Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 398 of 521.
- CVE-2024-28673 Cross-site request forgery in dedecms:dedecms
- CVE-2024-28672 Cross-site request forgery in dedecms:dedecms
- CVE-2024-28671 Cross-site request forgery in dedecms:dedecms
- CVE-2024-28670 Cross-site request forgery in dedecms:dedecms
- CVE-2024-2867 Cross-site scripting in Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
- CVE-2024-28669 Cross-site request forgery in dedecms:dedecms
- CVE-2024-28668 Cross-site request forgery in dedecms:dedecms
- CVE-2024-28667 Cross-site request forgery in dedecms:dedecms
- CVE-2024-28666 Cross-site request forgery in dedecms:dedecms
- CVE-2024-28665 Cross-site request forgery in dedecms:dedecms
- CVE-2024-28662 Cross-site scripting in piwigo:piwigo
- CVE-2024-2865 SQLi in Mergen Soft Quality Management System
- CVE-2024-28640 Memory corruption in totolink:a7000r firmware
- CVE-2024-2864 WordPress Youzify - Buddypress Moderation plugin <= 1.2.5 - Unauthenticated Cross Site Scripting (XSS) vulnerability
- CVE-2024-28639 Memory corruption in totolink:a7000r firmware
- CVE-2024-28635 Cross-site scripting in Survey Creator
- CVE-2024-2863 Path traversal via file upload on LG LED Assistant
- CVE-2024-28627 An issue in Flipsnack v.18/03/2024 allows a local attacker to obtain sensitive information via the reader.gz.js file.
- CVE-2024-28623 Cross-site scripting in ritecms:ritecms
- CVE-2024-2862 Password reset vulnerability without authorization on LG LED Assistant
- CVE-2024-28613 SQL injection in mayurik:php task management system
- CVE-2024-2861 ProfilePress <= 4.15.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ProfilePress User Panel Widget
- CVE-2024-28607 Server-side request forgery in IP-Utils
- CVE-2024-2860 Auth bypass in Brocade SAnnav
- CVE-2024-28595 SQL injection in walterjnr1:employee management system
- CVE-2024-28593 Cross-site Scripting in Moodle Chat
- CVE-2024-2859 By default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859)
- CVE-2024-28589 An issue was discovered in Axigen Mail Server for Windows versions 10.5.18 and before, allows local low-privileged attackers to execute arbi
- CVE-2024-28584 Null dereference in freeimage project:freeimage
- CVE-2024-28583 Memory corruption in freeimage project:freeimage
- CVE-2024-28582 Memory corruption in freeimage project:freeimage
- CVE-2024-28581 Memory corruption in freeimage project:freeimage
- CVE-2024-28580 Memory corruption in freeimage project:freeimage
- CVE-2024-2858 Simple Buttons Creator <= 1.04 - Aribtrary Button Deletion via CSRF
- CVE-2024-28579 Memory corruption in freeimage project:freeimage
- CVE-2024-28578 Memory corruption in freeimage project:freeimage
- CVE-2024-28577 Null dereference in freeimage project:freeimage
- CVE-2024-28576 Memory corruption in freeimage project:freeimage
- CVE-2024-28575 Memory corruption in freeimage project:freeimage
- CVE-2024-28574 Memory corruption in freeimage project:freeimage
- CVE-2024-28573 Memory corruption in freeimage project:freeimage
- CVE-2024-28572 Memory corruption in freeimage project:freeimage
- CVE-2024-28571 Memory corruption in freeimage project:freeimage
- CVE-2024-28570 Memory corruption in freeimage project:freeimage
- CVE-2024-2857 Simple Buttons Creator <= 1.04 - Unauthenticated Stored XSS
- CVE-2024-28569 Memory corruption in freeimage project:freeimage
- CVE-2024-28568 Memory corruption in freeimage project:freeimage
- CVE-2024-28567 Memory corruption in freeimage project:freeimage
- CVE-2024-28566 Memory corruption in freeimage project:freeimage
- CVE-2024-28565 Memory corruption in freeimage project:freeimage
