Menu

Star on GitHub · 3.2k

2024

39,956 vulnerabilities published in 2024.

Results

19,870 of 39,956· Page 311/398
4.4
CVE-2024-20049

In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information

6.2
CVE-2024-20048

In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information

5.4
CVE-2024-20047

In battery, there is a possible out of bounds read due to an integer overflow. This could lead to local information disc

6.6
CVE-2024-20046

In battery, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation

6.6
CVE-2024-20044

In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

6.6
CVE-2024-20043

In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

6.6
CVE-2024-20042

In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

4.4
CVE-2024-20041

In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo

6.8
CVE-2024-31033

JJWT (aka Java JWT) through 0.12.5 ignores certain characters and thus a user might falsely conclude that they have a st

6.1
CVE-2024-28895

'Yahoo! JAPAN' App for Android v2.3.1 to v3.161.1 and 'Yahoo! JAPAN' App for iOS v3.2.2 to v4.109.0 contain a cross-site

6.5
CVE-2024-27609

Bonita before 2023.2-u2 allows stored XSS via a UI screen in the administration panel.

6.5
CVE-2024-31104

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GetResponse GetRes

5.9
CVE-2024-31102

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scimone Ignazio Pr

6.5
CVE-2024-31101

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in August Infotech AI

5.9
CVE-2024-31089

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Techblissonline.Co

6.5
CVE-2024-30559

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maurice Spin 360 d

6.5
CVE-2024-30557

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aesopinteractive A

6.5
CVE-2024-30556

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MightyThemes Might

6.5
CVE-2024-30555

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sayan Datta Ultima

5.9
CVE-2024-30554

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wouter Dijkstra DD

5.9
CVE-2024-30553

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joby Joseph WP Twi

6.5
CVE-2024-30552

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wppdf.Org Responsi

5.9
CVE-2024-30549

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cimatti Contact Fo

5.9
CVE-2024-30548

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noah Kagan underCo

6.5
CVE-2024-30530

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar Music MP3 A

6.5
CVE-2024-30524

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RedLettuce Plugins

5.8
CVE-2024-31122

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Prism IT Systems U

6.5
CVE-2024-31121

Contributor Cross Site Scripting (XSS) in HeartThis <= 0.1.0 versions.

6.5
CVE-2024-31120

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Responsiv

6.5
CVE-2024-31117

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moises Heberle Woo

6.5
CVE-2024-31108

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iFlyChat Team iFly

5.4
CVE-2024-31100

Cross-Site Request Forgery (CSRF) vulnerability in Festi-Team Popup Cart Lite for WooCommerce.This issue affects Popup C

4.3
CVE-2024-31096

Cross-Site Request Forgery (CSRF) vulnerability in kopatheme Nictitate.This issue affects Nictitate: from n/a through 1.

5.3
CVE-2024-31095

Authorization Bypass Through User-Controlled Key vulnerability in Ricard Torres Thumbs Rating.This issue affects Thumbs

6.5
CVE-2024-30543

Authorization Bypass Through User-Controlled Key vulnerability in UPQODE Whizz.This issue affects Whizzy: from n/a throu

4.3
CVE-2024-30541

Cross-Site Request Forgery (CSRF) vulnerability in LWS LWS Optimize.This issue affects LWS Optimize: from n/a through 1.

4.3
CVE-2024-30536

Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Slugs Manager.This issue affects Slugs Manager: from n/a th

4.3
CVE-2024-30526

Cross-Site Request Forgery (CSRF) vulnerability in Easy Social Feed.This issue affects Easy Social Feed: from n/a throug

5.3
CVE-2024-30523

Insertion of Sensitive Information into Log File vulnerability in Paid Memberships Pro Paid Memberships Pro – Mailchimp

6.2
CVE-2024-25027

IBM Security Verify Access 10.0.6 could disclose sensitive snapshot information due to missing encryption. IBM X-Force

5.9
CVE-2024-22353

IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 is vulnerable to a denial of service, caused by sendi

5.3
CVE-2023-50959

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2,19.0.1, 19.0.2, 19.0.3,20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0

6.3
CVE-2024-3118

A vulnerability, which was classified as critical, has been found in Dreamer CMS up to 4.1.3. This issue affects some un

4.7
CVE-2024-3117

A vulnerability classified as critical was found in YouDianCMS up to 9.5.12. This vulnerability affects unknown code of

4.3
CVE-2024-3089

A vulnerability has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as problematic. This v

6.4
CVE-2024-2491

The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the *_html_tag*

4.3
CVE-2024-3086

A vulnerability classified as problematic was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by thi

4.3
CVE-2024-3084

A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been rated as problematic. This is

6.4
CVE-2024-2948

The Favorites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'user_favorites' shortc

6.4
CVE-2024-2144

The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.