Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 433 of 521.
- CVE-2024-23910 Cross-site request forgery in WMC-X1800GST-B
- CVE-2024-2391 EVE-NG Lab cross site scripting
- CVE-2024-23909 Privilege escalation in Intel(R) FPGA SDK for OpenCL(TM) software technology
- CVE-2024-23908 Privilege escalation in Flexlm License Daemons for Intel(R) FPGA software
- CVE-2024-23907 Privilege escalation in Intel(R) High Level Synthesis Compiler software
- CVE-2024-23906 Cross-site scripting in Controller 6000 and Controller 7000
- CVE-2024-23905 Content-Security-Policy disabled by Red Hat Dependency Analytics Jenkins Plugin
- CVE-2024-23904 Arbitrary file read vulnerability in Jenkins Log Command Plugin
- CVE-2024-23903 Non-constant time webhook token comparison in Jenkins GitLab Branch Source Plugin
- CVE-2024-23902 CSRF vulnerability in Jenkins GitLab Branch Source Plugin
- CVE-2024-23901 Shared projects are unconditionally discovered by Jenkins GitLab Branch Source Plugin
- CVE-2024-23900 Path traversal vulnerability in Jenkins Matrix Project Plugin
- CVE-2024-2390 Local Privilege Escalation
- CVE-2024-23899 Arbitrary file read vulnerability in Git server Plugin can lead to RCE
- CVE-2024-23898 Cross-site WebSocket hijacking vulnerability in the Jenkins CLI
- CVE-2024-23897 Jenkins Command Line Interface (CLI) Path Traversal
- CVE-2024-23896 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23895 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23894 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23893 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23892 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23891 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23890 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-2389 Flowmon Unauthenticated Command Injection Vulnerability
- CVE-2024-23889 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23888 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23887 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23886 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23885 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23884 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23883 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23882 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23881 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23880 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23879 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23878 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23877 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23876 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23875 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23874 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23873 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23872 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23871 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23870 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-2387 SQL injection in AFI – The Easiest Integration Plugin
- CVE-2024-23869 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23868 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23867 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23866 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23865 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23864 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23863 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23862 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23861 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23860 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-2386 WordPress Plugin for Google Maps – WP MAPS <= 4.6.1 - Authenticated (Contributor+) SQL Injection
- CVE-2024-23859 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23858 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23857 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23856 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23855 Cross-Site Scripting (XSS) vulnerability in Cups Easy
- CVE-2024-23851 Integer overflow in linux:linux kernel
- CVE-2024-23850 Race condition in linux:linux kernel
- CVE-2024-2385 Elementor Addons by Livemesh <= 8.4 - Authenticated (Contributor+) Limited Local File Inclusion via Widgets
- CVE-2024-23849 Memory corruption in linux:linux kernel
- CVE-2024-23848 Use after free in linux:linux kernel
- CVE-2024-23847 Misconfiguration in Unifier
- CVE-2024-23843 SQL injection in Genian NAC LTS V5.0
- CVE-2024-23842 Hitron Systems DVR LGUVR-16H Improper Input Validation Vulnerability
- CVE-2024-23841 XSS in @apollo/experimental-nextjs-app-support
- CVE-2024-23840 `goreleaser release --debug` shows secrets
- CVE-2024-2384 Missing authorization in WCPOS – Point of Sale (POS) plugin for WooCommerce
- CVE-2024-23839 Suricata http: heap use after free with http.request_header and http.response_header keywords
- CVE-2024-23838 TrueLayer.Client SSRF when fetching payment or payment provider
- CVE-2024-23837 LibHTP unbounded folded header handling leads to denial service
- CVE-2024-23836 crafted traffic can cause denial of service
- CVE-2024-23835 Suricata's pgsql: memory exhaustion use on record parsing
- CVE-2024-23834 Discourse improperly sanitized user input leads to XSS
- CVE-2024-23833 OpenRefine JDBC Attack Vulnerability
- CVE-2024-23832 Mastodon Remote user impersonation and takeover
- CVE-2024-23831 Privilege escalation through CSRF attack on 'setup.pl'
- CVE-2024-23830 MantisBT Host Header Injection vulnerability
- CVE-2024-2383 Clickjacking Vulnerability in zenml-io/zenml
- CVE-2024-23829 aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators
- CVE-2024-23828 Nginx-UI authenticated RCE through injecting into the application config via CRLF
- CVE-2024-23827 Nginx-UI arbitrary file write through the Import Certificate feature
- CVE-2024-23826 Uploading an image with a specific filename causes a server-side DoS
- CVE-2024-23825 TablePress SSRF vulnerability due to insufficient filtering of cloud provider hosts
- CVE-2024-23824 mailcow ipixel flood attack leads to Denial of Service in admin page
- CVE-2024-23823 CORS settings overly permissive in vantage6
- CVE-2024-23822 Thruk Incorrect limitation of a pathname to a restricted directory (Path Traversal) (CWE-22)
- CVE-2024-23821 GeoServer's GWC Demos Page vulnerable to Stored Cross-Site Scripting (XSS)
- CVE-2024-23820 OpenFGA DoS
- CVE-2024-2382 Business logic in Authorize.net Payment Gateway For WooCommerce
- CVE-2024-23819 GeoServer Stored Cross-Site Scripting (XSS) vulnerability in MapML HTML Page
- CVE-2024-23818 GeoServer Stored Cross-Site Scripting (XSS) vulnerability in WMS OpenLayers Format
- CVE-2024-23817 Dolibarr Application Home Page HTML injection vulnerability
- CVE-2024-23816 Hardcoded credentials in Location Intelligence Perpetual Large
- CVE-2024-23815 Auth bypass in Desigo CC
- CVE-2024-23814 Denial of service in SIDOOR ATD430W