Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 465 of 521.
- CVE-2024-20023 Memory corruption in MT2713, MT2737, MT6781, MT6789, MT6835, MT6855, MT6879, MT6880, MT6886, MT6890, MT6895, MT6980, MT6983, MT6985, MT6989, MT6990, MT8188, MT8188T, MT8370, MT8390, MT8673, MT8676, MT8678
- CVE-2024-20022 Memory corruption in MT2737, MT6789, MT6835, MT6855, MT6879, MT6880, MT6886, MT6890, MT6895, MT6980, MT6983, MT6985, MT6989, MT6990, MT8321, MT8385, MT8666, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8796, MT8797, MT8798
- CVE-2024-20021 Privilege escalation in MT6768, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8168, MT8183, MT8188, MT8188T, MT8195, MT8195Z, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8666A, MT8666B, MT8667, MT8673, MT8675, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766Z, MT8768, MT8768A, MT8768B, MT8768T, MT8768Z, MT8781, MT8781, MT8786, MT8788, MT8788T, MT8788, MT8788X, MT8788Z, MT8792, MT8795T, MT8796, MT8798
- CVE-2024-20020 Memory corruption in MT2713, MT2715, MT8173, MT8188, MT8195, MT8390, MT8395
- CVE-2024-2002 Libdwarf: crashes randomly on fuzzed object
- CVE-2024-20019 Denial of service in MT7925, MT7927
- CVE-2024-20018 Memory corruption in MT7615
- CVE-2024-20017 Memory corruption in MT6890, MT7915, MT7916, MT7981, MT7986
- CVE-2024-20016 Integer overflow in MT6735, MT6737, MT6739, MT6753, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6885, MT6889, MT6893, MT6895, MT6983, MT8168, MT8183, MT8188, MT8195, MT8765, MT8766, MT8768, MT8791, MT8797, MT8798
- CVE-2024-20015 Privilege escalation in MT6739, MT6753, MT6757, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6781, MT6833, MT6835, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6983, MT6985, MT8321, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797, MT8798
- CVE-2024-20013 Memory corruption in MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8185, MT8321, MT8385, MT8666, MT8667, MT8673, MT8675, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797, MT8798
- CVE-2024-20012 Memory corruption in MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6895, MT6983, MT6985, MT8321, MT8385, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797, MT8798
- CVE-2024-20011 Memory corruption in MT6985, MT8127, MT8135, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8176, MT8183, MT8185, MT8188, MT8188T, MT8195, MT8195Z, MT8312C, MT8312D
- CVE-2024-20010 Memory corruption in MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8185, MT8321, MT8385, MT8666, MT8667, MT8673, MT8675, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797, MT8798
- CVE-2024-2001 Cross-Site Scripting vulnerability in Cockpit CMS
- CVE-2024-20009 Memory corruption in MT6580, MT6739, MT6761, MT6762, MT6765, MT6779, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6895, MT6983, MT6985, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8176, MT8185, MT8188, MT8188T
- CVE-2024-20007 Race condition in MT6580, MT6739, MT6761, MT6762, MT6765, MT6779, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6895, MT6983, MT6985, MT8321, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT8798
- CVE-2024-20006 Memory corruption in MT2713, MT6781, MT6880, MT6890, MT8188T
- CVE-2024-20005 Missing authorization in MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8666, MT8666A, MT8666B, MT8667, MT8673, MT8675, MT8676, MT8678
- CVE-2024-20004 Denial of service in MT2735, MT6297, MT6833, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8675, MT8791, MT8791T, MT8797
- CVE-2024-20003 Denial of service in MT2735, MT6297, MT6833, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8675, MT8791, MT8791T, MT8797
