2024 CVEs (page 64)
Page 64 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-56519 | High | 7.5 | 2024-12-27 | An issue was discovered in TCPDF before 6.8.0. setSVGStyles does not sanitize the SVG font-family attribute. |
CVE-2024-12980 | Medium | 4.3 | 2024-12-27 | A vulnerability was found in code-projects Job Recruitment 1.0. It has been classified as problematic. Affected is the function fln_update of the file /_parse/… |
CVE-2024-12979 | Medium | 4.3 | 2024-12-27 | A vulnerability was found in code-projects Job Recruitment 1.0 and classified as problematic. This issue affects the function cn_update of the file /_parse/_al… |
CVE-2024-12978 | High | 7.3 | 2024-12-27 | A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. This vulnerability affects the function add_req of the file /_p… |
CVE-2024-9774 | Medium | 6.5 | 2024-12-27 | A vulnerability was found in python-sql where unary operators do not escape non-Expression. |
CVE-2024-12977 | Medium | 6.3 | 2024-12-27 | A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/sta… |
CVE-2024-12976 | High | 7.3 | 2024-12-27 | A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. Affected by this issue is some unknown functional… |
CVE-2024-12969 | High | 7.3 | 2024-12-26 | A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. Affected by this issue is some unknown funct… |
CVE-2024-56361 | | 2024-12-26 | LGSL (Live Game Server List) provides online status for games. Before 7.0.0, a stored cross-site scripting (XSS) vulnerability was identified in lgsl. The func… | |
CVE-2024-55950 | | 2024-12-26 | Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.216, Tabby terminal emulator contains overly permissive entitlements that ar… | |
CVE-2024-53850 | High | 8.2 | 2024-12-26 | The Addressing GLPI plugin enables you to create IP reports for visualize IP addresses used and free on a given network.. Starting with 3.0.0 and before 3.0.3… |
CVE-2024-45805 | Medium | 4.3 | 2024-12-26 | OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access… |
CVE-2024-45600 | High | 7.7 | 2024-12-26 | Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to 1.21.13, an authenticated user can perform a SQL injection when th… |
CVE-2024-12968 | High | 7.3 | 2024-12-26 | A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. Affected by this vulnerability is the function edit_jobpost of the file… |
CVE-2024-12967 | High | 7.3 | 2024-12-26 | A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. Affected is the function fln_update of the file /_parse/_all_edits… |
CVE-2024-56510 | Medium | 5.3 | 2024-12-26 | @marp-team/marp-core is the core for Marp, which is the ecosystem to write your presentation with plain Markdown. Marp Core from v3.0.2 to v3.9.0 and v4.0.0, a… |
CVE-2024-12966 | High | 7.3 | 2024-12-26 | A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as critical. This issue affects the function cn_update of the file /_parse/_a… |
CVE-2024-12965 | High | 7.3 | 2024-12-26 | A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been declared as critical. This vulnerability affects unknown code of th… |
CVE-2024-12964 | High | 7.3 | 2024-12-26 | A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. It has been classified as critical. This affects an unknown part of the fi… |
CVE-2024-12963 | High | 7.3 | 2024-12-26 | A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. Affected by this issue is the function add_xp of the file /_parse/_a… |
CVE-2024-54907 | High | 8.8 | 2024-12-26 | TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc. |
CVE-2024-12962 | High | 7.3 | 2024-12-26 | A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of t… |
CVE-2024-12961 | High | 7.3 | 2024-12-26 | A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file… |
CVE-2024-12960 | High | 7.3 | 2024-12-26 | A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. This issue affects some unknown process… |
CVE-2024-51540 | High | 8.1 | 2024-12-26 | Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket… |
CVE-2024-12959 | High | 7.3 | 2024-12-26 | A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /upd… |
CVE-2024-12958 | High | 7.3 | 2024-12-26 | A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. This affects an unknown part of the file /update_pr… |
CVE-2024-12908 | Medium | 6.9 | 2024-12-26 | Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler function, URI's were compare… |
CVE-2024-12956 | Medium | 6.3 | 2024-12-26 | A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the fi… |
CVE-2024-12955 | Medium | 4.3 | 2024-12-26 | A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as problematic. This vulnerability affects unknown code of… |
CVE-2024-12954 | Medium | 6.3 | 2024-12-26 | A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. This affects an unknown part of the file /up… |
CVE-2024-12953 | Medium | 6.3 | 2024-12-26 | A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected by this issue is some unknown… |
