Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 374 of 521.
- CVE-2024-31924 WordPress EWWW Image Optimizer plugin <= 7.2.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-31923 WordPress Feather Login Page plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-31922 WordPress Hosting Benchmark tool plugin <= 1.3.6 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-31921 WordPress Ultimate Product Catalog plugin <= 5.2.15 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-31920 WordPress Currency per Product for WooCommerce plugin <= 1.6.0 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-3192 MailCleaner Admin Interface cross site scripting
- CVE-2024-31919 IBM MQ denial of service
- CVE-2024-31916 IBM OpenBMC information disclosure
- CVE-2024-31914 IBM Sterling B2B Integrator cross-site scripting
- CVE-2024-31913 IBM Sterling B2B Integrator cross-site scripting
- CVE-2024-31912 IBM MQ privilege escalation
- CVE-2024-3191 MailCleaner Email os command injection
- CVE-2024-31908 IBM Planning Analytics Local cross-site scripting
- CVE-2024-31907 Cross-site scripting in Planning Analytics Local
- CVE-2024-31906 IBM Automation Decision Services information disclosure
- CVE-2024-31905 IBM QRadar Network Packet Capture information disclosure
- CVE-2024-31904 IBM App Connect Enterprise denial of service
- CVE-2024-31903 IBM Sterling B2B Integrator Standard Edition code execution
- CVE-2024-31902 IBM InfoSphere Information Server cross-site request forgery
- CVE-2024-3190 Cross-site scripting in Unlimited Elements For Elementor
- CVE-2024-31899 IBM Cognos Command Center information disclosure
- CVE-2024-31898 IBM InfoSphere Information Server data modification
- CVE-2024-31897 IBM Cloud Pak for Business Automation server-side request forgery
- CVE-2024-31896 IBM SPSS Statistics information disclosure
- CVE-2024-31895 IBM App Connect Enterprise information disclosure
- CVE-2024-31894 IBM App Connect Enterprise information disclosure
- CVE-2024-31893 IBM App Connect Enterprise information disclosure
- CVE-2024-31892 IBM Storage Scale SQL injection
- CVE-2024-31891 IBM Storage Scale privilege escalation
- CVE-2024-31890 IBM i privilege escalation
- CVE-2024-3189 Cross-site scripting in Kadence Blocks — Page Builder Toolkit for Gutenberg Editor
- CVE-2024-31889 IBM Planning Analytics Local cross-site scripting
- CVE-2024-31887 IBM Security Verify Privilege information disclosure
- CVE-2024-31883 IBM Security Verify Access denial of service
- CVE-2024-31882 IBM Db2 denial of service
- CVE-2024-31881 IBM Db2 denial of service
- CVE-2024-31880 IBM Db2 denial of service
- CVE-2024-3188 Shortcodes Ultimate < 7.1.0 - Contributor+ Stored XSS
- CVE-2024-31879 IBM i denial of service
- CVE-2024-31878 IBM i information disclosure
- CVE-2024-31874 IBM Security Verify Access Appliance denial of service
- CVE-2024-31873 IBM Security Verify Access Appliance information disclosure
- CVE-2024-31872 IBM Security Verify Access Appliance missing certificate validation
- CVE-2024-31871 IBM Security Verify Access Appliance improper certificate validation
- CVE-2024-31870 IBM i information disclosure
- CVE-2024-3187 Use after free in GoAhead
- CVE-2024-31869 Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used
- CVE-2024-31868 Apache Zeppelin: XSS vulnerability in the helium module
- CVE-2024-31867 Apache Zeppelin: LDAP search filter query Injection Vulnerability
- CVE-2024-31866 Apache Zeppelin: Interpreter download command does not escape malicious code injection
- CVE-2024-31865 Apache Zeppelin: Cron arbitrary user impersonation with improper privileges
- CVE-2024-31864 Apache Zeppelin: Remote code execution by adding malicious JDBC connection string
- CVE-2024-31863 Apache Zeppelin: Replacing other users notebook, bypassing any permissions
- CVE-2024-31862 Apache Zeppelin: Denial of service with invalid notebook name
- CVE-2024-31860 Apache Zeppelin: Path traversal vulnerability
- CVE-2024-3186 Null dereference in GoAhead
- CVE-2024-31859 Member promoted to channel admin via playbooks run linking to channel
- CVE-2024-31858 Memory corruption in Intel(R) QuickAssist Technology software
- CVE-2024-31857 Cross-site scripting in Forminator
- CVE-2024-31856 CyberPower PowerPanel business SQL Injection
- CVE-2024-31854 Security feature bypass in SICAM TOOLBOX II
- CVE-2024-31853 Security feature bypass in SICAM TOOLBOX II
- CVE-2024-31852 LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack, and thus there can some
- CVE-2024-31851 Path traversal in Sync
- CVE-2024-31850 Path traversal in Arc
- CVE-2024-3185 Rapid7 Insight Agent Sensitive Key Exposed To Local Users
- CVE-2024-31849 Path traversal in Connect
- CVE-2024-31848 Path traversal in API Server
- CVE-2024-31847 Cross-site scripting in italtel:embrace
- CVE-2024-31846 Missing authorization in italtel:embrace
- CVE-2024-31845 Other in italtel:embrace
- CVE-2024-31844 Information disclosure in italtel:embrace
- CVE-2024-31843 Command injection in italtel:embrace
- CVE-2024-31842 Information disclosure in italtel:embrace
- CVE-2024-31841 Path traversal in italtel:embrace
- CVE-2024-31840 Information disclosure in italtel:embrace
- CVE-2024-3184 Null dereference in GoAhead
- CVE-2024-31839 tiagorlampert CHAOS vulnerable to Cross Site Scripting
- CVE-2024-31837 DMitry (Deepmagic Information Gathering Tool) 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938.
- CVE-2024-31835 Cross-site scripting in flatpress:flatpress
- CVE-2024-3183 Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
- CVE-2024-31828 Lavalite CMS Cross Site Scripting vulnerability
- CVE-2024-31823 Code injection in ecommerce-codeigniter-bootstrap project:ecommerce-codeigniter-bootstrap
- CVE-2024-31822 Code injection in ecommerce-codeigniter-bootstrap project:ecommerce-codeigniter-bootstrap
- CVE-2024-31821 SQL injection in ecommerce-codeigniter-bootstrap project:ecommerce-codeigniter-bootstrap
- CVE-2024-31820 SQL injection in ecommerce-codeigniter-bootstrap project:ecommerce-codeigniter-bootstrap
- CVE-2024-3182 Information disclosure in Hawk
- CVE-2024-31819 WWBN AVideo Remote Code Execution
- CVE-2024-31818 Path traversal in derbynet:derbynet
- CVE-2024-31817 Information disclosure in totolink:ex200 firmware
- CVE-2024-31816 Information disclosure in totolink:ex200 firmware
- CVE-2024-31815 Missing authorization in totolink:ex200 firmware
- CVE-2024-31814 Auth bypass in totolink:ex200 firmware
- CVE-2024-31813 Missing authorization in totolink:ex200 firmware
- CVE-2024-31812 Information disclosure in totolink:ex200 firmware
- CVE-2024-31811 Command injection in totolink:ex200 firmware
- CVE-2024-31810 Hardcoded credentials in totolink:ex200 firmware
- CVE-2024-3181 Concrete CMS Stored XSS in the Search Field
- CVE-2024-31809 Command injection in totolink:ex200 firmware
- CVE-2024-31808 Command injection in totolink:ex200 firmware