Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 408 of 521.
- CVE-2024-27232 Memory corruption in Android
- CVE-2024-27231 Memory corruption in Android
- CVE-2024-27230 Memory corruption in Android
- CVE-2024-2723 SQL injection vulnerability in the CIGESv2 system
- CVE-2024-27229 Null dereference in Android
- CVE-2024-27228 Memory corruption in Android
- CVE-2024-27227 Memory corruption in Android
- CVE-2024-27226 Memory corruption in Android
- CVE-2024-27225 Memory corruption in Android
- CVE-2024-27224 Memory corruption in Android
- CVE-2024-27223 Memory corruption in Android
- CVE-2024-27222 Privilege escalation in Android
- CVE-2024-27221 Memory corruption in Android
- CVE-2024-27220 Memory corruption in Android
- CVE-2024-2722 SQL injection vulnerability in the CIGESv2 system
- CVE-2024-27219 Memory corruption in Android
- CVE-2024-27218 Memory corruption in Android
- CVE-2024-27217 MSDP has a use after free vulnerability
- CVE-2024-27213 Use after free in Android
- CVE-2024-27212 Memory corruption in Android
- CVE-2024-27211 Memory corruption in Android
- CVE-2024-27210 Memory corruption in Android
- CVE-2024-2721 WordPress Social Media Share Buttons plugin <= 2.1.0 - PHP Object Injection vulnerability
- CVE-2024-27209 Memory corruption in Android
- CVE-2024-27208 Memory corruption in Android
- CVE-2024-27207 Security feature bypass in Android
- CVE-2024-27206 Memory corruption in Android
- CVE-2024-27205 Use after free in Android
- CVE-2024-27204 Memory corruption in Android
- CVE-2024-27202 BIG-IP TMUI XSS vulnerability
- CVE-2024-27201 Other in OAS Platform
- CVE-2024-27200 Privilege escalation in Intel(R) Granulate(TM) software
- CVE-2024-2720 Campcodes Complete Online DJ Booking System aboutus.php cross site scripting
- CVE-2024-27199 JetBrains TeamCity Relative Path Traversal
- CVE-2024-27198 JetBrains TeamCity Authentication Bypass
- CVE-2024-27197 WordPress BeePress plugin <= 6.9.8 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-27196 WordPress postMash – custom post order plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-27195 WordPress Watermark RELOADED plugin <= 1.3.5 - CSRF to XSS vulnerability
- CVE-2024-27194 WordPress Fontific plugin <= 0.1.6 - CSRF to XSS vulnerability
- CVE-2024-27193 WordPress PayU India plugin <= 3.8.8 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-27192 WordPress Configure SMTP Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-27191 WordPress Slivery Extender plugin <= 1.0.2 - Remote Code Execution (RCE) vulnerability
- CVE-2024-27190 WordPress Download Media plugin <= 1.4.2 - Broken Access Control vulnerability
- CVE-2024-2719 Campcodes Complete Online DJ Booking System admin-profile.php cross site scripting
- CVE-2024-27189 WordPress WP Social Widget plugin <= 2.2.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-27188 WordPress Breeze plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-27187 [20240804] - Core - Improper ACL for backend profile view
- CVE-2024-27186 [20240803] - Core - XSS in HTML Mail Templates
- CVE-2024-27185 [20240802] - Core - Cache Poisoning in Pagination
- CVE-2024-27184 [20240801] - Core - Inadequate validation of internal URLs
- CVE-2024-27183 Extension - dj-extensions.com - XSS vulnerability in DJ-HelpfulArticles component for Joomla 1.0.0-1.1.0
- CVE-2024-27182 Apache Linkis Basic management services: Engine material management Arbitrary file deletion vulnerability
- CVE-2024-27181 Apache Linkis Basic management services: Privilege Escalation Attack vulnerability
- CVE-2024-27180 TOCTOU vulnerability
- CVE-2024-2718 Campcodes Complete Online DJ Booking System booking-bwdates-reports-details.php cross site scripting
- CVE-2024-27179 Session disclosure inside the log files
- CVE-2024-27178 Remote Code Execution
- CVE-2024-27177 Remote Code Execution
- CVE-2024-27176 Remote Code Execution
- CVE-2024-27175 Local File Inclusion
- CVE-2024-27174 insecure upload
- CVE-2024-27173 insecure upload
- CVE-2024-27172 Remote Code Execution
- CVE-2024-27171 Insecure permissions
- CVE-2024-27170 Hardcoded credentials for WebDAV access
- CVE-2024-2717 Campcodes Complete Online DJ Booking System booking-search.php cross site scripting
- CVE-2024-27169 Lack of authentication
- CVE-2024-27168 Hardcoded keys used to generate authentication cookies
- CVE-2024-27167 Insecure permissions
- CVE-2024-27166 Insecure permissions
- CVE-2024-27165 Local Privilege Escalation
- CVE-2024-27164 Hardcoded credentials
- CVE-2024-27163 Leak of admin password and passwords
- CVE-2024-27162 DOM-based XSS
- CVE-2024-27161 Hardcoded password used to encrypt files
- CVE-2024-27160 Hardcoded password used to encrypt logs and use of weak cipher
- CVE-2024-2716 Campcodes Complete Online DJ Booking System contactus.php cross site scripting
- CVE-2024-27159 Hardcoded password used to encrypt logs
- CVE-2024-27158 Hardcoded root password
- CVE-2024-27157 Leak of authentication sessions in secure logs
- CVE-2024-27156 Leak of authentication sessions in secure logs
- CVE-2024-27155 Local Privilege Escalation and Remote Code Execution using insecure permissions
- CVE-2024-27154 Passwords are stored in clear-text logs.
- CVE-2024-27153 Local Privilege Escalation and Remote Code Execution
- CVE-2024-27152 Local Privilege Escalation and Remote Code Execution using insecure permissions
- CVE-2024-27151 Local Privilege Escalation and Remote Code Execution using insecure permissions
- CVE-2024-27150 Local Privilege Escalation and Remote Code Execution using insecure LD_LIBRARY_PATH
- CVE-2024-2715 Campcodes Complete Online DJ Booking System user-search.php cross site scripting
- CVE-2024-27149 Local Privilege Escalation and Remote Code Execution using insecure LD_PRELOAD
- CVE-2024-27148 Local Privilege Escalation and Remote Code Execution using insecure PATH
- CVE-2024-27147 Local Privilege Escalation and Remote Code Execution using snmpd
- CVE-2024-27146 Lack of privileges separation
- CVE-2024-27145 Multiple Post-authenticated Remote Code Execution
- CVE-2024-27144 Pre-authenticated Remote Code Execution
- CVE-2024-27143 Pre-authenticated Remote Code Execution
- CVE-2024-27142 Pre-authenticated XXE injection
- CVE-2024-27141 Pre-authenticated Time-Based Blind XXE injection
- CVE-2024-27140 Apache Archiva: reflected XSS
- CVE-2024-2714 Campcodes Complete Online DJ Booking System booking-bwdates-reports-details.php sql injection
- CVE-2024-27139 Apache Archiva: incorrect authentication potentially leading to account takeover