Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 435 of 521.
- CVE-2024-23706 Security feature bypass in Android
- CVE-2024-23705 Security feature bypass in Android
- CVE-2024-23704 Missing authorization in Android
- CVE-2024-23698 Memory corruption in Android
- CVE-2024-23697 Use after free in Android
- CVE-2024-23696 Use after free in Android
- CVE-2024-23695 Integer overflow in Android
- CVE-2024-23692 Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine
- CVE-2024-23690 EOL Netgear FVS336Gv2 and FVS336Gv3 Telnet Configuration Backup Command Injection
- CVE-2024-2369 Page Builder Gutenberg Blocks < 3.1.7 - Contributor+ Stored XSS
- CVE-2024-23689 ClickHouse Client Certificate Password Exposure
- CVE-2024-23688 Consensys Discovery Nonce Reuse
- CVE-2024-23687 FOLIO mod-data-export-spring Hard-Coded Credentials
- CVE-2024-23686 DependencyCheck Debug Mode Logging of NVD API Key
- CVE-2024-23685 FOLIO mod-remote-storage Hard Coded Credentials
- CVE-2024-23684 upokecenter CBOR Denial of Service
- CVE-2024-23683 Artemis Java Test Sandbox InvocationTargetException Subclass Escape
- CVE-2024-23682 Artemis Java Test Sandbox Class Loading Escape
- CVE-2024-23681 Artemis Java Test Sandbox Libary Load Escape
- CVE-2024-23680 AWS Encryption SDK for Java Improper Verification of Cryptographic Signature
- CVE-2024-2368 Mollie Forms <= 2.6.13 - Cross-Site Request Forgery to Arbitrary Post Duplication
- CVE-2024-23679 Enonic XP Session Fixation Vulnerability
- CVE-2024-23678 Deserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition
- CVE-2024-23677 Server Response Disclosure in RapidDiag Salesforce.com Log File
- CVE-2024-23676 Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command
- CVE-2024-23675 Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion
- CVE-2024-23674 The Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15 allows authentication bypass by spoofing.
- CVE-2024-23673 Apache Sling Servlets Resolver: Malicious code execution via path traversal
- CVE-2024-23672 Apache Tomcat: WebSocket DoS with incomplete closing handshake
- CVE-2024-23671 Path traversal in FortiSandbox
- CVE-2024-23670 Missing authorization in FortiWebManager
- CVE-2024-23669 Missing authorization in FortiWebManager
- CVE-2024-23668 Missing authorization in FortiWebManager
- CVE-2024-23667 Missing authorization in FortiWebManager
- CVE-2024-23666 Security feature bypass in FortiAnalyzer
- CVE-2024-23665 Missing authorization in FortiWeb
- CVE-2024-23664 Open redirect in FortiAuthenticator
- CVE-2024-23663 Privilege escalation in FortiExtender
- CVE-2024-23662 Information disclosure in FortiOS
- CVE-2024-23660 Weak cryptography in binance:trust wallet
- CVE-2024-2366 Remote Code Execution in parisneo/lollms-webui
- CVE-2024-23659 Cross-site scripting in spip:spip
- CVE-2024-23658 Use after free in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2024-23657 Path Traversal: '../filedir' in Nuxt Devtools
- CVE-2024-23656 Dex 2.37.0 is discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers
- CVE-2024-23655 Attacker can prevent users from accessing received emails
- CVE-2024-23654 discourse-ai admin-initiated SSRF when interacting with AI services
- CVE-2024-23653 BuildKit interactive containers API does not validate entitlements check
- CVE-2024-23652 BuildKit possible host system access from mount stub cleaner
- CVE-2024-23651 BuildKit possible race condition with accessing subpaths from cache mounts
- CVE-2024-23650 BuildKit possible panic when incorrect parameters sent from frontend
- CVE-2024-2365 Musicshelf SHA-1 PinningTrustManager.java weak password hash
