Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 466 of 521.
- CVE-2024-1916 Integer overflow in MELSEC-L Series L02CPU
- CVE-2024-1915 Memory corruption in MELSEC-L Series L02CPU
- CVE-2024-1914 Null dereference in RobotWare 6
- CVE-2024-1913 Memory corruption in RobotWare 6
- CVE-2024-1912 Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxUpdateFolderPosition
- CVE-2024-1910 Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxClearCategory
- CVE-2024-1909 Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxRenameCategory
- CVE-2024-1908 Privilege escalation in Enterprise Server
- CVE-2024-1907 Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxDeleteCategory
- CVE-2024-1906 Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxAddCategory
- CVE-2024-1905 Smart Forms < 2.6.96 - Admin+ Stored XSS
- CVE-2024-1904 MasterStudy LMS <= 3.2.13 - Missing Authorization to Sensitive Information Exposure in search_posts
- CVE-2024-1902 Session Reuse Vulnerability in lunary-ai/lunary
- CVE-2024-1901 Denial of service in Server
- CVE-2024-1900 Auth bypass in Server
- CVE-2024-1899 Showdownjs Denial of Service
- CVE-2024-1898 Missing authorization in Server
- CVE-2024-1897 Grid Gallery – Photo Image Grid Gallery <= 1.4.3 - Authenticated (Contributor+) PHP Object Injection via shortcode
- CVE-2024-1896 Photo Gallery <= 1.4.2 - Authenticated(Contributor+) PHP Object Injection via Shortcode
- CVE-2024-1895 Event Monster <= 1.3.9 - Authenticated(Contributor+) PHP Object Injection via Custom Meta
- CVE-2024-1894 Cross-site scripting in Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative)
- CVE-2024-1893 Easy Property Listings <= 3.5.2 - Authenticated(Contributor+) SQL Injection via Shortcode
- CVE-2024-1892 ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider
- CVE-2024-1891 Stored Cross Site Scripting
- CVE-2024-1890 Clickjacking vulnerability in Sunny Webbox
- CVE-2024-1889 Cross-Site Request Forgery vulnerability in SMA Cluster Controller
- CVE-2024-1888 Existing server guests invited to the team by members without "invite_guest" permission
- CVE-2024-1887 Public channel post content accessible without membership when compliance export is enabled
- CVE-2024-1886 Absolute path traversal attack on LG Signage
- CVE-2024-1885 Remote Code Execution attack on LG Signage
- CVE-2024-1884 Server Side Request Forgery in PaperCut NG/MF
- CVE-2024-1883 Reflected XSS in PaperCut NG/MF
- CVE-2024-1882 Server-side resource injection in PaperCut NG/MF
- CVE-2024-1881 Improper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogpt
- CVE-2024-1880 OS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogpt
- CVE-2024-1879 CSRF to RCE in significant-gravitas/autogpt
- CVE-2024-1878 SourceCodester Employee Management System myprofile.php sql injection
- CVE-2024-1877 SourceCodester Employee Management System cancel.php sql injection
- CVE-2024-1876 SourceCodester Employee Management System psubmit.php sql injection
- CVE-2024-1875 SourceCodester Complaint Management System Lodge Complaint Section register-complaint.php unrestricted upload
- CVE-2024-1874 Command injection via array-ish $command parameter of proc_open()
- CVE-2024-1873 Path Traversal and Denial of Service in parisneo/lollms-webui
- CVE-2024-1872 Button <= 1.1.27 - Authenticated (Contributor+) PHP Object Injection in button_shortcode
- CVE-2024-1871 SourceCodester Employee Management System Project Assignment Report assignp.php cross site scripting
- CVE-2024-1870 Colibri Page Builder <= 1.0.260 - Missing Authorization
- CVE-2024-1869 Memory corruption in HP DesignJet
- CVE-2024-1868 G DATA Total Security Link Following Local Privilege Escalation Vulnerability
- CVE-2024-1867 G DATA Total Security Link Following Local Privilege Escalation Vulnerability
- CVE-2024-1863 Sante PACS Server Token Endpoint SQL Injection Remote Code Execution Vulnerability
- CVE-2024-1862 Missing authorization in Add to Cart Custom Redirect for WooCommerce
- CVE-2024-1861 Missing authorization in Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan
- CVE-2024-1860 Missing authorization in Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan
