Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 517 of 521.
- CVE-2024-0483 Taokeyun HTTP POST Request Task.php index sql injection
- CVE-2024-0482 Taokeyun HTTP POST Request Video.php index sql injection
- CVE-2024-0481 Taokeyun HTTP POST Request Goods.php shopGoods sql injection
- CVE-2024-0480 Taokeyun HTTP POST Request Drs.php index sql injection
- CVE-2024-0479 Taokeyun HTTP POST Request User.php login sql injection
- CVE-2024-0478 code-projects Fighting Cock Information System edit_chicken.php sql injection
- CVE-2024-0477 code-projects Fighting Cock Information System update-deworm.php sql injection
- CVE-2024-0476 Blood Bank & Donor Management request-received-bydonar.php cross site scripting
- CVE-2024-0475 code-projects Dormitory Management System modifyuser.php sql injection
- CVE-2024-0474 code-projects Dormitory Management System login.php sql injection
- CVE-2024-0473 code-projects Dormitory Management System comment.php sql injection
- CVE-2024-0472 code-projects Dormitory Management System modifyuser.php information disclosure
- CVE-2024-0471 code-projects Human Resource Integrated System dec_service_credits.php sql injection
- CVE-2024-0470 code-projects Human Resource Integrated System inc_service_credits.php sql injection
- CVE-2024-0469 code-projects Human Resource Integrated System update_personal_info.php sql injection
- CVE-2024-0468 code-projects Fighting Cock Information System new-father.php unrestricted upload
- CVE-2024-0467 code-projects Employee Profile Management System edit_position_query.php cross site scripting
- CVE-2024-0466 code-projects Employee Profile Management System file_table.php sql injection
- CVE-2024-0465 code-projects Employee Profile Management System download.php path traversal
- CVE-2024-0464 code-projects Online Faculty Clearance HTTP GET Request delete_faculty.php sql injection
- CVE-2024-0463 code-projects Online Faculty Clearance HTTP POST Request admin_view_info.php sql injection
- CVE-2024-0462 code-projects Online Faculty Clearance HTTP POST Request designee_view_status.php sql injection
- CVE-2024-0461 code-projects Online Faculty Clearance HTTP POST Request deactivate.php sql injection
- CVE-2024-0460 code-projects Faculty Management System student-print.php sql injection
- CVE-2024-0459 Blood Bank & Donor Management request-received-bydonar.php sql injection
- CVE-2024-0456 Direct Request ('Forced Browsing') in GitLab
- CVE-2024-0455 SSRF on AWS deployed instances of AnythingLLM via /metadata
- CVE-2024-0454 Security Vulnerability on Match-on-Chip FPR Architecture
- CVE-2024-0453 AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callback
- CVE-2024-0452 AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callback
- CVE-2024-0451 AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callback
- CVE-2024-0450 Quoted zip-bomb protection for zipfile
- CVE-2024-0449 ArtiBot Free Chat Bot for WordPress WebSites <= 1.1.6 - Authenticated (Admin+) Cross-Site Scripting
- CVE-2024-0448 Elementor Addons by Livemesh <= 8.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-0447 ArtiBot Free Chat Bot for WordPress WebSites <= 1.1.6 - Missing Authorization to Settings Update
- CVE-2024-0446 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
- CVE-2024-0445 The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-0444 GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-0443 Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.
- CVE-2024-0442 Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-0440 SSRF - file:// unsanitized access to underlying host files
- CVE-2024-0439 User can manually send request at manager permission to modify system configurations
- CVE-2024-0438 Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-0437 Missing authorization in Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content
- CVE-2024-0436 Prevent timing attack for single-user password check
- CVE-2024-0435 User can submit message to self-XSS
- CVE-2024-0434 Missing authorization in Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Solution
- CVE-2024-0433 Gestpay for WooCommerce <= 20221130 - Cross-Site Request Forgery (CSRF) via ajax_unset_default_card
- CVE-2024-0432 Gestpay for WooCommerce <= 20221130 - Cross-Site Request Forgery (CSRF) via ajax_delete_card
- CVE-2024-0431 Gestpay for WooCommerce <= 20221130 - Cross-Site Request Forgery (CSRF) via ajax_set_default_card
- CVE-2024-0430 IObit Malware Fighter v11.0.0.1274 - Denial of Service (DoS)
- CVE-2024-0429 Buffer overflow vulnerability on Hex Workshop
- CVE-2024-0428 Index Now <= 2.6.3 - Cross-Site Request Forgery via reset_form
- CVE-2024-0427 Arforms < 6.4.1 - Reflected XSS
- CVE-2024-0426 ForU CMS cms_template.php sql injection
- CVE-2024-0425 ForU CMS password recovery
- CVE-2024-0424 CodeAstro Simple Banking System Create a User Page createuser.php cross site scripting
- CVE-2024-0423 CodeAstro Online Food Ordering System dishes.php cross site scripting
- CVE-2024-0422 CodeAstro POS and Inventory Management System New Item Creation Page new_item cross site scripting
- CVE-2024-0421 MapPress Maps for WordPress < 2.88.16 - Unauthenticated Arbitrary Private/Draft Post Disclosure
- CVE-2024-0420 MapPress Maps for WordPress < 2.88.15 - Contributor+ Stored XSS
- CVE-2024-0419 Jasper httpdx HTTP POST Request denial of service
- CVE-2024-0418 iSharer and upRedSun File Sharing Wizard GET Request denial of service
- CVE-2024-0417 DeShang DSShop MemberAuth.php path traversal
- CVE-2024-0416 DeShang DSMall MemberAuth.php path traversal
- CVE-2024-0415 DeShang DSMall Image URL TaobaoExport.php access control
- CVE-2024-0414 DeShang DSCMS install.php access control
- CVE-2024-0413 DeShang DSKMS install.php access control
- CVE-2024-0412 DeShang DSShop HTTP GET Request install.php access control
- CVE-2024-0411 DeShang DSMall HTTP GET Request install.php access control
- CVE-2024-0410 Improper Enforcement of Behavioral Workflow in GitLab
- CVE-2024-0409 Xorg-x11-server: selinux context corruption
- CVE-2024-0408 Xorg-x11-server: selinux unlabeled glx pbuffer
- CVE-2024-0407 Certain HP Enterprise LaserJet, HP LaserJet Managed Printers – Potential Information Disclosure
- CVE-2024-0406 Mholt/archiver: path traversal vulnerability
- CVE-2024-0405 Burst Statistics Really Simple Plugins <= 1.5.3 - Authenticated (Editor+) SQL Injection
- CVE-2024-0404 Mass Assignment Vulnerability in mintplex-labs/anything-llm
- CVE-2024-0403 Recipes 1.5.10 - Blind SSRF
- CVE-2024-0402 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
- CVE-2024-0401 ASUS OVPN RCE
- CVE-2024-0400 Code injection in MACH SCM
- CVE-2024-0399 WooCommerce Customers Manager < 29.7 - Subscriber+ SQL Injection
- CVE-2024-0397 Memory race condition in ssl.SSLContext certificate store methods
- CVE-2024-0396 Missing Server-Side Input Validation in HTTP Parameter
- CVE-2024-0394 Rapid7 Minerva Armor Privilege Escalation
- CVE-2024-0392 Cross-site request forgery in WSO2 Enterprise Integrator
- CVE-2024-0391 Username Enumeration via Email OTP Flow in Multiple WSO2 Products Allows User Account Discovery
- CVE-2024-0390 Hard-coded credentials in iZZi connect application
- CVE-2024-0389 SourceCodester Student Attendance System attendance_report.php sql injection
- CVE-2024-0387 EDS-4000/G4000 Series IP Forwarding Vulnerability
- CVE-2024-0386 weForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Referer
- CVE-2024-0385 Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxAddCategory
- CVE-2024-0384 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe Notes
- CVE-2024-0383 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag'
- CVE-2024-0382 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_tag
- CVE-2024-0381 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag'
- CVE-2024-0380 WP Recipe Maker <= 9.1.0 - Directory Traversal
- CVE-2024-0379 Custom Twitter Feeds – A Tweets Widget or X Feed Widget <= 2.2.1 - Cross-Site Request Forgery to Plugin Options Update
- CVE-2024-0378 AI Engine <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting
- CVE-2024-0377 LifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_review