Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 424 of 521.
- CVE-2024-25270 Missing authorization in mirapolis:lms
- CVE-2024-2527 MAGESH-K21 Online-College-Event-Hall-Reservation-System rooms.php sql injection
- CVE-2024-25269 Denial of service in struktur:libheif
- CVE-2024-25262 texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump.
- CVE-2024-25260 Null dereference in elfutils project:elfutils
- CVE-2024-2526 MAGESH-K21 Online-College-Event-Hall-Reservation-System rooms.php cross site scripting
- CVE-2024-25255 Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build System module.
- CVE-2024-25254 Memory corruption in mcafee:superscan
- CVE-2024-25253 Driver Booster v10.6 was discovered to contain a buffer overflow via the Host parameter under the Customize proxy module.
- CVE-2024-25251 Missing authorization in carmelo:agro-school management system
- CVE-2024-25250 SQL injection in carmelo:agro-school management system
- CVE-2024-2525 MAGESH-K21 Online-College-Event-Hall-Reservation-System receipt.php cross site scripting
- CVE-2024-25249 Code injection in he3app:he3 app
- CVE-2024-25248 SQL injection in niushop:b2b2c multi-business
- CVE-2024-25247 SQL injection in niushop:b2b2c multi-business
- CVE-2024-2524 MAGESH-K21 Online-College-Event-Hall-Reservation-System receipt.php sql injection
- CVE-2024-25239 SQL injection in walterjnr1:employee management system
- CVE-2024-2523 MAGESH-K21 Online-College-Event-Hall-Reservation-System booktime.php cross site scripting
- CVE-2024-25228 Command injection in vinchin:vinchin backup and recovery
- CVE-2024-25227 SQL injection in abocms:abo.cms
- CVE-2024-25226 Cross-site scripting in code-projects:simple admin panel
- CVE-2024-25225 Cross-site scripting in code-projects:simple admin panel
- CVE-2024-25224 Cross-site scripting in code-projects:simple admin panel
- CVE-2024-25223 SQL injection in code-projects:simple admin panel
- CVE-2024-25222 SQL injection in code-projects:task manager
- CVE-2024-25221 Cross-site scripting in code-projects:task manager
- CVE-2024-25220 SQL injection in code-projects:task manager
- CVE-2024-2522 MAGESH-K21 Online-College-Event-Hall-Reservation-System booktime.php sql injection
- CVE-2024-25219 Cross-site scripting in code-projects:task manager
- CVE-2024-25218 Cross-site scripting in code-projects:task manager
- CVE-2024-25217 SQL injection in oretnom23:online medicine ordering system
- CVE-2024-25216 SQL injection in sherlock:employee management system
- CVE-2024-25215 SQL injection in sherlock:employee management system
- CVE-2024-25214 SQL injection in sherlock:employee management system
- CVE-2024-25213 SQL injection in sherlock:employee management system
- CVE-2024-25212 SQL injection in sherlock:employee management system
- CVE-2024-25211 SQL injection in rems:simple expense tracker app
- CVE-2024-25210 SQL injection in rems:simple expense tracker app
- CVE-2024-2521 MAGESH-K21 Online-College-Event-Hall-Reservation-System bookdate.php cross site scripting
- CVE-2024-25209 SQL injection in rems:barangay population monitoring system
- CVE-2024-25208 Cross-site scripting in barangay management system project:barangay management system
- CVE-2024-25207 Cross-site scripting in barangay management system project:barangay management system
- CVE-2024-25202 Cross-site scripting in phpgurukul:user registration \& login and user management system
- CVE-2024-25201 Memory corruption in espruino:espruino
- CVE-2024-25200 Memory corruption in espruino:espruino
- CVE-2024-2520 MAGESH-K21 Online-College-Event-Hall-Reservation-System bookdate.php sql injection
- CVE-2024-25199 Use after free in opennav:nav2
- CVE-2024-25198 Use after free in opennav:nav2
- CVE-2024-25197 Null dereference in opennav:nav2
- CVE-2024-25196 Memory corruption in opennav:nav2
