Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 396 of 521.
- CVE-2024-28925 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-28924 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-28923 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-28922 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-28921 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-28920 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-2892 Tenda AC7 setcfm formSetCfm stack-based overflow
- CVE-2024-28919 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-28917 Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability
- CVE-2024-28916 Xbox Gaming Services Elevation of Privilege Vulnerability
- CVE-2024-28915 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28914 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28913 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28912 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28911 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28910 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-2891 Tenda AC7 QuickIndex formQuickIndex stack-based overflow
- CVE-2024-28909 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28908 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28907 Microsoft Brokering File System Elevation of Privilege Vulnerability
- CVE-2024-28906 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28905 Microsoft Brokering File System Elevation of Privilege Vulnerability
- CVE-2024-28904 Microsoft Brokering File System Elevation of Privilege Vulnerability
- CVE-2024-28903 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-28902 Windows Remote Access Connection Manager Information Disclosure Vulnerability
- CVE-2024-28901 Windows Remote Access Connection Manager Information Disclosure Vulnerability
- CVE-2024-28900 Windows Remote Access Connection Manager Information Disclosure Vulnerability
- CVE-2024-2890 WordPress Tumult Hype Animations plugin <= 1.9.12 - Arbitrary File Upload vulnerability
- CVE-2024-28899 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-28898 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-28897 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-28896 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-28895 Cross-site scripting in 'Yahoo! JAPAN' App for Android
- CVE-2024-28894 Memory corruption in Cente IPv6
- CVE-2024-28893 Code injection in HP software packages (SoftPaqs)
- CVE-2024-28892 GoCast OS Command Injection vulnerability
- CVE-2024-28891 Delta Electronics DIAEnergie SQL injection
- CVE-2024-28890 File upload in Forminator
- CVE-2024-2889 WordPress WP-Lister Lite for Amazon plugin <= 2.6.11 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-28889 BIG-IP SSL vulnerability
- CVE-2024-28888 Use after free in Foxit Reader
- CVE-2024-28887 Privilege escalation in Intel(R) IPP software
- CVE-2024-28886 Command injection in UTAU
- CVE-2024-28885 Information disclosure in Intel(R) QAT Engine for OpenSSL software
- CVE-2024-28883 BIG-IP APM browser network access VPN client vulnerability
- CVE-2024-28882 Denial of service in OpenVPN
- CVE-2024-28881 Privilege escalation in Intel(R) Fortran Compiler Classic software
- CVE-2024-28880 Path traversal in MosP kintai kanri
- CVE-2024-2888 WordPress Post and Page Builder by BoldGrid plugin <= 1.26.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-28878 IOSIX IO-1020 Micro ELD Download of Code Without Integrity Check
- CVE-2024-28877 MicroDicom DICOM Viewer Stack-based Buffer Overflow
- CVE-2024-28876 Privilege escalation in Intel(R) MPI Library software
- CVE-2024-28875 Hardcoded credentials in WBR-6012
- CVE-2024-28872 Incorrect TLS certificate validation can lead to escalated privileges
- CVE-2024-28871 Excessive CPU used on malformed traffic
- CVE-2024-28870 Suricata uses excessive resource use in malformed ssh traffic parsing
- CVE-2024-2887 Memory corruption in Chrome
- CVE-2024-28869 Possible denial of service vulnerability with Content-length header in Traefik
- CVE-2024-28868 Umbraco possible user enumeration vulnerability
- CVE-2024-28867 Swift Prometheus un-sanitized metric name or labels can be used to take over exported metrics
- CVE-2024-28866 GoCD vulnerable to reflected Cross-site Scripting possible on server loading page during start-up
- CVE-2024-28865 django-wiki denial of service via regular expression
- CVE-2024-28864 [TagAwareCipher] - Decryption Failure (Regex Match)
- CVE-2024-28863 node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation
- CVE-2024-28862 ROTP 6.2.2 and 6.2.1 has 0666 permissions for the .rb files.
- CVE-2024-28861 Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder
- CVE-2024-28860 Insecure IPsec transport encryption in Cilium
- CVE-2024-2886 Use after free in Chrome
- CVE-2024-28859 Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency
- CVE-2024-28855 ZITADEL vulnerable to improper HTML sanitization
- CVE-2024-28854 Slow loris vulnerability with default configuration in tls-listener
- CVE-2024-28853 Ampache Stored XSS
- CVE-2024-28852 Ampache has multiple reflective XSS vulnerabilities
- CVE-2024-28851 Elevation of privilege in Snowflake Hive MetaStore Connector Helper script
- CVE-2024-28850 WP Crontrol possible RCE when combined with a pre-condition
- CVE-2024-2885 Use after free in Chrome
- CVE-2024-28849 Proxy-Authorization header kept across hosts in follow-redirects
- CVE-2024-28848 SpEL Injection in `GET /api/v1/policies/validation/condition/<expr>` in OpenMetadata
- CVE-2024-28847 SpEL Injection in `PUT /api/v1/events/subscriptions` in OpenMetadata
- CVE-2024-2884 Memory corruption in Chrome
- CVE-2024-28836 Denial of service in trustedfirmware:mbed tls
- CVE-2024-28835 Gnutls: potential crash during chain building/verification
- CVE-2024-28834 Gnutls: vulnerable to minerva side-channel information leak
- CVE-2024-28833 Missing brute-force protection for two factor authentication
- CVE-2024-28832 XSS in Crash Report Page
- CVE-2024-28831 XSS in confirmation pop-up
- CVE-2024-28830 Automation user secrets written to audit log
- CVE-2024-2883 Use after free in Chrome
- CVE-2024-28829 Privilege escalation in mk_informix plugin
- CVE-2024-28828 1-Click compromize via CSRF
- CVE-2024-28827 Privilege escalation in Windows agent
- CVE-2024-28826 Unrestricted upload and download paths in check_sftp
- CVE-2024-28825 Brute-force protection ineffective for some login methods
- CVE-2024-28824 Privilege escalation in mk_informix plugin
- CVE-2024-28823 Amazon AWS aws-js-s3-explorer (aka AWS JavaScript S3 Explorer) 1.0.0 allows XSS via a crafted S3 bucket name to index.html.
- CVE-2024-28820 Buffer overflow in the extract_openvpn_cr function in openvpn-cr.c in openvpn-auth-ldap (aka the Three Rings Auth-LDAP plugin for OpenVPN) 2
- CVE-2024-2882 Missing Authorization in SDG Technologies PnPSCADA
- CVE-2024-28818 Information disclosure in samsung:exynos 1080 firmware
- CVE-2024-28816 Student Information Chatbot a0196ab allows SQL injection via the username to the login function in index.php.
- CVE-2024-28815 A vulnerability in the BluStar component of Mitel InAttend 2.6 SP4 through 2.7 and CMG 8.5 SP4 through 8.6 could allow access to sensitive i