Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 431 of 521.
- CVE-2024-2429 Salon booking system <= 9.6.5 - Settings Update via CSRF
- CVE-2024-2428 The Ultimate Video Player For WordPress < 2.2.3 - Contributor+ Stored XSS
- CVE-2024-24279 Auth bypass in secdiskapp:secdiskapp
- CVE-2024-24278 Code injection in teamwire:teamwire
- CVE-2024-24276 Cross-site scripting in teamwire:teamwire
- CVE-2024-24275 Cross-site scripting in teamwire:teamwire
- CVE-2024-24272 Information disclosure in itopvpn:dualsafe password manager
- CVE-2024-2427 Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527
- CVE-2024-24267 Denial of service in gpac:gpac
- CVE-2024-24266 Use after free in gpac:gpac
- CVE-2024-24265 Denial of service in gpac:gpac
- CVE-2024-24263 Use after free in chendotjs:lotos webserver
- CVE-2024-24262 Use after free in ireader:media-server
- CVE-2024-24260 Use after free in ireader:media-server
- CVE-2024-2426 Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527
- CVE-2024-24259 Denial of service in artifex:mupdf
- CVE-2024-24258 Denial of service in artifex:mupdf
- CVE-2024-24257 An issue in skteco.com Central Control Attendance Machine web management platform v.3.0 allows an attacker to obtain sensitive information v
- CVE-2024-24256 SQL injection in yonyou:yonyou
- CVE-2024-24255 Race condition in dronecode:px4 drone autopilot
- CVE-2024-24254 Race condition in dronecode:px4 drone autopilot
- CVE-2024-2425 Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527
- CVE-2024-24246 Memory corruption in fedoraproject:fedora
- CVE-2024-24245 Privilege escalation in clamxav:clamxav
- CVE-2024-2424 Rockwell Automation Input/Output Device Vulnerable to Major Nonrecoverable Fault
- CVE-2024-24230 Komm.One CMS 10.4.2.14 has a Server-Side Template Injection (SSTI) vulnerability via the Velocity template engine.
- CVE-2024-2423 UsersWP <= 1.2.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-2422 LenelS2 NetBox Improper Neutralization of Argumented Delimiters
- CVE-2024-24216 Command injection in easycorp:zentao
- CVE-2024-24215 Information disclosure in cellinx:nvt web server
- CVE-2024-24213 SQL injection in supabase:postgres
- CVE-2024-2421 LenelS2 NetBox Improper Neutralization of Special Elements
- CVE-2024-24202 File upload in easycorp:zentao
- CVE-2024-2420 LenelS2 NetBox Hardcoded Credentials
- CVE-2024-24199 Memory corruption in pymumu:smartdns
- CVE-2024-24198 Memory corruption in pymumu:smartdns
- CVE-2024-24195 Memory corruption in robertdavidgraham:robdns
- CVE-2024-24194 robdns commit d76d2e6 was discovered to contain a NULL pointer dereference via the item->tokens component at /src/conf-parse.c.
- CVE-2024-24192 Memory corruption in robertdavidgraham:robdns
- CVE-2024-2419 Keycloak: path traversal in the redirect validation
- CVE-2024-24189 Use after free in jsish:jsish
- CVE-2024-24188 Memory corruption in jsish:jsish
- CVE-2024-24186 Memory corruption in jsish:jsish
- CVE-2024-2418 SourceCodester Best POS Management System view_order.php sql injection
- CVE-2024-2417 Missing authorization in User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
- CVE-2024-24161 Path traversal in mrcms:mrcms
- CVE-2024-24160 Cross-site scripting in mrcms:mrcms
- CVE-2024-2416 Cross-Site Request Forgery vulnerability in Movistar 4G router
- CVE-2024-24157 Cross-site scripting in sir:gnuboard
- CVE-2024-24156 Cross-site scripting in sir:gnuboard
- CVE-2024-24155 Denial of service in axiosys:bento4
- CVE-2024-24150 Denial of service in libming:libming
- CVE-2024-2415 Command injection vulnerability in Movistar 4G router
- CVE-2024-24149 Denial of service in libming:libming
- CVE-2024-24148 Denial of service in libming:libming
- CVE-2024-24147 Denial of service in libming:libming
- CVE-2024-24146 Denial of service in libming:libming
- CVE-2024-24142 SQL injection in rems:school task manager
- CVE-2024-24141 SQL injection in remyandrade:school task manager
- CVE-2024-24140 SQL injection in remyandrade:daily habit tracker
- CVE-2024-2414 Unprotected Primary Channel vulnerability in Movistar 4G router
- CVE-2024-24139 SQL injection in remyandrade:login system with email verification
- CVE-2024-24136 Cross-site scripting in remyandrade:math game
- CVE-2024-24135 Cross-site scripting in remyandrade:product inventory with export to excel
- CVE-2024-24134 Cross-site scripting in remyandrade:online food menu
- CVE-2024-24133 SQL injection in atmail:atmail
- CVE-2024-24131 Cross-site scripting in superwebmailer:superwebmailer
- CVE-2024-24130 Cross-site scripting in mail2world:mail2world webmail
- CVE-2024-2413 Intumit SmartRobot - Use of Hard-coded Cryptographic Key
- CVE-2024-24122 Path traversal in wondershare:edraw
- CVE-2024-2412 Heimavista Rpage and Epage - Broken Access Control
- CVE-2024-24117 Privilege escalation in ruijie:rg-nbs2009g-p firmware
- CVE-2024-24116 Privilege escalation in ruijie:rg-nbs2009g-p firmware
- CVE-2024-24115 Cross-site scripting in cotonti:cotonti siena
- CVE-2024-24113 XXL-JOB vulnerable to Server-Side Request Forgery
- CVE-2024-24112 SQL injection in exrick:xmall
- CVE-2024-24110 SQL injection in crmeb:crmeb java
- CVE-2024-2411 MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal
- CVE-2024-24105 SQL injection in carmelo:computer science time table system
- CVE-2024-24101 SQL injection in code-projects:scholars tracking system
- CVE-2024-24100 SQL injection in carmelo:computer book store
- CVE-2024-2410 Use after free in C++ protobuf
- CVE-2024-24099 SQL injection in code-projects:scholars tracking system
- CVE-2024-24098 SQL injection in fabian:scholars tracking system
- CVE-2024-24097 Cross-site scripting in code-projects:scholars tracking system
- CVE-2024-24096 SQL injection in carmelo:computer book store
- CVE-2024-24095 SQL injection in code-projects:simple stock system
- CVE-2024-24093 SQL injection in code-projects:scholars tracking system
- CVE-2024-24092 SQL injection in code-projects:scholars tracking system
- CVE-2024-24091 Command injection in yealink:yealink meeting server
- CVE-2024-2409 MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action
- CVE-2024-2408 PHP is vulnerable to the Marvin Attack
- CVE-2024-24062 Cross-site scripting in aitangbao:springboot-manager
- CVE-2024-24061 Cross-site scripting in aitangbao:springboot-manager
- CVE-2024-24060 Cross-site scripting in aitangbao:springboot-manager
- CVE-2024-2406 Gacjie Server Upload.php index unrestricted upload
- CVE-2024-24059 File upload in aitangbao:springboot-manager
- CVE-2024-24051 Other in monoprice:select mini 3d printer v2 firmware
- CVE-2024-24050 Cross-site scripting in remyandrade:workout journal app
- CVE-2024-2405 Float menu < 6.0.1 - Menu Deletion via CSRF