Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 519 of 521.
- CVE-2024-0267 Kashipara Hospital Management System Parameter login.php sql injection
- CVE-2024-0266 Project Worlds Online Lawyer Management System User Registration cross site scripting
- CVE-2024-0265 SourceCodester Clinic Queuing System GET Parameter index.php file inclusion
- CVE-2024-0264 SourceCodester Clinic Queuing System LoginRegistration.php authorization
- CVE-2024-0263 ACME Ultra Mini HTTPd HTTP GET Request denial of service
- CVE-2024-0262 Online Job Portal Create News Page News.php cross site scripting
- CVE-2024-0261 Sentex FTPDMIN RNFR Command denial of service
- CVE-2024-0260 SourceCodester Engineers Online Portal Password Change change_password_teacher.php session expiration
- CVE-2024-0259 Privilege Escalation in Robot Schedule Enterprise Agent for Windows prior to version 3.04
- CVE-2024-0258 Memory corruption in iOS and iPadOS
- CVE-2024-0257 RoboDK Heap-based Buffer Overflow
- CVE-2024-0256 Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Display Name and Social Settings
- CVE-2024-0255 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icon_color
- CVE-2024-0254 (Simply) Guest Author Name <= 4.34 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-0253 SQL Injection
- CVE-2024-0252 Remote code execution
- CVE-2024-0251 Advanced Woo Search <= 2.96 - Reflected Cross-Site Scripting
- CVE-2024-0250 Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect
- CVE-2024-0249 Advanced Schedule Posts <= 2.1.8 - Reflected XSS
- CVE-2024-0248 EazyDocs < 2.4.0 - Subscriber+ Arbitrary Posts Deletion and Document Management
- CVE-2024-0247 CodeAstro Online Food Ordering System Admin Panel sql injection
- CVE-2024-0246 IceWarp Utility Download cross site scripting
- CVE-2024-0245 Task Hijacking in hamza417/inure
- CVE-2024-0244 Memory corruption in C1333iF
- CVE-2024-0243 Server-side Request Forgery In Recursive URL Loader
- CVE-2024-0242 Unauthorized access to settings in Qolsys IQ Panel 4 and IQ4 Hub
- CVE-2024-0241 encoded_id-rails Denial of Service Vulnerability
- CVE-2024-0240 Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients
- CVE-2024-0239 Contact Form 7 Connector < 1.2.3 - Reflected XSS
- CVE-2024-0238 EventON (Free < 2.2.8, Premium < 4.5.6) - Unauthenticated Arbitrary Post Metadata Update
- CVE-2024-0237 EventON (Free < 2.2.9, Premium <= 4.5.8) - Unauthenticated Virtual Event Settings Update
- CVE-2024-0236 EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Virtual Event Password Disclosure
- CVE-2024-0235 EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure
- CVE-2024-0233 EventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS
- CVE-2024-0232 Sqlite: use-after-free bug in jsonparseaddnodearray
- CVE-2024-0231 Improper Control of Resource Identifiers ('Resource Injection') in GitLab
- CVE-2024-0230 Information disclosure in Magic Keyboard Firmware
- CVE-2024-0229 Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
- CVE-2024-0226 Stored Cross-Site Scripting in Synopsys Seeker
- CVE-2024-0225 Use after free in Chrome
- CVE-2024-0224 Use after free in Chrome
- CVE-2024-0223 Memory corruption in Chrome
- CVE-2024-0222 Use after free in Chrome
- CVE-2024-0221 Photo Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File Rename
- CVE-2024-0220 B&R products use insufficient communication encryption
- CVE-2024-0219 Privilege Elevation via Telerik JustDecompile Installer
- CVE-2024-0218 DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1
- CVE-2024-0217 Packagekitd: use-after-free in idle function callback
- CVE-2024-0216 Google Doc Embedder <= 2.6.4 - Authenticated (Contributor+) Blind Server Side Request Forgery
