Menu

Star on GitHub · 3.2k

2024

39,956 vulnerabilities published in 2024.

Results

19,870 of 39,956· Page 81/398
6.5
CVE-2024-50615

TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp

6.5
CVE-2024-50614

TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XM

6.5
CVE-2024-50613

libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encod

5.5
CVE-2024-50612

libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.

6.3
CVE-2024-10427

A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been declared as critical. This vulnerabili

6.3
CVE-2024-10426

A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects a

6.3
CVE-2024-10425

A vulnerability was found in Project Worlds Student Project Allocation System 1.0 and classified as critical. Affected b

6.3
CVE-2024-10424

A vulnerability has been found in Project Worlds Student Project Allocation System 1.0 and classified as critical. Affec

6.3
CVE-2024-10423

A vulnerability, which was classified as critical, was found in Project Worlds Student Project Allocation System 1.0. Af

6.3
CVE-2024-10422

A vulnerability, which was classified as critical, has been found in SourceCodester Attendance and Payroll System 1.0. T

6.3
CVE-2024-10421

A vulnerability classified as critical was found in SourceCodester Attendance and Payroll System 1.0. This vulnerability

6.3
CVE-2024-10420

A vulnerability classified as critical has been found in SourceCodester Attendance and Payroll System 1.0. This affects

6.3
CVE-2024-10418

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected

6.3
CVE-2024-10417

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. Affecte

6.3
CVE-2024-10416

A vulnerability was found in code-projects Blood Bank Management System 1.0 and classified as critical. This issue affec

6.3
CVE-2024-10415

A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as critical. This vulner

6.3
CVE-2024-10413

A vulnerability, which was classified as critical, has been found in SourceCodester Online Hotel Reservation System 1.0.

5.9
CVE-2024-50602

An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_Stop

6.3
CVE-2024-10411

A vulnerability was found in SourceCodester Online Hotel Reservation System 1.0. It has been classified as critical. Aff

6.3
CVE-2024-10410

A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. Affected by this

6.3
CVE-2024-10409

A vulnerability was found in code-projects Blood Bank Management 1.0 and classified as critical. This issue affects some

6.3
CVE-2024-10408

A vulnerability has been found in code-projects Blood Bank Management up to 1.0 and classified as critical. This vulnera

6.3
CVE-2024-10407

A vulnerability, which was classified as critical, was found in SourceCodester Petrol Pump Management Software 1.0. This

6.3
CVE-2024-10406

A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0.

6.4
CVE-2024-10117

The WP Crowdfunding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpcf_donate short

6.4
CVE-2024-9116

The Monkee-Boy Essentials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all

4.3
CVE-2024-10357

The Clever Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up

6.4
CVE-2024-9967

The WP show more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's show_more shortcode

6.4
CVE-2024-9853

The ID-SK Toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions

6.4
CVE-2024-9642

The Editor Custom Color Palette plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads i

4.3
CVE-2024-10092

The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability

6.4
CVE-2024-9456

The WP Awesome Login plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versi

6.1
CVE-2024-8870

The Forms for Mailchimp by Optin Cat – Grow Your MailChimp List plugin for WordPress is vulnerable to Reflected Cross-Si

4.3
CVE-2024-9626

The Editorial Assistant by Sovrn plugin for WordPress is vulnerable to unauthorized modification of data due to a missin

6.1
CVE-2024-9613

The FormFacade – WordPress plugin for Google Forms plugin for WordPress is vulnerable to Reflected Cross-Site Scripting

4.9
CVE-2024-9475

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection

5.5
CVE-2024-9462

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Stored Cross-Site Scri

6.4
CVE-2024-9454

The PriPre plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to,

6.4
CVE-2024-10091

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Compari

4.8
CVE-2024-48239

An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't pr

4.7
CVE-2024-48238

WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl.class.php via the paren

6.5
CVE-2024-48236

An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the FileOutputStream function in the writ

6.5
CVE-2024-48235

An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the save method of the TemplateController

4.9
CVE-2024-48234

An issue was discovered in mipjz 5.0.5. In the push method of app\tag\controller\ApiAdminTag.php the value of the postAd

6.1
CVE-2024-48228

An issue was found in funadmin 5.0.2. The selectfiles method in \backend\controller\sys\Attachh.php directly stores the

6.1
CVE-2024-48396

AIML Chatbot 1.0 (fixed in 2.0) is vulnerable to Cross Site Scripting (XSS). The vulnerability is exploited through the

4.8
CVE-2024-48233

mipjz 5.0.5 is vulnerable to Cross Site Scripting (XSS) in \app\setting\controller\ApiAdminSetting.php via the ICP param

4.9
CVE-2024-48232

An issue was found in mipjz 5.0.5. In the mipPost method of \app\setting\controller\ApiAdminTool.php, the value of the p

4.9
CVE-2024-48227

Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Servi

6.5
CVE-2024-48225

Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile.

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.