Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 451 of 521.
- CVE-2024-21586 Junos OS: SRX Series and NFX Series: Specific valid traffic leads to a PFE crash
- CVE-2024-21585 Junos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crash
- CVE-2024-21584 Cross-site scripting in Pleasanter
- CVE-2024-21583 github.com/gitpod-io/gitpod vulnerable to Cookie Tossing
- CVE-2024-21577 Code injection in ComfyUI-Ace-Nodes
- CVE-2024-21576 Code injection in ComfyUI-Bmad-Nodes
- CVE-2024-21575 Path traversal in ComfyUI-Impact-Pack
- CVE-2024-21574 Code injection in ComfyUI-Manager
- CVE-2024-21571 Code injection in Code Agent
- CVE-2024-2156 SourceCodester Best POS Management System admin_class.php sql injection
- CVE-2024-21552 Code injection in SuperAGI
- CVE-2024-21550 Cross-site scripting in SteVe
- CVE-2024-2155 SourceCodester Best POS Management System index.php file inclusion
- CVE-2024-21549 Browsershot Improper Input Validation vulnerability
- CVE-2024-21548 Code injection in bun
- CVE-2024-21547 Spatie Browsershot Directory Traversal vulnerability
- CVE-2024-21546 UniSharp Laravel Filemanager Code Injection vulnerability
- CVE-2024-21545 Path traversal in libpve-common-perl (Promox Mail Gateway 8)
- CVE-2024-21544 Browsershot Local File Inclusion
- CVE-2024-21543 djoser Authentication Bypass
- CVE-2024-21542 luigi Arbitrary File Write via Archive Extraction (Zip Slip)
- CVE-2024-21541 dom-iterator code execution vulnerability
- CVE-2024-2154 SourceCodester Online Mobile Management Store view_product.php sql injection
- CVE-2024-21539 Regular Expression Denial of Service (ReDoS) in @eslint/plugin-kit
- CVE-2024-21538 Regular Expression Denial of Service (ReDoS) in cross-spawn
- CVE-2024-21537 lilconfig Code Injection vulnerability
- CVE-2024-21536 Denial of service in http-proxy-middleware
- CVE-2024-21535 Cross site scripting in markdown-to-jsx
- CVE-2024-21534 JSONPath Plus Remote Code Execution (RCE) Vulnerability
- CVE-2024-21533 ggit is vulnerable to Arbitrary Argument Injection via the clone() API
- CVE-2024-21532 ggit is vulnerable to Command Injection via the fetchTags(branch) API
- CVE-2024-21531 git-shallow-clone Argument Injection vulnerability
- CVE-2024-21530 Sequential calls of encryption API (`encrypt`, `wrap`, and `dump`) result in nonce reuse
- CVE-2024-2153 SourceCodester Online Mobile Management Store view_order.php sql injection
- CVE-2024-21529 dset Prototype Pollution vulnerability
- CVE-2024-21528 node-gettext vulnerable to Prototype Pollution
- CVE-2024-21527 Server-side request forgery in github.com/gotenberg/gotenberg/v8/pkg/gotenberg
- CVE-2024-21526 speaker vulnerable to Denial of Service
- CVE-2024-21525 node-twain vulnerable to Improper Check or Handling of Exceptional Conditions
- CVE-2024-21524 node-stringbuilder vulnerable to Out-of-bounds Read
- CVE-2024-21523 images vulnerable to Denial of Service
- CVE-2024-21522 audify vulnerable to Improper Validation of Array Index
- CVE-2024-21521 @discordjs/opus vulnerable to Denial of Service
- CVE-2024-21520 Cross-site Scripting in djangorestframework
- CVE-2024-2152 SourceCodester Online Mobile Management Store manage_product.php sql injection
- CVE-2024-21519 Arbitrary File Creation in opencart
- CVE-2024-21518 Zip slip in opencart
- CVE-2024-21517 Cross site scripting in opencart
- CVE-2024-21516 Cross site scripting in opencart
- CVE-2024-21515 Cross site scripting in opencart
- CVE-2024-21514 SQL injection in opencart