- CVE-2024-0213 Memory corruption in Trellix Agent (TA)
- CVE-2024-0212 Cloudflare WordPress plugin enables information disclosure of Cloudflare API (for low privileged users)
- CVE-2024-0211 Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
- CVE-2024-0210 Uncontrolled Recursion in Wireshark
- CVE-2024-0209 NULL Pointer Dereference in Wireshark
- CVE-2024-0208 Improper Handling of Missing Values in Wireshark
- CVE-2024-0207 Out-of-bounds Read in Wireshark
- CVE-2024-0206 Privilege escalation in Anti-Malware Engine
- CVE-2024-0204 Authentication Bypass in GoAnywhere MFT
- CVE-2024-0203 Cross-site request forgery in Digits: WordPress Mobile Number Signup and Login
- CVE-2024-0202 Cryptlib: rsa key exchange ciphersuites in tls vulnerable to marvin attack
- CVE-2024-0201 Product Expiry for WooCommerce <= 2.5 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
- CVE-2024-0200 Unsafe Reflection in Github Enterprise Server leading to Command Injection
- CVE-2024-0199 Incorrect Authorization in GitLab
- CVE-2024-0197 Privilege Escalation in Thales SafeNet Sentinel HASP LDK
- CVE-2024-0196 Magic-Api code injection
- CVE-2024-0195 spider-flow FunctionController.java FunctionService.saveFunction code injection
- CVE-2024-0194 CodeAstro Internet Banking System Profile Picture pages_account.php unrestricted upload
- CVE-2024-0193 Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation
- CVE-2024-0192 RRJ Nueva Ecija Engineer Online Portal Add Downloadable downloadable.php unrestricted upload
- CVE-2024-0191 RRJ Nueva Ecija Engineer Online Portal file information disclosure
- CVE-2024-0190 RRJ Nueva Ecija Engineer Online Portal Quiz add_quiz.php cross site scripting
- CVE-2024-0189 RRJ Nueva Ecija Engineer Online Portal Create Message teacher_message.php cross site scripting
- CVE-2024-0188 RRJ Nueva Ecija Engineer Online Portal change_password_teacher.php weak password
- CVE-2024-0187 Community by PeepSo < 6.3.1.2 - Reflected XSS
- CVE-2024-0186 HuiRan Host Reseller System HTTP POST Request password recovery
- CVE-2024-0185 RRJ Nueva Ecija Engineer Online Portal Avatar dasboard_teacher.php unrestricted upload
- CVE-2024-0184 RRJ Nueva Ecija Engineer Online Portal Add Enginer edit_teacher.php cross site scripting
- CVE-2024-0183 RRJ Nueva Ecija Engineer Online Portal NIA Office students.php cross site scripting
- CVE-2024-0182 SourceCodester Engineers Online Portal Admin Login sql injection
- CVE-2024-0181 RRJ Nueva Ecija Engineer Online Portal Admin Panel admin_user.php cross site scripting
- CVE-2024-0179 Memory corruption in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
- CVE-2024-0173 Information disclosure in PowerEdge Platform
- CVE-2024-0172 Privilege escalation in PowerEdge Platform
- CVE-2024-0171 Race condition in PowerEdge Platform
- CVE-2024-0170 Command injection in Unity
- CVE-2024-0169 Cross-site scripting in Unity
- CVE-2024-0168 Command injection in Unity
- CVE-2024-0167 Command injection in Unity
- CVE-2024-0166 Command injection in Unity
- CVE-2024-0165 Command injection in Unity
- CVE-2024-0164 Command injection in Unity
- CVE-2024-0163 Race condition in PowerEdge BIOS Intel 16G
- CVE-2024-0162 Memory corruption in PowerEdge BIOS Intel 16G
- CVE-2024-0161 Memory corruption in PowerEdge Platform
- CVE-2024-0160 Security feature bypass in CPG BIOS
- CVE-2024-0159 Missing authorization in Alienware Command Center (AWCC)
- CVE-2024-0158 Other in CPG BIOS
- CVE-2024-0157 Auth bypass in Dell Storage Resource Manager
- CVE-2024-0156 Memory corruption in Dell Digital Delivery (D3)
- CVE-2024-0155 Use after free in Dell Digital Delivery (D3)