Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 448 of 521.
- CVE-2024-2193 Race condition in CPU
- CVE-2024-21927 Denial of service in AMD Instinct™ MI300X
- CVE-2024-21925 Memory corruption in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
- CVE-2024-21924 Privilege escalation in AMD EPYC™ 7002 Processors
- CVE-2024-21923 Privilege escalation in AMD StoreMI™
- CVE-2024-21922 Privilege escalation in AMD StoreMI™
- CVE-2024-21920 Rockwell Automation Arena Simulation Vulnerable To Buffer Overflow
- CVE-2024-21919 Rockwell Automation Arena Simulation Vulnerable To Uninitialized Pointer
- CVE-2024-21918 Rockwell Automation Arena Simulation Vulnerable To Memory Corruption
- CVE-2024-21917 Rockwell Automation FactoryTalk® Service Platform Service Token Vulnerability
- CVE-2024-21916 Rockwell Automation Denial-of-service Vulnerability in ICE1 Controller
- CVE-2024-21915 Rockwell Automation FactoryTalk® Service Platform Elevated Privileges Vulnerability Through Web Service Functionality
- CVE-2024-21914 Rockwell Automation - FactoryTalk® View ME on PanelView™ Plus 7 Boot Terminal lack Security Protections
- CVE-2024-21913 Rockwell Automation Arena Simulation Vulnerable To Memory Corruption
- CVE-2024-21912 Rockwell Automation Arena Simulation vulnerable to out of bounds write
- CVE-2024-21911 Cross-site scripting vulnerability in TinyMCE
- CVE-2024-21910 Cross-site scripting vulnerability in TinyMCE plugins
- CVE-2024-2191 Improper Access Control in GitLab
- CVE-2024-21909 Denial of service in CBOR library
- CVE-2024-21908 Cross-site scripting vulnerability in TinyMCE
- CVE-2024-21907 Improper Handling of Exceptional Conditions in Newtonsoft.Json
- CVE-2024-21906 QTS, QuTS hero
- CVE-2024-21905 QTS, QuTS hero, QuTScloud
- CVE-2024-21904 QTS, QuTS hero
- CVE-2024-21903 QTS, QuTS hero
- CVE-2024-21902 QTS, QuTS hero
- CVE-2024-21901 myQNAPcloud
- CVE-2024-21900 QTS, QuTS hero, QuTScloud
- CVE-2024-21899 QTS, QuTS hero, QuTScloud
- CVE-2024-21898 QTS, QuTS hero
- CVE-2024-21897 QTS, QuTS hero
- CVE-2024-21896 Path traversal in Node
- CVE-2024-21894 Memory corruption in Connect Secure
- CVE-2024-21893 Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF)
- CVE-2024-21892 Privilege escalation in Node
- CVE-2024-21891 Path traversal in Node
- CVE-2024-21890 Security feature bypass in Node
- CVE-2024-2189 Social Icons Widget & Block < 4.2.18 - Admin+ Stored XSS
- CVE-2024-21888 Privilege escalation in ICS
- CVE-2024-21887 Ivanti Connect Secure and Policy Secure Command Injection
- CVE-2024-21886 Xorg-x11-server: heap buffer overflow in disabledevice
- CVE-2024-21885 Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent
- CVE-2024-21881 Upload of encrypted packages allows authenticated command execution in Enphase IQ Gateway v4.x and v5.x
- CVE-2024-21880 Command injection in Envoy
- CVE-2024-2188 Cross-Site Scripting vulnerability in TP-Link Archer AX50
- CVE-2024-21879 Command injection in Envoy
- CVE-2024-21878 Command injection in Envoy
- CVE-2024-21877 Insecure File Generation Based on User Input in Enphase IQ Gateway version 4.x to 8.x and < 8.2.4225
- CVE-2024-21876 Unauthenticated Path Traversal via URL Parameter in Enphase IQ Gateway version < 8.2.4225
- CVE-2024-21875 DoS attack when broadcasting billboard messages
- CVE-2024-21872 Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking
- CVE-2024-21871 Privilege escalation in UEFI firmware for some Intel(R) Processors
