Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 381 of 521.
- CVE-2024-30979 Cross-site scripting in phpgurukul:cyber cafe management system
- CVE-2024-30977 An issue in Secnet Security Network Intelligent AC Management System v.1.02.040 allows a local attacker to escalate privileges via the password component.
- CVE-2024-30974 SQL injection in tramyardg:autoexpress
- CVE-2024-30973 An issue in V-SOL G/EPON ONU HG323AC-B with firmware version V2.0.08-210715 allows an attacker to execute arbtirary code and obtain sensitiv
- CVE-2024-3097 WordPress Gallery Plugin – NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure
- CVE-2024-30965 Cross-site request forgery in dedecms:dedecms
- CVE-2024-30964 Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allow
- CVE-2024-30963 Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a l
- CVE-2024-30962 Memory corruption in openrobotics:robot operating system
- CVE-2024-30961 Code injection in openrobotics:robot operating system
- CVE-2024-3096 PHP function password_verify can erroneously return true when argument contains NUL
- CVE-2024-30953 Cross-site scripting in htmly:htmly
- CVE-2024-30952 A stored cross-site scripting (XSS) vulnerability in PESCMS-TEAM v2.3.6 allows attackers to execute arbitrary web scripts or HTML via a craf
- CVE-2024-30951 Cross-site scripting in fudforum:fudforum
- CVE-2024-30950 Cross-site scripting in fudforum:fudforum
- CVE-2024-3095 SSRF in Langchain Web Research Retriever in langchain-ai/langchain
- CVE-2024-30949 Memory corruption in newlib project:newlib
- CVE-2024-30946 Cross-site request forgery in dedecms:dedecms
- CVE-2024-3094 Xz: malicious code in distributed source
- CVE-2024-30939 Auth bypass in yealink:vp59 firmware
- CVE-2024-30938 SQL injection in sem-cms:semcms
- CVE-2024-30931 Stored Cross Site Scripting vulnerability in Emby Media Server Emby Media Server 4.8.3.0 allows a remote attacker to escalate privileges via
- CVE-2024-30929 Cross-site scripting in derbynet:derbynet
- CVE-2024-30928 SQL injection in derbynet:derbynet
- CVE-2024-30927 Cross-site scripting in derbynet:derbynet
- CVE-2024-30926 Cross-site scripting in derbynet:derbynet
- CVE-2024-30925 Cross-site scripting in derbynet:derbynet
- CVE-2024-30924 Cross-site scripting in derbynet:derbynet
- CVE-2024-30923 SQL injection in derbynet:derbynet
- CVE-2024-30922 SQL injection in derbynet:derbynet
- CVE-2024-30921 Cross-site scripting in derbynet:derbynet
- CVE-2024-30920 Cross-site scripting in derbynet:derbynet
- CVE-2024-3092 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2024-30917 Memory corruption in eprosima:fast dds
- CVE-2024-30916 Denial of service in eprosima:fast dds
- CVE-2024-30915 Denial of service in objectcomputing:opendds
- CVE-2024-3091 PHPGurukul Emergency Ambulance Hiring Portal Search Request Page search.php cross site scripting
- CVE-2024-3090 PHPGurukul Emergency Ambulance Hiring Portal Add Ambulance Page add-ambulance.php cross site scripting
- CVE-2024-30896 InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with r
- CVE-2024-30891 Command injection in tenda:ac18 firmware
- CVE-2024-30890 Cross-site scripting in ed01-cms project:ed01-cms
- CVE-2024-3089 PHPGurukul Emergency Ambulance Hiring Portal Manage Ambulance Page manage-ambulance.php cross-site request forgery
- CVE-2024-30889 Cross-site scripting in web-audimex:audimexee
- CVE-2024-30886 Cross-site scripting in hadsky:hadsky
- CVE-2024-30885 Cross-site scripting in hadsky:hadsky
- CVE-2024-30884 Cross-site scripting in discuz:discuzx
- CVE-2024-30883 Cross-site scripting in rageframe:rageframe
- CVE-2024-30880 Cross-site scripting in rageframe:rageframe
- CVE-2024-3088 PHPGurukul Emergency Ambulance Hiring Portal Forgot Password Page forgot-password.php sql injection
- CVE-2024-30879 Cross-site scripting in rageframe:rageframe
- CVE-2024-30878 Cross-site scripting in rageframe:rageframe
