Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 419 of 521.
- CVE-2024-26003 PHOENIX CONTACT: DoS of the control agent in CHARX Series
- CVE-2024-26002 PHOENIX CONTACT: File ownership manipulation in CHARX Series
- CVE-2024-26001 PHOENIX CONTACT: Out of bounds write only memory access
- CVE-2024-26000 PHOENIX CONTACT: Out of bounds read only memory access
- CVE-2024-25999 PHOENIX CONTACT: Privilege escalation in the OCPP agent service
- CVE-2024-25998 PHOENIX CONTACT: Command injection in the OCPP Service
- CVE-2024-25997 PHOENIX CONTACT: Log injection in CHARX Series
- CVE-2024-25996 PHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX Series
- CVE-2024-25995 PHOENIX CONTACT: Remote code execution in CHARX Series
- CVE-2024-25994 PHOENIX CONTACT: Unintended script file upload in CHARX Series
- CVE-2024-25993 Memory corruption in Android
- CVE-2024-25992 Memory corruption in Android
- CVE-2024-25991 Memory corruption in Android
- CVE-2024-25990 Race condition in Android
- CVE-2024-2599 Unrestricted Upload of File with Dangerous Type vulnerability in AMSS++
- CVE-2024-25989 Memory corruption in Android
- CVE-2024-25988 Memory corruption in Android
- CVE-2024-25987 Memory corruption in Android
- CVE-2024-25986 Memory corruption in Android
- CVE-2024-25985 Use after free in Android
- CVE-2024-25984 Memory corruption in Android
- CVE-2024-25983 Msa-24-0006: idor on dashboard comments block
- CVE-2024-25982 Msa-24-0005: csrf risk in language import utility
- CVE-2024-25981 Msa-24-0004: forum export did not respect activity group settings
- CVE-2024-25980 Msa-24-0003: h5p attempts report did not respect activity group settings
- CVE-2024-2598 Cross-Site Scripting (XSS) in AMSS++
- CVE-2024-25979 Msa-24-0002: forum search accepted random parameters in its url
- CVE-2024-25978 Msa-24-0001: denial of service risk in file picker unzip functionality
- CVE-2024-25977 Session Fixation
- CVE-2024-25976 Reflected Cross-Site-Scripting (XSS)
- CVE-2024-25975 Arbitrary File Overwrite
- CVE-2024-25974 Stored Cross-Site Scripting (XSS) within the Media Center
- CVE-2024-25973 Multiple Stored Cross-Site Scripting Vulnerabilities
- CVE-2024-25972 Misconfiguration in OET-213H-BTS1
- CVE-2024-25971 XML external entity in PowerProtect Data Manager
- CVE-2024-25970 Other in PowerScale OneFS
- CVE-2024-2597 Cross-Site Scripting (XSS) in AMSS++
- CVE-2024-25969 Denial of service in PowerScale OneFS
- CVE-2024-25968 Weak cryptography in PowerScale OneFS
- CVE-2024-25967 Privilege escalation in PowerScale OneFS
- CVE-2024-25966 Denial of service in PowerScale OneFS
- CVE-2024-25965 Path traversal in PowerScale OneFS
- CVE-2024-25964 Denial of service in PowerScale OneFS
- CVE-2024-25963 Weak cryptography in PowerScale OneFS
- CVE-2024-25962 Missing authorization in InsightIQ
- CVE-2024-25961 Privilege escalation in PowerScale OneFS
- CVE-2024-25960 Information disclosure in PowerScale OneFS
- CVE-2024-2596 Cross-Site Scripting (XSS) in AMSS++
- CVE-2024-25959 Information disclosure in PowerScale OneFS
- CVE-2024-25958 Misconfiguration in Grab for Windows
- CVE-2024-25957 Information disclosure in Grab for Windows
- CVE-2024-25956 Information disclosure in Grab for Windows
- CVE-2024-25955 Command injection in Virtual Appliance (vApp) Manager
- CVE-2024-25954 Denial of service in PowerScale OneFS
- CVE-2024-25953 Path traversal in PowerScale OneFS
- CVE-2024-25952 Path traversal in PowerScale OneFS
- CVE-2024-25951 Command injection in Integrated Dell Remote Access Controller 8
- CVE-2024-2595 Cross-Site Scripting (XSS) in AMSS++
