Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 427 of 521.
- CVE-2024-24890 Command injection in ioprobe of gala-gopher
- CVE-2024-2489 Tenda AC18 SetNetControlList formSetQosBand stack-based overflow
- CVE-2024-24889 WordPress All 404 Pages Redirect to Homepage Plugin <= 1.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24888 WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.2.25 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2024-24887 WordPress Contest Gallery Plugin <= 21.2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2024-24886 WordPress Product Labels For Woocommerce Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24885 WordPress Woocommerce Vietnam Checkout Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24884 WordPress Contact Form 7 Connector Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2024-24883 WordPress Prime Slider plugin <= 3.11.10 - Broken Access Control on Duplicate Post vulnerability
- CVE-2024-24882 WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability
- CVE-2024-24881 WordPress WP SMS Plugin <= 6.5.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24880 WordPress Apollo13 Framework Extensions Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-2488 Tenda AC18 SetPptpServerCfg formSetPPTPServer stack-based overflow
- CVE-2024-24879 WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24878 WordPress Portugal CTT Tracking for WooCommerce plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-24877 WordPress Wonder Slider Lite Plugin <= 13.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24876 WordPress Admin Menu Editor Plugin <= 1.12 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2024-24875 WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2024-24874 WordPress Polls CP plugin <= 1.0.71 - Content Injection vulnerability
- CVE-2024-24873 WordPress Polls CP plugin <= 1.0.71 - Polls Limitation Bypass vulnerability
- CVE-2024-24872 WordPress Themify Builder Plugin <= 7.0.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2024-24871 WordPress Blocksy theme <= 2.0.19 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-24870 WordPress Advanced iFrame Plugin <= 2023.10 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-2487 Tenda AC18 SetOnlineDevName formSetDeviceName stack-based overflow
- CVE-2024-24869 WordPress Total Upkeep plugin <= 1.15.8 - Arbitrary File Download vulnerability
- CVE-2024-24868 WordPress SP Project & Document Manager Plugin <= 4.69 is vulnerable to SQL Injection
- CVE-2024-24867 WordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerability
- CVE-2024-24866 WordPress Biteship Plugin <= 2.2.24 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24865 WordPress Scroll Triggered Box Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24864 Race condition vulnerability in Linux kernel media/dvb-core in dvbdmx_write()
- CVE-2024-24861 Race condition vulnerability in Linux kernel media/xc4000 xc4000_get_frequency()
- CVE-2024-24860 Race condition vulnerability in Linux kernel bluetooth driver in {min,max}_key_size_set()
- CVE-2024-2486 Tenda AC18 QuickIndex formQuickIndex stack-based overflow
- CVE-2024-24859 Race condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set()
- CVE-2024-24858 Race condition vulnerability in Linux kernel net/bluetooth in {conn,adv}_{min,max}_interval_set()
- CVE-2024-24857 Race condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set()
- CVE-2024-24856 NULL pointer deference in acpi_db_convert_to_package of Linux acpi module
- CVE-2024-24855 Race condition vulnerability in Linux kernel scsi device driver lpfc_unregister_fcf_rescan()
- CVE-2024-24853 Privilege escalation in Intel(R) Processor
- CVE-2024-24852 Privilege escalation in Intel(R) Ethernet Adapter Complete Driver Pack
- CVE-2024-24851 Memory corruption in P3-550E
- CVE-2024-24850 WordPress Quicksand Post Filter jQuery plugin <= 3.1.1 - Broken Access Control vulnerability
- CVE-2024-2485 Tenda AC18 SetSpeedWan formSetSpeedWan stack-based overflow
- CVE-2024-24849 WordPress Quicksand Post Filter jQuery Plugin Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2024-24848 WordPress PT Sign Ups Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24847 WordPress CalculatorPro Calculators Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24846 WordPress Mighty Addons for Elementor Plugin <= 1.9.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24845 WordPress Post Thumbnail Editor plugin <= 2.4.8 - Unauthenticated Sensitive Data Exposure vulnerability
- CVE-2024-24844 WordPress PowerPack Pro for Elementor plugin <= 2.10.6 - Unauthenticated Plugin Settings Reset vulnerability
