Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 493 of 521.
- CVE-2024-11876 Cross-site scripting in Kredeum NFTs, the easiest way to sell your NFTs directly on your WordPress site
- CVE-2024-11875 Add infos to the events calendar <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-11874 Grid Accordion Lite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-11873 glomex oEmbed <= 0.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-11872 Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability
- CVE-2024-11871 Social Media Shortcodes <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-11870 Event Registration Calendar By vcita <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-1187 Munsoft Easy Outlook Express Recovery Registration Key denial of service
- CVE-2024-11869 Buk for WordPress <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-11868 LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API
- CVE-2024-11867 Companion Portfolio – Responsive Portfolio Plugin <= 2.4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-11866 BMLT Tabbed Map <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-11865 Tabs Maker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-11864 SCP-Firmware Vulnerability
- CVE-2024-11863 SCP-Firmware Vulnerability
- CVE-2024-11862 Devolutions.XTS.NET Vulnerable to Timing Attack on GF Multiplications
- CVE-2024-11861 Command injection in EnerSys AMPA 22.09 and prior versions
- CVE-2024-11860 SourceCodester Best House Rental Management System POST Request ajax.php improper authorization
- CVE-2024-1186 Munsoft Easy Archive Recovery Registration Key denial of service
- CVE-2024-11859 DLL Search Order Hijacking in ESET products for Windows
- CVE-2024-11858 Radare2: command injection via pebble application files in radare2
- CVE-2024-11857 Realtek Bluetooth HCI Adaptor - Privilege Escalation
- CVE-2024-11856 HPE IceWall Products, Remote Unauthorized Data Modification
- CVE-2024-11855 Cross-site scripting in Koalendar – Easy Appointment Scheduling & Booking Plugin
- CVE-2024-11854 Cross-site scripting in Listdom: AI-powered Business Directory with Classifieds Ads Listings
- CVE-2024-11853 jAlbum Bridge <= 2.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via ar Parameter
- CVE-2024-11852 Missing authorization in Element Pack – Widgets, Templates & Addons for Elementor
- CVE-2024-11851 NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Transient Update
- CVE-2024-11850 Stored XSS in langgenius/dify
- CVE-2024-1185 Nsasoft NBMonitor Network Bandwidth Monitor Registration denial of service
- CVE-2024-11849 Pods – Custom Content Types and Fields < 3.2.8.1 - Admin+ Stored XSS
- CVE-2024-11848 NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
- CVE-2024-11847 WP SVG Upload <= 1.0.0 - Author+ Stored XSS via SVG
- CVE-2024-11846 Travel Tour < 5.2.4 - Reflected XSS
- CVE-2024-11844 IdeaPush <= 8.71 - Missing Authorization to Board Term Deletion
- CVE-2024-11843 Panorama – WordPress Project Management Plugin <= 1.5.1 - Admin+ Stored XSS
- CVE-2024-11842 DN Shipping by Weight for WooCommerce < 1.2 - Settings Update via CSRF
- CVE-2024-11841 Tithe.ly Giving Button <= 1.1 - Contributor+ Stored XSS via Shortcode
- CVE-2024-11840 Missing authorization in RapidLoad AI – Optimize Web Vitals Automatically
- CVE-2024-1184 Nsasoft Network Sleuth Registration denial of service
- CVE-2024-11839 Insecure Deserialization via Runbooks Imports
- CVE-2024-11838 Local File Inclusion
- CVE-2024-11837 N1QL Injection
- CVE-2024-11836 Server-side Request Forgery
- CVE-2024-11835 Denial of Service
- CVE-2024-11834 Arbitrary File Write via PTRAC Import
- CVE-2024-11833 Arbitrary Directory Write via Runbooks Artifact Upload
- CVE-2024-11832 Beaver Builder – WordPress Page Builder <= 2.8.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-11831 Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript
- CVE-2024-11830 Cross-site scripting in Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer
- CVE-2024-1183 SSRF Vulnerability in gradio-app/gradio
- CVE-2024-11829 Cross-site scripting in The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce
- CVE-2024-11828 Inefficient Algorithmic Complexity in GitLab
- CVE-2024-11827 Cross-site scripting in Out of the Block: OpenStreetMap
- CVE-2024-11826 Cross-site scripting in Quill Forms | Conversational Multi Step Forms, Surveys & quizzes
- CVE-2024-11825 Broadstreet <= 1.51.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via zone Parameter
- CVE-2024-11824 Stored XSS in langgenius/dify
- CVE-2024-11823 Folder Gallery <= 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-11822 Server-Side Request Forgery (SSRF) in langgenius/dify
- CVE-2024-11821 Privilege Escalation in langgenius/dify
- CVE-2024-11820 code-projects Crud Operation System add.php cross site scripting
- CVE-2024-1182 Other in GENESIS32
- CVE-2024-11819 1000 Projects Portfolio Management System MCA forgot_password_process.php sql injection
- CVE-2024-11818 PHPGurukul User Registration & Login and User Management System signup.php sql injection
- CVE-2024-11817 PHPGurukul User Registration & Login and User Management System index.php sql injection
- CVE-2024-11816 Missing authorization in The Ultimate WordPress Toolkit – WP Extended
- CVE-2024-11815 Pósturinn\'s Shipping with WooCommerce <= 1.3.1 - Reflected Cross-Site Scripting
- CVE-2024-11814 Additional Custom Order Status for WooCommerce <= 1.6.0 - Reflected Cross-Site Scripting
- CVE-2024-11813 Pulsating Chat Button <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2024-11812 Wtyczka SeoPilot dla WP <= 3.3.091 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2024-11811 Feedify – Web Push Notifications <= 2.4.2 - Reflected Cross-Site Scripting
- CVE-2024-11810 PayGreen Payment Gateway <= 1.0.26 - Reflected Cross-Site Scripting
- CVE-2024-1181 Coming Soon, Under Construction & Maintenance Mode By Dazzler <= 2.1.2 - Maintenance Mode Bypass
- CVE-2024-11809 Primer MyData for Woocommerce <= 4.2.1 - Reflected Cross-Site Scripting
- CVE-2024-11808 Pingmeter Uptime Monitoring <= 1.0.3 - Reflected Cross-Site Scripting
- CVE-2024-11807 NPS computy <= 2.8.0 - Reflected Cross-Site Scripting
- CVE-2024-11806 PKT1 Centro de envios <= 1.2.1 - Reflected Cross-Site Scripting
- CVE-2024-11805 Quick License Manager – WooCommerce Plugin <= 2.4.17 - Reflected Cross-Site Scripting
- CVE-2024-11804 Planaday API <= 11.4 - Reflected Cross-Site Scripting
- CVE-2024-11803 Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-11802 Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-Based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-11801 Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-11800 Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-1180 TP-Link Omada ER605 Access Control Command Injection Remote Code Execution Vulnerability
- CVE-2024-11799 Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-11798 Fuji Electric Monitouch V-SFT X1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-11797 Fuji Electric Monitouch V-SFT V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-11796 Fuji Electric Monitouch V-SFT V9C File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-11795 Fuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-11794 Fuji Electric Monitouch V-SFT V10 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-11793 Fuji Electric Monitouch V-SFT V9C File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-11792 Fuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-11791 Fuji Electric Monitouch V-SFT V8C File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-11790 Fuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-1179 TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-11789 Fuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-11788 StreamWeasels YouTube Integration <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-11787 Fuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-11786 Login with Vipps and MobilePay <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-11785 Integrate Firebase <= 0.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting