Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 482 of 521.
- CVE-2024-12964 1000 Projects Daily College Class Work Report Book login.php sql injection
- CVE-2024-12963 code-projects Job Recruitment _all_edits.php add_xp sql injection
- CVE-2024-12962 code-projects Job Recruitment _all_edits.php sql injection
- CVE-2024-12961 1000 Projects Portfolio Management System MCA update_ach_details.php sql injection
- CVE-2024-12960 1000 Projects Portfolio Management System MCA update_edu_details.php sql injection
- CVE-2024-1296 Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-12959 1000 Projects Portfolio Management System MCA update_personal_details.php sql injection
- CVE-2024-12958 1000 Projects Portfolio Management System MCA update_pro_details.php sql injection
- CVE-2024-12957 Missing authorization in Armoury Crate
- CVE-2024-12956 1000 Projects Portfolio Management System MCA add_achievement_details.php unrestricted upload
- CVE-2024-12955 PHPGurukul Blood Bank & Donor Management System logout.php cross-site request forgery
- CVE-2024-12954 1000 Projects Portfolio Management System MCA update_ach.php unrestricted upload
- CVE-2024-12953 1000 Projects Portfolio Management System MCA update_pd_process.php unrestricted upload
- CVE-2024-12952 melMass comfy_mtb Dependency endpoint.py run_command code injection
- CVE-2024-12951 1000 Projects Portfolio Management System MCA add_personal_details.php unrestricted upload
- CVE-2024-12950 code-projects/projectworlds Travel Management System subcat.php sql injection
- CVE-2024-1295 The Events Calendar (Free < 6.4.0.1, Pro < 6.4.0.1) - Contributor+ Arbitrary Events Access
- CVE-2024-12949 code-projects Travel Management System package.php sql injection
- CVE-2024-12948 code-projects Travel Management System detail.php sql injection
- CVE-2024-12947 Codezips Hospital Management System invo.php sql injection
- CVE-2024-12946 1000 Projects Attendance Tracking Management System admin_action.php sql injection
- CVE-2024-12945 code-projects Simple Car Rental System account.php sql injection
- CVE-2024-12944 CodeAstro House Rental Management System signin.php sql injection
- CVE-2024-12943 CodeAstro House Rental Management System ownersignup.php sql injection
- CVE-2024-12942 1000 Projects Portfolio Management System MCA admin_login.php sql injection
- CVE-2024-12941 CodeAstro Blood Donor Management System deletedannounce.php sql injection
- CVE-2024-12940 1000 Projects Attendance Tracking Management System student_action.php sql injection
- CVE-2024-1294 Information disclosure in Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers
- CVE-2024-12939 code-projects Job Recruitment _all_edits.php add_edu sql injection
- CVE-2024-12938 code-projects Simple Admin Panel updateOrderStatus.php sql injection
- CVE-2024-12937 code-projects Simple Admin Panel addVariationController.php sql injection
- CVE-2024-12936 code-projects Simple Admin Panel catDeleteController.php sql injection
- CVE-2024-12935 code-projects Simple Admin Panel editItemForm.php sql injection
- CVE-2024-12934 code-projects Simple Admin Panel updateItemController.php sql injection
- CVE-2024-12933 code-projects Simple Admin Panel updateItemController.php cross site scripting
- CVE-2024-12932 code-projects Simple Admin Panel addSizeController.php cross site scripting
- CVE-2024-12931 code-projects Simple Admin Panel addCatController.php sql injection
- CVE-2024-12930 code-projects Simple Admin Panel addCatController.php cross site scripting
- CVE-2024-1293 Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-12929 code-projects Student Management System addCatController.php sql injection
- CVE-2024-12928 code-projects Simple Admin Panel sql injection
- CVE-2024-12927 1000 Projects Attendance Tracking Management System check_faculty_login.php sql injection
- CVE-2024-12926 Codezips Project Management System advanced.php sql injection
- CVE-2024-12925 Host Header Injection in Akinsoft's QR Menu
- CVE-2024-12924 Open Redirect in Akinsoft's QR Menu
- CVE-2024-12923 Photo Station
- CVE-2024-12922 Altair <= 5.2.4 - Unauthenticated Arbitrary Options Update via pp_import_current
