Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 449 of 521.
- CVE-2024-21818 Privilege escalation in Intel(R) PCM software
- CVE-2024-21816 Background task manager has an improper preservation of permissions vulnerability
- CVE-2024-21815 Information disclosure in Command Centre Server
- CVE-2024-21814 Privilege escalation in Intel(R) Chipset Device Software
- CVE-2024-21813 Privilege escalation in Intel(R) DTT software installers
- CVE-2024-21812 Integer overflow in libbiosig
- CVE-2024-21810 Privilege escalation in Intel(R) Ethernet Network Controllers and Adapters
- CVE-2024-2181 Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
- CVE-2024-21809 Privilege escalation in Intel(R) Quartus(R) Prime Lite Edition Design software
- CVE-2024-21808 Memory corruption in Intel(R) VPL software
- CVE-2024-21807 Privilege escalation in Intel(R) Ethernet Network Controllers and Adapters
- CVE-2024-21806 Denial of service in Intel(R) Ethernet Network Controllers and Adapters E810 Series
- CVE-2024-21805 Missing authorization in SKYSEA Client View
- CVE-2024-21803 Possible UAF in bt_accept_poll in Linux kernel
- CVE-2024-21802 Memory corruption in llama.cpp
- CVE-2024-21801 Denial of service in Intel(R) TDX module software
- CVE-2024-2180 Zemana AntiLogger v2.74.204.664 - Kernel Memory Leak
- CVE-2024-21799 Path traversal in Intel(R) Extension for Transformers software
- CVE-2024-21798 Cross-site scripting in WMC-X1800GST-B
- CVE-2024-21797 Command injection in Wavlink AC3000
- CVE-2024-21796 XML external entity in Electronic Deliverables Creation Support Tool (Construction Edition)
- CVE-2024-21795 Memory corruption in libbiosig
- CVE-2024-21794 Open Redirect in Rapid SCADA
- CVE-2024-21793 BIG-IP Central Manager OData Injection Vulnerability
- CVE-2024-21792 Race condition in Intel(R) Neural Compressor software
- CVE-2024-21791 SQL Injection in ADAudit Plus
- CVE-2024-2179 Concrete CMS version 9 before 9.2.7 is vulnerable to Stored XSS via the Name field of a Group type
- CVE-2024-21789 BIG-IP ASM and Advanced WAF vulnerability
- CVE-2024-21788 Privilege escalation in Intel(R) GPA software
- CVE-2024-21787 Weak cryptography in BMRA software
- CVE-2024-21786 Command injection in MC LR Router
- CVE-2024-21785 Auth bypass in P3-550E
- CVE-2024-21784 Privilege escalation in Intel(R) IPP Cryptography software
- CVE-2024-21783 Integer overflow in Intel(R) VPL software
- CVE-2024-21782 BIG-IP and BIG-IQ secure copy vulnerability
- CVE-2024-21781 Other in UEFI firmware for some Intel(R) Processors
- CVE-2024-21780 Memory corruption in HOME SPOT CUBE2
- CVE-2024-2178 Path Traversal Vulnerability in parisneo/lollms-webui
- CVE-2024-21778 Memory corruption in WBR-6013
- CVE-2024-21777 Privilege escalation in Intel(R) Quartus(R) Prime Pro Edition Design software
- CVE-2024-21775 SQL Injection
- CVE-2024-21774 Privilege escalation in Intel(R) Processor Identification Utility software
- CVE-2024-21773 Command injection in Archer AX3000
- CVE-2024-21772 Privilege escalation in Intel(R) Advisor software
- CVE-2024-21771 F5 AFM Signature Matching Vulnerability
- CVE-2024-2177 Improper Restriction of Rendered UI Layers or Frames in GitLab
- CVE-2024-21769 Privilege escalation in Intel(R) Ethernet Connection I219-LM install software
- CVE-2024-21767 Commend WS203VICM Improper Access Control
- CVE-2024-21766 Privilege escalation in Intel(R) oneAPI Math Kernel Library software
- CVE-2024-21765 XML external entity in Electronic Delivery Check System (Dentsu)
- CVE-2024-21764 Use of Hard-Coded Credentials in Rapid SCADA
- CVE-2024-21763 BIG-IP AFM vulnerability
- CVE-2024-21762 Fortinet FortiOS Out-of-Bound Write
