Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 404 of 521.
- CVE-2024-27813 Privilege escalation in macOS
- CVE-2024-27812 Denial of service in visionOS
- CVE-2024-27811 Privilege escalation in iOS and iPadOS
- CVE-2024-27810 Path traversal in iOS and iPadOS
- CVE-2024-2781 Cross-site scripting in Elementor Website Builder Pro
- CVE-2024-27809 Information disclosure in macOS
- CVE-2024-27808 Memory corruption in Safari
- CVE-2024-27807 Security feature bypass in iOS and iPadOS
- CVE-2024-27806 Information disclosure in iOS and iPadOS
- CVE-2024-27805 Information disclosure in iOS and iPadOS
- CVE-2024-27804 Denial of service in iOS and iPadOS
- CVE-2024-27803 Security feature bypass in iOS and iPadOS
- CVE-2024-27802 Memory corruption in iOS and iPadOS
- CVE-2024-27801 Privilege escalation in iOS and iPadOS
- CVE-2024-27800 Denial of service in iOS and iPadOS
- CVE-2024-2780 Campcodes Online Marriage Registration System admin-profile.php cross site scripting
- CVE-2024-27799 Missing authorization in iOS and iPadOS
- CVE-2024-27798 Privilege escalation in macOS
- CVE-2024-27796 Privilege escalation in iOS and iPadOS
- CVE-2024-27795 Security feature bypass in macOS
- CVE-2024-27794 Cross-site scripting in FileMaker Server
- CVE-2024-27793 Code injection in iTunes for Windows
- CVE-2024-27792 Security feature bypass in macOS
- CVE-2024-27791 Memory corruption in iOS and iPadOS
- CVE-2024-27790 Missing authorization in FileMaker Server
- CVE-2024-2779 Campcodes Online Marriage Registration System application-bwdates-reports-details.php cross site scripting
- CVE-2024-27789 Business logic in iOS and iPadOS
- CVE-2024-27785 Code injection in FortiAIOps
- CVE-2024-27784 Information disclosure in FortiAIOps
- CVE-2024-27783 Cross-site request forgery in FortiAIOps
- CVE-2024-27782 Auth bypass in FortiAIOps
- CVE-2024-27781 Cross-site scripting in FortiSandbox
- CVE-2024-27780 Cross-site scripting in FortiSIEM
- CVE-2024-2778 Campcodes Online Marriage Registration System search.php cross site scripting
- CVE-2024-27779 Auth bypass in FortiIsolator
- CVE-2024-27778 Command injection in FortiSandbox
- CVE-2024-27776 MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CVE-2024-27775 SysAid - CWE-918: Server-Side Request Forgery (SSRF)
- CVE-2024-27774 Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-259: Use of Hard-coded Password
- CVE-2024-27773 Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-348: Use of Less Trusted Source
- CVE-2024-27772 Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-78: 'OS Command Injection'
- CVE-2024-27771 Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'
- CVE-2024-27770 Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-23: Relative Path Traversal
- CVE-2024-2777 Campcodes/PHPGurukul Online Marriage Registration System application-bwdates-reports-details.php sql injection
- CVE-2024-27769 Information disclosure in Unistream Unilogic
- CVE-2024-27768 Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'
- CVE-2024-27767 Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-287: Improper Authentication
- CVE-2024-27766 Code injection in mariadb:mariadb
- CVE-2024-27765 Path traversal in jeewms:jeewms
- CVE-2024-27764 Privilege escalation in jeewms:jeewms
- CVE-2024-27763 XPixelGroup BasicSR Command Injection
- CVE-2024-2776 Campcodes Online Marriage Registration System search.php sql injection
- CVE-2024-27758 RPyC's missing security check results in code execution when using numpy.array on the server-side.
