Menu

Star on GitHub · 3.2k

2024

39,956 vulnerabilities published in 2024.

Results

39,956· Page 1/800
6.5
CVE-2024-56021

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ibnuyahya Category

6.5
CVE-2024-56020

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in svegliadesign Sveg

N/A
CVE-2024-56803

Ghostty is a cross-platform terminal emulator. Ghostty, as allowed by default in 1.0.0, allows attackers to modify the w

6.5
CVE-2024-56063

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essent

6.5
CVE-2024-56062

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Ele

7.3
CVE-2024-13085

A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0. Affected by this

6.3
CVE-2024-13084

A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0. Affected by this vulnerability is

3.5
CVE-2024-13083

A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0. Affected is an unknown fu

3.5
CVE-2024-13082

A vulnerability was found in PHPGurukul Land Record System 1.0. It has been rated as problematic. This issue affects som

3.5
CVE-2024-13081

A vulnerability was found in PHPGurukul Land Record System 1.0. It has been declared as problematic. This vulnerability

3.5
CVE-2024-13080

A vulnerability was found in PHPGurukul Land Record System 1.0. It has been classified as problematic. This affects an u

6.3
CVE-2024-13079

A vulnerability was found in PHPGurukul Land Record System 1.0 and classified as critical. Affected by this issue is som

6.3
CVE-2024-13078

A vulnerability has been found in PHPGurukul Land Record System 1.0 and classified as critical. Affected by this vulnera

3.5
CVE-2024-13077

A vulnerability, which was classified as problematic, was found in PHPGurukul Land Record System 1.0. Affected is an unk

3.5
CVE-2024-13076

A vulnerability, which was classified as problematic, has been found in PHPGurukul Land Record System 1.0. This issue af

3.5
CVE-2024-13075

A vulnerability classified as problematic was found in PHPGurukul Land Record System 1.0. This vulnerability affects unk

6.7
CVE-2024-55955

An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400

7.8
CVE-2024-55917

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on

7.8
CVE-2024-55632

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privilege

7.8
CVE-2024-55631

An engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on af

3.5
CVE-2024-13074

A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0. This affects an unknown p

N/A
CVE-2024-56802

Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploy

N/A
CVE-2024-56198

path-sanitizer is a simple lightweight npm package for sanitizing paths to prevent Path Traversal. Prior to 3.1.0, the f

6.5
CVE-2024-53647

Trend Micro ID Security, version 3.0 and below contains a vulnerability that could allow an attacker to send an unlimite

7.8
CVE-2024-52050

A LogServer arbitrary file creation vulnerability in Trend Micro Apex One could allow a local attacker to escalate privi

7.8
CVE-2024-52049

A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on

7.8
CVE-2024-52048

A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on

7.5
CVE-2024-52047

A widget local file inclusion vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary c

8.8
CVE-2024-25133

A flaw was found in the Hive ClusterDeployments resource in OpenShift Dedicated. In certain conditions, this issue may a

6.3
CVE-2024-13072

A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been rated as critical. Affected

6.3
CVE-2024-13070

A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been declared as critical. Affected by th

7.5
CVE-2023-6603

A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously craft

5.3
CVE-2023-6602

A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of n

8.8
CVE-2024-56207

Cross-Site Request Forgery (CSRF) vulnerability in EditionGuard EditionGuard for WooCommerce – eBook Sales with DRM edit

8.8
CVE-2024-56206

Cross-Site Request Forgery (CSRF) vulnerability in krishankakkar gap-hub-user-role gap-hub-user-role allows Authenticati

8.8
CVE-2024-56204

Cross-Site Request Forgery (CSRF) vulnerability in yonisink Sinking Dropdowns sinking-dropdowns allows Privilege Escalat

8.8
CVE-2024-56203

Cross-Site Request Forgery (CSRF) vulnerability in gholme4 Wayne Audio Player wayne-audio-player allows Privilege Escala

7.4
CVE-2024-56070

Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Confi

9.8
CVE-2024-56066

Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Privilege Escalation.This issue affec

8.8
CVE-2024-56061

Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Privilege Escalation.This is

9.3
CVE-2024-56045

Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLM

9.8
CVE-2024-56044

Authentication Bypass Using an Alternate Path or Channel vulnerability in VibeThemes WPLMS wplms_plugin allows Authentic

9.8
CVE-2024-56043

Incorrect Privilege Assignment vulnerability in VibeThemes WPLMS wplms_plugin allows Privilege Escalation.This issue aff

9.8
CVE-2024-56040

Incorrect Privilege Assignment vulnerability in VibeThemes VibeBP vibebp allows Privilege Escalation.This issue affects

6.4
CVE-2024-56002

Missing Authorization vulnerability in mightyforms Contact Form, Survey & Form Builder – MightyForms mightyforms allows

6.5
CVE-2024-55995

Missing Authorization vulnerability in Torod Company for Information Technology Torod torod allows Exploiting Incorrectl

4.3
CVE-2024-51667

Missing Authorization vulnerability in paytiumsupport Paytium paytium.This issue affects Paytium: from n/a through <= 4.

4.3
CVE-2024-49698

Missing Authorization vulnerability in PriceListo Best Restaurant Menu by PriceListo best-restaurant-menu-by-pricelisto.

5.3
CVE-2024-49694

Missing Authorization vulnerability in imw3 My Wp Brand my-wp-brand.This issue affects My Wp Brand: from n/a through <=

4.3
CVE-2024-49687

Missing Authorization vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce.This issue affects Smart

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.