Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 385 of 521.
- CVE-2024-30341 Foxit PDF Reader Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-30340 Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-3034 BackUpWordPress <= 3.13 - Authenticated (Admin+) Directory Traversal
- CVE-2024-30339 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30338 Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30337 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30336 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30335 Foxit PDF Reader AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-30334 Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30333 Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30332 Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30331 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30330 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-3033 Improper Authorization in mintplex-labs/anything-llm
- CVE-2024-30329 Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability
- CVE-2024-30328 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30327 Foxit PDF Reader template Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30326 Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30325 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30324 Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30323 Foxit PDF Reader template Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-30322 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30321 Information disclosure in SIMATIC PCS 7 V9.1
- CVE-2024-3032 Themify Builder < 7.5.8 - Open Redirect
- CVE-2024-30314 Command injection in Dreamweaver Desktop
- CVE-2024-30312 TALOS-2024-1952 - Adobe Acrobat Reader Font CPAL numColorRecords out-of-bounds read vulnerability
- CVE-2024-30311 TALOS-2024-1946 - Adobe Acrobat Reader Font gvar GlyphVariationData out-of-bounds read vulnerability
- CVE-2024-30310 ZDI-CAN-23327: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-3031 Fluid Notification Bar <= 3.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2024-30309 Adobe Substance 3D Painter TGA File Parsing Acces Violation Read Vulnerability
- CVE-2024-30308 Adobe Substance 3D Painter PSD File Parsing Acces Violation Read Vulnerability
- CVE-2024-30307 Adobe Substance 3D Painter BMP File Parsing Out Of Bounds Write Vulnerability
- CVE-2024-30306 ZDI-CAN-23106: Adobe Acrobat Reader DC AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-30305 ZDI-CAN-23043: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30304 ZDI-CAN-23040: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30303 ZDI-CAN-23044: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30302 ZDI-CAN-23077: Adobe Acrobat Reader DC AcroForm Use-After-Free Information Disclosure Vulnerability
- CVE-2024-30301 ZDI-CAN-23042: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30300 Tenable Vulnerability Disclosure | Sensitive Information Disclosure Via Fake FMPS Worker
- CVE-2024-3030 Announce from the Dashboard <= 1.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2024-30299 Tenable Vulnerability Disclosure | API Auth Bypass
- CVE-2024-30298 Adobe Animate SWF File Parsing Memory corruption
- CVE-2024-30297 When Adobe Animate parses FLA files, there is a heap out-of-bounds write vulnerability at Animate.exe+0x125D391
- CVE-2024-30296 When Animate parses FLA files, there is an out-of-bounds write vulnerability at animate+0x123df28
- CVE-2024-30295 Null dereference in Animate
- CVE-2024-30294 Adobe Animate OGG File Parsing Heap Memory Corruption remote code execution Vulnerability
- CVE-2024-30293 Adobe Animate 2024 AI File parsing Stack base buffer overflow Remote Code execution Vulnerability
- CVE-2024-30292 Adobe FrameMaker GIF File parsing Out Of Bound Write
- CVE-2024-30291 Adobe FrameMaker TIF File parsing Out Of Bound Write
- CVE-2024-30290 Adobe FrameMaker WEBP File Parsing Out Of Bound Write
- CVE-2024-3029 Improper Input Validation in mintplex-labs/anything-llm
- CVE-2024-30289 Adobe FrameMaker XLS File Parsing Buffer Overflow