- CVE-2024-28564 Memory corruption in freeimage project:freeimage
- CVE-2024-28563 Memory corruption in freeimage project:freeimage
- CVE-2024-28562 Memory corruption in freeimage project:freeimage
- CVE-2024-28560 SQL injection in niushop:b2b2c multi-business
- CVE-2024-2856 Tenda AC10 SetSysTimeCfg fromSetSysTime stack-based overflow
- CVE-2024-28559 SQL injection in niushop:b2b2c multi-business
- CVE-2024-28558 SQL injection in mayurik:petrol pump management
- CVE-2024-28557 SQL injection in mayurik:php task management system
- CVE-2024-28556 SQL injection in mayurik:php task management system
- CVE-2024-28553 Memory corruption in tenda:ac18 firmware
- CVE-2024-28551 Memory corruption in tenda:ac18 firmware
- CVE-2024-28550 Memory corruption in tenda:ac18 firmware
- CVE-2024-2855 Tenda AC15 SetSysTimeCfg fromSetSysTime stack-based overflow
- CVE-2024-28547 Memory corruption in tenda:ac18 firmware
- CVE-2024-28545 Command injection in tenda:ac18 firmware
- CVE-2024-2854 Tenda AC18 setsambacfg formSetSambaConf os command injection
- CVE-2024-28537 Memory corruption in tenda:ac18 firmware
- CVE-2024-28535 Memory corruption in tenda:ac18 firmware
- CVE-2024-2853 Tenda AC10U setsambacfg formSetSambaConf os command injection
- CVE-2024-28521 SQL injection in netentsec:application security gateway firmware
- CVE-2024-28520 File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an at
- CVE-2024-2852 Tenda AC15 saveParentControlInfo stack-based overflow
- CVE-2024-28519 A kernel handle leak issue in ProcObsrvesx.sys 4.0.0.49 in MicroWorld Technologies Inc eScan Antivirus could allow privilege escalation for low-privileged users.
- CVE-2024-28515 Buffer Overflow vulnerability in CSAPP_Lab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker to execute arbitrary code via the lab3 of cs
- CVE-2024-2851 Tenda AC15 setsambacfg formSetSambaConf os command injection
- CVE-2024-2850 Tenda AC15 saveParentControlInfo stack-based overflow
- CVE-2024-2849 SourceCodester Simple File Manager unrestricted upload
- CVE-2024-2848 Responsive <= 5.0.2 - Missing Authorization to HTML Injection
- CVE-2024-2847 WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-2846 Visual Footer Credit Remover <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2024-28458 Null dereference in swftools:swftools
- CVE-2024-28456 Cross-site scripting in campcodes:online marriage registration system
- CVE-2024-2845 Cross-site scripting in BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor
- CVE-2024-28447 Memory corruption in szlbt:lbt-t300-mini1 firmware
- CVE-2024-28446 Memory corruption in szlbt:lbt-t300-mini1 firmware
- CVE-2024-28442 Path traversal in yealink:vp59 firmware
- CVE-2024-28441 File upload in magicflue:magicflue
- CVE-2024-2844 Easy Appointments <= 3.11.18 - Insufficient Authorization
- CVE-2024-28436 Cross Site Scripting vulnerability in D-Link DAP products DAP-2230, DAP-2310, DAP-2330, DAP-2360, DAP-2553, DAP-2590, DAP-2690, DAP-2695, DA
- CVE-2024-28435 Server-side request forgery in twenty:twenty
- CVE-2024-28434 Cross-site scripting in twenty:twenty
- CVE-2024-28432 Cross-site request forgery in dedecms:dedecms
- CVE-2024-28431 Cross-site request forgery in dedecms:dedecms
- CVE-2024-28430 Cross-site request forgery in dedecms:dedecms
- CVE-2024-2843 WooCommerce Customers Manager < 30.1 - User Deletion via CSRF
- CVE-2024-28429 Cross-site request forgery in dedecms:dedecms
- CVE-2024-28425 File upload in linkedin:greykite
- CVE-2024-28424 Deserialization in zenml:zenml
- CVE-2024-28423 File upload in feluelle:airflow-diagrams
- CVE-2024-28421 SQL injection in cobub:razor