Menu

Star on GitHub · 3.2k

2024

39,956 vulnerabilities published in 2024.

Results

19,870 of 39,956· Page 154/398
6.1
CVE-2024-43358

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting

6.5
CVE-2024-43231

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themeum Tut

6.5
CVE-2024-43227

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper

6.8
CVE-2024-40893

Multiple authenticated operating system (OS) command injection vulnerabilities exist in Firewalla Box Software versions

6.5
CVE-2024-7700

A command injection flaw was found in the "Host Init Config" template in the Foreman application via the "Install Packag

6.5
CVE-2024-42474

Streamlit is a data oriented application development framework for python. Snowflake Streamlit open source addressed a s

4.8
CVE-2024-42482

fish-shop/syntax-check is a GitHub action for syntax checking fish shell files. Improper neutralization of delimiters in

5.9
CVE-2024-41909

Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-4879

5.3
CVE-2024-42478

llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbi

5.3
CVE-2024-42477

llama.cpp provides LLM inference in C/C++. The unsafe `type` member in the `rpc_tensor` structure can cause `global-buff

5.4
CVE-2024-33536

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The vulnerability occurs due to inadequate input val

5.4
CVE-2024-33533

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0, issue 1 of 2. A reflected cross-site scripting (XSS)

6.1
CVE-2024-27443KEV

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in

6.1
CVE-2024-21550

SteVe is an open platform that implements different version of the OCPP protocol for Electric Vehicle charge points, act

6.4
CVE-2024-6639

The MDx theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mdx_list_item' shortcode in a

6.3
CVE-2024-7680

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affe

6.3
CVE-2024-7676

A vulnerability was found in Sourcecodester Car Driving School Management System 1.0. It has been classified as critical

6.3
CVE-2024-7669

A vulnerability was found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This is

6.3
CVE-2024-7668

A vulnerability has been found in SourceCodester Car Driving School Management System 1.0 and classified as critical. Th

6.3
CVE-2024-7667

A vulnerability, which was classified as critical, was found in SourceCodester Car Driving School Management System 1.0.

6.3
CVE-2024-7666

A vulnerability, which was classified as critical, has been found in SourceCodester Car Driving School Management System

6.3
CVE-2024-7665

A vulnerability classified as critical was found in SourceCodester Car Driving School Management System 1.0. Affected by

6.3
CVE-2024-7664

A vulnerability classified as critical has been found in SourceCodester Car Driving School Management System 1.0. Affect

6.3
CVE-2024-7663

A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as critical. Thi

4.3
CVE-2024-7662

A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problemati

4.3
CVE-2024-7661

A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been classified as problema

5.3
CVE-2024-7658

A vulnerability, which was classified as problematic, has been found in projectsend up to r1605. This issue affects the

6.1
CVE-2024-7649

The Opal Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via checkout form fields in all ve

4.3
CVE-2024-7648

The Opal Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and incl

4.3
CVE-2024-7645

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as problematic.

6.3
CVE-2024-7643

A vulnerability was found in SourceCodester Leads Manager Tool 1.0 and classified as critical. Affected by this issue is

6.3
CVE-2024-7642

A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as cri

6.3
CVE-2024-7641

A vulnerability, which was classified as critical, was found in SourceCodester Kortex Lite Advocate Office Management Sy

6.3
CVE-2024-7640

A vulnerability, which was classified as critical, has been found in SourceCodester Kortex Lite Advocate Office Manageme

6.3
CVE-2024-7639

A vulnerability classified as critical was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Th

6.3
CVE-2024-7638

A vulnerability classified as critical has been found in SourceCodester Kortex Lite Advocate Office Management System 1.

5.4
CVE-2024-7621

The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthori

5.5
CVE-2024-7616

A vulnerability was found in Edimax IC-6220DC and IC-5150W up to 3.06. It has been rated as critical. Affected by this i

6.1
CVE-2024-7574

The Christmasify! plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5

4.8
CVE-2024-7512

Concrete CMS versions 9.0.0 through 9.3.2 are affected by a stored XSS vulnerability in Board instances. A rogue adminis

5.3
CVE-2024-7416

The Reveal Template plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.7

5.3
CVE-2024-7414

The PDF Builder for WPForms plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and includ

5.3
CVE-2024-7413

The Obfuscate Email plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.8

5.3
CVE-2024-7412

The No Update Nag plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.4.1

5.3
CVE-2024-7410

The My Custom CSS PHP & ADS plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and includ

6.5
CVE-2024-7408

This vulnerability exists in Airveda Air Quality Monitor PM2.5 PM10 due to transmission of sensitive information in plai

5.3
CVE-2024-7382

The Linkify Text plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.9.1.

6.3
CVE-2024-7272

A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fill_audio

5.3
CVE-2024-6759

When mounting a remote filesystem using NFS, the kernel did not sanitize remotely provided filenames for the path separa

6.5
CVE-2024-6758

Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low pri

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.