Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 422 of 521.
- CVE-2024-25610 Liferay Portal has a Stored XSS with Blog entries (Insecure defaults)
- CVE-2024-2561 74CMS Company Logo Index.php#sendCompanyLogo unrestricted upload
- CVE-2024-25609 Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Two Forward Slashes
- CVE-2024-25608 Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Replacement Character
- CVE-2024-25607 Liferay Portal defaults to a low work factor for the default password hashing algorithm
- CVE-2024-25606 Liferay Portal has an XXE vulnerability in Java2WsddTask._format
- CVE-2024-25605 Liferay Portal and Liferay DXP Allows Templates to be Viewed via the UI or API
- CVE-2024-25604 Liferay Portal and Liferay DXP Allows Authenticated Users with View Permissions to Edit Permissions
- CVE-2024-25603 Liferay Portal's Dynamic Data Mapping module's DDMForm and Liferay DXP vulnerable to stored Cross-site Scripting
- CVE-2024-25602 Liferay Portal and Liferay DXP's Users Admin module vulnerable to stored Cross-site Scripting
- CVE-2024-25601 Liferay Portal Expando module and Liferay DXP vulnerable to stored Cross-site Scripting
- CVE-2024-25600 WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability
- CVE-2024-2560 Tenda AC18 SysToolRestoreSet fromSysToolRestoreSet cross-site request forgery
- CVE-2024-25599 WordPress Seriously Simple Podcasting plugin <= 3.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-25598 WordPress Elementor Addons by Livemesh plugin <= 8.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-25597 WordPress Ultimate Reviews plugin <= 3.2.8 - Unauthenticated Cross Site Scripting (XSS) vulnerability
- CVE-2024-25596 WordPress Doofinder for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-25595 WordPress Defender Security plugin <= 4.4.1 - IP Restriction Bypass vulnerability
- CVE-2024-25594 WordPress MyWaze Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-25593 WordPress NEX-Forms plugin <= 8.5.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-25592 WordPress Broken Link Checker plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-25591 WordPress WP Editor plugin <=1.2.7 - Sensitive Data Exposure vulnerability
- CVE-2024-25590 Crafted responses can lead to a denial of service due to cache inefficiencies in the Recursor
- CVE-2024-2559 Tenda AC18 SysToolReboot fromSysToolReboot cross-site request forgery
- CVE-2024-25584 Other in OX Dovecot Pro
- CVE-2024-25583 Crafted responses can lead to a denial of service in Recursor if recursive forwarding is configured
- CVE-2024-25582 Cross-site scripting in OX App Suite
- CVE-2024-25581 Transfer requests received over DoH can lead to a denial of service in DNSdist
- CVE-2024-25580 Memory corruption in qt:qt
- CVE-2024-2558 Tenda AC18 execCommand formexeCommand stack-based overflow
- CVE-2024-25579 Command injection in WMC-2LX2-B
- CVE-2024-25578 MicroDicom DICOM Viewer Out-of-Bounds Write
- CVE-2024-25576 Privilege escalation in Intel(R) FPGA products
- CVE-2024-25575 Memory corruption in Foxit Reader
- CVE-2024-25574 Delta Electronics DIAEnergie SQL Injection
- CVE-2024-25573 Stored Cross-Site Scripting in Administrative Console Context
- CVE-2024-25572 Cross-site request forgery in Ninja Forms
- CVE-2024-25571 Denial of service in Intel(R) SPS firmware before SPS E5 06.01.04.059.0
- CVE-2024-2557 kishor-23 Food Waste Management System admin.php improper authorization
- CVE-2024-25569 Memory corruption in Grassroot DICOM
- CVE-2024-25568 Command injection in WMC-X1800GST-B
- CVE-2024-25567 Delta Electronics DIAEnergie Path traversal
- CVE-2024-25566 Open Redirect in PingAM
