Menu

Star on GitHub · 3.2k

2024

39,956 vulnerabilities published in 2024.

Results

19,870 of 39,956· Page 119/398
5.5
CVE-2024-46735

In the Linux kernel, the following vulnerability has been resolved: ublk_drv: fix NULL pointer dereference in ublk_ctrl

6.5
CVE-2024-8969

OMFLOW from The SYSCOM Group has a vulnerability involving the exposure of sensitive data. This allows remote attackers

5.5
CVE-2024-46733

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve leaks in cow_file_range

5.5
CVE-2024-46732

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Assign linear_pitch_alignment even

5.5
CVE-2024-46728

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index for aux_rd_interval be

5.5
CVE-2024-46727

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add otg_master NULL check within r

5.5
CVE-2024-46726

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure index calculation will not

5.5
CVE-2024-46721

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix possible NULL pointer dereference pr

5.5
CVE-2024-46720

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null check check

5.5
CVE-2024-46719

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix null pointer dereference in t

5.5
CVE-2024-46718

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't overmap identity VRAM mapping Overma

5.5
CVE-2024-46715

In the Linux kernel, the following vulnerability has been resolved: driver: iio: add missing checks on iio_info's callb

5.5
CVE-2024-46714

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip wbscl_set_scaler_filter if fi

5.3
CVE-2024-6641

The WP Hardening – Fix Your WordPress Security plugin for WordPress is vulnerable to Security Feature Bypass in all vers

6.1
CVE-2024-45366

Welcart e-Commerce prior to 2.11.2 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an

4.5
CVE-2022-39068

There is a buffer overflow vulnerability in ZTE MF296R. Due to insufficient validation of the SMS parameter length, an a

6.5
CVE-2024-44005

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift

6.5
CVE-2024-44001

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Ele

5.9
CVE-2024-43999

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saturday Dr

6.5
CVE-2024-43995

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in sonalsinha2

6.5
CVE-2024-43994

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreat

6.5
CVE-2024-43993

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreat

6.5
CVE-2024-43992

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Latepoint L

6.5
CVE-2024-43991

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in webdzier Ho

6.5
CVE-2024-43988

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in digitalnatu

6.5
CVE-2024-43987

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in wayneconnor

6.5
CVE-2024-43983

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Podlove Pod

5.9
CVE-2024-43972

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pagelayer T

6.5
CVE-2024-45452

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations S

6.5
CVE-2024-45451

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations R

6.5
CVE-2024-44051

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Johan van der Wijk

6.5
CVE-2024-44050

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations V

6.5
CVE-2024-44049

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk Gutenber

6.5
CVE-2024-44047

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IDX Broker IMPress

6.5
CVE-2024-44008

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Ma

5.9
CVE-2024-43985

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagePeople

5.9
CVE-2024-43977

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH The Plus

6.5
CVE-2024-43938

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Peters Name

5.9
CVE-2024-37985

Windows Kernel Information Disclosure Vulnerability

4.3
CVE-2024-8909

Inappropriate implementation in UI in Google Chrome on iOS prior to 129.0.6668.58 allowed a remote attacker to perform U

4.3
CVE-2024-8908

Inappropriate implementation in Autofill in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to perform UI

6.1
CVE-2024-8907

Insufficient data validation in Omnibox in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker who

4.3
CVE-2024-8906

Incorrect security UI in Downloads in Google Chrome prior to 129.0.6668.58 allowed a remote attacker who convinced a use

6.5
CVE-2024-46976

Backstage is an open framework for building developer portals. An attacker with control of the contents of the TechDocs

6.5
CVE-2024-45816

Backstage is an open framework for building developer portals. When using the AWS S3 or GCS storage provider for TechDoc

6.5
CVE-2024-45815

Backstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstag

6.4
CVE-2024-45812

Vite a frontend build tooling framework for javascript. Affected versions of vite were discovered to contain a DOM Clobb

4.8
CVE-2024-45811

Vite a frontend build tooling framework for javascript. In affected versions the contents of arbitrary files can be retu

6.5
CVE-2024-45605

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user is

4.3
CVE-2024-45604

Contao is an Open Source CMS. In affected versions authenticated users in the back end can list files outside the docume

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.