Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 407 of 521.
- CVE-2024-27335 Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-27334 Kofax Power PDF JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-27333 Kofax Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-27332 PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-27331 PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-27330 PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-2733 Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element
- CVE-2024-27329 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-27328 PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-27327 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-27326 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-27325 PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-27324 PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-27323 PDF-XChange Editor Updater Improper Certificate Validation Remote Code Execution Vulnerability
- CVE-2024-27322 Deserialization in R
- CVE-2024-27321 Refuel Autolab Eval Injection vulnerability
- CVE-2024-27320 Refuel Autolab Eval Injection vulnerability
- CVE-2024-2732 Themify Shortcodes <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-27319 Onnx Out-of-bounds Read vulnerability
- CVE-2024-27318 Onnx Directory Traversal vulnerability
- CVE-2024-27317 Apache Pulsar: Pulsar Functions Worker's Archive Extraction Vulnerability Allows Unauthorized File Modification
- CVE-2024-27316 Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames
- CVE-2024-27315 Apache Superset: Improper error handling on alerts
- CVE-2024-27314 Stored XSS Vulnerability
- CVE-2024-27313 XSS Vulnerability
- CVE-2024-27312 Authorization vulnerability in PAM360
- CVE-2024-27311 Arbitrary file writing
- CVE-2024-27310 DOS Vulnerability
- CVE-2024-2731 Improper Access Control Issues Lead to Sensitive Data Exposure in Mautic
- CVE-2024-27309 Apache Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode
- CVE-2024-27308 Mio's tokens for named pipes may be delivered after deregistration
- CVE-2024-27307 JSONata expression can pollute the "Object" prototype
- CVE-2024-27306 aiohttp vulnerable to XSS on index pages for static file handling
- CVE-2024-27305 SMTP smuggling in aiosmtpd
- CVE-2024-27304 pgx SQL Injection via Protocol Message Size Overflow
- CVE-2024-27303 electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)
- CVE-2024-27302 Authorization Bypass Through User-Controlled Key in go-zero
- CVE-2024-27301 Privilege Escalation Abusing installer in SupportApp
- CVE-2024-27300 phpMyFAQ Stored XSS at user email
- CVE-2024-2730 Predictable Page Indexing Might Lead to Sensitive Data Exposure in Mautic
- CVE-2024-27299 phpMyFAQ SQL Injection at "Save News"
- CVE-2024-27298 Parse Server literalizeRegexPart SQL Injection
- CVE-2024-27297 Nix Corruption of fixed-output derivations
- CVE-2024-27296 Directus version number disclosure
- CVE-2024-27295 Directus MySQL accent insensitive email matching
- CVE-2024-27294 dp-golang Go installation could be owned by wrong user
- CVE-2024-27292 Docassemble unauthorized access through URL manipulation
- CVE-2024-27291 Docassemble open redirect
- CVE-2024-27290 Docassemble HTML and javascript injection
- CVE-2024-2729 Otter Blocks < 2.6.6 - Contributor+ Stored XSS
- CVE-2024-27289 pgx SQL Injection via Line Comment Creation
- CVE-2024-27288 1Panel open source panel project has an unauthorized vulnerability.
- CVE-2024-27287 ESPHome vulnerable to stored Cross-site Scripting in edit configuration file API
- CVE-2024-27286 Moving single messages from public to private streams leaves them accessible
- CVE-2024-27285 YARD's default template vulnerable to Cross-site Scripting in generated frames.html
- CVE-2024-27284 cassandra-rs non-idiomatic use of iterators leads to use after free
- CVE-2024-27283 File upload in veritas:ediscovery platform
- CVE-2024-27282 An issue was discovered in Ruby 3.x through 3.3.0.
- CVE-2024-27281 RDoc RCE vulnerability with .rdoc_options
- CVE-2024-27280 StringIO buffer overread vulnerability
- CVE-2024-2728 Information exposure vulnerability in the CIGESv2 system
- CVE-2024-27279 Path traversal in a-blog cms
- CVE-2024-27278 Cross-site scripting in OpenPNE Plugin "opTimelinePlugin"
- CVE-2024-27277 IBM Storage Protect Plus Server information disclosure
- CVE-2024-27275 IBM i privilege escalation
- CVE-2024-27273 IBM AIX privilege escalation
- CVE-2024-27270 IBM WebSphere Application Server Liberty cross-site scripting
- CVE-2024-2727 Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system
- CVE-2024-27269 IBM QRadar SIEM information disclosure
- CVE-2024-27268 IBM WebSphere Application Server Liberty denial of service
- CVE-2024-27267 IBM SDK, Java Technology Edition denial of service
- CVE-2024-27266 IBM Maximo Application Suite XML external entity injection
- CVE-2024-27265 IBM Integration Bus for z/OS cross-site request forgery
- CVE-2024-27264 IBM Performance Tools for i privilege escalation
- CVE-2024-27263 IBM Sterling B2B Integrator information disclosure
- CVE-2024-27261 IBM Storage Defender - Resiliency Service privilege escalation
- CVE-2024-27260 IBM AIX command execution
- CVE-2024-2726 Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system
- CVE-2024-27257 IBM OpenPages information disclosure
- CVE-2024-27256 IBM MQ Operator information disclosure
- CVE-2024-27255 IBM MQ Container information disclosure
- CVE-2024-27254 IBM Db2 for Linux, UNIX and Windows denial of service
- CVE-2024-27253 IBM Engineering Requirements Management DOORS Next is impacted by vulnerability in Reviews delete request
- CVE-2024-2725 Exposure of Sensitive Information vulnerability in the CIGESv2 system
- CVE-2024-27247 Zoom Desktop Client for macOS - Improper Privilege Management
- CVE-2024-27246 Zoom Workplace Apps and SDKs - Use After Free
- CVE-2024-27245 Zoom Workplace Apps and SDKs - Buffer Overflow
- CVE-2024-27244 Zoom Workplace VDI App for Windows - Insufficient Verification of Data Authenticity
- CVE-2024-27243 Zoom Apps - Buffer Overflow
- CVE-2024-27242 Zoom Desktop Client for Linux - Cross Site Scripting
- CVE-2024-27241 Zoom Apps and SDKs - Improper Input Validation
- CVE-2024-27240 Zoom Apps for Windows - Improper Input Validation
- CVE-2024-2724 SQL injection vulnerability in the CIGESv2 system
- CVE-2024-27239 Zoom Workplace Apps and SDKs - Divide By Zero
- CVE-2024-27238 Zoom Apps and SDKs - Race Condition
- CVE-2024-27237 Information disclosure in Android
- CVE-2024-27236 Memory corruption in Android
- CVE-2024-27235 Memory corruption in Android
- CVE-2024-27234 Memory corruption in Android
- CVE-2024-27233 Privilege escalation in Android