- CVE-2024-20002 Memory corruption in MT5583, MT5586, MT5691, MT5695, MT5696, MT9010, MT9011, MT9012, MT9015, MT9016, MT9020, MT9021, MT9022, MT9025, MT9026, MT9216, MT9218, MT9220, MT9221, MT9222, MT9255, MT9256, MT9266, MT9269, MT9286, MT9288, MT9602, MT9603, MT9610, MT9611, MT9612, MT9613, MT9615, MT9617, MT9618, MT9629, MT9630, MT9631, MT9632, MT9633, MT9636, MT9638, MT9639, MT9649, MT9650, MT9652, MT9653, MT9660, MT9666, MT9667, MT9669, MT9671, MT9675, MT9679, MT9685, MT9686, MT9688, MT9689
- CVE-2024-20001 Memory corruption in MT5583, MT5586, MT5691, MT5695, MT5696, MT9010, MT9011, MT9012, MT9015, MT9016, MT9020, MT9021, MT9022, MT9025, MT9026, MT9216, MT9218, MT9220, MT9221, MT9222, MT9255, MT9256, MT9266, MT9269, MT9286, MT9288, MT9602, MT9603, MT9610, MT9611, MT9612, MT9613, MT9615, MT9617, MT9618, MT9629, MT9630, MT9631, MT9632, MT9633, MT9636, MT9638, MT9639, MT9649, MT9650, MT9652, MT9653, MT9660, MT9666, MT9667, MT9669, MT9671, MT9675, MT9679, MT9685, MT9686, MT9688, MT9689
- CVE-2024-2000 Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multi Scroll Widget
- CVE-2024-1999 Cross-site scripting in Kadence Blocks — Page Builder Toolkit for Gutenberg Editor
- CVE-2024-1997 Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Messenger Chat Widget
- CVE-2024-1996 Premium Addons for Elementor PRO <= 2.9.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget link
- CVE-2024-1995 Smart Custom Fields <= 4.2.2 - Missing Authorization to Authenticated (Subscriber+) Post Content Disclosure
- CVE-2024-1994 Image Watermark <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Watermark Modification
- CVE-2024-1993 Icon Widget <= 1.3.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
- CVE-2024-1991 Missing authorization in RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
- CVE-2024-1990 SQL injection in RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
- CVE-2024-1989 Cross-site scripting in Social Sharing Plugin – Sassy Social Share
- CVE-2024-1988 Cross-site scripting in Post Grid
- CVE-2024-1987 WP-Members Membership Plugin <= 3.4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-1986 Elite Booster for WooCommerce <= 7.1.7 - Authenticated (Subscriber+) Arbitrary File Upload
- CVE-2024-1985 Simple Membership <= 4.4.2 - Unauthenticated Stored Self-Based Cross-Site Scripting
- CVE-2024-1984 Graphene <= 2.9.2 - Missing Authorization
- CVE-2024-1983 Simple Ajax Chat < 20240223 - Unauthenticated Stored XSS
- CVE-2024-1982 WPvivid Backup and Migration <= 0.9.68 - Missing Authorization
- CVE-2024-1981 SQL injection in Migration, Backup, Staging – WPvivid
- CVE-2024-1979 Quarkus: information leak in annotation
- CVE-2024-1978 Friends <= 2.8.5 - Authenticated (Admin+) Blind Server-Side Request Forgery
- CVE-2024-1977 Cross-site scripting in Restaurant Solutions – Checklist
- CVE-2024-1976 Marketing Optimizer <= 20200925 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2024-1975 SIG(0) can be used to exhaust CPU resources
- CVE-2024-1974 HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal
- CVE-2024-1973 Elevation of privileges vulnerability
- CVE-2024-1972 SourceCodester Online Job Portal EditProfile.php cross site scripting
- CVE-2024-1971 Surya2Developer Online Shopping System POST Parameter login.php sql injection
- CVE-2024-1970 SourceCodester Online Learning System V2 index.php cross site scripting
- CVE-2024-1969 Heap buffer overflow
- CVE-2024-1968 Authorization Header Leakage in scrapy/scrapy on Scheme Change Redirects
- CVE-2024-1965 Server-Side Request Forgery Vulnerability in Haivision Products
- CVE-2024-1963 Uncontrolled Resource Consumption in GitLab
- CVE-2024-1962 CM Download and File Manager < 2.9.1 - Download Edit via CSRF
