Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 391 of 521.
- CVE-2024-29760 WordPress Booster for WooCommerce plugin <= 7.1.8 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-2976 Tenda F1203 execCommand R7WebsSecurityHandler stack-based overflow
- CVE-2024-29759 WordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-29758 WordPress Co-marquage service-public.fr plugin <= 0.5.72 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-29757 Security feature bypass in Android
- CVE-2024-29756 Memory corruption in Android
- CVE-2024-29755 Memory corruption in Android
- CVE-2024-29754 Memory corruption in Android
- CVE-2024-29753 Memory corruption in Android
- CVE-2024-29752 Memory corruption in Android
- CVE-2024-29751 Memory corruption in Android
- CVE-2024-29750 Memory corruption in Android
- CVE-2024-2975 Race condition in Octopus Server
- CVE-2024-29749 Memory corruption in Android
- CVE-2024-29748 Android Pixel Privilege Escalation
- CVE-2024-29747 Memory corruption in Android
- CVE-2024-29746 Memory corruption in Android
- CVE-2024-29745 Android Pixel Information Disclosure
- CVE-2024-29744 Memory corruption in Android
- CVE-2024-29743 Memory corruption in Android
- CVE-2024-29742 Memory corruption in Android
- CVE-2024-29741 Privilege escalation in Android
- CVE-2024-29740 Memory corruption in Android
- CVE-2024-2974 Information disclosure in Essential Addons for Elementor – Popular Elementor Templates & Widgets
- CVE-2024-29739 Memory corruption in Android
- CVE-2024-29738 Memory corruption in Android
- CVE-2024-29737 Apache StreamPark (incubating): maven build params could trigger remote command execution
- CVE-2024-29736 Apache CXF: SSRF vulnerability via WADL stylesheet parameter
- CVE-2024-29735 Apache Airflow: Potentially harmful permission changing by log task handler
- CVE-2024-29734 Other in SonicDICOM Media Viewer
- CVE-2024-29733 Apache Airflow FTP Provider: FTP_TLS instance with unverified SSL context
- CVE-2024-29732 SQL Injection vulnerability on SCAN_VISIO eDocument Suite Web Viewer from Abast
- CVE-2024-29731 Multiple vulnerabilities in SportsNET
- CVE-2024-29730 Multiple vulnerabilities in SportsNET
- CVE-2024-2973 Session Smart Router(SSR): On redundant router deployments API authentication can be bypassed
- CVE-2024-29729 Multiple vulnerabilities in SportsNET
- CVE-2024-29728 Multiple vulnerabilities in SportsNET
- CVE-2024-29727 Multiple vulnerabilities in SportsNET
- CVE-2024-29726 Multiple vulnerabilities in SportsNET
- CVE-2024-29725 Multiple vulnerabilities in SportsNET
- CVE-2024-29724 Multiple vulnerabilities in SportsNET
- CVE-2024-29723 Multiple vulnerabilities in SportsNET
- CVE-2024-29720 Information disclosure in terrainformatica:sciter
- CVE-2024-2972 Floating Chat Widget < 3.1.9 - Editor+ Stored XSS
- CVE-2024-2971 Out-of-bounds array access due to negative object numbers in indirect references in Xpdf 4.05
- CVE-2024-2970 News Wall <= 1.1.0 - Cross-Site Request Forgery to Plugin Settings Update
- CVE-2024-2969 WP-Eggdrop <= 0.1 - Cross-Site Request Forgery to Settings Update
- CVE-2024-29686 Winter CMS Server-Side Template Injection (SSTI) vulnerability
- CVE-2024-29684 Cross-site request forgery in dedecms:dedecms
- CVE-2024-2968 WP-Eggdrop <= 0.1 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2024-29672 Directory Traversal vulnerability in zly2006 Reden before v.0.2.514 allows a remote attacker to execute arbitrary code via the DEBUG_RTC_REQ
- CVE-2024-29671 Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remote attacker to execute arbitrary code via the POST request handler component.