CVE-2024-47150 | Low | 3.3 | 2024-12-26 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2024-47149 | Low | 3.3 | 2024-12-26 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. |
CVE-2024-12952 | Medium | 6.3 | 2024-12-26 | A vulnerability classified as critical was found in melMass comfy_mtb up to 0.1.4. Affected by this vulnerability is the function run_command of the file comfy… |
CVE-2024-12951 | Medium | 6.3 | 2024-12-26 | A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /add_pe… |
CVE-2024-8994 | Medium | 6.2 | 2024-12-26 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2024-8993 | Medium | 6.2 | 2024-12-26 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2024-8992 | Medium | 4.0 | 2024-12-26 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2024-47157 | Low | 2.9 | 2024-12-26 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. |
CVE-2024-47155 | Medium | 5.5 | 2024-12-26 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2024-47154 | Medium | 5.5 | 2024-12-26 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2024-47153 | Medium | 6.2 | 2024-12-26 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2024-47148 | Medium | 4.0 | 2024-12-26 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. |
CVE-2024-12950 | Medium | 6.3 | 2024-12-26 | A vulnerability was found in code-projects/projectworlds Travel Management System 1.0. It has been rated as critical. This issue affects some unknown processin… |
CVE-2024-12949 | Medium | 6.3 | 2024-12-26 | A vulnerability was found in code-projects Travel Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2024-47156 | Low | 3.3 | 2024-12-26 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2024-47151 | Medium | 6.3 | 2024-12-26 | Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution |
CVE-2024-12948 | Medium | 6.3 | 2024-12-26 | A vulnerability was found in code-projects Travel Management System 1.0. It has been classified as critical. This affects an unknown part of the file /detail.p… |
CVE-2024-12947 | Medium | 6.3 | 2024-12-26 | A vulnerability was found in Codezips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the fi… |
CVE-2024-12946 | High | 7.3 | 2024-12-26 | A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. This issue affects some unknown p… |
CVE-2024-12945 | High | 7.3 | 2024-12-26 | A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. This vulnerability affects unknown code of the file /account.ph… |
CVE-2024-56433 | Low | 3.6 | 2024-12-26 | shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can r… |
CVE-2024-12944 | High | 7.3 | 2024-12-26 | A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2024-12943 | High | 7.3 | 2024-12-26 | A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown funct… |
CVE-2024-12942 | High | 7.3 | 2024-12-26 | A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been classified as critical. Affected is an unknown function of the file… |
CVE-2024-12941 | Medium | 6.3 | 2024-12-26 | A vulnerability was found in CodeAstro Blood Donor Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /pa… |
CVE-2024-12940 | High | 7.3 | 2024-12-26 | A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. This vulnerability affects unknown code o… |
CVE-2024-12939 | Medium | 6.3 | 2024-12-26 | A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as critical. This issue affects the function add_edu of the file /_parse/_all… |
CVE-2024-12938 | Medium | 6.3 | 2024-12-26 | A vulnerability has been found in code-projects Simple Admin Panel 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality o… |
CVE-2024-12937 | Medium | 6.3 | 2024-12-26 | A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. Affected is an unknown function of the file addVariationC… |
CVE-2024-11223 | Medium | 4.7 | 2024-12-26 | The WPForms WordPress plugin before 1.9.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |
CVE-2024-10903 | Medium | 4.7 | 2024-12-26 | The Broken Link Checker WordPress plugin before 2.4.2 does not validate a the link URLs before making a request to them, which could allow admin users to perfo… |
CVE-2024-12936 | Medium | 6.3 | 2024-12-26 | A vulnerability, which was classified as critical, has been found in code-projects Simple Admin Panel 1.0. This issue affects some unknown processing of the fi… |
CVE-2024-12935 | Medium | 6.3 | 2024-12-26 | A vulnerability classified as critical was found in code-projects Simple Admin Panel 1.0. This vulnerability affects unknown code of the file editItemForm.php… |
CVE-2024-12934 | Medium | 6.3 | 2024-12-26 | A vulnerability classified as critical has been found in code-projects Simple Admin Panel 1.0. This affects an unknown part of the file updateItemController.ph… |
CVE-2024-12933 | Low | 3.5 | 2024-12-26 | A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of th… |
CVE-2024-12652 | High | 8.8 | 2024-12-26 | A Improper Control of Generation of Code ('Code Injection') vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 al… |
CVE-2024-12932 | Low | 3.5 | 2024-12-26 | A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functional… |
