Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 440 of 521.
- CVE-2024-23148 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23147 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23146 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23145 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23144 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23143 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23142 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23141 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23140 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-2314 Other in BPF Compiler Collection
- CVE-2024-23139 ActionScript Byte Code “ABC” Vulnerability in the Autodesk FBX Review software
- CVE-2024-23138 Stack-based Overflow Vulnerability in the TrueViewTM Desktop Software
- CVE-2024-23137 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23136 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23135 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23134 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23133 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23132 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23131 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23130 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-2313 Other in bpftrace
- CVE-2024-23129 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23128 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23127 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23126 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23125 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23124 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23123 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23122 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23121 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-23120 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-2312 Use after free in Debian based GNU GRUB
- CVE-2024-23119 Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability
- CVE-2024-23118 Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability
- CVE-2024-23117 Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability
- CVE-2024-23116 Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability
- CVE-2024-23115 Centreon updateGroups SQL Injection Remote Code Execution Vulnerability
- CVE-2024-23114 Apache Camel: Camel-CassandraQL: Unsafe Deserialization from CassandraAggregationRepository
- CVE-2024-23113 Fortinet Multiple Products Format String
- CVE-2024-23112 Missing authorization in FortiOS
- CVE-2024-23111 Cross-site scripting in FortiOS
- CVE-2024-23110 Memory corruption in FortiOS
- CVE-2024-2311 Avada <= 7.11.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-23109 Command injection in FortiSIEM
- CVE-2024-23108 Command injection in FortiSIEM
- CVE-2024-23107 Information disclosure in FortiWeb
- CVE-2024-23106 Auth bypass in FortiClientEMS
- CVE-2024-23105 Security feature bypass in FortiPortal
- CVE-2024-23104 Information disclosure in FortiNDR
- CVE-2024-2310 WP Google Review Slider < 13.6 - Admin+ Stored XSS
- CVE-2024-23094 Cross-site request forgery in flusity:flusity
- CVE-2024-23091 Weak cryptography in digitaldruid:hoteldruid
- CVE-2024-2309 WP Staging < 3.4.0, 5.4.0 (Pro Version) - Admin+ Stored XSS
- CVE-2024-23086 Memory corruption in mikkotommila:apfloat
- CVE-2024-23085 Null dereference in mikkotommila:apfloat
- CVE-2024-23084 Denial of service in mikkotommila:apfloat
- CVE-2024-23083 Time4J Base v5.9.3 was discovered to contain a NullPointerException via the component net.time4j.format.internal.FormatUtils::useDefaultWeekmodel(Locale).
- CVE-2024-23082 ThreeTen Backport v1.6.8 was discovered to contain an integer overflow via the component org.threeten.bp.format.DateTimeFormatter::parse(Cha
- CVE-2024-23081 Null dereference in threeten:threeten backport
- CVE-2024-23080 Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda.time.format.PeriodFormat::wordBased(Locale).
- CVE-2024-2308 ElementInvader Addons for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-23079 JGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org.jgrapht.alg.util.ToleranceDoubleComparator::compare(Double, Double).
- CVE-2024-23078 JGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org.jgrapht.alg.util.ToleranceDoubleComparator::compare(Double, Double).
- CVE-2024-23077 Memory corruption in jfree:jfreechart
- CVE-2024-23076 Null dereference in jfree:jfreechart
- CVE-2024-2307 Osbuild-composer: race condition may disable gpg verification for package repositories
- CVE-2024-23061 Command injection in totolink:a3300r firmware
- CVE-2024-23060 Command injection in totolink:a3300r firmware
- CVE-2024-2306 Revslider <= 6.6.20 - Authenticated (Author+) Stored Cross-Site Scripting
- CVE-2024-23059 Command injection in totolink:a3300r firmware
- CVE-2024-23058 Command injection in totolink:a3300r firmware
- CVE-2024-23057 Command injection in totolink:a3300r firmware
- CVE-2024-23055 Code injection in plone:plone docker official image
- CVE-2024-23054 Supply chain in plone:plone docker official image
- CVE-2024-23052 Deserialization in 5kcrm:wukong crm
- CVE-2024-2305 Cards for Beaver Builder <= 1.1.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via bootstrapcard link
- CVE-2024-23049 Command injection in b3log:symphony
- CVE-2024-2304 Animated Headline <= 4.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-23034 Cross-site scripting in eyoucms:eyoucms
- CVE-2024-23033 Cross-site scripting in eyoucms:eyoucms
- CVE-2024-23032 Cross-site scripting in eyoucms:eyoucms
- CVE-2024-23031 Cross-site scripting in eyoucms:eyoucms
- CVE-2024-2303 Easy Textillate <= 2.01 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-2302 Information disclosure in Easy Digital Downloads – eCommerce Payments and Subscriptions made easy
- CVE-2024-2301 Cross-site scripting in Certain HP LaserJet Pro Devices
- CVE-2024-2300 HP Advance Mobile Application – Potential Information Disclosure
- CVE-2024-2299 Stored Cross-Site Scripting (XSS) via Profile Picture Upload in parisneo/lollms-webui
- CVE-2024-22988 Information disclosure in zkteco:zkbio wdms
- CVE-2024-22983 SQL injection in projectworlds:visitor management system
- CVE-2024-2298 affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_import_product
- CVE-2024-2297 Bricksbuilder <= 1.9.6.1 - Authenticated (Contributor+) Privilege Escalation via create_autosave
- CVE-2024-2296 Cross-site scripting in Photo Gallery by 10Web – Mobile-Friendly Image Gallery
- CVE-2024-22957 Memory corruption in swftools:swftools
- CVE-2024-22956 Use after free in swftools:swftools
- CVE-2024-22955 Memory corruption in swftools:swftools
- CVE-2024-2295 Contact Form Manager <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-22949 Null dereference in jfree:jfreechart
- CVE-2024-22942 Command injection in totolink:a3300r firmware
- CVE-2024-2294 Backuply – Backup, Restore, Migrate and Clone <= 1.2.7 - Authenticated (Admin+) Directory Traversal
- CVE-2024-22939 Cross-site request forgery in sunkaifei:flycms