Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 423 of 521.
- CVE-2024-25451 Denial of service in axiosys:bento4
- CVE-2024-25450 Denial of service in enlightenment:imlib2
- CVE-2024-25448 Memory corruption in enlightenment:imlib2
- CVE-2024-25447 Memory corruption in enlightenment:imlib2
- CVE-2024-25446 Memory corruption in hugin project:hugin
- CVE-2024-25445 Denial of service in hugin project:hugin
- CVE-2024-25443 Use after free in hugin project:hugin
- CVE-2024-25442 Memory corruption in hugin project:hugin
- CVE-2024-2544 Popup Builder <= 4.3.0 - Missing Authorization in Multiple AJAX Actions
- CVE-2024-25438 Cross-site scripting in public knowledge project:open journal systems
- CVE-2024-25436 Cross-site scripting in sfu:open journal systems
- CVE-2024-25435 Cross-site scripting in md1health:md1patient
- CVE-2024-25434 Cross-site scripting in pkp.sfu:open journal systems
- CVE-2024-25431 Memory corruption in bytecodealliance:webassembly micro runtime
- CVE-2024-2543 Plugin Permalink <= 2.4.3.1 - Missing Authorization via get_uri_editor
- CVE-2024-25428 SQL injection in mrcms:mrcms
- CVE-2024-25423 Memory corruption in nemetschek:cinema 4d
- CVE-2024-25422 SQL injection in sem-cms:semcms
- CVE-2024-25421 Ignite Realtime Openfire privilege escalation vulnerability
- CVE-2024-25420 Ignite Realtime Openfire privilege escalation vulnerability
- CVE-2024-2542 Jotform Online Forms <= 1.3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-25419 Cross-site request forgery in flusity:flusity
- CVE-2024-25418 Cross-site request forgery in flusity:flusity
- CVE-2024-25417 Cross-site request forgery in flusity:flusity
- CVE-2024-25415 Code injection in phoenixcart:ce phoenix cart
- CVE-2024-25414 File upload in cszcms:csz cms
- CVE-2024-25413 Code injection in firebearstudio:improved import \& export
- CVE-2024-25412 Cross-site scripting in flatpress:flatpress
- CVE-2024-25411 Cross-site scripting in flatpress:flatpress
- CVE-2024-25410 File upload in flusity:flusity
- CVE-2024-2541 Popup Builder <= 4.3.6 - Sensitive Information Exposure via Imported Subscribers CSV File
- CVE-2024-25407 Weak cryptography in steve-community:steve
- CVE-2024-25400 SQL injection in intelliants:subrion
- CVE-2024-25399 Subrion CMS vulnerable to Cross Site Scripting
- CVE-2024-25398 Denial of service in srelay project:srelay
- CVE-2024-25395 Memory corruption in rt-thread:rt-thread
- CVE-2024-25394 Memory corruption in rt-thread:rt-thread
- CVE-2024-25393 Memory corruption in rt-thread:rt-thread
- CVE-2024-25392 Memory corruption in rt-thread:rt-thread
- CVE-2024-25391 Memory corruption in rt-thread:rt-thread
- CVE-2024-25390 Memory corruption in rt-thread:rt-thread
- CVE-2024-2539 Cross-site scripting in Livemesh Addons by Elementor
- CVE-2024-25389 Weak cryptography in rt-thread:rt-thread
- CVE-2024-25388 Integer overflow in rt-thread:rt-thread
- CVE-2024-25386 Directory Traversal vulnerability in DICOM® Connectivity Framework by laurelbridge before v.2.7.6b allows a remote attacker to execute arbit
- CVE-2024-25385 Use after free in flvmeta:flvmeta
- CVE-2024-25381 Cross-site scripting in emlog:emlog
- CVE-2024-2538 Permalink Manager <= 2.4.3.1 - Missing Authorization to Authenticated(Author+) Arbitrary Post Slug Modification
- CVE-2024-25376 Code injection in thesycon:tusbaudio
- CVE-2024-25373 Memory corruption in tenda:ac10 firmware
- CVE-2024-25371 Gramine before a390e33e16ed374a40de2344562a937f289be2e1 suffers from an Interface vulnerability due to mismatching SW signals vs HW exceptions.