- CVE-2024-21513 langchain-experimental vulnerable to Arbitrary Code Execution
- CVE-2024-21512 mysql2 vulnerable to Prototype Pollution
- CVE-2024-21511 MySQL2 for Node Arbitrary Code Injection
- CVE-2024-21510 Sinatra vulnerable to Reliance on Untrusted Inputs in a Security Decision
- CVE-2024-2151 SourceCodester Online Mobile Management Store Product Price logic error
- CVE-2024-21509 mysql2 vulnerable to Prototype Poisoning
- CVE-2024-21508 mysql2 Remote Code Execution (RCE) via the readCodeFor function
- CVE-2024-21507 mysql2 cache poisoning vulnerability
- CVE-2024-21505 web3-utils Prototype Pollution vulnerability
- CVE-2024-21504 Cross-site Scripting in livewire/livewire
- CVE-2024-21503 Black vulnerable to Regular Expression Denial of Service (ReDoS)
- CVE-2024-21502 Uninitialized Variable in fastecdsa
- CVE-2024-21501 sanitize-html Information Exposure vulnerability
- CVE-2024-21500 Improper Restriction of Excessive Authentication Attempts in github.com/greenpau/caddy-security
- CVE-2024-2150 SourceCodester Insurance Management System file inclusion
- CVE-2024-21499 Improper Neutralization of HTTP Headers in github.com/greenpau/caddy-security
- CVE-2024-21498 Server-Side Request Forgery in github.com/greenpau/caddy-security
- CVE-2024-21497 Open Redirect in github.com/greenpau/caddy-security
- CVE-2024-21496 Cross-site Scripting in github.com/greenpau/caddy-security
- CVE-2024-21495 Use of Insufficiently Random Values in github.com/greenpau/caddy-security
- CVE-2024-21494 Authentication Bypass by Spoofing in github.com/greenpau/caddy-security
- CVE-2024-21493 Improper Validation of Array Index in github.com/greenpau/caddy-security
- CVE-2024-21492 Insufficient Session Expiration in github.com/greenpau/caddy-security
- CVE-2024-21491 svix vulnerable to Authentication Bypass
- CVE-2024-21490 angular vulnerable to super-linear runtime due to backtracking
- CVE-2024-2149 CodeAstro Membership Management System settings.php sql injection
- CVE-2024-21489 uPlot Prototype Pollution vulnerability
- CVE-2024-21488 network Arbitrary Command Injection vulnerability
- CVE-2024-21485 Dash apps vulnerable to Cross-site Scripting
- CVE-2024-21484 Marvin Attack of RSA and RSAOAEP decryption in jsrsasign
- CVE-2024-21483 Information disclosure in SENTRON 7KM PAC3120 AC/DC
- CVE-2024-21482 Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux Boot Loader
- CVE-2024-21481 Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor
- CVE-2024-21480 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
- CVE-2024-2148 SourceCodester Online Mobile Management Store Users.php unrestricted upload
- CVE-2024-21479 Buffer Over-read in Audio
- CVE-2024-21478 NULL Pointer Dereference in Graphics
- CVE-2024-21477 Buffer Over-read in WLAN Firmware
- CVE-2024-21476 Improper Input Validation in Secure Processor
- CVE-2024-21475 Use of Out-of-range Pointer Offset in Video
- CVE-2024-21474 Stack-based Buffer Overflow in PMIC
- CVE-2024-21473 Improper Input Validation in WIN SON
- CVE-2024-21472 Use After Free in Kernel
- CVE-2024-21471 Use After Free in Graphics Linux
- CVE-2024-21470 Integer Overflow to Buffer Overflow in Graphics Windows
- CVE-2024-2147 SourceCodester Online Mobile Management Store login.php sql injection
- CVE-2024-21469 Permissions, Privileges, and Access Control issues in TZ Secure OS
- CVE-2024-21468 Use After Free in Kernel
- CVE-2024-21467 Buffer Over-read in WLAN Host Communication