- CVE-2024-23649 Any authenticated user may obtain private message details from other users on the same instance
- CVE-2024-23648 Pimcore Admin Classic Bundle host header injection in the password reset
- CVE-2024-23647 PKCE downgrade attack in Authentik
- CVE-2024-23646 Pimcore Admin Classic Bundle SQL Injection in Admin download files as zip
- CVE-2024-23645 GLPI reflected XSS in reports pages
- CVE-2024-23644 trillium-http and trillium-client vulnerable to HTTP Request/Response Splitting
- CVE-2024-23643 GeoServer Stored Cross-Site Scripting (XSS) vulnerability in GWC Seed Form
- CVE-2024-23642 GeoServer Stored Cross-Site Scripting (XSS) vulnerability in Simple SVG Renderer
- CVE-2024-23641 Sending a GET or HEAD request with a body crashes SvelteKit
- CVE-2024-23640 GeoServer Stored Cross-Site Scripting (XSS) vulnerability in Style Publisher
- CVE-2024-2364 Musicshelf Backup androidmanifest.xml backup
- CVE-2024-23639 micronaut-core management endpoints vulnerable to drive-by localhost attack
- CVE-2024-23638 SQUID-2023:11 Denial of Service in Cache Manager
- CVE-2024-23637 OctoPrint Unverified Password Change via Access Control Settings
- CVE-2024-23636 SOFARPC Remote Command Execution(RCE) Vulnerbility
- CVE-2024-23635 AntiSamy malicious input can provoke XSS when preserving comments
- CVE-2024-23634 GeoServer arbitrary file renaming vulnerability in REST Coverage/Data Store API
- CVE-2024-23633 Label Studio XSS Vulnerability on Data Import
- CVE-2024-23630 Motorola MR2600 Arbitrary Firmware Upload Vulnerability
- CVE-2024-2363 AOL AIM Triton Invite denial of service
- CVE-2024-23629 Motorola MR2600 Authentication Bypass Vulnerability
- CVE-2024-23628 Motorola MR2600 SaveStaticRouteIPv6Params Command Injection Vulnerability
- CVE-2024-23627 Motorola MR2600 SaveStaticRouteIPv4Params Command Injection Vulnerability
- CVE-2024-23626 Motorola MR2600 SaveSysLogParams Command Injection Vulnerability
- CVE-2024-23625 D-Link DAP-1650 SUBSCRIBE Callback Command Injection Vulnerability
- CVE-2024-23624 D-Link DAP-1650 gena.cgi SUBSCRIBE Command Injection Vulnerability
- CVE-2024-23622 IBM Merge Healthcare eFilm Workstation License Server CopySLS_Request3 Buffer Overflow
- CVE-2024-23621 IBM Merge Healthcare eFilm Workstation License Server Buffer Overflow
- CVE-2024-23620 IBM Merge Healthcare eFilm Workstation SYSTEM Privilege Escalation
- CVE-2024-2362 Path Traversal in parisneo/lollms-webui
- CVE-2024-23619 IBM Merge Healthcare eFilm Workstation Hardcoded Credentials
- CVE-2024-23618 Arris SURFboard SBG6950AC2 Arbitrary Code Execution Vulnerability
- CVE-2024-23617 Symantec Data Loss Prevention Buffer Overflow
- CVE-2024-23616 Symantec Server Management Suite Buffer Overflow
- CVE-2024-23615 Symantec Messaging Gateway Buffer Overflow
- CVE-2024-23614 Symantec Messaging Gateway Buffer Overflow
- CVE-2024-23613 Symantec Deployment Solution Remote Code Execution
- CVE-2024-23612 Improper Error Handling Issue in LabVIEW
- CVE-2024-23611 Out of Bounds Write Due to Missing Bounds Check in LabVIEW
- CVE-2024-23610 Out of Bounds Write Due to Missing Bounds Check in LabVIEW
- CVE-2024-2361 Arbitrary Upload & Read via Path Traversal in parisneo/lollms-webui
- CVE-2024-23609 Improper Error Handling Issue in LabVIEW
- CVE-2024-23608 Out of Bounds Write Due to Missing Bounds Check in LabVIEW
- CVE-2024-23607 F5OS QKView utility vulnerability
- CVE-2024-23606 Memory corruption in libbiosig
- CVE-2024-23605 Memory corruption in llama.cpp
- CVE-2024-23604 Cross-site scripting in FitNesse
- CVE-2024-23603 BIG-IP Advanced WAF and ASM Configuration utility vulnerability