Menu

Star on GitHub · 3.2k

2024

39,956 vulnerabilities published in 2024.

Results

39,956· Page 626/800
4.8
CVE-2024-2263

Themify WordPress plugin before 1.4.4 does not sanitise and escape a parameter before outputting it back in the page, l

4.7
CVE-2024-2262

Themify WordPress plugin before 1.4.4 does not have CSRF check in its bulk action, which could allow attackers to make

5.3
CVE-2024-1526

The Hubbub Lite WordPress plugin before 1.33.1 does not ensure that user have access to password protected post before

6.3
CVE-2024-20055

In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local informatio

6.6
CVE-2024-20054

In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation

8.4
CVE-2024-20053

In flashc, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of

4.4
CVE-2024-20052

In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information

2.3
CVE-2024-20051

In flashc, there is a possible system crash due to an uncaught exception. This could lead to local denial of service wit

4.4
CVE-2024-20050

In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information

4.4
CVE-2024-20049

In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information

6.2
CVE-2024-20048

In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information

5.4
CVE-2024-20047

In battery, there is a possible out of bounds read due to an integer overflow. This could lead to local information disc

6.6
CVE-2024-20046

In battery, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation

2.3
CVE-2024-20045

In audio, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to loca

6.6
CVE-2024-20044

In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

6.6
CVE-2024-20043

In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

6.6
CVE-2024-20042

In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

4.4
CVE-2024-20041

In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo

8.8
CVE-2024-20040

In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote es

8.8
CVE-2024-20039

In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code

6.8
CVE-2024-31033

JJWT (aka Java JWT) through 0.12.5 ignores certain characters and thus a user might falsely conclude that they have a st

6.1
CVE-2024-28895

'Yahoo! JAPAN' App for Android v2.3.1 to v3.161.1 and 'Yahoo! JAPAN' App for iOS v3.2.2 to v4.109.0 contain a cross-site

6.5
CVE-2024-27609

Bonita before 2023.2-u2 allows stored XSS via a UI screen in the administration panel.

9.8
CVE-2023-51803

LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the "<?php ?>" subst

3.5
CVE-2014-125110

A vulnerability has been found in wp-file-upload Plugin up to 2.4.3 on WordPress and classified as problematic. Affected

6.5
CVE-2024-31104

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GetResponse GetRes

7.1
CVE-2024-31103

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kanban for WordPre

5.9
CVE-2024-31102

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scimone Ignazio Pr

6.5
CVE-2024-31101

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in August Infotech AI

7.1
CVE-2024-31097

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stephan Spencer SE

7.1
CVE-2024-31092

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Philip M. Hofer (F

7.1
CVE-2024-31091

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SparkWeb Interacti

7.1
CVE-2024-31090

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 荒野无灯 Hacklog Down

5.9
CVE-2024-31089

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Techblissonline.Co

7.1
CVE-2024-31087

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joel Starnes pageM

7.1
CVE-2024-31085

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rob Marsh, SJ Post

7.1
CVE-2024-31084

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pulsar Web Design

7.1
CVE-2024-30561

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scientech It Solut

6.5
CVE-2024-30559

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maurice Spin 360 d

7.1
CVE-2024-30558

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Simpson Ad

6.5
CVE-2024-30557

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aesopinteractive A

6.5
CVE-2024-30556

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MightyThemes Might

6.5
CVE-2024-30555

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sayan Datta Ultima

5.9
CVE-2024-30554

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wouter Dijkstra DD

5.9
CVE-2024-30553

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joby Joseph WP Twi

6.5
CVE-2024-30552

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wppdf.Org Responsi

7.1
CVE-2024-30551

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Toast Plugins Stic

7.1
CVE-2024-30550

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Responsiv

5.9
CVE-2024-30549

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cimatti Contact Fo

5.9
CVE-2024-30548

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noah Kagan underCo

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.