Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 442 of 521.
- CVE-2024-22720 Cross-site scripting in kanboard:kanboard
- CVE-2024-2272 keerti1924 Online-Book-Store-Website HTTP POST Request home.php sql injection
- CVE-2024-22719 SQL injection in formtools:form tools
- CVE-2024-22718 Cross-site scripting in formtools:form tools
- CVE-2024-22717 Cross-site scripting in formtools:form tools
- CVE-2024-22715 Cross-site request forgery in codelyfe:stupid simple cms
- CVE-2024-22714 Cross-site scripting in codelyfe:stupid simple cms
- CVE-2024-2271 keerti1924 Online-Book-Store-Website HTTP POST Request shop.php sql injection
- CVE-2024-22705 Memory corruption in linux:linux kernel
- CVE-2024-2270 keerti1924 Online-Book-Store-Website signup.php cross site scripting
- CVE-2024-22699 Cross-site request forgery in flycms project:flycms
- CVE-2024-2269 keerti1924 Online-Book-Store-Website search.php sql injection
- CVE-2024-2268 keerti1924 Online-Book-Store-Website unrestricted upload
- CVE-2024-2267 keerti1924 Online-Book-Store-Website shop.php logic error
- CVE-2024-22667 Memory corruption in fedoraproject:fedora
- CVE-2024-22663 Command injection in totolink:a3700r firmware
- CVE-2024-22662 Memory corruption in totolink:a3700r firmware
- CVE-2024-22660 Memory corruption in totolink:a3700r firmware
- CVE-2024-2266 keerti1924 Secret-Coder-PHP-Project Login Page login.php cross site scripting
- CVE-2024-22654 Denial of service in broadcom:tcpreplay
- CVE-2024-22653 Null dereference in yasm project:yasm
- CVE-2024-22651 Command injection in dlink:dir-815 firmware
- CVE-2024-2265 keerti1924 PHP-MYSQL-User-Login-System login.sql inclusion of sensitive information in source code
- CVE-2024-22648 Server-side request forgery in seopanel:seo panel
- CVE-2024-22647 Information disclosure in seopanel:seo panel
- CVE-2024-22646 Information disclosure in seopanel:seo panel
- CVE-2024-22643 Cross-site request forgery in seopanel:seo panel
- CVE-2024-22641 Denial of service in tcpdf project:tcpdf
- CVE-2024-22640 TCPDF vulnerable to Regular Expression Denial of Service
- CVE-2024-2264 keerti1924 PHP-MYSQL-User-Login-System login.php sql injection
- CVE-2024-22639 Cross-site scripting in igalerie:igalerie
- CVE-2024-22638 Code injection in livesite:livesite
- CVE-2024-22637 Cross-site scripting in formtools:form tools
- CVE-2024-22636 Code injection in pluxml:pluxml
- CVE-2024-22635 Cross-site scripting in webcalendar project:webcalendar
- CVE-2024-22633 Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 was discovered to contain a remote code execution (RCE) vulnerability v
- CVE-2024-22632 Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 was discovered to contain a remote code execution (RCE) vulnerability v
- CVE-2024-2263 WooCommerce Product Filter < 1.4.4 - Reflected XSS
- CVE-2024-22628 SQL injection in oretnom23:budget and expense tracker system
- CVE-2024-22627 SQL injection in campcodes:supplier management system
- CVE-2024-22626 SQL injection in campcodes:supplier management system
- CVE-2024-22625 SQL injection in campcodes:supplier management system
- CVE-2024-2262 WooCommerce Product Filter < 1.4.4 - Filter Deletion via CSRF
- CVE-2024-22611 SQL injection in open-emr:openemr
- CVE-2024-2261 Event Tickets and Registration <= 5.8.2 - Improper Authorization to Information Disclosure
- CVE-2024-22603 Cross-site request forgery in flycms project:flycms
- CVE-2024-22601 Cross-site request forgery in flycms project:flycms
- CVE-2024-2260 Session Fixation Vulnerability in zenml-io/zenml
- CVE-2024-22593 Cross-site request forgery in flycms project:flycms
- CVE-2024-22592 Cross-site request forgery in flycms project:flycms
- CVE-2024-22591 Cross-site request forgery in flycms project:flycms
- CVE-2024-22590 The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection.
