Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 508 of 521.
- CVE-2024-10429 WAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi set_ipv6 command injection
- CVE-2024-10428 WAVLINK WN530H4/WN530HG4/WN572HG3 firewall.cgi set_ipv6 command injection
- CVE-2024-10427 Codezips Pet Shop Management System deleteanimal.php sql injection
- CVE-2024-10426 Codezips Pet Shop Management System animalsadd.php sql injection
- CVE-2024-10425 Project Worlds Student Project Allocation System Project Selection Page move_up_project.php sql injection
- CVE-2024-10424 Project Worlds Student Project Allocation System Project Selection Page remove_project.php sql injection
- CVE-2024-10423 Project Worlds Student Project Allocation System Project Selection Page project_selection.php sql injection
- CVE-2024-10422 SourceCodester Attendance and Payroll System overtime_add.php sql injection
- CVE-2024-10421 SourceCodester Attendance and Payroll System overtime_row.php sql injection
- CVE-2024-10420 SourceCodester Attendance and Payroll System update.php upload unrestricted upload
- CVE-2024-1042 Missing authorization in WP Radio – Worldwide Online Radio Stations Directory for WordPress
- CVE-2024-10419 code-projects Blood Bank Management System bloodrequest.php cross site scripting
- CVE-2024-10418 code-projects Blood Bank Management System infoAdd.php sql injection
- CVE-2024-10417 code-projects Blood Bank Management System delete.php sql injection
- CVE-2024-10416 code-projects Blood Bank Management System cancel.php sql injection
- CVE-2024-10415 code-projects Blood Bank Management System accept.php sql injection
- CVE-2024-10414 PHPGurukul Vehicle Record System edit-brand.php cross site scripting
- CVE-2024-10413 SourceCodester Online Hotel Reservation System update.php upload unrestricted upload
- CVE-2024-10412 Poco-z Guns-Medical File Upload upload cross site scripting
- CVE-2024-10411 SourceCodester Online Hotel Reservation System controller.php doCheckout sql injection
- CVE-2024-10410 SourceCodester Online Hotel Reservation System controller.php upload unrestricted upload
- CVE-2024-1041 Cross-site scripting in WP Radio – Worldwide Online Radio Stations Directory for WordPress
- CVE-2024-10409 code-projects Blood Bank Management accept.php sql injection
- CVE-2024-10408 code-projects Blood Bank Management abs.php sql injection
- CVE-2024-10407 SourceCodester Petrol Pump Management Software edit_customer.php sql injection
- CVE-2024-10406 SourceCodester Petrol Pump Management Software edit_fuel.php sql injection
- CVE-2024-10405 Weak TLS Ciphers on Brocade SANnav port 443 & 18082
- CVE-2024-10404 Clear text password seen in switch-asset-collectors-mw in Brocade SANnav supportsave
- CVE-2024-10403 SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav
- CVE-2024-10402 Missing authorization in Forminator Forms – Contact Form, Payment Form & Custom Form Builder
- CVE-2024-10400 Tutor LMS <= 2.7.6 - Unauthenticated SQL Injection via rating_filter
- CVE-2024-1040 Use of a Broken or Risky Cryptographic Algorithm in Gessler GmbH WEB-MASTER
- CVE-2024-10399 Download Monitor <= 5.0.13 - Missing Authorization to Sensitive Information Exposure
- CVE-2024-10397 Preallocated buffer overflows in XDR responses
- CVE-2024-10396 Fileserver crash and possible information leak on StoreACL/FetchACL
- CVE-2024-10395 net: lib: http_server: Buffer Under-read
- CVE-2024-10394 Theft of credentials in Unix client PAGs
- CVE-2024-10393 Tutor LMS <= 2.7.6 - User Registration Setting Bypass to Unauthorized User Registration
- CVE-2024-10392 AI Power: Complete AI Pack <= 1.8.89 - Unauthenticated Arbitrary File Upload
- CVE-2024-10390 Elfsight Telegram Chat CC <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
- CVE-2024-1039 Use of Hard-coded Credentials in Gessler GmbH WEB-MASTER
- CVE-2024-10389 Path Traversal in Safearchive
- CVE-2024-10388 WordPress GDPR <= 2.0.2 - Unauthenticated Stored Cross-Site Scripting
- CVE-2024-10387 Rockwell Automation FactoryTalk ThinManager Denial-of-Service Vulnerability
- CVE-2024-10386 Rockwell Automation FactoryTalk ThinManager Authentication Vulnerability
- CVE-2024-10385 Stored XSS in DirectAdmin Evo Skin
- CVE-2024-10383 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab VSCode Fork
- CVE-2024-10382 Arbitrary Code execution in Car App Android Jetpack Library
- CVE-2024-10381 Authentication Bypass Vulnerability in Matrix Door Controller
