Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 443 of 521.
- CVE-2024-22476 Other in Intel(R) Neural Compressor software
- CVE-2024-22475 Cross-site request forgery in Multiple printers and scanners
- CVE-2024-22473 Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices
- CVE-2024-22472 Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow
- CVE-2024-2247 JFrog Artifactory Cross-Site Scripting
- CVE-2024-22464 Information disclosure in AppSync
- CVE-2024-22463 Weak cryptography in PowerScale OneFS
- CVE-2024-22461 Command injection in RecoverPoint for Virtual Machines
- CVE-2024-22460 Deserialization in Data Manager Appliance Software (DMAS)
- CVE-2024-22459 Missing authorization in ECS
- CVE-2024-22458 Weak cryptography in Secure Connect Gateway (SCG) 5.0 Appliance - SRS
- CVE-2024-22457 Auth bypass in Secure Connect Gateway (SCG) 5.0 Appliance - SRS
- CVE-2024-22455 Missing authorization in Mobility - E-Lab Navigator
- CVE-2024-22454 Auth bypass in PowerProtect Data Manager
- CVE-2024-22453 Memory corruption in PowerEdge Platform
- CVE-2024-22452 Privilege escalation in Dell Display and Peripheral Manager
- CVE-2024-22451 Other in Peripheral Manager
- CVE-2024-22450 Privilege escalation in Alienware Command Center (AWCC)
- CVE-2024-2245 Cross-Site Scripting vulnerability in moziloCMS
- CVE-2024-22449 Missing authorization in PowerScale OneFS
- CVE-2024-22448 Memory corruption in CPG BIOS
- CVE-2024-22447 Other in Peripheral Manager
- CVE-2024-22445 Command injection in PowerProtect Data Manager
- CVE-2024-22444 Cross-site scripting in HPE Aruba Networking EdgeConnect SD-WAN Orchestrator
- CVE-2024-22443 Code injection in HPE Aruba Networking EdgeConnect SD-WAN Orchestrator
- CVE-2024-22442 Auth bypass in HPE 3PAR Service Processor
- CVE-2024-22441 Auth bypass in Cray System Management Software - PALS
- CVE-2024-22440 HPE Compute Scale-up Server 3200 Server, Disclosure of Sensitive Information
- CVE-2024-2244 Auth bypass in Asset Suite EAM
- CVE-2024-22439 Certain HPE FlexNetwork and FlexFabric Switches, Remote Authentication Bypass
- CVE-2024-22438 HPE OfficeConnect 1820 Network switches, Cross-Site Request Forgery (CSRF)
- CVE-2024-22437 HPE MSA SAN Storage VSS Provider and CAPI Proxy Software, Elevation of Privilege
- CVE-2024-22436 Denial of service in IceWall Gen11, IceWall SSO Agent
- CVE-2024-22435 HPE NonStop Web ViewPoint Enterprise software, Unauthorized access
- CVE-2024-22433 Information disclosure in Data Protection Search
- CVE-2024-22432 Information disclosure in NetWorker Module for Databases and Applications - Oracle
- CVE-2024-22430 Misconfiguration in PowerScale OneFS
- CVE-2024-2243 Csmock: command injection vulnerability in csmock-plugin-snyk
- CVE-2024-22429 Other in CPG BIOS
- CVE-2024-22428 Misconfiguration in iDRAC Service Module (iSM)
- CVE-2024-22426 Command injection in RecoverPoint for VMs
- CVE-2024-22425 Auth bypass in RecoverPoint for VMs
- CVE-2024-22424 Cross-Site Request Forgery (CSRF) in github.com/argoproj/argo-cd
- CVE-2024-22423 yt-dlp `--exec` command injection when using `%q` in yt-dlp on Windows
- CVE-2024-22422 Unauthenticated Denial of Service (DOS) attack in AnythingLLM
- CVE-2024-22421 Potential authentication and CSRF tokens leak in JupyterLab
- CVE-2024-22420 Stored cross site scripting in Markdown Preview in JupyterLab
- CVE-2024-2242 Contact Form 7 <= 5.9 - Reflected Cross-Site Scripting
- CVE-2024-22419 concat built-in can corrupt memory in vyper
- CVE-2024-22418 Stored Cross-site Scripting Vulnerability via Malicious File Names in GroupOffice
- CVE-2024-22417 Whoogle Search Cross-site Scripting vulnerability
- CVE-2024-22416 Cross-Site Request Forgery on any API call in pyLoad may lead to admin privilege escalation
- CVE-2024-22415 Unsecured endpoints in the jupyter-lsp server extension
- CVE-2024-22414 User profile page vulnerable to Cross Site Scripting (XSS) in flaskBlog
- CVE-2024-22412 ClickHouse's Role-based Access Control is bypassed when query caching is enabled.
- CVE-2024-22411 Cross site scripting in Action messages on Avo
- CVE-2024-22410 Binary Planting Attack on Windows Platforms in Creditcoin
- CVE-2024-2241 Missing authorization in Workspace
- CVE-2024-22409 Default Privileges allow for high level operations for low privileged users in datahub
- CVE-2024-22408 Server-Side Request Forgery (SSRF) in Shopware Flow Builder
- CVE-2024-22407 Broken Access Control order API in Shopware
- CVE-2024-22406 Blind SQL-injection in DAL aggregations in Shopware
- CVE-2024-22405 XADMaster may not apply quarantine attribute correctly to extracted files
- CVE-2024-22404 Permissions bypass in Nextcloud with the files zip app
- CVE-2024-22403 OAuth2 authorization codes are valid indefinetly in Nextcloud server
- CVE-2024-22402 Improper handling of request URLs in Nextcloud Guests app allows guest users to bypass app allowlist
- CVE-2024-22401 All users can reset the allowed apps list for Nextcloud Guest App users
- CVE-2024-22400 Open redirect in user_saml via RelayState parameter in Nextcloud User Saml
- CVE-2024-2240 Docker implementation in Brocade SANnav is missing Audit Rules.
- CVE-2024-22399 Apache Seata: Remote Code Execution vulnerability via Hessian Deserialization in Apache Seata Server
- CVE-2024-22398 Path traversal in Email Security
- CVE-2024-22397 Cross-site scripting in SonicOS
- CVE-2024-22396 Integer overflow in SonicOS
- CVE-2024-22395 Auth bypass in SMA100
- CVE-2024-22394 Auth bypass in SonicOS
- CVE-2024-22393 Apache Answer: Pixel Flood Attack by uploading the large pixel file
- CVE-2024-22391 Memory corruption in Grassroot DICOM
- CVE-2024-22390 Denial of service in Intel(R) FPGA products
- CVE-2024-2239 Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Premium Magic Scroll Module
- CVE-2024-22389 BIG-IP iControl REST API Vulnerability
- CVE-2024-22388 Insecure Default Initialization of Resource in HID Global
- CVE-2024-22387 Missing authorization in Controller 6000 and Controller 7000
- CVE-2024-22386 Race condition vulnerability in Linux kernel drm/exynos exynos_drm_crtc_atomic_disable
- CVE-2024-22385 File and Directory Permission Vulnerability in Hitachi Storage Provider for VMware vCenter
- CVE-2024-22384 Memory corruption in Intel(R) Trace Analyzer and Collector software
- CVE-2024-22383 Denial of service in Controller 7000
- CVE-2024-22382 Privilege escalation in PprRequestLog module in UEFI firmware for some Intel(R) Server D50DNP Family products
- CVE-2024-22380 XML external entity in Electronic Delivery Check System (Ministry of Agriculture, Forestry and Fisheries The Agriculture and Rural Development Project Version) March, Heisei 31 era edition
- CVE-2024-2238 Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Mouse Cursor Module
- CVE-2024-22379 Privilege escalation in Intel(R) Inspector software
- CVE-2024-22378 Misconfiguration in Intel Unite(R) Client Extended Display Plugin software installers
- CVE-2024-22377 PingFederate Runtime Node Path Traversal
- CVE-2024-22376 Privilege escalation in installation software for Intel(R) Ethernet Adapter Driver Pack
- CVE-2024-22374 Denial of service in Intel(R) Xeon Processors
- CVE-2024-22373 Memory corruption in Grassroot DICOM
- CVE-2024-22372 Command injection in WRC-X1500GS-B
- CVE-2024-22371 Apache Camel issue on ExchangeCreatedEvent
- CVE-2024-22370 Cross-site scripting in YouTrack
- CVE-2024-2237 Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Global Badge Module
- CVE-2024-22369 Apache Camel: Camel-SQL: Unsafe Deserialization from JDBCAggregationRepository