- CVE-2024-27757 Cross-site scripting in flusity:flusity
- CVE-2024-27756 Code injection in glpi-project:glpi
- CVE-2024-27752 Cross-site scripting in cszcms:csz cms
- CVE-2024-2775 Campcodes Online Marriage Registration System user-profile.php cross site scripting
- CVE-2024-27747 File upload in mayurik:petrol pump management
- CVE-2024-27746 SQL injection in mayurik:petrol pump management
- CVE-2024-27744 Cross-site scripting in mayurik:petrol pump management
- CVE-2024-27743 Cross-site scripting in mayurik:petrol pump management
- CVE-2024-2774 Campcodes Online Marriage Registration System search.php sql injection
- CVE-2024-27734 Cross-site scripting in cszcms:csz cms
- CVE-2024-27733 File Upload vulnerability in Byzro Network Smart s42 Management Platform v.S42 allows a local attacker to execute arbitrary code via the use
- CVE-2024-27731 Cross-site scripting in friendica:friendica
- CVE-2024-27730 Missing authorization in friendica:friendica
- CVE-2024-2773 Campcodes Online Marriage Registration System search.php cross site scripting
- CVE-2024-27729 Cross-site scripting in friendica:friendica
- CVE-2024-27728 Cross-site scripting in friendica:friendica
- CVE-2024-2772 Cross-site scripting in Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
- CVE-2024-27719 Cross-site scripting in rems:faq management system
- CVE-2024-27718 SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information
- CVE-2024-27717 Cross-site request forgery in eskooly:eskooly
- CVE-2024-27716 Cross Site Scripting vulnerability in Eskooly Web Product v.3.0 and before allows a remote attacker to execute arbitrary code via the messag
- CVE-2024-27715 Privilege escalation in eskooly:eskooly
- CVE-2024-27713 Privilege escalation in eskooly:eskooly
- CVE-2024-27712 Privilege escalation in eskooly:eskooly
- CVE-2024-27711 Privilege escalation in eskooly:eskooly
- CVE-2024-27710 Privilege escalation in eskooly:eskooly
- CVE-2024-2771 Missing authorization in Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
- CVE-2024-27709 SQL Injection vulnerability in Eskooly Web Product v.3.0 allows a remote attacker to execute arbitrary code via the searchby parameter of th
- CVE-2024-27708 Cross-site scripting in airc:mynet
- CVE-2024-27707 Server Side Request Forgery (SSRF) vulnerability in hcengineering Huly Platform v.0.6.202 allows attackers to run arbitrary code via upload of crafted SVG file.
- CVE-2024-27706 Cross Site Scripting vulnerability in Huly Platform v.0.6.202 allows attackers to execute arbitrary code via upload of crafted SVG file to issues.
- CVE-2024-27705 Cross-site scripting in leantime:leantime
- CVE-2024-27703 Cross-site scripting in leantime:leantime
- CVE-2024-2770 Campcodes Complete Online Beauty Parlor Management System contact-us.php sql injection
- CVE-2024-27694 Cross-site request forgery in flycms project:flycms
- CVE-2024-2769 Campcodes Complete Online Beauty Parlor Management System admin-profile.php sql injection
- CVE-2024-27689 Cross-site request forgery in codelyfe:stupid simple cms
- CVE-2024-27686 Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) allows a remote attacker to cause a denial of service (device crash) via crafted
- CVE-2024-27685 SQL injection in phpgurukul:student record system
- CVE-2024-27684 Cross-site scripting in dlink:go-rt-ac750 firmware
- CVE-2024-27683 Memory corruption in dlink:go-rt-ac750 firmware
- CVE-2024-27680 Cross-site scripting in flusity:flusity
- CVE-2024-2768 Campcodes Complete Online Beauty Parlor Management System edit-services.php sql injection
- CVE-2024-27674 Privilege escalation in macro-expert:macro expert
- CVE-2024-2767 Campcodes Complete Online Beauty Parlor Management System forgot-password.php sql injection
- CVE-2024-27668 Cross-site scripting in flusity:flusity
- CVE-2024-27665 Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting (XSS) via file upload feature in Syllabus module.