Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 395 of 521.
- CVE-2024-29027 Parse Server crash and RCE via invalid Cloud Function or Cloud Job name
- CVE-2024-29026 Owncast cross origin request
- CVE-2024-29025 Netty HttpPostRequestDecoder can OOM
- CVE-2024-29024 JumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionality
- CVE-2024-29023 Session Hijacking via token exposure on the session page in Xibo CMS
- CVE-2024-29022 Session Hijacking via XSS attack in header and session grid in Xibo CMS
- CVE-2024-29021 SSRF into Sandbox Escape through Unsafe Default Configuration
- CVE-2024-29020 JumpServer allows nn authorized attacker to get sensitive information in playbook files when playbook_id is leaked
- CVE-2024-2902 Tenda AC7 WifiGuestSet fromSetWifiGusetBasic stack-based overflow
- CVE-2024-29019 ESPHome vulnerable to Authentication bypass via Cross site request forgery
- CVE-2024-29018 External DNS requests from 'internal' networks could lead to data exfiltration
- CVE-2024-29015 Privilege escalation in Intel(R) VTune(TM) Profiler software
- CVE-2024-29014 Code injection in NetExtender
- CVE-2024-29013 Memory corruption in SonicOS
- CVE-2024-29012 Memory corruption in SonicOS
- CVE-2024-29011 Hardcoded credentials in GMS
- CVE-2024-29010 XML external entity in GMS
- CVE-2024-2901 Tenda AC7 openSchedWifi setSchedWifi stack-based overflow
- CVE-2024-29009 Cross-site request forgery in easy-popup-show
- CVE-2024-29008 Apache CloudStack: The extraconfig feature can be abused to load hypervisor resources on a VM instance
- CVE-2024-29007 Server-side request forgery in Apache CloudStack
- CVE-2024-29006 Apache CloudStack: x-forwarded-for HTTP header parsed by default
- CVE-2024-29004 SolarWinds Platform Stored XSS Vulnerability
- CVE-2024-29003 SolarWinds Platform Cross Site Scripting Vulnerability
- CVE-2024-29001 SolarWinds Platform SWQL Injection Vulnerability
- CVE-2024-29000 SolarWinds Platform Reflected XSS Vulnerability
- CVE-2024-2900 Tenda AC7 saveParentControlInfo stack-based overflow
- CVE-2024-28999 SolarWinds Platform Race Condition Vulnerability
- CVE-2024-28996 SolarWinds Platform SWQL Injection Vulnerability
- CVE-2024-28995 SolarWinds Serv-U Path Traversal Vulnerability
- CVE-2024-28993 SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability
- CVE-2024-28992 SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability
- CVE-2024-28991 SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution
- CVE-2024-28990 SolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability
- CVE-2024-2899 Tenda AC7 WifiExtraSet fromSetWirelessRepeat stack-based overflow
- CVE-2024-28989 SolarWinds Web Help Desk Cryptographic Key Management Vulnerability
- CVE-2024-28988 SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability
- CVE-2024-28987 SolarWinds Web Help Desk Hardcoded Credential
- CVE-2024-28986 SolarWinds Web Help Desk Deserialization of Untrusted Data
- CVE-2024-28984 Cross-site scripting in Pentaho Business Analytics Server
- CVE-2024-28983 Cross-site scripting in Pentaho Business Analytics Server
- CVE-2024-28982 Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference
- CVE-2024-28981 Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials
- CVE-2024-28980 Weak cryptography in RecoverPoint for Virtual Machines
- CVE-2024-2898 Tenda AC7 SetStaticRouteCfg fromSetRouteStatic stack-based overflow
- CVE-2024-28979 Cross-site scripting in Dell OpenManage Enterprise
- CVE-2024-28978 Missing authorization in Dell OpenManage Enterprise
- CVE-2024-28977 Path traversal in Dell Repository Manager (DRM)
- CVE-2024-28976 Path traversal in Dell Repository Manager (DRM)
- CVE-2024-28974 Weak cryptography in Data Protection Advisor
- CVE-2024-28973 Cross-site scripting in PowerProtect DD
- CVE-2024-28972 Weak cryptography in InsightIQ
- CVE-2024-28971 Information disclosure in Update Manager Plugin
- CVE-2024-28970 Memory corruption in CPG BIOS
- CVE-2024-2897 Tenda AC7 WriteFacMac formWriteFacMac os command injection
- CVE-2024-28969 Missing authorization in Secure Connect Gateway-Appliance
- CVE-2024-28968 Missing authorization in Secure Connect Gateway-Appliance
- CVE-2024-28967 Missing authorization in Secure Connect Gateway-Appliance
- CVE-2024-28966 Missing authorization in Secure Connect Gateway-Appliance
- CVE-2024-28965 Missing authorization in Secure Connect Gateway-Appliance
- CVE-2024-28964 Deserialization in Common Event Enabler
- CVE-2024-28963 Information disclosure in Wyse Proprietary OS (Modern ThinOS)
- CVE-2024-28962 Denial of service in Dell Update (DU)
- CVE-2024-28961 Information disclosure in Dell OpenManage Enterprise
- CVE-2024-28960 Other in arm:mbed crypto
- CVE-2024-2896 Tenda AC7 WifiWpsStart formWifiWpsStart stack-based overflow
- CVE-2024-28957 Weak cryptography in Cente IPv6
- CVE-2024-28956 Information disclosure in Intel(R) Processors
- CVE-2024-28955 Information disclosure in Multiple MFPs (multifunction printers)
- CVE-2024-28954 Misconfiguration in Intel(R) Graphics Driver installers
- CVE-2024-28953 Privilege escalation in EMON software
- CVE-2024-28952 Privilege escalation in Intel(R) IPP software for Windows
- CVE-2024-28951 Arkcompiler runtime has a use after free vulnerability
- CVE-2024-28950 Privilege escalation in Intel(R) oneAPI Math Kernel Library software for Windows
- CVE-2024-2895 Tenda AC7 WifiWpsOOB formWifiWpsOOB stack-based overflow
- CVE-2024-28949 DoS via a large number of User Preferences
- CVE-2024-28948 Advantech ADAM-5630 Cross-Site Request Forgery
- CVE-2024-28947 Privilege escalation in Intel(R) Server Board S2600ST Family firmware
- CVE-2024-28945 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28944 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28943 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28942 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28941 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28940 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-2894 Tenda AC7 SetNetControlList formSetQosBand stack-based overflow
- CVE-2024-28939 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28938 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28937 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28936 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28935 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28934 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28933 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28932 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28931 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28930 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-2893 Tenda AC7 SetOnlineDevName formSetDeviceName stack-based overflow
- CVE-2024-28929 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28928 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- CVE-2024-28927 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28926 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability