Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 447 of 521.
- CVE-2024-22058 Memory corruption in EPM
- CVE-2024-22054 Denial of service in UniFi Access Points
- CVE-2024-22053 Memory corruption in Connect Secure
- CVE-2024-22052 Null dereference in Connect Secure
- CVE-2024-22051 CommonMarker Integer Overflow Vulnerability
- CVE-2024-22050 Iodine Static File Server Path Traversal Vulnerability
- CVE-2024-22049 httparty Multipart/Form-Data Request Tampering Vulnerability
- CVE-2024-22048 govuk_tech_docs XSS Vulnerability
- CVE-2024-22047 Audited Log Integrity Errors Due to Race Condition
- CVE-2024-22045 Information disclosure in SINEMA Remote Connect Client
- CVE-2024-22044 Denial of service in SENTRON 3KC ATC6 Expansion Module Ethernet
- CVE-2024-22043 Null dereference in Parasolid V35.0
- CVE-2024-22042 Privilege escalation in Unicam FX
- CVE-2024-22041 Memory corruption in Cerberus PRO EN Engineering Tool
- CVE-2024-22040 Memory corruption in Cerberus PRO EN Engineering Tool
- CVE-2024-2204 Zemana AntiLogger v2.74.204.664 - Denial of Service (DoS)
- CVE-2024-22039 Memory corruption in Cerberus PRO EN Engineering Tool
- CVE-2024-22038 DoS attacks, information leaks etc. with crafted Git repositories in obs-scm-bridge
- CVE-2024-22037 Database password leaked by systemd uyuni-server-attestation service
- CVE-2024-22036 Rancher Remote Code Execution via Cluster/Node Drivers
- CVE-2024-22034 Crafted projects can overwrite special files in the .osc config directory
- CVE-2024-22033 obs-service-download_url is vulnerable to argument injection
- CVE-2024-22032 Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec
- CVE-2024-22031 Rancher users who can create Projects can gain access to arbitrary projects
- CVE-2024-22030 Rancher agents can be hijacked by taking over the Rancher Server URL
- CVE-2024-2203 The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Clients Widget
- CVE-2024-22029 tomcat packaging allows for escalation to root from tomcat user
- CVE-2024-22028 Information disclosure in 3R-TMC01
- CVE-2024-22027 Denial of service in WordPress Quiz Maker Plugin
- CVE-2024-22026 Privilege escalation in EPMM
- CVE-2024-22025 Denial of service in Node
- CVE-2024-22024 XML external entity in ICS
- CVE-2024-22023 XML external entity in Connect Secure
- CVE-2024-22022 Information disclosure in Availability Orchestrator
- CVE-2024-22021 Missing authorization in Availability Orchestrator
- CVE-2024-22020 Code injection in Node
- CVE-2024-2202 Page Builder by SiteOrigin <= 2.29.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Legacy Image Widget
- CVE-2024-22019 Denial of service in Node
- CVE-2024-22018 Security feature bypass in Node
- CVE-2024-22017 Privilege escalation in Node
- CVE-2024-22016 Incorrect Permission Assignment for Critical Resource in Rapid SCADA
- CVE-2024-22015 Denial of service in Intel(R) DLB driver software
- CVE-2024-22014 Privilege escalation in 360totalsecurity:360 total security
- CVE-2024-22013 Security feature bypass in Nest Wifi Pro
- CVE-2024-22012 Memory corruption in Android
- CVE-2024-22011 Memory corruption in Android
- CVE-2024-22010 Memory corruption in Android
- CVE-2024-2201 CVE-2024-2201
- CVE-2024-22009 Memory corruption in Android
- CVE-2024-22008 Memory corruption in Android
- CVE-2024-22007 Memory corruption in Android
- CVE-2024-22006 Memory corruption in Android
- CVE-2024-22005 Auth bypass in Android
- CVE-2024-22004 Unchecked length in Trusted Application on Google Nest Wifi Pro, leading to out of bounds read
- CVE-2024-22002 CORSAIR iCUE 5.9.105 with iCUE Murals on Windows allows unprivileged users to insert DLL files in the cuepkg-1.2.6 subdirectory of the installation directory.