- CVE-2024-2967 Cross-site scripting in Guest posting / Frontend Posting / Front Editor – WP Front User Submit
- CVE-2024-29667 SQL Injection vulnerability in Tongtianxing Technology Co., Ltd CMSV6 v.7.31.0.2 through v.7.31.0.3 allows a remote attacker to escalate pri
- CVE-2024-29666 Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through v.7.32.0.3 allows a remote attacker to esc
- CVE-2024-29661 File upload in dedecms:dedecms
- CVE-2024-29660 Cross-site scripting in dedecms:dedecms
- CVE-2024-2966 Information disclosure in Element Pack – Widgets, Templates & Addons for Elementor
- CVE-2024-29651 json-schema-ref-parser Prototype Pollution issue
- CVE-2024-29650 @thi.ng/paths Prototype Pollution vulnerability
- CVE-2024-2965 Denial-of-Service in LangChain SitemapLoader in langchain-ai/langchain
- CVE-2024-29646 Memory corruption in radare:radare2
- CVE-2024-29645 Memory corruption in radare:radare2
- CVE-2024-29644 dcat-admin Cross Site Scripting vulnerability
- CVE-2024-29643 croogo Host header injection
- CVE-2024-29640 aliyundrive-webdav vulnerable to Command Injection
- CVE-2024-2964 Pocket News Generator <= 0.2.0 - Cross-Site Request Forgery to Settings Update
- CVE-2024-2963 Pocket News Generator <= 0.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2024-2962 Networker - Tech News WordPress Theme with Dark Mode <= 1.1.9 - Missing Authorization
- CVE-2024-2961 Memory corruption in glibc
- CVE-2024-2960 SVS Pricing Tables <= 1.0.4 - Cross-Site Request Forgery to Pricing Table Deletion
- CVE-2024-2959 SVS Pricing Tables <= 1.0.4 - Cross-Site Request Forgery to Pricing Table Edit/Creation
- CVE-2024-2958 SVS Pricing Tables <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2024-2956 Simple Ajax Chat <= 20231101 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2024-2955 Mismatched Memory Management Routines in Wireshark
- CVE-2024-2954 SQL injection in Action Network
- CVE-2024-2953 LuckyWP Table of Contents <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-2952 Server-Side Template Injection in BerriAI/litellm
- CVE-2024-29515 File upload in lepton-cms:leptoncms
- CVE-2024-29514 File upload in lepton-cms:leptoncms
- CVE-2024-29513 An issue in briscKernelDriver.sys in BlueRiSC WindowsSCOPE Cyber Forensics before 3.3 allows a local attacker to execute arbitrary code with
- CVE-2024-29511 Path traversal in artifex:ghostscript
- CVE-2024-29510 Memory corruption in artifex:ghostscript
- CVE-2024-2951 WordPress RegistrationMagic plugin <= 5.3.0.0 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-29509 Memory corruption in artifex:ghostscript
- CVE-2024-29508 Information disclosure in artifex:ghostscript
- CVE-2024-29507 Memory corruption in artifex:ghostscript
- CVE-2024-29506 Memory corruption in artifex:ghostscript
- CVE-2024-29504 Summernote vulnerable to cross-site scripting
- CVE-2024-29502 Path traversal in inteset:secure lockdown
- CVE-2024-29500 Code injection in inteset:secure lockdown
- CVE-2024-2950 BoldGrid Easy SEO – Simple and Effective SEO <= 1.6.14 - Information Exposure
- CVE-2024-29499 Cross-Site Request Forgery in Anchor CMS
- CVE-2024-2949 Cross-site scripting in Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel
- CVE-2024-29489 Null dereference in jerryscript:jerryscript
- CVE-2024-2948 Favorites <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-29477 Dolibarr ERP CRM Code Injection vulnerability during installation
- CVE-2024-29474 Cross-site scripting in zhyd:oneblog
- CVE-2024-29473 Cross-site scripting in zhyd:oneblog
- CVE-2024-29472 Cross-site scripting in zhyd:oneblog