2024 CVEs (page 123)
Page 123 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-50525 | Critical | 10.0 | 2024-11-04 | Unrestricted Upload of File with Dangerous Type vulnerability in helloprint Helloprint helloprint allows Upload a Web Shell to a Web Server.This issue affects… |
CVE-2024-50523 | Critical | 10.0 | 2024-11-04 | Unrestricted Upload of File with Dangerous Type vulnerability in RainbowLink Inc. All Post Contact Form allpost-contactform allows Upload a Web Shell to a Web… |
CVE-2024-45164 | High | 7.1 | 2024-11-04 | Akamai SIA (Secure Internet Access Enterprise) ThreatAvert, in SPS (Security and Personalization Services) before the latest 19.2.0 patch and Apps Portal befor… |
CVE-2024-9147 | Medium | 6.1 | 2024-11-04 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Bna Informatics PosPratik allows XSS Through HTTP Query Strings… |
CVE-2024-51561 | High | 7.5 | 2024-11-04 | This vulnerability exists in Aero due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could e… |
CVE-2024-51560 | Medium | 4.3 | 2024-11-04 | This vulnerability exists in the Wave 2.0 due to improper exception handling for invalid inputs at certain API endpoint. An authenticated remote attacker could… |
CVE-2024-51559 | Medium | 6.5 | 2024-11-04 | This vulnerability exists in the Wave 2.0 due to improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this vu… |
CVE-2024-51558 | Critical | 9.8 | 2024-11-04 | This vulnerability exists in the Wave 2.0 due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker co… |
CVE-2024-51557 | Medium | 6.5 | 2024-11-04 | This vulnerability exists in the Wave 2.0 due to missing rate limiting on OTP requests in an API endpoint. An authenticated remote attacker could exploit this… |
CVE-2024-51556 | Medium | 6.5 | 2024-11-04 | This vulnerability exists in the Wave 2.0 due to insufficient encryption of sensitive data received at the API response. An authenticated remote attacker could… |
CVE-2024-36485 | High | 8.3 | 2024-11-04 | Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option. |
CVE-2024-10523 | Medium | 4.6 | 2024-11-04 | This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical acce… |
CVE-2024-10035 | Critical | 9.8 | 2024-11-04 | Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in a Command ('Command Injection'), Improper Neutra… |
CVE-2024-51661 | Critical | 9.1 | 2024-11-04 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in David Lingren Media LIbrary Assistant media-library… |
CVE-2024-48878 | High | 8.3 | 2024-11-04 | Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report. |
CVE-2024-10389 | High | 7.5 | 2024-11-04 | There exists a Path Traversal vulnerability in Safearchive on Platforms with Case-Insensitive Filesystems (e.g., NTFS). This allows Attackers to Write Arbitrar… |
CVE-2024-38424 | High | 7.8 | 2024-11-04 | Memory corruption during GNSS HAL process initialization. |
CVE-2024-38423 | High | 7.8 | 2024-11-04 | Memory corruption while processing GPU page table switch. |
CVE-2024-38422 | High | 7.8 | 2024-11-04 | Memory corruption while processing voice packet with arbitrary data received from ADSP. |
CVE-2024-38421 | High | 7.8 | 2024-11-04 | Memory corruption while processing GPU commands. |
CVE-2024-38419 | High | 7.8 | 2024-11-04 | Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node. |
CVE-2024-38415 | High | 7.8 | 2024-11-04 | Memory corruption while handling session errors from firmware. |
CVE-2024-38410 | High | 7.8 | 2024-11-04 | Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice. |
CVE-2024-38409 | High | 7.8 | 2024-11-04 | Memory corruption while station LL statistic handling. |
CVE-2024-38408 | High | 8.2 | 2024-11-04 | Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions. |
CVE-2024-38407 | High | 7.8 | 2024-11-04 | Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver. |
CVE-2024-38406 | High | 7.8 | 2024-11-04 | Memory corruption while handling IOCTL calls in JPEG Encoder driver. |
CVE-2024-38405 | High | 7.5 | 2024-11-04 | Transient DOS while processing the CU information from RNR IE. |
CVE-2024-38403 | High | 7.5 | 2024-11-04 | Transient DOS while parsing BTM ML IE when per STA profile is not included. |
CVE-2024-33068 | High | 7.5 | 2024-11-04 | Transient DOS while parsing fragments of MBSSID IE from beacon frame. |
CVE-2024-33033 | Medium | 6.7 | 2024-11-04 | Memory corruption while processing IOCTL calls to unmap the buffers. |
CVE-2024-33032 | Medium | 6.7 | 2024-11-04 | Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it. |
CVE-2024-33031 | Medium | 6.7 | 2024-11-04 | Memory corruption while processing the update SIM PB records request. |