- CVE-2024-25191 Weak cryptography in zihanggao:php-jwt
- CVE-2024-25190 Weak cryptography in glitchedpolygons:l8w8jwt
- CVE-2024-2519 MAGESH-K21 Online-College-Event-Hall-Reservation-System navbar.php cross site scripting
- CVE-2024-25189 Weak cryptography in debian:debian linux
- CVE-2024-25187 Server-side request forgery in xiaocheng-keji:71cms
- CVE-2024-25183 Path traversal in vvveb:vvvebjs
- CVE-2024-25182 File upload in vvveb:vvvebjs
- CVE-2024-25181 Server-side request forgery in vvveb:vvvebjs
- CVE-2024-25180 Code injection in pdfmake project:pdfmake
- CVE-2024-2518 MAGESH-K21 Online-College-Event-Hall-Reservation-System book_history.php cross site scripting
- CVE-2024-25178 Memory corruption in luajit:luajit
- CVE-2024-25177 Null dereference in luajit:luajit
- CVE-2024-25176 Memory corruption in luajit:luajit
- CVE-2024-25175 Cross-site scripting in kickdler:kickdler
- CVE-2024-25170 Mezzanine allows attackers to bypass access controls via manipulating the Host header
- CVE-2024-2517 MAGESH-K21 Online-College-Event-Hall-Reservation-System book_history.php sql injection
- CVE-2024-25169 Mezzanine allows attackers to bypass access control mechanisms
- CVE-2024-25168 SQL injection in dingflow:snow
- CVE-2024-25167 Cross-site scripting in markerhub:eblog
- CVE-2024-25166 Cross-site scripting in xiaocheng-keji:71cms
- CVE-2024-25165 Memory corruption in swftools:swftools
- CVE-2024-25164 Path traversal in idurarapp:idurar
- CVE-2024-2516 MAGESH-K21 Online-College-Event-Hall-Reservation-System home.php sql injection
- CVE-2024-25157 Authentication bypass in GoAnywhere MFT prior to 7.6.0
- CVE-2024-25156 Path traversal in GoAnywhere MFT 7.4.1 and Earlier
- CVE-2024-25155 Reflected Cross-Site Scripting (XSS) in FileCatalyst Direct 3.8.8 and earlier
- CVE-2024-25154 Path Traversal in FileCatalyst Direct 3.8.8 and Earlier
- CVE-2024-25153 Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114
- CVE-2024-25152 Liferay Portal Message Board widget and Liferay DXP vulnerable to stored Cross-site Scripting
- CVE-2024-25151 Liferay Portal Calendar module and Liferay DXP vulnerable to Cross-site Scripting, content spoofing
- CVE-2024-25150 Liferay Portal and Liferay DXP Information Disclosure Vulnerability in the Control Panel
- CVE-2024-2515 MAGESH-K21 Online-College-Event-Hall-Reservation-System home.php cross site scripting
- CVE-2024-25149 Liferay Portal and Liferay DXP Does Not Properly Restrict Membership to Child Site Based on Parent Site Options
- CVE-2024-25148 Liferay Portal vulnerable to user impersonation
- CVE-2024-25147 Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting
- CVE-2024-25146 Liferay Portal allows attackers to discover the existence of sites
- CVE-2024-25145 Liferay Portal stored cross-site scripting (XSS) vulnerability
- CVE-2024-25144 Liferay Portal denial-of-service vulnerability
- CVE-2024-25143 Liferay Portal denial of service (memory consumption)
- CVE-2024-25142 Apache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache
- CVE-2024-25141 Improper Certificate Validation in apache airflow mongo hook
- CVE-2024-25140 Misconfiguration in rustdesk:rustdesk
- CVE-2024-2514 MAGESH-K21 Online-College-Event-Hall-Reservation-System login.php sql injection
- CVE-2024-25139 Integer overflow in tp-link:omada er605 firmware
- CVE-2024-25138 AutomationDirect C-MORE EA9 HMI Plaintext Storage of a Password
- CVE-2024-25137 AutomationDirect C-MORE EA9 HMI Stack-based Buffer Overflow
- CVE-2024-25136 AutomationDirect C-MORE EA9 HMI Path Traversal
- CVE-2024-25133 Openshift-dedicated: hive: rce through aws/kubernetes client configuration leads to privilege escalation
- CVE-2024-25132 Openshift-dedicated: hive: hibernation controller denial of service
- CVE-2024-25131 Openshift-dedicated: must-gather-operator: yaml template injection leads to privilege escalation