Skip to content

Exploited Latest Types About

ExploitedBeing used by attackers now
LatestNewly published CVEs
TypesSQL injection, XSS and more
AboutWhere the data comes from

By year
Ecosystems
Products

Sign in sbomify.com

Search vulnerabilities

Search by CVE or advisory ID, name, product or package.

Insights
By year
2024

Vulnerabilities published in 2024

52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 516 of 521.

More

View as Markdown Ask Claude about this ↗ Ask ChatGPT about this ↗

CVE-2024-0586 Cross-site scripting in Essential Addons for Elementor – Popular Elementor Templates & Widgets Medium 6.4
CVE-2024-0585 Cross-site scripting in Essential Addons for Elementor – Popular Elementor Templates & Widgets Medium 5.4
CVE-2024-0582 Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap High 7.8
CVE-2024-0581 Uncontrolled Resource Consumption vulnerability on Sandsprite scdbg Medium 4.0
CVE-2024-0580 Omission of key-controlled authorization in Qsige Medium 6.5
CVE-2024-0579 Totolink X2000R formMapDelDevice command injection Medium 5.3
CVE-2024-0578 Totolink LR1200GB cstecgi.cgi UploadCustomModule stack-based overflow High 8.8
CVE-2024-0577 Totolink LR1200GB cstecgi.cgi setLanguageCfg stack-based overflow High 8.8
CVE-2024-0576 Totolink LR1200GB cstecgi.cgi setIpPortFilterRules stack-based overflow High 8.8
CVE-2024-0575 Totolink LR1200GB cstecgi.cgi setTracerouteCfg stack-based overflow High 8.8
CVE-2024-0574 Totolink LR1200GB cstecgi.cgi setParentalRules stack-based overflow High 8.8
CVE-2024-0573 Totolink LR1200GB cstecgi.cgi setDiagnosisCfg stack-based overflow High 8.8
CVE-2024-0572 Totolink LR1200GB cstecgi.cgi setOpModeCfg stack-based overflow High 8.8
CVE-2024-0571 Totolink LR1200GB cstecgi.cgi setSmsCfg stack-based overflow High 8.8
CVE-2024-0570 Totolink N350RT Setting cstecgi.cgi access control Medium 6.9
CVE-2024-0569 Totolink T8 Setting cstecgi.cgi getSysStatusCfg information disclosure Medium 5.3
CVE-2024-0568 Auth bypass in Harmony Control Relay RMNF22TB30 High 8.8
CVE-2024-0567 Gnutls: rejects certificate chain with distributed trust High 7.5
CVE-2024-0566 Smart Manager < 8.28.0 - Admin+ SQL Injection High 7.2
CVE-2024-0565 Integer overflow in RHOL-5.7-RHEL-8 Medium 6.8
CVE-2024-0564 Kernel: max page sharing of kernel samepage merging (ksm) may cause memory deduplication Medium 5.3
CVE-2024-0563 Denial of service condition in M-Files Server Medium 4.3
CVE-2024-0562 Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c High 7.8
CVE-2024-0561 Ultimate Posts Widget < 2.3.1 - Admin+ Stored XSS Medium 5.4
CVE-2024-0560 Auth bypass in Red Hat 3scale API Management Platform 2 Medium 6.3
CVE-2024-0559 Enhanced Text Widget < 1.6.6 - Admin+ Stored XSS Medium 6.5
CVE-2024-0558 DedeBIZ makehtml_freelist_action.php sql injection Medium 4.7
CVE-2024-0557 DedeBIZ Website Copyright Setting cross site scripting Low 2.4
CVE-2024-0556 Weak Cryptography for Passwords vulnerability on WIC1200 High 7.1
CVE-2024-0555 Cross-Site Request Forgery (CSRF) vulnerability on WIC1200 Medium 4.6
CVE-2024-0554 Cross-site scripting (XSS) vulnerability on WIC1200 Medium 5.5
CVE-2024-0553 Gnutls: incomplete fix for cve-2023-5981 High 7.5
CVE-2024-0552 Intumit inc. SmartRobot - Remote Code Execution Critical 9.8
CVE-2024-0551 Download and export of file via default user role High 7.1
CVE-2024-0550 Privileged User using traversal to read system files Critical 9.6
CVE-2024-0549 Relative Path Traversal in mintplex-labs/anything-llm High 8.1
CVE-2024-0548 FreeFloat FTP Server SIZE Command denial of service Medium 5.3
CVE-2024-0547 Ability FTP Server APPE Command denial of service Medium 5.3
CVE-2024-0546 EasyFTP LIST Command denial of service Medium 5.3
CVE-2024-0545 CodeCanyon RISE Ultimate Project Manager signin redirect Medium 6.9
CVE-2024-0543 CodeAstro Real Estate Management System propertydetail.php sql injection Medium 6.3
CVE-2024-0542 Tenda W9 httpd formWifiMacFilterGet stack-based overflow High 8.8
CVE-2024-0541 Tenda W9 httpd formAddSysLogRule stack-based overflow High 8.8
CVE-2024-0540 Tenda W9 httpd formOfflineSet stack-based overflow Medium 6.3
CVE-2024-0539 Tenda W9 httpd formQosManage_user stack-based overflow High 8.8
CVE-2024-0538 Tenda W9 httpd formQosManage_auto stack-based overflow High 8.8
CVE-2024-0537 Tenda W9 httpd setWrlBasicInfo stack-based overflow High 8.8
CVE-2024-0536 Tenda W9 httpd setWrlAccessList stack-based overflow High 8.8
CVE-2024-0535 Tenda PA6 httpd portmap cgiPortMapAdd stack-based overflow High 8.8
CVE-2024-0534 Tenda A15 Web-based Management Interface SetOnlineDevName stack-based overflow High 7.2
CVE-2024-0533 Tenda A15 Web-based Management Interface SetOnlineDevName stack-based overflow High 7.2
CVE-2024-0532 Tenda A15 Web-based Management Interface WifiExtraSet set_repeat5 stack-based overflow High 8.6
CVE-2024-0531 Tenda A15 Web-based Management Interface setBlackRule stack-based overflow High 7.2
CVE-2024-0530 CXBSoft Post-Office HTTP POST Request reg_go.php sql injection Medium 5.5
CVE-2024-0529 CXBSoft Post-Office HTTP POST Request login_auth.php sql injection Medium 5.5
CVE-2024-0528 CXBSoft Post-Office HTTP POST Request update_go.php sql injection Medium 5.5
CVE-2024-0527 CXBSoft Url-shorting HTTP POST Request update_go.php sql injection Medium 6.3
CVE-2024-0526 CXBSoft Url-shorting HTTP POST Request short_to_long.php sql injection Medium 5.5
CVE-2024-0525 CXBSoft Url-shorting HTTP POST Request long_s_short.php sql injection Medium 5.5
CVE-2024-0524 CXBSoft Url-shorting index.php sql injection Medium 5.5
CVE-2024-0523 CmsEasy language_admin.php getslide_child_action sql injection Medium 6.3
CVE-2024-0522 Allegro RomPager HTTP POST Request cross-site request forgery Medium 4.3
CVE-2024-0521 Code Injection in paddlepaddle/paddle Critical 9.3
CVE-2024-0520 Remote Code Execution due to Full Controlled File Write in mlflow/mlflow Critical 10.0
CVE-2024-0519 Google Chromium V8 Out-of-Bounds Memory Access Exploited High 8.8
CVE-2024-0518 Memory corruption in Chrome High 7.5
CVE-2024-0517 Memory corruption in Chrome High 8.8
CVE-2024-0516 Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta Medium 5.3
CVE-2024-0515 Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_compare Medium 4.3
CVE-2024-0514 Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_compare Medium 4.3
CVE-2024-0513 Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_wishlist Medium 4.3
CVE-2024-0512 Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist Medium 4.3
CVE-2024-0511 Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via wpr_update_form_action_meta Medium 4.3
CVE-2024-0510 HaoKeKeJi YiQiNiu Api.php http_post server-side request forgery High 7.3
CVE-2024-0509 WP 404 Auto Redirect to Similar Post <= 1.0.3 - Reflected Cross-Site Scripting via request Medium 6.1
CVE-2024-0508 Cross-site scripting in Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More Medium 6.4
CVE-2024-0507 Privilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server Medium 6.5
CVE-2024-0506 Cross-site scripting in Elementor Website Builder – more than just a page builder Medium 6.4
CVE-2024-0505 ZhongFuCheng3y Austin Upload Material Menu MaterialController.java getFile unrestricted upload Medium 5.5
CVE-2024-0504 code-projects Simple Online Hotel Reservation System Make a Reservation Page add_reserve.php cross site scripting Low 3.5
CVE-2024-0503 code-projects Online FIR System registercomplaint.php cross site scripting Low 3.5
CVE-2024-0502 SourceCodester House Rental Management System Edit User manage_user.php sql injection Medium 4.7
CVE-2024-0501 SourceCodester House Rental Management System Manage Invoice Details cross site scripting Low 2.4
CVE-2024-0500 SourceCodester House Rental Management System Manage Tenant Details cross site scripting Low 2.4
CVE-2024-0499 SourceCodester House Rental Management System index.php cross site scripting Low 2.4
CVE-2024-0498 Project Worlds Lawyer Management System searchLawyer.php sql injection Medium 6.3
CVE-2024-0497 Campcodes Student Information System sql injection Medium 6.3
CVE-2024-0496 Kashipara Billing Software HTTP POST Request item_list_edit.php sql injection Medium 6.3
CVE-2024-0495 Kashipara Billing Software HTTP POST Request party_submit.php sql injection Medium 6.3
CVE-2024-0494 Kashipara Billing Software HTTP POST Request material_bill.php sql injection Medium 6.3
CVE-2024-0493 Kashipara Billing Software HTTP POST Request submit_delivery_list.php sql injection Medium 6.3
CVE-2024-0492 Kashipara Billing Software HTTP POST Request buyer_detail_submit.php sql injection Medium 6.3
CVE-2024-0491 Huaxia ERP UserController.java password recovery Medium 5.3
CVE-2024-0490 Huaxia ERP getAllList information disclosure Medium 5.3
CVE-2024-0489 code-projects Fighting Cock Information System edit_chicken.php sql injection Medium 6.3
CVE-2024-0488 code-projects Fighting Cock Information System new-feed.php sql injection Medium 6.3
CVE-2024-0487 code-projects Fighting Cock Information System delete-vaccine.php sql injection Medium 6.3
CVE-2024-0486 code-projects Fighting Cock Information System add_con.php sql injection Medium 6.3
CVE-2024-0485 code-projects Fighting Cock Information System add_con.php sql injection Medium 6.3
CVE-2024-0484 code-projects Fighting Cock Information System update_mother.php sql injection Medium 6.3

Previous pagePage 515 Next pagePage 517

Every known vulnerability, in plain English.

A free resource from sbomify

Browse

Exploited in the wild
Latest
By year
By type
Ecosystems
Products

sbomify

Product
Blog
Sign in

The data

About the data
CVE Program
NVD
OSV

© 2026 sbomify. Data from the CVE List, NVD, GitHub Advisory Database, OSV, CISA KEV and EPSS by FIRST. Summaries are generated and may contain mistakes; the official description is on every page.

Back to top ↑