CVE-2024-12931 | Medium | 6.3 | 2024-12-26 | A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been classified as critical. Affected is an unknown function of the file /addCatContr… |
CVE-2024-12930 | Low | 3.5 | 2024-12-26 | A vulnerability was found in code-projects Simple Admin Panel 1.0 and classified as problematic. This issue affects some unknown processing of the file addCatC… |
CVE-2024-12929 | Medium | 6.3 | 2024-12-26 | A vulnerability has been found in code-projects Student Management System 1.0.00 and classified as critical. This vulnerability affects unknown code of the fil… |
CVE-2024-12928 | Medium | 6.3 | 2024-12-26 | A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. This affects an unknown part. The manipulation of the arg… |
CVE-2024-12927 | High | 7.3 | 2024-12-25 | A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected by this issue is some un… |
CVE-2024-12926 | Medium | 6.3 | 2024-12-25 | A vulnerability classified as critical was found in Codezips Project Management System 1.0. Affected by this vulnerability is an unknown functionality of the f… |
CVE-2024-56430 | Low | 2.9 | 2024-12-25 | OpenFHE through 1.2.3 has a NULL pointer dereference in BinFHEContext::EvalFloor in lib/binfhe-base-scheme.cpp. |
CVE-2024-56431 | Critical | 9.8 | 2024-12-25 | oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because… |
CVE-2024-52543 | Medium | 6.5 | 2024-12-25 | Dell NativeEdge, version(s) 2.1.0.0, contain(s) a Creation of Temporary File With Insecure Permissions vulnerability. A high privileged attacker with local acc… |
CVE-2024-52534 | Medium | 5.4 | 2024-12-25 | Dell ECS, version(s) prior to ECS 3.8.1.3, contain(s) an Authentication Bypass by Capture-replay vulnerability. A low privileged attacker with remote access co… |
CVE-2024-53291 | High | 7.5 | 2024-12-25 | Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through Metadata vulnerability. An unauthenticated attacker with remote ac… |
CVE-2024-52906 | Medium | 5.5 | 2024-12-25 | IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a denial of s… |
CVE-2024-52535 | High | 7.1 | 2024-12-25 | Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link (symlink) at… |
CVE-2024-47978 | High | 7.8 | 2024-12-25 | Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could poten… |
CVE-2024-47102 | Medium | 5.5 | 2024-12-25 | IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial… |
CVE-2024-39727 | Medium | 6.1 | 2024-12-25 | IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 uses a web link with untrusted references to an external site. A remote attacker… |
CVE-2024-39725 | Medium | 5.3 | 2024-12-25 | IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 could allow a remote attacker to obtain sensitive information when a detailed tec… |
CVE-2024-8950 | Critical | 9.9 | 2024-12-25 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arne Informatics Piramit Automation allows Blind SQL Inje… |
CVE-2024-52046 | Critical | 9.8 | 2024-12-25 | The ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to process incoming serialized data but lacks the necessary security… |
CVE-2024-12335 | Medium | 4.3 | 2024-12-25 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.11.12 via the handle_clone_post()… |
CVE-2024-11281 | Critical | 9.8 | 2024-12-25 | The WooCommerce Point of Sale plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0. This is due to insufficie… |
CVE-2024-10862 | Medium | 4.9 | 2024-12-25 | The NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress is vulnerable to SQL Injection via the 'search_params' parameter in al… |
CVE-2024-10858 | Medium | 6.1 | 2024-12-25 | The Jetpack WordPress plugin before 14.1 does not properly checks the postmessage origin in its 13.x versions, allowing it to be bypassed and leading to DOM-X… |
CVE-2024-12636 | Medium | 4.3 | 2024-12-25 | The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery i… |
CVE-2024-12428 | High | 7.5 | 2024-12-25 | The WP Data Access – App, Table, Form and Chart Builder plugin plugin for WordPress is vulnerable to SQL Injection via the 'order[user_login][dir]' parameter i… |
CVE-2024-1609 | | 2024-12-25 | In OPPOStore iOS App, there's a possible escalation of privilege due to improper input validation. | |
CVE-2024-12413 | Medium | 5.3 | 2024-12-25 | The MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to unauthorized access due to missing capability chec… |
CVE-2024-12272 | High | 8.8 | 2024-12-25 | The WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor plugin for WordPress is vulnerable to Local File Inclusi… |
CVE-2024-12190 | Medium | 4.3 | 2024-12-25 | The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable… |
CVE-2024-12032 | Medium | 6.5 | 2024-12-25 | The Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking plugin for WordPress is vulnerable to SQL Injec… |
CVE-2024-12746 | High | 8.0 | 2024-12-24 | A SQL injection in the Amazon Redshift ODBC Driver v2.1.5.0 (Windows or Linux) allows a user to gain escalated privileges via the SQLTables or SQLColumns Metad… |