Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 379 of 521.
- CVE-2024-31219 Discourse-reactions' reaction data and public topic whisper content exposed on reactions given user activity page
- CVE-2024-31218 Missing Authentication for Critical Function in Webhood backend
- CVE-2024-31217 @strapi/plugin-upload has a Denial-of-Service via Improper Exception Handling
- CVE-2024-31216 source-controller leaks theAzure Storage SAS token into logs on connection errors
- CVE-2024-31215 Mobile Security Framework (MobSF) vulnerable to Server-Side Request Forgery (SSRF) in firebase database check
- CVE-2024-31214 Traccar's unrestricted file upload vulnerability in device image upload could lead to remote code execution
- CVE-2024-31213 InstantCMS Open Redirect vulnerability
- CVE-2024-31212 SQL injection in index_chart_data action
- CVE-2024-31211 Remote Code Execution in `WP_HTML_Token`
- CVE-2024-31210 PHP file upload bypass via Plugin installer
- CVE-2024-3121 Remote Code Execution in create_conda_env function in parisneo/lollms
- CVE-2024-31209 OpenID Connect client Atom Exhaustion in provider configuration worker ets table location
- CVE-2024-31208 Synapse's V2 state resolution weakness allows DoS from remote room members
- CVE-2024-31207 Vite's `server.fs.deny` did not deny requests for patterns with directories
- CVE-2024-31206 Use of Unencrypted HTTP Request in dectalk-tts
- CVE-2024-31205 Saleor CSRF bypass in refreshToken mutation
- CVE-2024-31204 mailcow Cross-site Scripting Vulnerability via Exception Handler
- CVE-2024-31203 Memory corruption in Thermoscan IP
- CVE-2024-31202 Misconfiguration in Thermoscan IP
- CVE-2024-31201 Privilege escalation in Thermoscan IP
- CVE-2024-31200 Information disclosure in Sensor Net Connect V2
- CVE-2024-3120 Stack-Buffer Overflow in 'Content-Length' and 'Warning' Header Processing in sngrep
- CVE-2024-31199 Cross-site scripting in Sensor Net Connect V2
- CVE-2024-31198 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31197 Improper Null Termination in libfluid_msg library
- CVE-2024-31196 NULL Pointer Dereference in libfluid_msg library
- CVE-2024-31195 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31194 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31193 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31192 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31191 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31190 Out-of-bounds Read in libfluid_msg library
- CVE-2024-3119 Stack-Buffer Overflow in 'Call-ID' and 'X-Call-ID' SIP Header Processing in sngrep
- CVE-2024-31189 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31188 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31187 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31186 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31185 NULL Pointer Dereference in libfluid_msg library
- CVE-2024-31184 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31183 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31182 NULL Pointer Dereference in libfluid_msg library
- CVE-2024-31181 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31180 Out-of-bounds Read in libfluid_msg library
- CVE-2024-3118 Dreamer CMS Attachment permission
- CVE-2024-31179 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31178 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31177 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31176 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31175 NULL Pointer Dereference in libfluid_msg library
- CVE-2024-31174 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31173 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31172 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31171 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31170 Out-of-bounds Read in libfluid_msg library
- CVE-2024-3117 YouDianCMS ChannelAction.class.php unrestricted upload
- CVE-2024-31169 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31168 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31167 NULL Pointer Dereference in libfluid_msg library
- CVE-2024-31166 Out-of-bounds Read in libfluid_msg library
- CVE-2024-31165 NULL Pointer Dereference in libfluid_msg library
- CVE-2024-31164 NULL Pointer Dereference in libfluid_msg library
- CVE-2024-31163 ASUS Download Master - Buffer Overflow
- CVE-2024-31162 ASUS Download Master - OS Command Injection
- CVE-2024-31161 ASUS Download Master - Arbitrary File Upload
- CVE-2024-31160 ASUS Download Master - Stored XSS
- CVE-2024-3116 Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4
- CVE-2024-31159 ASUS Download Master - Reflected XSS
- CVE-2024-31158 Privilege escalation in Intel(R) Server Board S2600BP Family
- CVE-2024-31157 Information disclosure in Intel(R) Processors
- CVE-2024-31156 BIG-IP Configuration utility XSS vulnerability
- CVE-2024-31155 Memory corruption in Intel(R) Processors
- CVE-2024-31154 Privilege escalation in Intel(R) Server S2600BPBR
- CVE-2024-31153 Denial of service in Intel(R) QuickAssist Technology software
- CVE-2024-31152 Denial of service in WBR-6012
- CVE-2024-31151 Hardcoded credentials in WBR-6012
- CVE-2024-31150 Memory corruption in Intel(R) Graphics Driver software
- CVE-2024-3115 Exposure of Sensitive Information to an Unauthorized Actor in GitLab
- CVE-2024-31146 PCI device pass-through with shared resources
- CVE-2024-31145 error handling in x86 IOMMU identity mapping
- CVE-2024-31144 Xapi: Metadata injection attack against backup/restore functionality
- CVE-2024-31143 double unlock in x86 guest IRQ handling
- CVE-2024-31142 x86: Incorrect logic for BTC/SRSO mitigations
- CVE-2024-31141 Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider
- CVE-2024-31140 Path traversal in TeamCity
- CVE-2024-3114 Uncontrolled Resource Consumption in GitLab
- CVE-2024-31139 XML external entity in TeamCity
- CVE-2024-31138 Cross-site scripting in TeamCity
- CVE-2024-31137 Cross-site scripting in TeamCity
- CVE-2024-31136 Auth bypass in TeamCity
- CVE-2024-31135 Open redirect in TeamCity
- CVE-2024-31134 Missing authorization in TeamCity
- CVE-2024-3113 FormFlow < 2.12.2 - Admin+ Stored XSS
- CVE-2024-31127 MacOS Zscaler Client Connector Local Privilege Escalation
- CVE-2024-31123 WordPress SpiderFAQ plugin <= 1.3.2 - Cross Site Scripting vulnerability
- CVE-2024-31122 WordPress User Rights Access Manager plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-31121 WordPress HeartThis plugin <= 0.1.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-31120 WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-3112 Quotes and Tips < 1.45 - Admin+ Arbitrary File Upload
- CVE-2024-31119 WordPress Download Special Box for Content plugin <= 1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-31118 WordPress SP Project & Document Manager plugin <= 4.70 - Broken Access Control to XSS vulnerability