- CVE-2024-25949 Privilege escalation in SmartFabric OS10 Software
- CVE-2024-25948 Memory corruption in iDRAC Service Module (iSM)
- CVE-2024-25947 Memory corruption in iDRAC Service Module (iSM)
- CVE-2024-25946 Command injection in Virtual Appliance (vApp) Manager
- CVE-2024-25944 Path traversal in Dell OpenManage Enterprise
- CVE-2024-25943 Weak cryptography in Integrated Dell Remote Access Controller 9
- CVE-2024-25942 Memory corruption in PowerEdge Platform
- CVE-2024-25941 jail(2) information leak
- CVE-2024-25940 bhyveload(8) host file access
- CVE-2024-2594 Cross-Site Scripting (XSS) in AMSS++
- CVE-2024-25939 Memory corruption in 3rd Generation Intel(R) Xeon(R) Scalable Processors
- CVE-2024-25938 Use after free in Foxit Reader
- CVE-2024-25937 Delta Electronics DIAEnergie SQL injection
- CVE-2024-25936 WordPress SoundCloud Shortcode plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-25935 WordPress RegistrationMagic plugin <= 5.2.5.9 - Broken Access Control vulnerability
- CVE-2024-25934 WordPress FormFacade plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-25933 WordPress PeproDev Ultimate Invoice plugin <= 1.9.7 - Sensitive Data Exposure vulnerability
- CVE-2024-25932 WordPress Change Table Prefix plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-25931 WordPress Heureka Plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2024-25930 WordPress Custom Order Statuses for WooCommerce Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2024-2593 Cross-Site Scripting (XSS) in AMSS++
- CVE-2024-25929 WordPress Product Catalog Mode For Woocommerce plugin <= 5.0.5 - Broken Access Control vulnerability
- CVE-2024-25928 WordPress Sitepact's Contact Form 7 Extension For Klaviyo Plugin <= 1.0.5 is vulnerable to SQL Injection
- CVE-2024-25927 WordPress postMash – custom post order Plugin <= 1.2.0 is vulnerable to SQL Injection
- CVE-2024-25926 WordPress Widgets Controller plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-25925 File upload in WooCommerce Easy Checkout Field Editor, Fees & Discounts
- CVE-2024-25924 WordPress WP Testimonials plugin <= 1.4.3 - Auth. SQL Injection vulnerability
- CVE-2024-25923 WordPress Community by PeepSo plugin <= 6.2.7.0 - Sensitive Data Exposure via Log File vulnerability
- CVE-2024-25922 WordPress Peach Payments Gateway plugin <= 3.1.9 - Broken Access Control vulnerability
- CVE-2024-25921 WordPress Action Network plugin <= 1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-25920 WordPress WP SMS plugin <= 6.3.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-2592 SQL injection vulnerability in AMSS++
- CVE-2024-25919 WordPress Custom Field Template plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-25918 WordPress InstaWP Connect plugin <= 0.1.0.8 - Remote Code Execution vulnerability
- CVE-2024-25917 WordPress WP Setup Wizard plugin <= 1.0.8.1 - Auth. Full Database Download Vulnerability
- CVE-2024-25916 WordPress My Calendar plugin <= 3.4.23 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-25915 WordPress Pexels: Free Stock Photos Plugin <= 1.2.2 is vulnerable to Server Side Request Forgery (SSRF)
- CVE-2024-25914 WordPress SMTP Mail Plugin <= 1.3.20 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2024-25913 WordPress MoveTo Plugin <= 6.2 is vulnerable to Arbitrary File Upload
- CVE-2024-25912 WordPress MoveTo plugin <= 6.2 - Unauthenticated Arbitrary WordPress Settings Change vulnerability
- CVE-2024-25911 WordPress MoveTo plugin <= 6.2 - Unauthenticated Arbitrary File Deletion vulnerability
- CVE-2024-25910 WordPress MoveTo Plugin <= 6.2 is vulnerable to SQL Injection