Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 438 of 521.
- CVE-2024-2335 Elements Plus! <= 2.16.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget links
- CVE-2024-23349 Apache Answer: XSS vulnerability when submitting summary
- CVE-2024-23348 Cross-site scripting in a-blog cms
- CVE-2024-23347 Code injection in Meta Spark Studio
- CVE-2024-23346 pymatgen arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string
- CVE-2024-23345 Nautobot has XSS potential in rendered Markdown fields
- CVE-2024-23344 Tuleap's content of artifacts might be readable by unauthorized users
- CVE-2024-23342 python-ecdsa vulnerable to Minerva attack on P-256
- CVE-2024-23341 TuiTse-TsuSin html injection vulnerability in `tuitse_html` function
- CVE-2024-23340 @hono/node-server can't handle "double dots" in URL
- CVE-2024-2334 Template Kit – Import <= 1.0.14 - Authenticated(Author+) Stored Cross-Site Scripting via template upload
- CVE-2024-23339 hoolock does not block Prototype pollution with object-path related utilities
- CVE-2024-23337 jq has signed integer overflow in jv.c:jvp_array_write
- CVE-2024-23336 Incomplete disallowed remote addresses list in MyBB
- CVE-2024-23335 Backups directory .htaccess deletion in. MyBB
- CVE-2024-23334 aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal
- CVE-2024-23333 LAM vulnerable to Authenticated Remote Code Execution
- CVE-2024-23332 Client configured with permissive trust policies susceptible to rollback attack in Notary Project
- CVE-2024-23331 Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem
- CVE-2024-23330 Tuta loads images from external resources
- CVE-2024-2333 CodeAstro Membership Management System add_members.php sql injection
- CVE-2024-23329 changedetection.io API endpoint is not secured with API token
- CVE-2024-23328 The Dataease datasource exists deserialization and arbitrary file read vulnerability
- CVE-2024-23327 Crash in proxy protocol when command type of LOCAL in Envoy
- CVE-2024-23326 Envoy incorrectly accepts HTTP 200 response for entering upgrade mode
- CVE-2024-23325 Envoy crashes when using an address type that isn’t supported by the OS
- CVE-2024-23324 Envoy ext auth can be bypassed when Proxy protocol filter sets invalid UTF-8 metadata
- CVE-2024-23323 Excessive CPU usage when URI template matcher is configured using regex in Envoy
- CVE-2024-23322 Envoy crashes when idle and request per try timeout occur within the backoff interval
- CVE-2024-23321 Apache RocketMQ: Unauthorized Exposure of Sensitive Data
- CVE-2024-23320 Apache DolphinScheduler: Arbitrary js execution as root for authenticated users
- CVE-2024-2332 SourceCodester Online Mobile Management Store HTTP GET Request manage_category.php sql injection
- CVE-2024-23319 CSRF issue allows disconnecting a user's Jira connection through a simple post message (Jira Plugin)
- CVE-2024-23317 Path traversal in Controller 6000 and Controller 7000
- CVE-2024-23316 PingAccess HTTP Request Desynchronization Weakness
- CVE-2024-23315 Information disclosure in P3-550E
- CVE-2024-23314 BIG-IP HTTP/2 vulnerability
- CVE-2024-23313 Integer overflow in libbiosig
- CVE-2024-23312 Privilege escalation in Intel(R) Binary Configuration Tool software for Windows
- CVE-2024-23310 Use after free in libbiosig
- CVE-2024-2331 SourceCodester Tourist Reservation System System.cpp ad_writedata buffer overflow
- CVE-2024-23309 Auth bypass in WBR-6012
- CVE-2024-23308 BIG-IP Advanced WAF and ASM vulnerability
- CVE-2024-23307 Integer overflow in raid5_cache_count in Linux kernel
- CVE-2024-23306 BIG-IP Next CNF & SPK vulnerability
- CVE-2024-23305 Memory corruption in libbiosig
- CVE-2024-23304 Denial of service in Cybozu KUNAI for Android
- CVE-2024-23302 Information disclosure in couchbase:couchbase server
- CVE-2024-23301 Misconfiguration in fedoraproject:fedora
- CVE-2024-23300 Use after free in GarageBand
- CVE-2024-2330 Netentsec NS-ASG Application Security Gateway index.php sql injection
- CVE-2024-23299 Security feature bypass in macOS
- CVE-2024-23298 Security feature bypass in Xcode
- CVE-2024-23297 Information disclosure in iOS and iPadOS
- CVE-2024-23296 Apple Multiple Products Memory Corruption
- CVE-2024-23295 Misconfiguration in visionOS
- CVE-2024-23294 Other in macOS
- CVE-2024-23293 Information disclosure in iOS and iPadOS
- CVE-2024-23292 Information disclosure in iOS and iPadOS
- CVE-2024-23291 Information disclosure in iOS and iPadOS
- CVE-2024-23290 Business logic in iOS and iPadOS
- CVE-2024-2329 Netentsec NS-ASG Application Security Gateway sql injection
- CVE-2024-23289 Security feature bypass in iOS and iPadOS
- CVE-2024-23288 Privilege escalation in iOS and iPadOS
- CVE-2024-23287 Information disclosure in iOS and iPadOS
- CVE-2024-23286 Memory corruption in iOS and iPadOS
- CVE-2024-23285 Path traversal in macOS
- CVE-2024-23284 Security feature bypass in Safari
- CVE-2024-23283 Information disclosure in iOS and iPadOS
- CVE-2024-23282 Security feature bypass in iOS and iPadOS
- CVE-2024-23281 Information disclosure in macOS
- CVE-2024-23280 Information disclosure in Safari
- CVE-2024-2328 Real Media Library <= 4.22.11 - Authenticated (Author+) Stored Cross-Site Scripting
- CVE-2024-23279 Information disclosure in macOS
- CVE-2024-23278 Security feature bypass in iOS and iPadOS
- CVE-2024-23277 Security feature bypass in iOS and iPadOS
- CVE-2024-23276 Privilege escalation in macOS
- CVE-2024-23275 Race condition in macOS
- CVE-2024-23274 Privilege escalation in macOS
- CVE-2024-23273 Auth bypass in Safari
- CVE-2024-23272 Security feature bypass in macOS
- CVE-2024-23271 Business logic in Safari
- CVE-2024-23270 Memory corruption in iOS and iPadOS
- CVE-2024-2327 Global Elementor Buttons <= 1.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via button link
- CVE-2024-23269 Security feature bypass in macOS
- CVE-2024-23268 Privilege escalation in macOS
- CVE-2024-23267 Security feature bypass in macOS
- CVE-2024-23266 Security feature bypass in macOS
- CVE-2024-23265 Memory corruption in iOS and iPadOS
- CVE-2024-23264 Memory corruption in iOS and iPadOS
- CVE-2024-23263 Security feature bypass in Safari
- CVE-2024-23262 Security feature bypass in iOS and iPadOS
- CVE-2024-23261 Business logic in macOS
- CVE-2024-23260 Missing authorization in macOS
- CVE-2024-2326 Cross-site request forgery in PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin
- CVE-2024-23259 Denial of service in iOS and iPadOS
- CVE-2024-23258 Memory corruption in macOS
- CVE-2024-23257 Memory corruption in iOS and iPadOS
- CVE-2024-23256 Security feature bypass in iOS and iPadOS
- CVE-2024-23255 Auth bypass in iOS and iPadOS