Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 397 of 521.
- CVE-2024-28813 Privilege escalation in nokia:hit 7300 firmware
- CVE-2024-28812 Hardcoded credentials in nokia:hit 7300 firmware
- CVE-2024-28811 Code injection in nokia:hit 7300 firmware
- CVE-2024-28810 Information disclosure in nokia:hit 7300 firmware
- CVE-2024-2881 Fault Injection of EdDSA signature in WolfCrypt
- CVE-2024-28809 Hardcoded credentials in nokia:hit 7300 firmware
- CVE-2024-28808 Information disclosure in nokia:hit 7300 firmware
- CVE-2024-28807 Information disclosure in nokia:hit 7300 firmware
- CVE-2024-28806 File upload in italtel:i-mcs nfv
- CVE-2024-28805 Missing authorization in italtel:i-mcs nfv
- CVE-2024-28804 Cross-site scripting in italtel:i-mcs nfv
- CVE-2024-28803 Cross-site scripting in italtel:i-mcs nfv
- CVE-2024-2880 Improper Access Control in GitLab
- CVE-2024-28799 IBM QRadar Suite Software information disclosure
- CVE-2024-28798 IBM InfoSphere Information Server cross-site scripting
- CVE-2024-28797 IBM InfoSphere Information Server cross-site scripting
- CVE-2024-28796 Cross-site scripting in ClearQuest
- CVE-2024-28795 IBM InfoSphere Information Server cross-site scripting
- CVE-2024-28794 IBM InfoSphere Information Server cross-site scripting
- CVE-2024-28793 IBM Engineering Workflow Management cross-site scripting
- CVE-2024-2879 SQL injection in LayerSlider
- CVE-2024-28787 IBM Security Verify Access information disclosure
- CVE-2024-28786 IBM QRadar SIEM information disclosure
- CVE-2024-28784 IBM QRadar cross-site scripting
- CVE-2024-28782 IBM QRadar Suite Software information disclosure
- CVE-2024-28781 IBM UrbanCode Deploy cross-site scripting
- CVE-2024-28780 IBM Cognos Controller information disclosure
- CVE-2024-2878 Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2024-28778 IBM Cognos Controller information disclosure
- CVE-2024-28777 IBM Cognos Controller code execution
- CVE-2024-28776 IBM Cognos Controller cross-site scripting
- CVE-2024-28775 IBM WebSphere Automation cross-site scripting
- CVE-2024-28772 IBM Security Directory Integrator cross-site scripting
- CVE-2024-28771 IBM Security Directory Integrator information disclosure
- CVE-2024-28770 IBM Security Directory Integrator information disclosure
- CVE-2024-2877 Vault Enterprise Leaks Sensitive HTTP Request Headers in the Audit Log When Deployed With a Performance Standby Node
- CVE-2024-28767 IBM Security Directory Integrator command execution
- CVE-2024-28766 IBM Security Directory Integrator information disclosure
- CVE-2024-28765 Security vulnerability was found in IBM Security Directory Integrator
- CVE-2024-28764 IBM WebSphere Automation CSV injection
- CVE-2024-28762 IBM Db2 denial of service
- CVE-2024-28761 IBM App Connect Enterprise HTML injection
- CVE-2024-28760 IBM App Connect Enterprise denial of service
- CVE-2024-2876 SQL injection in Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress
- CVE-2024-28759 A crafted network packet may cause a buffer overrun in Wind River VxWorks 7 through 23.09.