- CVE-2024-25565 Denial of service in Intel(R) Xeon(R) Processors
- CVE-2024-25563 Information disclosure in Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi
- CVE-2024-25562 Memory corruption in Intel(R) Distribution for GDB software
- CVE-2024-25561 Misconfiguration in Intel(R) HID Event Filter software installers
- CVE-2024-25560 TMM Vulnerability
- CVE-2024-2556 SourceCodester Employee Task Management System attendance-info.php sql injection
- CVE-2024-25559 Open redirect in a-blog cms
- CVE-2024-25552 Wiesemann & Theis: Multiple products prone to unquoted search path
- CVE-2024-25551 Cross-site scripting in oretnom23:simple student attendance system
- CVE-2024-2555 SourceCodester Employee Task Management System update-admin.php sql injection
- CVE-2024-25545 Code injection in weave:weave desktop
- CVE-2024-2554 SourceCodester Employee Task Management System update-employee.php sql injection
- CVE-2024-25533 SQL injection in ruvar:ruvaroa
- CVE-2024-25532 SQL injection in ruvar:ruvaroa
- CVE-2024-25531 SQL injection in ruvar:ruvaroa
- CVE-2024-25530 SQL injection in ruvar:ruvaroa
- CVE-2024-2553 SourceCodester Product Review Rating System Rate Product cross site scripting
- CVE-2024-25529 SQL injection in ruvar:ruvaroa
- CVE-2024-25528 SQL injection in ruvar:ruvaroa
- CVE-2024-25527 SQL injection in ruvar:ruvaroa
- CVE-2024-25526 SQL injection in ruvar:ruvaroa
- CVE-2024-25525 SQL injection in ruvar:ruvaroa
- CVE-2024-25524 SQL injection in ruvar:ruvaroa
- CVE-2024-25523 SQL injection in ruvar:ruvaroa
- CVE-2024-25522 SQL injection in ruvar:ruvaroa
- CVE-2024-25521 SQL injection in ruvar:ruvaroa
- CVE-2024-25520 SQL injection in ruvar:ruvaroa
- CVE-2024-2552 PAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)
- CVE-2024-25519 SQL injection in ruvar:ruvaroa
- CVE-2024-25518 SQL injection in ruvar:ruvaroa
- CVE-2024-25517 SQL injection in ruvar:ruvaroa
- CVE-2024-25515 SQL injection in ruvar:ruvaroa
- CVE-2024-25514 SQL injection in ruvar:ruvaroa
- CVE-2024-25513 SQL injection in ruvar:ruvaroa
- CVE-2024-25512 SQL injection in ruvar:ruvaroa
- CVE-2024-25511 SQL injection in ruvar:ruvaroa
- CVE-2024-25510 SQL injection in ruvar:ruvaroa
- CVE-2024-2551 PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet
- CVE-2024-25509 SQL injection in ruvar:ruvaroa
- CVE-2024-25508 SQL injection in ruvar:ruvaroa
- CVE-2024-25507 SQL injection in ruvar:ruvaroa
- CVE-2024-25506 Cross Site Scripting vulnerability in Process Maker, Inc ProcessMaker before 4.0 allows a remote attacker to run arbitrary code via control
- CVE-2024-25503 Cross Site Scripting (XSS) vulnerability in Advanced REST Client v.17.0.9 allows a remote attacker to execute arbitrary code and obtain sens
- CVE-2024-25502 Path traversal in flusity:flusity
- CVE-2024-25501 Code injection in winmail:winmail
- CVE-2024-2550 PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted Packet
- CVE-2024-2548 Path Traversal in parisneo/lollms-webui
- CVE-2024-2547 Tenda AC18 R7WebsSecurityHandler stack-based overflow
- CVE-2024-25469 SQL injection in crmeb:crmeb java
- CVE-2024-25468 Command injection in totolink:x5000r firmware
- CVE-2024-25466 React Native Document Picker Directory Traversal vulnerability
- CVE-2024-25461 Path traversal in creatio:crm creatio
- CVE-2024-2546 Tenda AC18 fromSetWirelessRepeat stack-based overflow
- CVE-2024-25458 An issue in CYCZCAM, SHIX ZHAO, SHIXCAM A9 Camera (circuit board identifier A9-48B-V1.0) firmware v.CYCAM_48B_BC01_v87_0903 allows a remote
- CVE-2024-25454 Null dereference in axiosys:bento4
- CVE-2024-25453 Null dereference in axiosys:bento4
- CVE-2024-25452 Denial of service in axiosys:bento4