Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 437 of 521.
- CVE-2024-23492 Commend WS203VICM Weak Encoding for Password
- CVE-2024-23491 Privilege escalation in Intel(R) Distribution for GDB software
- CVE-2024-2349 Cross-site scripting in Fancy Elementor Flipbox
- CVE-2024-23489 Privilege escalation in Intel(R) VROC software
- CVE-2024-23488 Files of archived channels accessible with the “Allow users to view archived channels” option disabled
- CVE-2024-23487 Privilege escalation in UEFI firmware for some Intel(R) Server D50DNP Family products
- CVE-2024-23486 Information disclosure in WSR-2533DHP
- CVE-2024-23485 Security feature bypass in Controller 6000 and Controller 7000
- CVE-2024-23483 Local Privilege Escalation via lack of input validation
- CVE-2024-23482 ZScalerService Local Privilege Escalation
- CVE-2024-23480 Insecure MacOS code sign check fallback
- CVE-2024-2348 Gum Elementor Addon <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta Widget
- CVE-2024-23479 SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
- CVE-2024-23478 SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution
- CVE-2024-23477 SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
- CVE-2024-23476 SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
- CVE-2024-23475 SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability
- CVE-2024-23474 Path traversal in Access Rights Manager
- CVE-2024-23473 SolarWinds Access Rights Manager (ARM) Hard-Coded Credentials Authentication Bypass Vulnerability
- CVE-2024-23472 SolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability
- CVE-2024-23471 SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerability
- CVE-2024-23470 Auth bypass in Access Rights Manager
- CVE-2024-2347 Astra <= 4.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name
- CVE-2024-23469 SolarWinds Access Rights Manager Exposed Dangerous Method Remote Code Execution Vulnerability
- CVE-2024-23468 SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability
- CVE-2024-23467 SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability
- CVE-2024-23466 SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability
- CVE-2024-23465 SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability
- CVE-2024-23464 Zscaler bypass with administrative privileges on Windows
- CVE-2024-23463 Anti-Tampering bypass via Repair App functionality
- CVE-2024-23462 ZCC Mac validinstaller file integrity check missing
- CVE-2024-23461 ZCC macOS Upgrade ZIP Bomb DoS
- CVE-2024-23460 Incorrect signature validation of package
- CVE-2024-2346 Missing authorization in FileBird – WordPress Media Library Folders & File Manager
- CVE-2024-23459 Multiple Arbitrary Creates/Overwrites by link following
- CVE-2024-23458 Local Privilege Escalation on Zscaler Client Connector on Windows
- CVE-2024-23457 Anti-tampering can be disabled with uninstall password enforced
- CVE-2024-23456 Signature validation issue leads to Anti-Tampering bypass
- CVE-2024-23454 Apache Hadoop: Temporary File Local Information Disclosure
- CVE-2024-23453 Hardcoded credentials in Android Spoon application
- CVE-2024-23452 Apache bRPC: HTTP request smuggling vulnerability
- CVE-2024-23451 Elasticsearch Incorrect Authorization in the Remote Cluster Security API key based security model
- CVE-2024-23450 Elasticsearch Uncontrolled Resource Consumption vulnerability
- CVE-2024-2345 Cross-site scripting in FileBird – WordPress Media Library Folders & File Manager
- CVE-2024-23449 Elasticsearch Uncaught Exception
- CVE-2024-23448 APM Server Insertion of Sensitive Information into Log File
- CVE-2024-23447 Elastic Network Drive Connector Improper Access Control
- CVE-2024-23446 Kibana Broken Access Control issue
- CVE-2024-23445 Elasticsearch Remote Cluster Search Cross Cluster API Key insufficient restrictions
- CVE-2024-23444 Elasticsearch elasticsearch-certutil csr fails to encrypt private key
- CVE-2024-23443 Denial of service in Kibana
- CVE-2024-23442 Kibana open redirect issue
- CVE-2024-23441 Vba32 Antivirus v3.36.0 - Denial of Service (DoS)
- CVE-2024-23440 Vba32 Antivirus v3.36.0 - Arbitrary Memory Read
- CVE-2024-2344 Avada <= 7.11.6 - Authenticated (Admin+) SQL Injection via entry
- CVE-2024-23439 Vba32 Antivirus v3.36.0 - Arbitrary Memory Read
- CVE-2024-2343 Avada <= 7.11.6 - Authenticated (Contributor+) Server-Side Request Forgery via form_to_url_action
- CVE-2024-2342 SQL injection in Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
- CVE-2024-2341 SQL injection in Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
- CVE-2024-2340 Avada <= 7.11.6 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listing
- CVE-2024-2339 Improper Input Validation in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule
- CVE-2024-23388 Open redirect in "Mercari" App for Android
- CVE-2024-23387 Cross-site scripting in FusionPBX
- CVE-2024-23386 Improper Input Validation in Video
- CVE-2024-23385 Reachable Assertion in Modem
- CVE-2024-23384 Use After Free in Graphics Linux
- CVE-2024-23383 Use After Free in Graphics Linux
- CVE-2024-23382 Use After Free in Graphics Linux
- CVE-2024-23381 Use After Free in Graphics Linux
- CVE-2024-23380 Use After Free in Graphics
- CVE-2024-2338 SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule
- CVE-2024-23379 Double Free in DSP Services
- CVE-2024-23378 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
- CVE-2024-23377 Use of Out-of-range Pointer Offset in ComputerVision
- CVE-2024-23376 Use After Free in ComputerVision
- CVE-2024-23375 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in RIL
- CVE-2024-23374 Stack-based Buffer Overflow in Power Management IC
- CVE-2024-23373 Use After Free in Graphics
- CVE-2024-23372 Integer Overflow or Wraparound in Graphics
- CVE-2024-23370 Use After Free in Automotive Multimedia
- CVE-2024-2337 Easy Testimonials <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-23369 Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS
- CVE-2024-23368 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC
- CVE-2024-23366 Buffer Over-read in Automotive Autonomy
- CVE-2024-23365 Use After Free in SCE-Mink
- CVE-2024-23364 Buffer Over-read in WLAN Firmware
- CVE-2024-23363 Buffer Over-read in WLAN Firmware
- CVE-2024-23362 Improper Input Validation in Trusted Execution Environment
- CVE-2024-23360 Improper Access Control in Graphics Windows
- CVE-2024-2336 Popup Maker – Popup for opt-ins, lead gen, & more <= 1.18.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-23359 Buffer Over-read in Multi Mode Call Processor
- CVE-2024-23358 Buffer Over-read in Multi Mode Call Processor
- CVE-2024-23357 NULL Pointer Dereference in HLOS
- CVE-2024-23356 Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS
- CVE-2024-23355 Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive
- CVE-2024-23354 Use After Free in Graphics Linux
- CVE-2024-23353 Buffer Over-read in Multi Mode Call Processor
- CVE-2024-23352 Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor
- CVE-2024-23351 Improper Access Control in Graphics Linux
- CVE-2024-23350 Reachable Assertion in Multi Mode Call Processor