- CVE-2024-12921 EthereumICO <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ethereum-ico Shortcode
- CVE-2024-12920 FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Missing Authorization in Multiple Functions
- CVE-2024-1292 WPB Show Core < 2.6 - Reflected XSS
- CVE-2024-12919 Auth bypass in Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
- CVE-2024-12918 SQLi in Agito Computer's Health4All
- CVE-2024-12917 Improper Access Control in Agito Computer's Health4All
- CVE-2024-12916 SQLi in Agito Computer's Life4All
- CVE-2024-12915 Reflected XSS in Devinim Software's Modified Koha Library Software
- CVE-2024-12914 XSS in Akinsoft's QR Menu
- CVE-2024-12913 SQLi in Megatek Communication System's Azora Wireless Network Management
- CVE-2024-12912 Command injection in Router
- CVE-2024-12911 SQL Injection in run-llama/llama_index
- CVE-2024-12910 Denial of Service in run-llama/llama_index
- CVE-2024-1291 Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-12909 SQL Injection to RCE in run-llama/llama_index
- CVE-2024-12908 Code injection in Secret Server
- CVE-2024-12907 XSS in Kentico 7
- CVE-2024-12905 tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File
- CVE-2024-12903 Incorrect default permissions in Biamp Evoko Home
- CVE-2024-12902 Global Wisdom Software ANCHOR - Undocumented Privileged Account
- CVE-2024-12901 FoxCMS API Endpoint Site.php improper authorization
- CVE-2024-12900 FoxCMS Configuration File installdb.php code injection
- CVE-2024-1290 Formidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account Takeover
- CVE-2024-12899 1000 Projects Attendance Tracking Management System course_action.php sql injection
- CVE-2024-12898 1000 Projects Attendance Tracking Management System faculty_action.php sql injection
- CVE-2024-12897 Intelbras VIP S4320 G2 Web Interface Sha1Account1 path traversal
- CVE-2024-12896 Intelbras VIP S4320 G2 Web Interface webCapsConfig information disclosure
- CVE-2024-12895 TreasureHuntGame TreasureHunt checkflag.php console_log sql injection
- CVE-2024-12894 TreasureHuntGame TreasureHunt acesso.php sql injection
- CVE-2024-12893 Portabilis i-Educar Tipo de Usuário Page 2 cross site scripting
- CVE-2024-12892 code-projects Online Exam Mastering System sign.php cross site scripting
- CVE-2024-12891 code-projects Online Exam Mastering System account.php sql injection
- CVE-2024-12890 code-projects Online Exam Mastering System update.php sql injection
- CVE-2024-1289 LearnPress <= 4.2.6.3 - Insecure Direct Object Reference
- CVE-2024-12886 Out-Of-Memory (OOM) Vulnerability in ollama/ollama
- CVE-2024-12885 Connections Business Directory <= 10.4.66 - Authenticated (Admin+) Arbitrary Directory Deletion
- CVE-2024-12884 Codezips E-Commerce Website login.php sql injection
- CVE-2024-12883 code-projects Job Recruitment _email.php cross site scripting
- CVE-2024-12882 SSRF in comfyanonymous/comfyui
- CVE-2024-12881 Missing authorization in PlugVersions – Easily roll back to previous versions of your plugins.
- CVE-2024-12880 Partial Account Takeover due to Insecure Data Querying in infiniflow/ragflow
- CVE-2024-1288 Schema & Structured Data for WP & AMP <= 1.26 - Missing Authorization to reCaptcha Key Modification
- CVE-2024-12879 Missing authorization in WPBot Pro Wordpress Chatbot
- CVE-2024-12878 Custom Block Builder – Lazy Blocks < 3.8.3 - Reflected XSS
- CVE-2024-12877 GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection
- CVE-2024-12876 Missing authorization in Golo - City Travel Guide WordPress Theme
- CVE-2024-12875 Easy Digital Downloads <= 3.3.2 - Authenticated (Admin+) Arbitrary File Download
- CVE-2024-12874 Top Comments <= 1.0 - Admin+ Stored Cross-Site Scripting
- CVE-2024-12873 Custom Field Manager <= 1.0 - Reflected XSS Vulnerability
- CVE-2024-12872 Zalomení <= 1.5 - Admin+ Stored XSS
- CVE-2024-12871 Stored Cross-site Scripting (XSS) in infiniflow/ragflow
- CVE-2024-12870 Stored Cross-site Scripting (XSS) in infiniflow/ragflow
- CVE-2024-1287 Paid Memberships Pro - Member Directory Add On < 1.2.6 - Contributor+ Sensitive Information Disclosure via SQLi