- CVE-2024-10380 SourceCodester Petrol Pump Management Software ajax_product.php sql injection
- CVE-2024-1038 Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Reflected (DOM-Based) Cross-Site Scripting
- CVE-2024-10379 ESAFENET CDG DecryptApplicationService.java actionViewDecyptFile path traversal
- CVE-2024-10378 ESAFENET CDG CDGRenewApplicationService.java actionViewCDGRenewFile sql injection
- CVE-2024-10377 ESAFENET CDG DecryptApplicationService.java actionPassDecryptApplication1 sql injection
- CVE-2024-10376 ESAFENET CDG AutoSignService.java actionPassOrNotAutoSign sql injection
- CVE-2024-10374 WP-Members <= 3.4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_loginout Shortcode
- CVE-2024-10372 chidiwilliams buzz model_loader.py download_model temp file
- CVE-2024-10371 SourceCodester Payroll Management System main login buffer overflow
- CVE-2024-10370 Codezips Sales Management System addcustind.php sql injection
- CVE-2024-1037 All-In-One Security (AIOS) – Security and Firewall <= 5.2.5 - Reflected Cross-Site Scripting
- CVE-2024-10369 Codezips Sales Management System addcustcom.php sql injection
- CVE-2024-10368 Codezips Sales Management System addstock.php sql injection
- CVE-2024-10367 Cross-site scripting in Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
- CVE-2024-10366 IDOR in delete attachments in danny-avila/librechat
- CVE-2024-10365 Information disclosure in The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce
- CVE-2024-10363 Improper Access Control in danny-avila/LibreChat
- CVE-2024-10362 Social Media Share Buttons < 2.9.0 - Admin+ Stored XSS
- CVE-2024-10361 Arbitrary File Deletion via Path Traversal in danny-avila/librechat
- CVE-2024-10360 Information disclosure in Move Addons for Elementor
- CVE-2024-1036 openBI Icon Screen.php uploadIcon unrestricted upload
- CVE-2024-10359 Mass Assignment in Preset Creation Allows User ID Manipulation in danny-avila/librechat
- CVE-2024-10357 Information disclosure in Clever Addons for Elementor
- CVE-2024-10356 Information disclosure in ElementsReady Addons for Elementor
- CVE-2024-10355 SourceCodester Petrol Pump Management Software invoice.php sql injection
- CVE-2024-10354 SourceCodester Petrol Pump Management Software print.php sql injection
- CVE-2024-10353 SourceCodester Online Exam System admin-dashboard access control
- CVE-2024-10352 Information disclosure in Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library )
- CVE-2024-10351 Tenda RX9 Pro POST Request setMacFilterCfg sub_424CE0 stack-based overflow
- CVE-2024-10350 code-projects Hospital Management System add-doctor.php sql injection
- CVE-2024-1035 openBI Icon.php uploadIcon unrestricted upload
- CVE-2024-10349 SourceCodester Best House Rental Management System ajax.php delete_tenant sql injection
- CVE-2024-10348 SourceCodester Best House Rental Management System Manage Tenant Details index.php cross site scripting
- CVE-2024-10345 Unauthenticated Denial of Service via Shutdown Function
- CVE-2024-10344 Unauthenticated Denial of Service via Refuse Function
- CVE-2024-10343 Beek Widget Extention <= 0.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-10342 League of Legends Shortcodes <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-10341 League of Legends Shortcodes <= 1.0.1 - Authenticated (Contributor+) SQL Injection via Shortcode
- CVE-2024-10340 Shortcodes Blocks Creator Ultimate <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-1034 openBI File.php uploadFile unrestricted upload
- CVE-2024-10338 SourceCodeHero Clothes Recommendation System home.php sql injection
- CVE-2024-10337 SourceCodeHero Clothes Recommendation System home.php sql injection
- CVE-2024-10336 SourceCodeHero Clothes Recommendation System Admin Login Page index.php sql injection
- CVE-2024-10335 SourceCodester Garbage Collection Management System login.php sql injection
- CVE-2024-10334 Camera passwords stored in clear text
- CVE-2024-10332 Cross-site scripting in Janto
- CVE-2024-10331 PHPGurukul Vehicle Record System search-vehicle.php sql injection
- CVE-2024-10330 Improper Access Control in lunary-ai/lunary
- CVE-2024-1033 openBI Datament.php agent information disclosure
- CVE-2024-10329 Ultimate Bootstrap Elements for Elementor <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure
- CVE-2024-10327 Auth bypass in Okta Verify for iOS