- CVE-2024-28757 XML external entity in fedoraproject:fedora
- CVE-2024-28756 Security feature bypass in solaredge:mysolaredge
- CVE-2024-28755 Denial of service in trustedfirmware:mbed tls
- CVE-2024-28754 raspap-webgui vulnerable to denial of service
- CVE-2024-28753 Path traversal in raspap:raspap
- CVE-2024-28752 Apache CXF SSRF Vulnerability using the Aegis databinding
- CVE-2024-28751 ifm: Hardcoded telnet credentials in Smart PLC
- CVE-2024-28750 ifm: Deleting function in Smart PLC allows command injections
- CVE-2024-28749 ifm: Writing file function in Smart PLC allows command injections
- CVE-2024-28748 ifm: Reading function in Smart PLC allows command injections
- CVE-2024-28747 ifm: Use of Hard-coded Credentials
- CVE-2024-28746 Apache Airflow: Ignored Airflow Permissions
- CVE-2024-28745 Missing authorization in 'ABEMA' App for Android
- CVE-2024-28744 Hardcoded credentials in ACERA 9010-08
- CVE-2024-28741 Cross Site Scripting vulnerability in EginDemirbilek NorthStar C2 v1 allows a remote attacker to execute arbitrary code via the login.php component.
- CVE-2024-28740 Cross-site scripting in koha:koha
- CVE-2024-2874 Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2024-28739 Cross-site scripting in koha:koha
- CVE-2024-28736 An issue in Debezium Community debezium-ui v.2.5 allows a local attacker to execute arbitrary code via the refresh page function.
- CVE-2024-28735 Missing authorization in unit4:financials by coda
- CVE-2024-28734 Cross Site Scripting vulnerability in Unit4 Financials by Coda prior to 2023Q4 allows a remote attacker to run arbitrary code via a crafted
- CVE-2024-28732 Ryu Infinite Loop vulnerability
- CVE-2024-28731 Cross-site request forgery in dlink:dwr-2000m firmware
- CVE-2024-28730 Cross-site scripting in dlink:dwr-2000m firmware
- CVE-2024-2873 User authentication bypass in wolfSSH server
- CVE-2024-28729 Command injection in dlink:dwr-2000m firmware
- CVE-2024-28728 Cross Site Scripting vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacke
- CVE-2024-28726 An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to execute arbitrary cod
- CVE-2024-28725 Cross-site scripting in yzmcms:yzmcms
- CVE-2024-28722 Cross Site Scripting vulnerability in Innovaphone myPBX v.14r1, v.13r3, v.12r2 allows a remote attacker to execute arbitrary code via the qu
- CVE-2024-2872 Swift Framework < 2024.04.30 - Contributor+ Stored XSS
- CVE-2024-28718 OpenStack magnum vulnerable to time-of-check to time-of-use (TOCTOU) attack
- CVE-2024-28717 OpenStack Storlets arbitrary code execution vulnerability
- CVE-2024-28716 An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component.
- CVE-2024-28715 Cross-site scripting in html-js:doracms
- CVE-2024-28714 SQL injection in crmeb:crmeb java
- CVE-2024-28713 File upload in mtons:mblog
- CVE-2024-28710 LimeSurvey Cross Site Scripting vulnerability
- CVE-2024-2871 Media Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via Shortcode
- CVE-2024-28709 LimeSurvey Cross Site Scripting vulnerability
- CVE-2024-2870 Swift Framework < 2024.04.30 - Reflected XSS
- CVE-2024-28699 A buffer overflow vulnerability in pdf2json v0.70 allows a local attacker to execute arbitrary code via the GString::copy() and ImgOutputDev
- CVE-2024-28698 CLSA Directory Traversal vulnerability
- CVE-2024-2869 Easy Property Listings <= 3.5.3 - Admin+ Stored XSS
- CVE-2024-28684 Cross-site request forgery in dedecms:dedecms
- CVE-2024-28683 Cross-site scripting in dedecms:dedecms
- CVE-2024-28682 Cross-site request forgery in dedecms:dedecms
- CVE-2024-28681 Cross-site request forgery in dedecms:dedecms
- CVE-2024-28680 Cross-site request forgery in dedecms:dedecms
- CVE-2024-2868 Cross-site scripting in ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
- CVE-2024-28679 Cross-site scripting in dedecms:dedecms
- CVE-2024-28678 Cross-site request forgery in dedecms:dedecms
- CVE-2024-28677 Cross-site request forgery in dedecms:dedecms
- CVE-2024-28676 Cross-site scripting in dedecms:dedecms
- CVE-2024-28675 Cross-site request forgery in dedecms:dedecms