- CVE-2024-24843 WordPress PowerPack Pro for Elementor Plugin < 2.10.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2024-24842 Deserialization in Knowledge Base for Documentation, FAQs with AI Assistance
- CVE-2024-24841 WordPress Add Customer for WooCommerce Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24840 WordPress Element Pack Elementor Addons plugin <= 5.4.11 - Broken Access Control on Duplicate Post vulnerability
- CVE-2024-2484 Cross-site scripting in Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More
- CVE-2024-24839 WordPress Structured Content Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24838 WordPress Five Star Restaurant Reviews Plugin <= 2.3.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24837 Cross-Site Request Forgery (CSRF) vulnerability in FG PrestaShop, FG Drupal and FG Joomla WordPress plugins
- CVE-2024-24836 WordPress GDPR Data Request Form Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24835 WordPress BEAR plugin <= 1.1.4 - Broken Access Control vulnerability
- CVE-2024-24834 WordPress BEAR Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24833 WordPress Happy Addons for Elementor plugin <= 3.10.1 - Broken Access Control on Post Clone vulnerability
- CVE-2024-24832 WordPress EventPrime plugin <= 3.3.9 - Broken Access Control vulnerability
- CVE-2024-24831 WordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-24830 OpenObserve Privilege Escalation Vulnerability in Users API
- CVE-2024-2483 Surya2Developer Hostel Management Service Password Change change-password.php cross-site request forgery
- CVE-2024-24829 SSRF in Sentry via Phabricator integration
- CVE-2024-24828 Local Privilege Escalation in execuatables bundled by pkg
- CVE-2024-24827 No rate limits on POST /uploads endpoint in Discourse
- CVE-2024-24826 Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2
- CVE-2024-24825 TokenManager not checking permissions on cached tokens in DIRAC
- CVE-2024-24824 graylog2-server vulnerable to instantiation of arbitrary classes triggered by API request
- CVE-2024-24823 graylog2-server Session Fixation vulnerability through cookie injection
- CVE-2024-24822 Pimcore Admin Classic Bundle permissions are not getting checked when working with tags
- CVE-2024-24821 Code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php in Composer
- CVE-2024-24820 Icinga Director configuration is susceptible to Cross-Site Request Forgery
- CVE-2024-2482 Surya2Developer Hostel Management Service HTTP POST Request check_availability.php observable response discrepancy
- CVE-2024-24819 icingaweb2-module-incubator base implementation for HTML forms is susceptible to CSRF
- CVE-2024-24818 EspoCRM weakness in "Forgot password"
- CVE-2024-24817 User can see invitees in events created in PMs and private categories
- CVE-2024-24816 Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature
- CVE-2024-24815 CKEditor4 Cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection
- CVE-2024-24814 Denial of service when manipulating mod_auth_openidc_session_chunks cookie in mod_auth_openidc
- CVE-2024-24813 Frappe SQL Injection from reporting logic
- CVE-2024-24812 Frappe Authenticated Reflected Cross site scripting (XSS) in portal pages
- CVE-2024-24811 Products.SQLAlchemyDA vulnerable to unauthenticated arbitrary SQL query execution
- CVE-2024-24810 WiX is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
- CVE-2024-2481 Surya2Developer Hostel Management System manage-students.php access control
- CVE-2024-24809 Traccar vulnerable to Path Traversal: 'dir/../../filename' and Unrestricted Upload of File with Dangerous Type
- CVE-2024-24808 pyLoad open redirect vulnerability due to improper validation of the is_safe_url function
- CVE-2024-24807 Sulu is vulnerable to HTML Injection via Autocomplete Suggestion
- CVE-2024-24806 Improper Domain Lookup that potentially leads to SSRF attacks in libuv
- CVE-2024-24805 WordPress WP Dummy Content Generator plugin <= 3.1.2 - Broken Access Control vulnerability
- CVE-2024-24804 WordPress MW WP Form Plugin <= 5.0.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24803 WordPress Ultra Companion Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24802 WordPress JTRT Responsive Tables Plugin <= 4.1.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2024-24801 WordPress OWL Carousel Plugin <= 1.4.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-24800 WordPress Product Feed PRO for WooCommerce plugin <= 13.2.5 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-2480 MHA Sistemas arMHAzena Executa Page sql injection
- CVE-2024-24799 WordPress WooCommerce Box Office plugin <= 1.2.2 - Broken Access Control vulnerability
- CVE-2024-24798 WordPress Debug Plugin <= 1.10 is vulnerable to Cross Site Request Forgery (CSRF)