- CVE-2024-2537 Electron Code Injection in Logi Tune macOS Application
- CVE-2024-25369 Cross-site scripting in thedaylightstudio:fuel cms
- CVE-2024-25366 Memory corruption in mz-automation:libiec61850
- CVE-2024-25360 Information disclosure in motorola:cx2l firmware
- CVE-2024-2536 Cross-site scripting in Rank Math SEO – AI SEO Tools to Dominate SEO Rankings
- CVE-2024-25359 Deserialization in zuoxingdong:lagom
- CVE-2024-25355 s3-url-parser vulnerable to Denial of Service via regexes component
- CVE-2024-25354 domain-suffix RegEx Denial of Service
- CVE-2024-25351 SQL injection in phpgurukul:zoo management system
- CVE-2024-25350 SQL injection in phpgurukul:zoo management system
- CVE-2024-2535 MAGESH-K21 Online-College-Event-Hall-Reservation-System users.php cross site scripting
- CVE-2024-25344 Cross-site scripting in itflow:itflow
- CVE-2024-25343 Security feature bypass in tenda:n300 firmware
- CVE-2024-2534 MAGESH-K21 Online-College-Event-Hall-Reservation-System users.php sql injection
- CVE-2024-25331 DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev.
- CVE-2024-2533 MAGESH-K21 Online-College-Event-Hall-Reservation-System update-users.php cross site scripting
- CVE-2024-25327 Cross Site Scripting (XSS) vulnerability in Justice Systems FullCourt Enterprise v.8.2 allows a remote attacker to execute arbitrary code vi
- CVE-2024-25325 SQL injection in walterjnr1:employee management system
- CVE-2024-25320 SQL injection in tongda2000:office anywhere
- CVE-2024-2532 MAGESH-K21 Online-College-Event-Hall-Reservation-System update-users.php sql injection
- CVE-2024-25318 SQL injection in hotel management system project:hotel management system
- CVE-2024-25316 SQL injection in hotel management system project:hotel management system
- CVE-2024-25315 SQL injection in hotel management system project:hotel management system
- CVE-2024-25314 SQL injection in hotel management system project:hotel management system
- CVE-2024-25313 Auth bypass in code-projects:simple school management system
- CVE-2024-25312 SQL injection in code-projects:simple school management system
- CVE-2024-25310 SQL injection in code-projects:simple school management system
- CVE-2024-2531 MAGESH-K21 Online-College-Event-Hall-Reservation-System update-rooms.php unrestricted upload
- CVE-2024-25309 SQL injection in code-projects:simple school management system
- CVE-2024-25308 SQL injection in code-projects:simple school management system
- CVE-2024-25307 SQL injection in code-projects:cinema seat reservation system
- CVE-2024-25306 SQL injection in code-projects:simple school management system
- CVE-2024-25305 SQL injection in code-projects:simple school management system
- CVE-2024-25304 SQL injection in code-projects:simple school management system
- CVE-2024-25302 SQL injection in remyandrade:event student attendance system
- CVE-2024-25301 Code injection in redaxo:redaxo
- CVE-2024-25300 Cross-site scripting in redaxo:redaxo
- CVE-2024-2530 MAGESH-K21 Online-College-Event-Hall-Reservation-System update-rooms.php cross site scripting
- CVE-2024-25298 Code injection in REDAXO
- CVE-2024-25297 Cross-site scripting in bludit:bludit
- CVE-2024-25294 Server-side request forgery in getrebuild:rebuild
- CVE-2024-25293 Code injection in mjml:mjml app
- CVE-2024-25292 Cross-site scripting in martinbarker:rendertune
- CVE-2024-25291 Code injection in deskfiler:deskfiler
- CVE-2024-25290 An issue in Casa Systems NL1901ACV R6B032 allows a remote attacker to execute arbitrary code via the userName parameter of the add function.
- CVE-2024-2529 MAGESH-K21 Online-College-Event-Hall-Reservation-System rooms.php unrestricted upload
- CVE-2024-25288 SQL injection in slims:senayan library management system
- CVE-2024-2528 MAGESH-K21 Online-College-Event-Hall-Reservation-System update-rooms.php sql injection
- CVE-2024-25274 File upload in xxyopen:novel-plus