- CVE-2024-21761 Missing authorization in FortiPortal
- CVE-2024-21760 Code injection in FortiSOAR
- CVE-2024-2176 Use after free in Chrome
- CVE-2024-21759 Missing authorization in FortiPortal
- CVE-2024-21758 Memory corruption in FortiWeb
- CVE-2024-21757 Auth bypass in FortiAnalyzer
- CVE-2024-21756 Command injection in FortiSandbox
- CVE-2024-21755 Command injection in FortiSandbox
- CVE-2024-21754 Weak cryptography in FortiOS
- CVE-2024-21753 Path traversal in FortiClientEMS
- CVE-2024-21752 WordPress Ajax Search Lite Plugin <= 4.11.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-21751 WordPress RabbitLoader plugin <= 2.19.13 - Broken Access Control vulnerability
- CVE-2024-21750 WordPress Shortcodes Finder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-2175 Privilege escalation in Accessories and Display Manager
- CVE-2024-21749 WordPress 1 click disable all Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2024-21748 WordPress Icegram Engage plugin <= 3.1.21 - Broken Access Control vulnerability
- CVE-2024-21747 WordPress WP ERP Plugin <= 1.12.8 is vulnerable to SQL Injection
- CVE-2024-21746 WordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerability
- CVE-2024-21745 WordPress Laybuy Payment Extension for WooCommerce Plugin <= 5.3.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-21744 WordPress Mapster WP Maps Plugin <= 1.2.38 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-21743 WordPress Houzez Login Register plugin <= 3.2.5 - Privilege Escalation vulnerability
- CVE-2024-21742 Apache James Mime4J: Mime4J DOM header injection
- CVE-2024-21741 GigaDevice GD32E103C8T6 devices have Incorrect Access Control.
- CVE-2024-21740 Artery AT32F415CBT7 and AT32F421C8T7 devices have Incorrect Access Control.
- CVE-2024-2174 Memory corruption in Chrome
- CVE-2024-21739 Geehy APM32F103CCT6, APM32F103RCT6, APM32F103RCT7, and APM32F103VCT6 devices have Incorrect Access Control.
- CVE-2024-21738 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Application Server and ABAP Platform
- CVE-2024-21737 Code Injection vulnerability in SAP Application Interface Framework (File Adapter)
- CVE-2024-21736 Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management)
- CVE-2024-21735 Improper Authorization check in SAP LT Replication Server
- CVE-2024-21734 URL Redirection vulnerability in SAP Marketing (Contacts App)
- CVE-2024-21733 Apache Tomcat: Leaking of unrelated request bodies in default error page
- CVE-2024-21732 Cross-site scripting in flycms project:flycms
- CVE-2024-21731 [20240703] - Core - XSS in StringHelper::truncate method
- CVE-2024-21730 [20240702] - Core - Self-XSS in fancyselect list field layout
- CVE-2024-2173 Memory corruption in Chrome
- CVE-2024-21729 [20240701] - Core - XSS in accessible media selection field
- CVE-2024-21728 Extension - smartcalc.es - Open redirect vulnerability in osTicky component for Joomla <= 2.2.8
- CVE-2024-21727 Extension - digtal-peak.com - XSS vulnerability in DP Calendar component for Joomla 8.0.0-8.0.14
- CVE-2024-21726 [20240205] - Core - Inadequate content filtering within the filter code
- CVE-2024-21725 [20240204] - Core - XSS in mail address outputs
- CVE-2024-21724 [20240203] - Core - XSS in media selection fields
- CVE-2024-21723 [20240202] - Core - Open redirect in installation application
- CVE-2024-21722 [20240201] - Core - Insufficient session expiration in MFA management views
- CVE-2024-2172 Malware Scanner <= 4.7.2 and Web Application Firewall <= 2.1.1 - Unauthenticated Privilege Escalation
- CVE-2024-2171 Stored XSS in zenml-io/zenml
- CVE-2024-21703 Misconfiguration in Confluence Data Center