CVE-2024-33030 | Medium | 6.7 | 2024-11-04 | Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size. |
CVE-2024-33029 | Medium | 6.7 | 2024-11-04 | Memory corruption while handling the PDR in driver for getting the remote heap maps. |
CVE-2024-23590 | Critical | 9.1 | 2024-11-04 | Session Fixation vulnerability in Apache Kylin. This issue affects Apache Kylin: from 2.0.0 through 4.x. Users are recommended to upgrade to version 5.0.0 or… |
CVE-2024-23386 | Medium | 6.7 | 2024-11-04 | memory corruption when WiFi display APIs are invoked with large random inputs. |
CVE-2024-23385 | High | 7.5 | 2024-11-04 | Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE. |
CVE-2024-23377 | Medium | 6.7 | 2024-11-04 | Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been… |
CVE-2024-10761 | Medium | 4.3 | 2024-11-04 | A vulnerability was found in Umbraco CMS up to 10.7.7/12.3.6/13.5.2/14.3.1/15.1.1. It has been classified as problematic. Affected is an unknown function of th… |
CVE-2024-10760 | Medium | 6.3 | 2024-11-04 | A vulnerability was found in code-projects University Event Management System 1.0 and classified as critical. This issue affects some unknown processing of the… |
CVE-2024-10759 | Medium | 6.3 | 2024-11-04 | A vulnerability has been found in itsourcecode Farm Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /edit… |
CVE-2024-10758 | High | 7.3 | 2024-11-04 | A vulnerability, which was classified as critical, was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This affects an unknow… |
CVE-2024-10757 | Low | 3.5 | 2024-11-04 | A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Shopping Portal 2.0. Affected by this issue is some unknown functiona… |
CVE-2024-10756 | Low | 3.5 | 2024-11-04 | A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2024-10755 | Low | 3.5 | 2024-11-04 | A vulnerability classified as problematic has been found in PHPGurukul Online Shopping Portal 2.0. Affected is an unknown function of the file /admin/assets/pl… |
CVE-2024-10754 | Low | 3.5 | 2024-11-04 | A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been rated as problematic. This issue affects some unknown processing of the file /a… |
CVE-2024-20124 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20123 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20122 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20121 | Medium | 6.7 | 2024-11-04 | In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2024-20120 | Medium | 6.7 | 2024-11-04 | In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2024-20119 | Medium | 6.7 | 2024-11-04 | In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2024-20118 | Medium | 6.7 | 2024-11-04 | In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2024-20117 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20115 | Medium | 6.7 | 2024-11-04 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20114 | Medium | 6.7 | 2024-11-04 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20113 | Medium | 6.7 | 2024-11-04 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20112 | Medium | 4.4 | 2024-11-04 | In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges neede… |
CVE-2024-20111 | Medium | 6.7 | 2024-11-04 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20110 | Medium | 6.7 | 2024-11-04 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20109 | Medium | 6.7 | 2024-11-04 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20108 | Medium | 6.7 | 2024-11-04 | In atci, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2024-20107 | Medium | 6.2 | 2024-11-04 | In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privi… |
CVE-2024-20106 | Medium | 6.7 | 2024-11-04 | In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20104 | High | 8.4 | 2024-11-04 | In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution pri… |
CVE-2024-10753 | Low | 3.5 | 2024-11-04 | A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been declared as problematic. This vulnerability affects unknown code of the file ad… |
CVE-2024-10752 | High | 7.3 | 2024-11-04 | A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects an unknown part of the file /productsadd… |
CVE-2024-10751 | Medium | 6.3 | 2024-11-04 | A vulnerability was found in Codezips ISP Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file pa… |
CVE-2024-10750 | Medium | 6.5 | 2024-11-04 | A vulnerability has been found in Tenda i22 1.0.0.3(4687) and classified as problematic. Affected by this vulnerability is the function websReadEvent of the fi… |