- CVE-2024-2200 Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_subject
- CVE-2024-21994 CVE-2024-21994 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)
- CVE-2024-21993 Information Disclosure Vulnerability in SnapCenter
- CVE-2024-21990 Default Privileged Account Credentials Vulnerability in ONTAP Select Deploy administration utility
- CVE-2024-2199 389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c
- CVE-2024-21989 Privilege Escalation Vulnerability in ONTAP Select Deploy administration utility
- CVE-2024-21988 CVE-2024-21988 SSH Cryptographic Implementation Vulnerability in StorageGRID (formerly StorageGRID Webscale)
- CVE-2024-21987 Improper Authorization Vulnerability in SnapCenter
- CVE-2024-21985 Privilege Escalation Vulnerability in ONTAP 9
- CVE-2024-21984 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)
- CVE-2024-21983 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)
- CVE-2024-21982 CVE-2024-21982 Information Disclosure Vulnerability in ONTAP 9
- CVE-2024-21981 Weak cryptography in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
- CVE-2024-21980 Memory corruption in 3rd Gen AMD EPYC™ Processors
- CVE-2024-2198 Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_address
- CVE-2024-21979 Memory corruption in AMD Software: Adrenalin Edition
- CVE-2024-21978 Other in 3rd Gen AMD EPYC™ Processors
- CVE-2024-21977 Other in AMD EPYC™ 7003 Series Processors
- CVE-2024-21976 Memory corruption in AMD Ryzen™ AI Software
- CVE-2024-21975 Memory corruption in AMD Ryzen™ AI Software
- CVE-2024-21974 Memory corruption in AMD Ryzen™ AI Software
- CVE-2024-21972 Memory corruption in AMD Software: Adrenalin Edition
- CVE-2024-21971 Denial of service in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
- CVE-2024-21970 Memory corruption in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
- CVE-2024-2197 Chirp Systems Chirp Access Use of Hard-coded Password
- CVE-2024-21966 Privilege escalation in AMD Ryzen™ Master Utility
- CVE-2024-21962 Memory corruption in AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- CVE-2024-21961 Memory corruption in AMD EPYC™ 7002 Series Processors
- CVE-2024-21960 Misconfiguration in AMD Optimizing CPU Libraries (AOCL)
- CVE-2024-2196 CSRF Vulnerability in aimhubio/aim
- CVE-2024-21958 Misconfiguration in AMD Provisioning Console (APC) Software
- CVE-2024-21957 Misconfiguration in AMD Management Console
- CVE-2024-21953 Other in AMD EPYC™ 8004 Series Processors
- CVE-2024-21950 Memory corruption in AMD Instinct™ MI300A
- CVE-2024-2195 Remote Code Execution in aimhubio/aim
- CVE-2024-21949 Memory corruption in AMD Ryzen™ AI Software
- CVE-2024-21947 Memory corruption in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
- CVE-2024-21946 Misconfiguration in AMD Ryzen Master Utility for Overclocking Control
- CVE-2024-21945 Misconfiguration in AMD Ryzen™ Master Monitoring SDK
- CVE-2024-21944 Other in AMD EPYC™ 7003 Series Processors
- CVE-2024-2194 WP Statistics <= 14.5 - Unauthenticated Stored Cross-Site Scripting
- CVE-2024-21939 Misconfiguration in AMD Cloud Manageability Service Software
- CVE-2024-21938 Misconfiguration in AMD Management Plug-In for SCCM
- CVE-2024-21937 Misconfiguration in AMD Software: Adrenalin Edition
- CVE-2024-21935 Path traversal in AMD Instinct™ MI300X