- CVE-2024-1961 Path Traversal leading to Arbitrary File Write and RCE in vertaai/modeldb
- CVE-2024-1960 ShopLentor <= 2.8.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Link
- CVE-2024-1959 Cross-site scripting in Social Sharing Plugin – Social Warfare
- CVE-2024-1958 WPB Show Core < 2.7 - Reflected XSS
- CVE-2024-1957 Cross-site scripting in GiveWP – Donation Plugin and Fundraising Platform
- CVE-2024-1956 WPB Show Core < 2.7 - Reflected XSS
- CVE-2024-1955 Hide Dashboard Notifications <= 1.3 - Missing Authorization to Authenticated(Contributor+) Plugin Settings Modification
- CVE-2024-1954 Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.1.8 - Cross-Site Request Forgery
- CVE-2024-1953 Mattermost fails to limit the number of role names
- CVE-2024-1952 Mattermost incorrectly allows access individual posts
- CVE-2024-1951 Deserialization in Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid
- CVE-2024-1950 Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.7 - Authenticated(Contributor+) PHP Object Injection
- CVE-2024-1949 Mattermost race condition
- CVE-2024-1948 Getwid – Gutenberg Blocks <= 2.0.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Content
- CVE-2024-1947 Improper Handling of Highly Compressed Data (Data Amplification) in GitLab
- CVE-2024-1946 Genesis Blocks <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Content
- CVE-2024-1945 ARForms Form Builder <= 1.6.4 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Option Deletion
- CVE-2024-1943 Yuki <= 1.3.14 - Cross-Site Request Forgery to Theme Setting Reset
- CVE-2024-1942 Mattermost allows attackers access to posts in channels they are not a member of
- CVE-2024-1941 Delta Electronics CNCSoft-B Stack-based Buffer Overflow
- CVE-2024-1940 Brizy – Page Builder <= 2.4.41 - Authenticated(Contributor+) Stored Cross-Site Scripting
- CVE-2024-1939 Memory corruption in Chrome
- CVE-2024-1938 Memory corruption in Chrome
- CVE-2024-1937 Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification
- CVE-2024-1936 Information disclosure in Thunderbird
- CVE-2024-1935 Giveaways and Contests by RafflePress <= 1.12.5 - Unauthenticated Stored Cross-Site Scripting
- CVE-2024-1934 WP Compress – Image Optimizer <= 6.11.08 - Missing Authorization to Unauthenticated CDN Modification
- CVE-2024-1933 Improper symlink resolution in TeamViewer Remote client for macOS
- CVE-2024-1932 Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout
- CVE-2024-1931 Denial of service when trimming EDE text on positive replies
- CVE-2024-1930 No Limit on Number of Open Sessions / Bad Session Close Behaviour
- CVE-2024-1929 Local Root Exploit via Configuration Dictionary
- CVE-2024-1928 SourceCodester Web-Based Student Clearance System Edit User Profile Page edit-admin.php sql injection
- CVE-2024-1927 SourceCodester Web-Based Student Clearance System login.php sql injection
- CVE-2024-1926 SourceCodester Free and Open Source Inventory Management System search_sales_report.php sql injection
- CVE-2024-1925 Ctcms Upsys.php unrestricted upload
- CVE-2024-1924 CodeAstro Membership Management System get_membership_amount.php sql injection
- CVE-2024-1923 SourceCodester Simple Student Attendance System List of Classes Page ajax-api.php delete_student sql injection
- CVE-2024-1922 SourceCodester Online Job Portal Manage Job Page ManageJob.php cross site scripting
- CVE-2024-1921 osuuu LightPicture Setup.php unrestricted upload
- CVE-2024-1920 osuuu LightPicture TokenVerify.php handle hard-coded key
- CVE-2024-1919 SourceCodester Online Job Portal Manage Walkin Page ManageWalkin.php cross site scripting
- CVE-2024-1918 Byzoro Smart S42 Management Platform userattestation.php unrestricted upload
- CVE-2024-1917 Integer overflow in MELSEC-L Series L02CPU