Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 426 of 521.
- CVE-2024-25004 Memory corruption in 9bis:kitty
- CVE-2024-25003 Memory corruption in 9bis:kitty
- CVE-2024-25002 Command injection in Network Synchronizer Enterprise
- CVE-2024-25000 Path traversal in Avalanche
- CVE-2024-2500 ColorMag <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name
- CVE-2024-24999 Path traversal in Avlanche
- CVE-2024-24998 Path traversal in Avalanche
- CVE-2024-24997 Path traversal in Avalanche
- CVE-2024-24996 Memory corruption in Avalanche
- CVE-2024-24995 Race condition in Avalanche
- CVE-2024-24994 Path traversal in Avalanche
- CVE-2024-24993 Race condition in Avalanche
- CVE-2024-24992 Path traversal in Avalanche
- CVE-2024-24991 Null dereference in Avalanche
- CVE-2024-24990 NGINX HTTP/3 QUIC vulnerability
- CVE-2024-2499 Cross-site scripting in Squelch Tabs and Accordions Shortcodes
- CVE-2024-24989 NGINX HTTP/3 QUIC vulnerability
- CVE-2024-24988 Excessive resource consumption when sending long emoji names in user custom status
- CVE-2024-24986 Privilege escalation in Intel(R) Ethernet Network Controllers and Adapters
- CVE-2024-24985 Privilege escalation in Intel(R) processors with Intel(R) ACTM
- CVE-2024-24984 Denial of service in Intel(R) Wireless Bluetooth(R) products for Windows
- CVE-2024-24983 Security feature bypass in Intel(R) Ethernet Network Controllers and Adapters E810 Series
- CVE-2024-24981 Privilege escalation in UEFI firmware for some Intel(R) Server M50FCP Family products
- CVE-2024-24980 Security feature bypass in 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors
- CVE-2024-24978 Denial of service in TvRock
- CVE-2024-24977 Privilege escalation in Intel(R) License Manager for FLEXlm product software
- CVE-2024-24976 Denial of service in OAS Platform
- CVE-2024-24975 Denial of Service for mobile app users due to automatic code highlighting
- CVE-2024-24974 Missing authorization in OpenVPN 2
- CVE-2024-24973 Denial of service in Intel(R) Distribution for GDB software
- CVE-2024-24972 Memory corruption in Controller 6000 and Controller 7000
- CVE-2024-24970 Privilege escalation in HP Display Control
- CVE-2024-2497 RaspAP raspap-webgui HTTP POST Request provider.php code injection
- CVE-2024-24968 Denial of service in Intel(R) Processors
- CVE-2024-24966 F5OS vulnerability
- CVE-2024-24964 Privilege escalation in SKYSEA Client View
- CVE-2024-24963 Memory corruption in P3-550E
- CVE-2024-24962 Memory corruption in P3-550E
- CVE-2024-2496 Libvirt: null pointer dereference in udevconnectlistallinterfaces()
- CVE-2024-24959 Memory corruption in P3-550E
- CVE-2024-24958 Memory corruption in P3-550E
- CVE-2024-24957 Memory corruption in P3-550E
- CVE-2024-24956 Memory corruption in P3-550E
- CVE-2024-24955 Memory corruption in P3-550E
- CVE-2024-24954 Memory corruption in P3-550E
- CVE-2024-2495 Cryptographic key in plain text vulnerability in FriendlyElec's FriendlyWrt
- CVE-2024-24947 Memory corruption in P3-550E
- CVE-2024-24946 Memory corruption in P3-550E
- CVE-2024-24945 Cross-site scripting in remyandrade:travel journal using php and mysql with source code
- CVE-2024-24943 Denial of service in Toolbox App
- CVE-2024-24942 Path traversal in TeamCity
- CVE-2024-24941 Information disclosure in IntelliJ IDEA
- CVE-2024-24940 Path traversal in IntelliJ IDEA
- CVE-2024-2494 Libvirt: negative g_new0 length can lead to unbounded memory allocation
- CVE-2024-24939 Information disclosure in Rider
- CVE-2024-24938 Path traversal in TeamCity
- CVE-2024-24937 Cross-site scripting in TeamCity
- CVE-2024-24936 Missing authorization in TeamCity
- CVE-2024-24935 WordPress Basic Log Viewer Plugin <= 1.0.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2024-24934 WordPress Elementor plugin <= 3.19.0 - Arbitrary File Deletion and Phar Deserialization vulnerability
- CVE-2024-24933 WordPress Honeypot for WP Comment Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24932 WordPress VK Poster Group Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24931 WordPress Before After Image Slider WP Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24930 WordPress Buttons Shortcode and Widget Plugin <= 1.16 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-2493 Session Hijacking Vulnerability in Hitachi Ops Center Analyzer
- CVE-2024-24929 WordPress WP Contact Form Plugin <= 1.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2024-24928 WordPress Content Cards Plugin <= 0.9.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24927 WordPress Brooklyn Theme <= 4.9.7.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24926 WordPress Brooklyn Theme <= 4.9.7.6 is vulnerable to PHP Object Injection
- CVE-2024-24925 Memory corruption in Simcenter Femap
- CVE-2024-24924 Memory corruption in Simcenter Femap
- CVE-2024-24923 Memory corruption in Simcenter Femap
- CVE-2024-24922 Memory corruption in Simcenter Femap
- CVE-2024-24921 Memory corruption in Simcenter Femap
- CVE-2024-24920 Memory corruption in Simcenter Femap
- CVE-2024-2492 Cross-site scripting in PowerPack Addons for Elementor (Free Widgets, Extensions and Templates)
- CVE-2024-24919 Check Point Quantum Security Gateways Information Disclosure
- CVE-2024-24916 DLL-HiJacking
- CVE-2024-24915 SmartConsole Sensitive Credential Exposure via Memory Dump
- CVE-2024-24914 Code injection in ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management
- CVE-2024-24912 Local privilege escalation in Harmony Endpoint Security Client for Windows via crafted DLL file
- CVE-2024-24911 Out of Bounds read in the CPCA process on Check Point Management Server
- CVE-2024-24910 Privilege escalation in ZoneAlarmExtremeSecurityNextGen,IdentityAgentforWindows,IdentityAgentforWindowsTerminalServer
- CVE-2024-2491 PowerPack Addons for Elementor <= 2.7.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via *_html_tag*
- CVE-2024-24909 Command injection in OpenManage
- CVE-2024-24908 Path traversal in Data Manager Appliance Software (DMAS)
- CVE-2024-24907 Cross-site scripting in Secure Connect Gateway (SCG) Policy Manager
- CVE-2024-24906 Cross-site scripting in Secure Connect Gateway (SCG) Policy Manager
- CVE-2024-24905 Cross-site scripting in Secure Connect Gateway (SCG) Policy Manager
- CVE-2024-24904 Cross-site scripting in Secure Connect Gateway (SCG) Policy Manager
- CVE-2024-24903 Auth bypass in Secure Connect Gateway (SCG) Policy Manager
- CVE-2024-24902 Missing authorization in RecoverPoint for Virtual Machines
- CVE-2024-24901 Other in PowerScale OneFS
- CVE-2024-24900 Missing authorization in Secure Connect Gateway (SCG) Policy Manager
- CVE-2024-2490 Tenda AC18 openSchedWifi setSchedWifi stack-based overflow
- CVE-2024-24899 Command injection in aops-zeus
- CVE-2024-24898 Information Leakage in kernel
- CVE-2024-24897 Remote command execution in A-Tune-Collector
- CVE-2024-24892 Unauthorized RCE in migration-tools
- CVE-2024-24891 Information Leakage in kernel