Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 434 of 521.
- CVE-2024-23813 Auth bypass in Polarion ALM
- CVE-2024-23812 Command injection in SINEC NMS
- CVE-2024-23811 File upload in SINEC NMS
- CVE-2024-23810 SQL injection in SINEC NMS
- CVE-2024-2381 AliExpress Dropshipping with AliNext Lite <= 3.3.5 - Authenticated (Subscriber+) Arbitrary File Upload
- CVE-2024-23809 Memory corruption in libbiosig
- CVE-2024-23808 Arkcompiler ets frontend has an out-of-bounds read vulnerability
- CVE-2024-23807 Apache Xerces C++: Use-after-free on external DTD scan
- CVE-2024-23806 HID Global Reader Configuration Cards Improper Authorization
- CVE-2024-23805 F5 Application Visibility and Reporting module and BIG-IP Advanced WAF/ASM vulnerability
- CVE-2024-23804 Memory corruption in Tecnomatix Plant Simulation V2201
- CVE-2024-23803 Memory corruption in Tecnomatix Plant Simulation V2201
- CVE-2024-23802 Memory corruption in Tecnomatix Plant Simulation V2201
- CVE-2024-23801 Null dereference in Tecnomatix Plant Simulation V2201
- CVE-2024-23800 Null dereference in Tecnomatix Plant Simulation V2201
- CVE-2024-2380 XSS in graph rendering
- CVE-2024-23799 Null dereference in Tecnomatix Plant Simulation V2201
- CVE-2024-23798 Memory corruption in Tecnomatix Plant Simulation V2201
- CVE-2024-23797 Memory corruption in Tecnomatix Plant Simulation V2201
- CVE-2024-23796 Memory corruption in Tecnomatix Plant Simulation V2201
- CVE-2024-23795 Memory corruption in Tecnomatix Plant Simulation V2201
- CVE-2024-23794 Agents are able to lock the ticket without the "Owner" permission
- CVE-2024-23793 Upload of files outside application directory
- CVE-2024-23792 Insufficient access control
- CVE-2024-23791 Unnecessary data is written to log if issues during indexing occurs
- CVE-2024-23790 Missing file type check in avatar picture upload
- CVE-2024-2379 QUIC certificate check bypass with wolfSSL
- CVE-2024-23789 Command injection in Energy Management Controller with Cloud Services
- CVE-2024-23788 Server-side request forgery in Energy Management Controller with Cloud Services
- CVE-2024-23787 Path traversal in Energy Management Controller with Cloud Services
- CVE-2024-23786 Cross-site scripting in Energy Management Controller with Cloud Services
- CVE-2024-23785 Cross-site request forgery in Energy Management Controller with Cloud Services
- CVE-2024-23784 Missing authorization in Energy Management Controller with Cloud Services
- CVE-2024-23783 Auth bypass in Energy Management Controller with Cloud Services
- CVE-2024-23782 Cross-site scripting in a-blog cms
- CVE-2024-2378 Privilege escalation in SDM600
- CVE-2024-23775 Integer overflow in arm:mbed tls
- CVE-2024-23774 An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0.
- CVE-2024-23773 An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0.
- CVE-2024-23772 An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0.
- CVE-2024-23771 Auth bypass in unix4lyfe:darkhttpd
- CVE-2024-23770 Information disclosure in unix4lyfe:darkhttpd
- CVE-2024-2377 Misconfiguration in SDM600
- CVE-2024-23769 Privilege escalation in samsung:magician
- CVE-2024-23768 Path traversal in dremio:dremio
- CVE-2024-23767 An issue was discovered on HMS Anybus X-Gateway AB7832-F firmware version 3.
- CVE-2024-23766 An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices.
- CVE-2024-23765 An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices.
- CVE-2024-23764 Privilege escalation in withsecure:client security
- CVE-2024-23763 SQL injection in gambio:gambio
- CVE-2024-23762 File upload in gambio:gambio
- CVE-2024-23761 Code injection in gambio:gambio
- CVE-2024-23760 Information disclosure in gambio:gambio
- CVE-2024-2376 WPQA < 6.1.1 - Arbitrary Category and Tag Follow/Unfollow via CSRF
- CVE-2024-23759 Deserialization in gambio:gambio
- CVE-2024-23758 Information disclosure in unisys:stealth
- CVE-2024-23756 Missing authorization in plone:plone
- CVE-2024-23755 Code injection in clickup:clickup
- CVE-2024-23752 Code execution in pandasai
- CVE-2024-23751 SQL injection in llama-index
- CVE-2024-23750 Code execution in metagpt
- CVE-2024-2375 WPQA < 6.1.1 - Contributor+ Stored XSS
- CVE-2024-23749 Command injection in 9bis:kitty
- CVE-2024-23747 Missing authorization in modernasistemas:modernanet hospital management system 2024
- CVE-2024-23746 Code injection in miro:miro
- CVE-2024-23745 Command injection in notion:web clipper
- CVE-2024-23744 Denial of service in trustedfirmware:mbed tls
- CVE-2024-23743 Code injection in notion:notion
- CVE-2024-23742 Code injection in loom:loom
- CVE-2024-23741 Code injection in vercel:hyper
- CVE-2024-23740 Code injection in getkap:kap
- CVE-2024-2374 XML External Entity Injection in Multiple WSO2 Products Allows Arbitrary file read and Denial of Service
- CVE-2024-23739 Code injection in discord:discord
- CVE-2024-23738 Code injection in postman:postman
- CVE-2024-23737 Cross-site request forgery in savignano:s-notify
- CVE-2024-23736 Cross Site Request Forgery (CSRF) vulnerability in savignano S/Notify before 4.0.2 for Confluence allows attackers to manipulate a user's S/
- CVE-2024-23735 Cross-site scripting in savignano:s-notify
- CVE-2024-23734 Cross-site request forgery in savignano:s-notify
- CVE-2024-23733 The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before Core_Fix7 allows remote
- CVE-2024-23732 ReDoS in Embedchain
- CVE-2024-23731 Code execution in Embedchain
- CVE-2024-23730 Unsafe yaml deserialization in llama-hub
- CVE-2024-23729 Cross-site scripting in heytap:internet browser
- CVE-2024-23727 The YI Smart Kami Vision com.kamivision.yismart application through 1.0.0_20231219 for Android allows a remote attacker to execute arbitrary
- CVE-2024-23726 Weak cryptography in ubeeinteractive:ddw365 firmware
- CVE-2024-23725 Cross-site Scripting in Ghost
- CVE-2024-23724 Ghost has possible Cross-site Scripting issue
- CVE-2024-23722 Null dereference in treasuredata:fluent bit
- CVE-2024-23721 Path traversal in draytek:vigor3910 firmware
- CVE-2024-23717 Other in Android
- CVE-2024-23716 Use after free in Android
- CVE-2024-23715 Memory corruption in Android
- CVE-2024-23713 Privilege escalation in Android
- CVE-2024-23712 Denial of service in Android
- CVE-2024-23711 Privilege escalation in Android
- CVE-2024-23710 Privilege escalation in Android
- CVE-2024-2371 Information exposure vulnerability in Korenix JetI/O 6550
- CVE-2024-23709 Memory corruption in Android
- CVE-2024-23708 Security feature bypass in Android
- CVE-2024-23707 Privilege escalation in Android