the argument of sqrt
- CVE-2024-32648 vyper default functions don't respect nonreentrancy keys
- CVE-2024-32647 vyper performs double eval of raw_args in create_from_blueprint
- CVE-2024-32646 vyper performs double eval of the slice args when buffer from adhoc locations
- CVE-2024-32645 vyper performs incorrect topic logging in raw_log
- CVE-2024-32644 Evmos' transaction execution not accounting for all state transition after interaction with precompiles
- CVE-2024-32643 Masa CMS vulnerable to authentication bypass with /tag/
- CVE-2024-32642 Host header poisoning allows account takeover via password reset email
- CVE-2024-32641 Masa CMS Vulnerable to Pre-Auth RCE via JSON API
- CVE-2024-32640 MasaCMS SQL Injection vulnerability
- CVE-2024-3264 Broken or Risky Cryptographic Algorithm in Mia Technology's Mia-Med Health Aplication
- CVE-2024-32639 Memory corruption in Tecnomatix Plant Simulation V2302
- CVE-2024-32638 Apache APISIX: Forward-Auth Request Smuggling
- CVE-2024-32637 Null dereference in JT2Go
- CVE-2024-32636 Memory corruption in JT2Go
- CVE-2024-32635 Memory corruption in JT2Go
- CVE-2024-32634 Logically dead code
- CVE-2024-32633 Unsigned compared against 0
- CVE-2024-32632 Printf arg type mismatch in ATCMD
- CVE-2024-32631 Out-of-bounds read in telephony
- CVE-2024-3263 Improper authentication in YMS VIS Pro
- CVE-2024-32625 Uninitialized scalar field
- CVE-2024-32624 Memory corruption in hdfgroup:hdf5
- CVE-2024-32623 Memory corruption in hdfgroup:hdf5
- CVE-2024-32622 Memory corruption in hdfgroup:hdf5
- CVE-2024-32621 Memory corruption in hdfgroup:hdf5
- CVE-2024-32620 Memory corruption in hdfgroup:hdf5
- CVE-2024-3262 Information exposure vulnerability in Request Tracker (RT)
- CVE-2024-32619 Memory corruption in hdfgroup:hdf5
- CVE-2024-32618 Memory corruption in hdfgroup:hdf5
- CVE-2024-32617 Memory corruption in hdfgroup:hdf5
- CVE-2024-32616 Memory corruption in hdfgroup:hdf5
- CVE-2024-32615 Memory corruption in hdfgroup:hdf5
- CVE-2024-32614 Memory corruption in hdfgroup:hdf5
- CVE-2024-32613 Memory corruption in hdfgroup:hdf5
- CVE-2024-32612 Memory corruption in hdfgroup:hdf5
- CVE-2024-32611 Memory corruption in hdfgroup:hdf5
- CVE-2024-32610 Use after free in hdfgroup:hdf5
- CVE-2024-3261 Strong Testimonials < 3.1.12 - Contributor+ Stored XSS
- CVE-2024-32609 Denial of service in hdfgroup:hdf5
- CVE-2024-32608 Memory corruption in hdfgroup:hdf5
- CVE-2024-32607 Memory corruption in hdfgroup:hdf5
- CVE-2024-32606 Memory corruption in hdfgroup:hdf5
- CVE-2024-32605 Memory corruption in hdfgroup:hdf5
- CVE-2024-32604 WordPress WP-Recall plugin <= 16.26.5 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2024-32603 WordPress WooBuddy plugin <= 3.4.20 - PHP Object Injection vulnerability
- CVE-2024-32602 WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.3.1 - SQL Injection vulnerability
- CVE-2024-32601 WordPress Popup Anything plugin <= 2.8 - Broken Access Control vulnerability
- CVE-2024-32600 WordPress Master Slider plugin <= 3.9.5 - PHP Object Injection vulnerability
- CVE-2024-32599 WordPress WP Dummy Content Generator plugin <= 3.2.1 - Arbitrary Code Execution vulnerability
- CVE-2024-32598 WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32597 WordPress WP Smart Import plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32596 WordPress DSGVO Youtube plugin <= 1.4.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32595 WordPress WP Helper Premium plugin < 4.6.0 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-32594 WordPress Attesa Extra plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32593 WordPress WPBITS Addons For Elementor Page Builder plugin <= 1.3.4.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32592 Cross-site scripting in Void Elementor WHMCS Elements For Elementor Page Builder
- CVE-2024-32591 WordPress Backend Designer plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32590 WordPress Kattene plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-3259 SourceCodester Internship Portal Management System delete_activity.php sql injection
- CVE-2024-32589 WordPress Barcode Scanner and Inventory manager plugin <= 1.5.3 - Broken Access Control to XSS vulnerability
- CVE-2024-32588 WordPress LearnPress Export Import plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-32587 WordPress EnvíaloSimple plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-32586 WordPress Gutenberg Block Editor Toolkit plugin <= 1.40.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32585 WordPress Import Content in WordPress & WooCommerce with Excel plugin <= 4.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32584 WordPress TeraWallet plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32583 WordPress Photo Gallery by 10Web plugin <= 1.8.21 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-32582 WordPress Debug Log Manager plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32581 WordPress Mortgage Calculators WP plugin <= 1.56 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32580 WordPress Master Slider plugin <= 3.9.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-3258 SourceCodester Internship Portal Management System add_activity.php sql injection
- CVE-2024-32579 Cross-site scripting in Restaurant Menu – Food Ordering System – Table Reservation
- CVE-2024-32578 WordPress Sliderby10Web plugin <= 1.2.54 - Cross Site Scripting (XSS) vulnerability