- CVE-2024-30288 Adobe FrameMaker 3DS File Parsing Heap Memory Corruption
- CVE-2024-30287 Adobe FrameMaker PDF File Pparsing Out of Bound Read
- CVE-2024-30286 Adobe FrameMaker DOC File Parsing Memory Corruption
- CVE-2024-30285 Adobe Audition 2024 MP4 File Parsing Null Pointer Dereference
- CVE-2024-30284 ZDI-CAN-23466: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
- CVE-2024-30283 Adobe FrameMaker ICO File Parsing Heap Memory Corruption
- CVE-2024-30282 Adobe Animate 2024 Out of Bound Write Remote Code Execution Vulnerability
- CVE-2024-30281 Substance3D - Designer | Out-of-bounds Read (CWE-125)
- CVE-2024-30280 ZDI-CAN-22867: Adobe Acrobat Pro DC AcroForm Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-3028 Improper Input Validation in mintplex-labs/anything-llm
- CVE-2024-30279 ZDI-CAN-22887: Adobe Acrobat Reader DC JPEG2000 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-30278 Adobe Media Encoder 2024 TGA File parsing memory corruption
- CVE-2024-30276 Adobe Audition 2024 M2V File Parsing Memory corruption
- CVE-2024-30275 Adobe Aero Beta has an arbitrary code execution vulnerability when parsing svg files
- CVE-2024-30274 Adobe Substance 3D Painter ABC File Parsing An Out-Of-Bounds Write Vulnerability
- CVE-2024-30273 Adobe Illustrator 2024 PS file Parsing Stack based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-30272 Adobe Illustrator 2024 GIF file parsing Out-Of-Bound Write remote code execution vulnerabiity
- CVE-2024-30271 Adobe Illustrator 2023 CC 27.7 Memory Corruption Out-Of-Bounds-Write Vulnerability III.
- CVE-2024-30270 mailcow Path Traversal and Arbitrary Code Execution Vulnerability
- CVE-2024-3027 Smart Slider 3 <= 3.5.1.22 - Missing Authorization to Limited File Upload
- CVE-2024-30269 DataEase has database configuration information exposure vulnerability
- CVE-2024-30268 Cacti XSS vulnerability in display_settings
- CVE-2024-30266 Wasmtime vulnerable to panic when using a dropped extenref-typed element segment
- CVE-2024-30265 Voilà Local file inclusion
- CVE-2024-30264 typebot.io: `GHSL-2024-040`
- CVE-2024-30263 The PDF Viewer macro can be used to view PDF attachments with restricted access
- CVE-2024-30262 Contao's remember-me tokens will not be cleared after a password change
- CVE-2024-30261 Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect
- CVE-2024-30260 Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline
- CVE-2024-3026 WordPress Button Plugin MaxButtons < 9.7.8 - Editor+ Stored XSS
- CVE-2024-30259 FastDDS heap buffer overflow when publisher sends malformed packet
- CVE-2024-30258 FastDDS crash when publisher send malformed packet
- CVE-2024-30257 1Panel's password verification is suspected to have a timing attack vulnerability
- CVE-2024-30256 Open WebUI vulnerable to server-side request forgery in utils.py
- CVE-2024-30255 HTTP/2: CPU exhaustion due to CONTINUATION frame flood
- CVE-2024-30254 Directory traversal allowing overwriting arbitrary files
- CVE-2024-30253 Handling untrusted input can result in a crash, leading to loss of availability / denial of service
- CVE-2024-30252 GitHub Security Lab (GHSL) Vulnerability Report, livemarks: `GHSL-2024-015`
- CVE-2024-30251 Denial of service when trying to parse malformed POST requests in aiohttp
- CVE-2024-30250 In Astro-Shield, setting a correct `integrity` attribute to injected code allows to bypass the allow-lists
- CVE-2024-3025 Path Traversal in mintplex-labs/anything-llm
- CVE-2024-30249 Cloudburst Network DoS in RakNet connection handling
- CVE-2024-30248 Piccolo Admin's raw SVG loading may lead to complete data compromise from admin page
- CVE-2024-30247 Command Injection as root in NextCloudPi web panel
- CVE-2024-30246 Tuleap deleting or moving an artifact can delete values from unrelated artifacts
- CVE-2024-30245 WordPress DecaLog plugin <= 3.9.0 - SQL Injection vulnerability
- CVE-2024-30244 WordPress Church Admin plugin <= 4.0.27 - SQL Injection via shortcode vulnerability
- CVE-2024-30243 WordPress Tooltips plugin < 9.4.5 - Auth. SQL Injection vulnerability