- CVE-2024-21870 Path traversal in OAS Platform
- CVE-2024-2187 Cross-site scripting in WPZOOM Addons for Beaver Builder
- CVE-2024-21869 Plaintext Storage of a Password in Rapid SCADA
- CVE-2024-21866 Generation of Error Message Containing Sensitive Information in Rapid SCADA
- CVE-2024-21865 Hardcoded credentials in HGW BL1500HM
- CVE-2024-21864 Privilege escalation in Intel(R) Arc(TM) & Iris(R) Xe Graphics software
- CVE-2024-21863 Dsoftbus has an improper input validation vulnerability
- CVE-2024-21862 Privilege escalation in Intel(R) Quartus(R) Prime Standard Edition Design software
- CVE-2024-21861 Privilege escalation in Intel(R) GPA Framework software
- CVE-2024-21860 Dsoftbus has a use after free vulnerability
- CVE-2024-2186 Cross-site scripting in WPZOOM Addons for Beaver Builder
- CVE-2024-21859 Memory corruption in Intel(R) Processors
- CVE-2024-21857 Privilege escalation in Intel(R) oneAPI Compiler software
- CVE-2024-21855 Auth bypass in GoCast
- CVE-2024-21853 Denial of service in 4th and 5th Generation Intel(R) Xeon(R) Processors
- CVE-2024-21852 Rapid SCADA Path Traversal
- CVE-2024-21851 Dsoftbus has an integer overflow vulnerability
- CVE-2024-21850 Information disclosure in Intel(R) TDX Seamldr module software
- CVE-2024-2185 Cross-site scripting in WPZOOM Addons for Beaver Builder
- CVE-2024-21849 BIG-IP Websockets vulnerability
- CVE-2024-21848 Users maintain access to active call after being removed from a channel
- CVE-2024-21846 Electrolink FM/DAB/TV Transmitter Missing Authentication for Critical Function
- CVE-2024-21845 Dsoftbus has an integer overflow vulnerability
- CVE-2024-21844 Integer overflow in Intel(R) CSME
- CVE-2024-21843 Privilege escalation in Intel(R) Computing Improvement Program software
- CVE-2024-21841 Privilege escalation in Intel(R) Distribution for GDB software
- CVE-2024-21840 Directory and File Permission Vulnerability in Hitachi Storage Plug-in for VMware vCenter
- CVE-2024-2184 Memory corruption in C1127P
- CVE-2024-21838 Cross-site scripting in Command Centre Server
- CVE-2024-21837 Privilege escalation in Intel(R) Quartus(R) Prime Lite Edition Design software
- CVE-2024-21836 Memory corruption in llama.cpp
- CVE-2024-21835 Privilege escalation in Intel(R) XTU software
- CVE-2024-21834 Arkui has a type confusion vulnerability
- CVE-2024-21833 Command injection in Archer AX3000
- CVE-2024-21832 PingFederate REST API Data Store Injection
- CVE-2024-21831 Privilege escalation in Intel(R) Processor Diagnostic Tool software
- CVE-2024-21830 Privilege escalation in Intel(R) VPL software
- CVE-2024-2183 Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget
- CVE-2024-21829 Privilege escalation in Intel(R) Processors
- CVE-2024-21828 Privilege escalation in Intel(R) Ethernet Controller Administrative Tools software
- CVE-2024-21827 Command injection in ER7206 Omada Gigabit VPN Router
- CVE-2024-21826 Huks has an insecure storage of sensitive information vulnerability
- CVE-2024-21825 Memory corruption in llama.cpp
- CVE-2024-21824 Auth bypass in Multiple printers and scanners
- CVE-2024-21823 Race condition in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors
- CVE-2024-21821 Command injection in Archer AX3000
- CVE-2024-21820 Misconfiguration in Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX
- CVE-2024-2182 Ovn: insufficient validation of bfd packets may lead to denial of service