- CVE-2024-2259 Reflected XXS Vulnerability in InstaRISPACS Software
- CVE-2024-22588 Kwik does not discard unused encryption keys
- CVE-2024-2258 Form Maker by 10Web <= 1.15.24 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting
- CVE-2024-22570 Cross-site scripting in njtech:greencms
- CVE-2024-2257 Password Policy Bypass Vulnerability in Digisol Router
- CVE-2024-22569 Cross-site scripting in poscms:poscms
- CVE-2024-22568 Cross-site request forgery in flycms project:flycms
- CVE-2024-22567 mingSoft MCMS File Upload vulnerability
- CVE-2024-22563 Denial of service in openvswitch:openvswitch
- CVE-2024-22562 Memory corruption in swftools:swftools
- CVE-2024-2256 oik <= 4.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-22559 Cross-site scripting in lightcms project:lightcms
- CVE-2024-22551 Cross-site scripting in ushainformatique:whatacart
- CVE-2024-22550 File upload in shopsite:shopsite
- CVE-2024-2255 Cross-site scripting in Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- CVE-2024-22549 Cross-site scripting in flycms project:flycms
- CVE-2024-22548 Cross-site scripting in flycms project:flycms
- CVE-2024-22547 Cross-site scripting in wayos:ibr-7150 firmware
- CVE-2024-22546 Command injection in trendnet:tew-815dap firmware
- CVE-2024-22545 Command injection in trendnet:tew-824dru firmware
- CVE-2024-22544 Command injection in linksys:e1700 firmware
- CVE-2024-22543 Privilege escalation in linksys:e1700 firmware
- CVE-2024-2254 RT Easy Builder – Advanced addons for Elementor <= 2.3 - Authenticated (Contributor+) Stored Cross-site Scripting
- CVE-2024-22533 Beetl Server-Side Template Injection vulnerability
- CVE-2024-22532 Memory corruption in xnview:nconvert
- CVE-2024-2253 Testimonial Carousel For Elementor <= 10.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-22529 Command injection in totolink:x2000r firmware
- CVE-2024-22526 Memory corruption in bandisoft:bandiview
- CVE-2024-22525 dnspod-sr 0dfbd37 contains a SEGV.
- CVE-2024-22524 Memory corruption in dnspod:dnspod security recursive
- CVE-2024-22523 Path traversal in fuwushe:ifair
- CVE-2024-22520 Auth bypass in dronetag:drone scanner
- CVE-2024-2252 Cross-site scripting in Droit Elementor Addons – Widgets, Blocks, Templates Library For Elementor Builder
- CVE-2024-22519 Auth bypass in sorenfriis:opendroneid osm
- CVE-2024-22515 File upload in ispyconnect:agent dvr
- CVE-2024-22514 Path traversal in ispyconnect:agent dvr
- CVE-2024-22513 Improper Privilege Management in djangorestframework-simplejwt
- CVE-2024-2250 130+ Widgets | Best Addons For Elementor – FREE <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-22497 Cross-site Scripting in JFinal
- CVE-2024-22496 Cross-site Scripting in JFinal
- CVE-2024-22494 Cross-site scripting in jfinalcms project:jfinalcms
- CVE-2024-22493 Cross-site Scripting in JFinal
- CVE-2024-22492 Cross-site Scripting in JFinal
- CVE-2024-22491 Stored Cross Site Scripting in beetl-bbs
- CVE-2024-22490 Cross-site Scripting in beetl-bbs
- CVE-2024-2249 LA-Studio Element Kit for Elementor <= 1.3.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-2248 JFrog Artifactory Header Injection
- CVE-2024-22477 PingFederate OIDC Policy Management Editor Cross-Site Scripting