- CVE-2024-1859 Deserialization in Responsive Slideshow
- CVE-2024-1858 Lightbox slider – Responsive Lightbox Gallery <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection
- CVE-2024-1857 Missing authorization in Ultimate Gift Cards for WooCommerce
- CVE-2024-1856 Progress Telerik Reporting Remote Deserialization Vulnerability
- CVE-2024-1855 WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery
- CVE-2024-1854 Cross-site scripting in Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- CVE-2024-1853 Zemana AntiLogger v2.74.204.664 - Arbitrary Process Termination
- CVE-2024-1852 WP-Members Membership Plugin <= 3.4.9.2 - Unauthenticated Stored Cross-Site Scripting
- CVE-2024-1851 affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_create_list
- CVE-2024-1850 AI Post Generator | AutoWriter <= 3.3 - Missing Authorization
- CVE-2024-1849 WP Customer Reviews < 3.7.1 - Malicious Redirect via HTTP-EQUIV Injection
- CVE-2024-1848 Multiple vulnerabilities exist in file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 2024
- CVE-2024-1847 Memory corruption in eDrawings
- CVE-2024-1846 Responsive Tabs < 4.0.7 - Contributor+ Stored XSS
- CVE-2024-1845 VikRentCar Car Rental Management System < 1.3.2 - Cross Site Request Forgery
- CVE-2024-1844 RevivePress – Keep your Old Content Evergreen <= 1.5.6 - Missing Authorization
- CVE-2024-1843 Auto Affiliate Links <= 6.4.3 - Missing Authorization via aalAddLink
- CVE-2024-1842 Cross-site scripting in WPBakery Page Builder
- CVE-2024-1841 WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title tag attribute
- CVE-2024-1840 WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Author
- CVE-2024-1839 SQL injection in 911 Emergency Gateway (EGW)
- CVE-2024-1834 SourceCodester Simple Student Attendance System ?page=attendance&class_id=1 cross site scripting
- CVE-2024-1833 SourceCodester Employee Management System login.php sql injection
- CVE-2024-1832 SourceCodester Complete File Management System Admin Login Form sql injection
- CVE-2024-1831 SourceCodester Complete File Management System Login Form index.php sql injection
- CVE-2024-1830 code-projects Library System lost-password.php sql injection
- CVE-2024-1829 code-projects Library System registration.php sql injection
- CVE-2024-1828 code-projects Library System registration.php sql injection
- CVE-2024-1827 code-projects Library System login.php sql injection
- CVE-2024-1826 code-projects Library System login.php sql injection
- CVE-2024-1825 CodeAstro House Rental Management System User Registration Page cross site scripting
- CVE-2024-1824 CodeAstro House Rental Management System signing.php sql injection
- CVE-2024-1823 CodeAstro Simple Voting System Backend users.php access control
- CVE-2024-1822 PHPGurukul Tourism Management System user-bookings.php cross site scripting
- CVE-2024-1821 code-projects Crime Reporting System police_add.php sql injection
- CVE-2024-1820 code-projects Crime Reporting System inchargelogin.php sql injection
- CVE-2024-1819 CodeAstro Membership Management System Add Members Tab unrestricted upload
- CVE-2024-1818 CodeAstro Membership Management System Logo unrestricted upload
- CVE-2024-1817 Demososo DM Enterprise Website Building System Cookie indexDM_load.php dmlogin improper authentication
- CVE-2024-1816 Uncontrolled Resource Consumption in GitLab
- CVE-2024-1815 Cross-site scripting in Spectra Gutenberg Blocks – Website Builder for the Block Editor
- CVE-2024-1814 Cross-site scripting in Spectra Gutenberg Blocks – Website Builder for the Block Editor
- CVE-2024-1813 Simple Job Board <= 2.11.0 - Unauthenticated PHP Object Injection via Job Application Fields
- CVE-2024-1812 Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url
- CVE-2024-1811 OpenText ArcSight Platform Remote Vulnerability
- CVE-2024-1810 Archivist – Custom Archive Templates <= 1.7.5 - Reflected Cross-Site Scripting
- CVE-2024-1809 Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) <= 5.2.3 - Missing Authorization
- CVE-2024-1808 Cross-site scripting in WP Shortcodes Plugin — Shortcodes Ultimate