- CVE-2024-30875 Cross Site Scripting vulnerability in JavaScript Library jquery-ui v.1.13.1 allows a remote attacker to obtain sensitive information and exe
- CVE-2024-30872 SQL injection in netentsec:ns-asg firmware
- CVE-2024-30871 SQL injection in netentsec:ns-asg firmware
- CVE-2024-30870 SQL injection in netentsec:ns-asg firmware
- CVE-2024-3087 PHPGurukul Emergency Ambulance Hiring Portal Ambulance Tracking Page ambulance-tracking.php sql injection
- CVE-2024-30868 SQL injection in netentsec:ns-asg firmware
- CVE-2024-30867 SQL injection in netentsec:ns-asg firmware
- CVE-2024-30866 SQL injection in netentsec:ns-asg firmware
- CVE-2024-30865 SQL injection in netentsec:ns-asg firmware
- CVE-2024-30864 SQL injection in netentsec:ns-asg firmware
- CVE-2024-30863 SQL injection in netentsec:ns-asg firmware
- CVE-2024-30862 SQL injection in netentsec:ns-asg firmware
- CVE-2024-30861 SQL injection in netentsec:ns-asg firmware
- CVE-2024-30860 SQL injection in netentsec:ns-asg firmware
- CVE-2024-3086 PHPGurukul Emergency Ambulance Hiring Portal Ambulance Tracking Page ambulance-tracking.php cross site scripting
- CVE-2024-30859 SQL injection in netentsec:ns-asg firmware
- CVE-2024-30858 SQL injection in netentsec:ns-asg firmware
- CVE-2024-30855 Cross-site request forgery in dedecms:dedecms
- CVE-2024-30851 Path traversal in codesiddhant:jasmin-ransomware
- CVE-2024-3085 PHPGurukul Emergency Ambulance Hiring Portal Admin Login Page login.php sql injection
- CVE-2024-30849 File upload in donbermoy:complete e-commerce site
- CVE-2024-30848 Cross-site scripting (XSS) vulnerability in SilverSky E-mail service version 5.0.3126 allows remote attackers to inject arbitrary web script
- CVE-2024-30845 Cross-site scripting in rainbow external link network disk project:rainbow external link network disk
- CVE-2024-30840 Memory corruption in tenda:ac15 firmware
- CVE-2024-3084 PHPGurukul Emergency Ambulance Hiring Portal Hire an Ambulance Page cross site scripting
- CVE-2024-3083 Cross-site request forgery in Sensor Net Connect V2
- CVE-2024-3082 Information disclosure in Sensor Net Connect V2
- CVE-2024-3081 EasyCorp EasyAdmin Autocomplete autocomplete.js cross site scripting
- CVE-2024-30809 Use after free in axiosys:bento4
- CVE-2024-30808 Use after free in axiosys:bento4
- CVE-2024-30807 Use after free in axiosys:bento4
- CVE-2024-30806 Memory corruption in axiosys:bento4
- CVE-2024-30804 An issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v.10013 allows an attacker to execute arbitrary code via crafted IOCTL requests.
- CVE-2024-30802 An issue in Vehicle Management System 7.31.0.3_20230412 allows an attacker to escalate privileges via the login.html component.
- CVE-2024-30801 SQL Injection vulnerability in Cloud based customer service management platform v.1.0.0 allows a local attacker to execute arbitrary code vi
- CVE-2024-30800 Security feature bypass in dronecode:px4 drone autopilot
- CVE-2024-3080 ASUS Router - Improper Authentication
- CVE-2024-30799 Memory corruption in dronecode:px4 drone autopilot
- CVE-2024-3079 ASUS Router - Stack-based Buffer Overflow
- CVE-2024-3078 Qdrant Full Snapshot REST API snapshots.rs path traversal
- CVE-2024-3077 Bluetooth: integer underflow in gatt_find_info_rsp
- CVE-2024-3076 MM-email2image <= 0.2.5 - Stored XSS via CSRF
- CVE-2024-3075 MM-email2image <= 0.2.5 - Contributor+ Stored XSS
- CVE-2024-3074 Elementor ImageBox <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-3073 Easy WP SMTP by SendLayer <= 2.3.0 - Exposure of Sensitive Information via the UI
- CVE-2024-3072 ACF Front End Editor <= 2.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Update
- CVE-2024-3071 ACF On-The-Go <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Update
- CVE-2024-3070 Last Viewed Posts by WPBeginner <= 1.0.0 - Unauthenticated PHP Object Injection
- CVE-2024-3068 Custom Field Suite <= 2.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting