Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 518 of 521.
- CVE-2024-0376 Cross-site scripting in Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- CVE-2024-0374 Views for WPForms <= 3.2.2 - Cross-Site Request Forgery via create_view
- CVE-2024-0373 Views for WPForms <= 3.2.2 - Cross-Site Request Forgery via save_view
- CVE-2024-0372 Views for WPForms <= 3.2.2 - Missing Authorization via get_form_fields
- CVE-2024-0371 Views for WPForms <= 3.2.2 - Missing Authorization via create_view
- CVE-2024-0370 Views for WPForms <= 3.2.2 - Missing Authorization via save_view
- CVE-2024-0369 Bulk Edit Post Titles <= 5.0.0 - Missing Authorization via bulkUpdatePostTitles
- CVE-2024-0368 Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys
- CVE-2024-0367 Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link
- CVE-2024-0366 Starbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object Reference
- CVE-2024-0365 Fancy Product Designer < 6.1.5 - Admin+ SQL Injection
- CVE-2024-0364 PHPGurukul Hospital Management System query-details.php sql injection
- CVE-2024-0363 PHPGurukul Hospital Management System patient-search.php sql injection
- CVE-2024-0362 PHPGurukul Hospital Management System change-password.php sql injection
- CVE-2024-0361 PHPGurukul Hospital Management System contact.php sql injection
- CVE-2024-0360 PHPGurukul Hospital Management System edit-doctor-specialization.php sql injection
- CVE-2024-0359 code-projects Simple Online Hotel Reservation System login.php sql injection
- CVE-2024-0358 DeShang DSO2O install.php access control
- CVE-2024-0357 coderd-repos Eva HTTP POST Request page sql injection
- CVE-2024-0356 Mandelo ssm_shiro_blog Backend updateRoles access control
- CVE-2024-0355 PHPGurukul Dairy Farm Shop Management System add-category.php sql injection
- CVE-2024-0354 unknown-o download-station index.php path traversal
- CVE-2024-0353 Local privilege escalation in Windows products
- CVE-2024-0352 Likeshop HTTP POST Request File.php userFormImage unrestricted upload
- CVE-2024-0351 SourceCodester Engineers Online Portal session fixiation
- CVE-2024-0350 SourceCodester Engineers Online Portal session expiration
- CVE-2024-0349 SourceCodester Engineers Online Portal missing secure attribute
- CVE-2024-0348 SourceCodester Engineers Online Portal File Upload resource consumption
- CVE-2024-0347 SourceCodester Engineers Online Portal signup_teacher.php weak password
- CVE-2024-0346 CodeAstro Vehicle Booking System Feedback Page user-give-feedback.php cross site scripting
- CVE-2024-0345 CodeAstro Vehicle Booking System User Registration usr-register.php cross site scripting
- CVE-2024-0344 soxft TimeMail check.php sql injection
- CVE-2024-0343 CodeAstro Simple House Rental System Login Panel cross site scripting
- CVE-2024-0342 Inis Sqlite.php sql injection
- CVE-2024-0341 Inis GET Request File.php path traversal
- CVE-2024-0340 Kernel: information disclosure in vhost/vhost.c:vhost_new_msg()
- CVE-2024-0338 Buffer Overflow Vulnerability in XAMPP
- CVE-2024-0337 Travelpayouts <= 1.1.15 - Open Redirect
- CVE-2024-0336 Improper Access Control in EMTA Grups PDKS
- CVE-2024-0335 Malformed Packet Handling
- CVE-2024-0334 Cross-site scripting in Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
- CVE-2024-0333 Security feature bypass in Chrome
- CVE-2024-0326 Premium Addons for Elementor <= 4.10.17 - Authenticated(Contributor+) Stored Cross-Site Scripting via Link Wrapper
- CVE-2024-0325 Command Injection in Helix Sync
- CVE-2024-0324 Missing authorization in User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
- CVE-2024-0323 FTP uses unsecure encryption mechanisms
- CVE-2024-0322 Out-of-bounds Read in gpac/gpac
- CVE-2024-0321 Stack-based Buffer Overflow in gpac/gpac
- CVE-2024-0320 Cross-Site Scripting in FireEye Malware Analysis (AX)
- CVE-2024-0319 Open Redirect vulnerability in FireEye HXTool
- CVE-2024-0318 Cross-Site Scripting in FireEye HXTool
- CVE-2024-0317 Cross-Site Scripting in FireEye EX
- CVE-2024-0316 Improper cleanup vulnerability in FireEye Endpoint Security
- CVE-2024-0315 Remote file inclusion vulnerability in FireEye Central Management
- CVE-2024-0314 XSS vulnerability in FireEye Central Management
- CVE-2024-0313 Security feature bypass in Skyhigh Client Proxy
- CVE-2024-0312 Security feature bypass in Skyhigh Client Proxy
- CVE-2024-0311 Security feature bypass in Skyhigh Client Proxy
- CVE-2024-0310 Security feature bypass in Trellix Endpoint Security (ENS) Web Control
- CVE-2024-0308 Inis Proxy.php server-side request forgery
- CVE-2024-0307 Kashipara Dynamic Lab Management System login_process.php sql injection
- CVE-2024-0306 Kashipara Dynamic Lab Management System admin_login_process.php sql injection
- CVE-2024-0305 Guangzhou Yingke Electronic Technology Ncast Guest Login IPSetup.php information disclosure
- CVE-2024-0304 Youke365 collect.php server-side request forgery
- CVE-2024-0303 Youke365 Parameter caiji.php server-side request forgery
- CVE-2024-0302 fhs-opensource iparking vueLogin deserialization
- CVE-2024-0301 fhs-opensource iparking PayTempOrderAction.java getData sql injection
- CVE-2024-0300 Byzoro Smart S150 Management Platform HTTP POST Request userattestation.php unrestricted upload
- CVE-2024-0299 Totolink N200RE cstecgi.cgi setTracerouteCfg os command injection
- CVE-2024-0298 Totolink N200RE cstecgi.cgi setDiagnosisCfg os command injection
- CVE-2024-0297 Totolink N200RE cstecgi.cgi UploadFirmwareFile os command injection
- CVE-2024-0296 Totolink N200RE cstecgi.cgi NTPSyncWithHost os command injection
- CVE-2024-0295 Totolink LR1200GB cstecgi.cgi setWanCfg os command injection
- CVE-2024-0294 Totolink LR1200GB cstecgi.cgi setUssd os command injection
- CVE-2024-0293 Totolink LR1200GB cstecgi.cgi setUploadSetting os command injection
- CVE-2024-0292 Totolink LR1200GB cstecgi.cgi setOpModeCfg os command injection
- CVE-2024-0291 Totolink LR1200GB cstecgi.cgi UploadFirmwareFile command injection
- CVE-2024-0290 Kashipara Food Management System stock_edit.php sql injection
- CVE-2024-0289 Kashipara Food Management System stock_entry_submit.php sql injection
- CVE-2024-0288 Kashipara Food Management System rawstock_used_damaged_submit.php sql injection
- CVE-2024-0287 Kashipara Food Management System itemBillPdf.php sql injection
- CVE-2024-0286 PHPGurukul Hospital Management System Contact Form index.php#contact_us cross site scripting
- CVE-2024-0285 Dsoftbus has an improper input validation vulnerability
- CVE-2024-0284 Kashipara Food Management System party_submit.php cross site scripting
- CVE-2024-0283 Kashipara Food Management System party_details.php cross site scripting
- CVE-2024-0282 Kashipara Food Management System addmaterialsubmit.php cross site scripting
- CVE-2024-0281 Kashipara Food Management System loginCheck.php sql injection
- CVE-2024-0280 Kashipara Food Management System item_type_submit.php sql injection
- CVE-2024-0279 Kashipara Food Management System item_list_edit.php sql injection
- CVE-2024-0278 Kashipara Food Management System partylist_edit_submit.php sql injection
- CVE-2024-0277 Kashipara Food Management System party_submit.php sql injection
- CVE-2024-0276 Kashipara Food Management System rawstock_used_damaged_smt.php sql injection
- CVE-2024-0275 Kashipara Food Management System item_edit_submit.php sql injection
- CVE-2024-0274 Kashipara Food Management System billAjax.php sql injection
- CVE-2024-0273 Kashipara Food Management System addwaste_entry.php sql injection
- CVE-2024-0272 Kashipara Food Management System addmaterialsubmit.php sql injection
- CVE-2024-0271 Kashipara Food Management System addmaterial_edit.php sql injection
- CVE-2024-0270 Kashipara Food Management System item_list_submit.php sql injection
- CVE-2024-0269 SQL Injection
- CVE-2024-0268 Kashipara Hospital Management System registration.php sql injection