Menu

Star on GitHub · 3.2k

2024

39,956 vulnerabilities published in 2024.

Results

39,956· Page 144/800
10.0
CVE-2024-50525

Unrestricted Upload of File with Dangerous Type vulnerability in helloprint Helloprint helloprint allows Upload a Web Sh

10.0
CVE-2024-50523

Unrestricted Upload of File with Dangerous Type vulnerability in RainbowLink Inc. All Post Contact Form allpost-contactf

7.1
CVE-2024-45164

Akamai SIA (Secure Internet Access Enterprise) ThreatAvert, in SPS (Security and Personalization Services) before the la

6.1
CVE-2024-9147

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Bna Informatics PosPratik

7.5
CVE-2024-51561

This vulnerability exists in Aero due to improper implementation of OTP validation mechanism in certain API endpoints. A

4.3
CVE-2024-51560

This vulnerability exists in the Wave 2.0 due to improper exception handling for invalid inputs at certain API endpoint.

6.5
CVE-2024-51559

This vulnerability exists in the Wave 2.0 due to improper authorization checks on certain API endpoints. An authenticate

9.8
CVE-2024-51558

This vulnerability exists in the Wave 2.0 due to missing restrictions for excessive failed authentication attempts on it

6.5
CVE-2024-51557

This vulnerability exists in the Wave 2.0 due to missing rate limiting on OTP requests in an API endpoint. An authentica

6.5
CVE-2024-51556

This vulnerability exists in the Wave 2.0 due to insufficient encryption of sensitive data received at the API response.

8.3
CVE-2024-36485

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option.

4.6
CVE-2024-10523

This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device f

9.8
CVE-2024-10035

Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in a Command

9.1
CVE-2024-51661

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in David Lingre

8.3
CVE-2024-48878

Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report.

7.5
CVE-2024-10389

There exists a Path Traversal vulnerability in Safearchive on Platforms with Case-Insensitive Filesystems (e.g., NTFS).

7.8
CVE-2024-38424

Memory corruption during GNSS HAL process initialization.

7.8
CVE-2024-38423

Memory corruption while processing GPU page table switch.

7.8
CVE-2024-38422

Memory corruption while processing voice packet with arbitrary data received from ADSP.

7.8
CVE-2024-38421

Memory corruption while processing GPU commands.

7.8
CVE-2024-38419

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

7.8
CVE-2024-38415

Memory corruption while handling session errors from firmware.

7.8
CVE-2024-38410

Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.

7.8
CVE-2024-38409

Memory corruption while station LL statistic handling.

8.2
CVE-2024-38408

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

7.8
CVE-2024-38407

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.

7.8
CVE-2024-38406

Memory corruption while handling IOCTL calls in JPEG Encoder driver.

7.5
CVE-2024-38405

Transient DOS while processing the CU information from RNR IE.

7.5
CVE-2024-38403

Transient DOS while parsing BTM ML IE when per STA profile is not included.

7.5
CVE-2024-33068

Transient DOS while parsing fragments of MBSSID IE from beacon frame.

6.7
CVE-2024-33033

Memory corruption while processing IOCTL calls to unmap the buffers.

6.7
CVE-2024-33032

Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.

6.7
CVE-2024-33031

Memory corruption while processing the update SIM PB records request.

6.7
CVE-2024-33030

Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.

6.7
CVE-2024-33029

Memory corruption while handling the PDR in driver for getting the remote heap maps.

9.1
CVE-2024-23590

Session Fixation vulnerability in Apache Kylin. This issue affects Apache Kylin: from 2.0.0 through 4.x. Users are rec

6.7
CVE-2024-23386

memory corruption when WiFi display APIs are invoked with large random inputs.

7.5
CVE-2024-23385

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

6.7
CVE-2024-23377

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the com

4.3
CVE-2024-10761

A vulnerability was found in Umbraco CMS up to 10.7.7/12.3.6/13.5.2/14.3.1/15.1.1. It has been classified as problematic

6.3
CVE-2024-10760

A vulnerability was found in code-projects University Event Management System 1.0 and classified as critical. This issue

6.3
CVE-2024-10759

A vulnerability has been found in itsourcecode Farm Management System 1.0 and classified as critical. This vulnerability

7.3
CVE-2024-10758

A vulnerability, which was classified as critical, was found in code-projects/anirbandutta9 Content Management System an

3.5
CVE-2024-10757

A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Shopping Portal 2.0. Affected

3.5
CVE-2024-10756

A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. Affected by this vulnerabi

3.5
CVE-2024-10755

A vulnerability classified as problematic has been found in PHPGurukul Online Shopping Portal 2.0. Affected is an unknow

3.5
CVE-2024-10754

A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been rated as problematic. This issue affects

4.4
CVE-2024-20124

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information d

4.4
CVE-2024-20123

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information d

4.4
CVE-2024-20122

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information d

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.