CVE-2024-10749 | Medium | 5.0 | 2024-11-04 | A vulnerability, which was classified as critical, was found in ThinkAdmin up to 6.1.67. Affected is the function script of the file /app/admin/controller/api/… |
CVE-2024-10748 | Low | 2.5 | 2024-11-04 | A vulnerability, which was classified as problematic, has been found in Cosmote Greece What's Up App 4.47.3 on Android. This issue affects some unknown process… |
CVE-2024-10747 | Low | 3.5 | 2024-11-04 | A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /admin/assets… |
CVE-2024-10746 | Low | 3.5 | 2024-11-04 | A vulnerability classified as problematic has been found in PHPGurukul Online Shopping Portal 2.0. This affects an unknown part of the file /admin/assets/plugi… |
CVE-2024-10745 | Low | 3.5 | 2024-11-03 | A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of t… |
CVE-2024-10744 | Low | 3.5 | 2024-11-03 | A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functiona… |
CVE-2024-10743 | Low | 3.5 | 2024-11-03 | A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been classified as problematic. Affected is an unknown function of the file /shoppin… |
CVE-2024-10742 | Medium | 6.3 | 2024-11-03 | A vulnerability was found in code-projects Wazifa System 1.0 and classified as critical. This issue affects some unknown processing of the file /controllers/co… |
CVE-2024-10741 | High | 7.3 | 2024-11-03 | A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file /Users… |
CVE-2024-10740 | Medium | 6.3 | 2024-11-03 | A vulnerability, which was classified as critical, was found in code-projects E-Health Care System up to 1.0. This affects an unknown part of the file /Admin/c… |
CVE-2024-10739 | High | 7.3 | 2024-11-03 | A vulnerability, which was classified as critical, has been found in code-projects E-Health Care System 1.0. Affected by this issue is some unknown functionali… |
CVE-2024-10738 | Medium | 6.3 | 2024-11-03 | A vulnerability classified as critical was found in itsourcecode Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2024-10737 | High | 7.3 | 2024-11-03 | A vulnerability classified as critical has been found in Codezips Free Exam Hall Seating Management System 1.0. Affected is an unknown function of the file /te… |
CVE-2024-10736 | High | 7.3 | 2024-11-03 | A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been rated as critical. This issue affects some unknown processing o… |
CVE-2024-10735 | Medium | 6.3 | 2024-11-03 | A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of… |
CVE-2024-10734 | Medium | 6.3 | 2024-11-03 | A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file… |
CVE-2024-10733 | High | 7.3 | 2024-11-03 | A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2024-10732 | Medium | 6.3 | 2024-11-03 | A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2024-10731 | Medium | 6.3 | 2024-11-03 | A vulnerability, which was classified as critical, was found in Tongda OA up to 11.10. Affected is an unknown function of the file /pda/appcenter/check_seal.ph… |
CVE-2024-10730 | Medium | 6.3 | 2024-11-03 | A vulnerability, which was classified as critical, has been found in Tongda OA up to 11.6. This issue affects some unknown processing of the file /pda/appcente… |
CVE-2024-10702 | High | 7.3 | 2024-11-02 | A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. T… |
CVE-2024-10701 | Low | 3.5 | 2024-11-02 | A vulnerability was found in PHPGurukul Car Rental Portal 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /search… |
CVE-2024-10700 | Medium | 6.3 | 2024-11-02 | A vulnerability was found in code-projects University Event Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of… |
CVE-2024-10699 | High | 7.3 | 2024-11-02 | A vulnerability was found in code-projects Wazifa System 1.0. It has been classified as critical. This affects an unknown part of the file /controllers/loginco… |
CVE-2024-10698 | High | 8.8 | 2024-11-02 | A vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this issue is the function formSetDeviceName of the file /goform/Set… |
CVE-2024-10697 | Medium | 6.3 | 2024-11-02 | A vulnerability has been found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file… |
CVE-2024-9896 | Medium | 6.1 | 2024-11-02 | The BBP Core – Expand bbPress powered forums with useful features plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_qu… |
CVE-2024-51774 | High | 8.1 | 2024-11-02 | qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors. |
CVE-2024-9868 | Medium | 5.4 | 2024-11-02 | The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-… |
CVE-2024-8739 | Medium | 6.1 | 2024-11-02 | The ReCaptcha Integration for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriat… |