Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 454 of 521.
- CVE-2024-2127 Cross-site scripting in Page Builder: Pagelayer – Drag and Drop website builder
- CVE-2024-21269 Missing authorization in Oracle Incentive Compensation
- CVE-2024-21268 Missing authorization in Oracle Applications Manager
- CVE-2024-21267 Missing authorization in Oracle Cost Management
- CVE-2024-21266 Missing authorization in Oracle Advanced Pricing
- CVE-2024-21265 Missing authorization in Oracle Site Hub
- CVE-2024-21264 Other in PeopleSoft Enterprise CC Common Application Objects
- CVE-2024-21263 Other in Oracle VM VirtualBox
- CVE-2024-21262 Missing authorization in MySQL Connectors
- CVE-2024-21261 Other in Oracle Application Express
- CVE-2024-21260 Denial of service in Oracle WebLogic Server
- CVE-2024-2126 Cross-site scripting in Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More
- CVE-2024-21259 Privilege escalation in Oracle VM VirtualBox
- CVE-2024-21258 Information disclosure in Oracle Installed Base
- CVE-2024-21257 Information disclosure in Oracle Hyperion BI+
- CVE-2024-21255 XML external entity in PeopleSoft Enterprise PeopleTools
- CVE-2024-21254 Missing authorization in Oracle BI Publisher
- CVE-2024-21253 Denial of service in Oracle VM VirtualBox
- CVE-2024-21252 Missing authorization in Oracle Product Hub
- CVE-2024-21251 Other in Oracle Database Server
- CVE-2024-21250 Missing authorization in Oracle Process Manufacturing Product Development
- CVE-2024-2125 EnvíaloSimple: Email Marketing y Newsletters <= 2.3 - Cross-Site Request Forgery to Arbitrary File Upload
- CVE-2024-21249 Missing authorization in PeopleSoft Enterprise FIN Expenses
- CVE-2024-21248 Other in Oracle VM VirtualBox
- CVE-2024-21247 Other in MySQL Client
- CVE-2024-21246 Missing authorization in Oracle Service Bus
- CVE-2024-21245 Other in JD Edwards EnterpriseOne Tools
- CVE-2024-21244 Information disclosure in MySQL Server
- CVE-2024-21243 Information disclosure in MySQL Server
- CVE-2024-21242 Denial of service in Oracle Database Server
- CVE-2024-21241 Denial of service in MySQL Server
- CVE-2024-2124 Cross-site scripting in Translate WordPress with Weglot – Multilingual AI Translation
- CVE-2024-21239 Denial of service in MySQL Server
- CVE-2024-21238 Denial of service in MySQL Cluster
- CVE-2024-21237 Denial of service in MySQL Server
- CVE-2024-21236 Denial of service in MySQL Server
- CVE-2024-21235 Other in Oracle Java SE
- CVE-2024-21234 Missing authorization in Oracle WebLogic Server
- CVE-2024-21233 Other in Oracle Database Server
- CVE-2024-21232 Denial of service in MySQL Server
- CVE-2024-21231 Denial of service in MySQL Server
- CVE-2024-21230 Denial of service in MySQL Cluster
- CVE-2024-2123 Ultimate Member <= 2.8.3 - Unauthenticated Stored Cross-Site Scripting
- CVE-2024-2122 FooGallery <= 2.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Custom URL
- CVE-2024-21219 Denial of service in MySQL Server
- CVE-2024-21218 Denial of service in MySQL Cluster
- CVE-2024-21217 Deserialization in Oracle Java SE
- CVE-2024-21216 Missing authorization in Oracle WebLogic Server
- CVE-2024-21215 Missing authorization in Oracle WebLogic Server
- CVE-2024-21214 Other in PeopleSoft Enterprise PeopleTools
- CVE-2024-21213 Denial of service in MySQL Server
- CVE-2024-21212 Denial of service in MySQL Server
- CVE-2024-21211 Other in GraalVM
- CVE-2024-21210 Other in Oracle Java SE
- CVE-2024-2121 Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-21209 Information disclosure in MySQL Client
- CVE-2024-21208 Denial of service in Oracle Java SE
- CVE-2024-21207 Denial of service in MySQL Server
- CVE-2024-21206 Information disclosure in Oracle Enterprise Command Center Framework
- CVE-2024-21205 Information disclosure in Oracle Service Bus
- CVE-2024-21204 Denial of service in MySQL Server
- CVE-2024-21203 Denial of service in MySQL Cluster
- CVE-2024-21202 Cross-site request forgery in PeopleSoft Enterprise PeopleTools
- CVE-2024-21201 Denial of service in MySQL Server
- CVE-2024-21200 Denial of service in MySQL Server
- CVE-2024-2120 Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation
- CVE-2024-21199 Denial of service in MySQL Server
- CVE-2024-21198 Denial of service in MySQL Server
- CVE-2024-21197 Denial of service in MySQL Server
- CVE-2024-21196 Denial of service in MySQL Server
- CVE-2024-21195 Missing authorization in Oracle BI Publisher
- CVE-2024-21194 Denial of service in MySQL Server
- CVE-2024-21193 Denial of service in MySQL Server
- CVE-2024-21192 Information disclosure in Oracle Enterprise Manager for Fusion Middleware
- CVE-2024-21191 Other in Oracle Enterprise Manager Fusion Middleware Control
- CVE-2024-21190 Other in Oracle Global Lifecycle Management FMW Installer
- CVE-2024-2119 LuckyWP Table of Contents <= 2.1.5 - Reflected Cross-Site Scripting
- CVE-2024-21188 Cross-site scripting in Financial Services Revenue Management and Billing
- CVE-2024-21185 Denial of service in MySQL Server
- CVE-2024-21184 Other in Database - Enterprise Edition
- CVE-2024-21183 Missing authorization in WebLogic Server
- CVE-2024-21182 Oracle WebLogic Server Unspecified
- CVE-2024-21181 Other in WebLogic Server
- CVE-2024-21180 Other in PeopleSoft Enterprise PT PeopleTools
- CVE-2024-2118 Social Media Share Buttons < 2.8.9 - Admin+ Stored XSS via settings
- CVE-2024-21179 Denial of service in MySQL Server
- CVE-2024-21178 Cross-site scripting in PeopleSoft Enterprise PT PeopleTools
- CVE-2024-21177 Denial of service in MySQL NDB Cluster
- CVE-2024-21176 Denial of service in MySQL Server
- CVE-2024-21175 Memory corruption in WebLogic Server
- CVE-2024-21174 Denial of service in Database - Enterprise Edition
- CVE-2024-21173 Denial of service in MySQL Server
- CVE-2024-21172 Other in Oracle Hospitality OPERA 5
- CVE-2024-21171 Denial of service in MySQL Server
- CVE-2024-21170 Other in MySQL Connectors
- CVE-2024-2117 Cross-site scripting in Elementor Website Builder – more than just a page builder
- CVE-2024-21169 Missing authorization in Marketing
- CVE-2024-21168 Other in JD Edwards EnterpriseOne Orchestrator
- CVE-2024-21167 Other in Trading Community
- CVE-2024-21166 Missing authorization in MySQL Server