Menu

Star on GitHub · 3.2k

2024

39,956 vulnerabilities published in 2024.

Results

39,956· Page 87/800
9.8
CVE-2024-53438

EventAttendance.php in ChurchCRM 5.7.0 is vulnerable to SQL injection. An attacker can exploit this vulnerability by man

7.5
CVE-2024-44786

Incorrect access control in Meabilis CMS 1.0 allows attackers to access other users' address books via unspecified vecto

8.1
CVE-2024-10220

The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue aff

2.8
CVE-2024-52814

Argo Helm is a collection of community maintained charts for `argoproj.github.io` projects. Prior to version 0.45.0, the

7.5
CVE-2024-52804

Tornado is a Python web framework and asynchronous networking library. The algorithm used for parsing HTTP cookies in To

7.5
CVE-2024-52802

RIOT is an operating system for internet of things (IoT) devices. In version 2024.04 and prior, the function `_parse_adv

N/A
CVE-2024-52793

The Deno Standard Library provides APIs for Deno and the Web. Prior to version 1.0.11, `http/file-server`'s `serveDir` w

9.8
CVE-2024-52723

In TOTOLINK X6000R V9.4.0cu.1041_B20240224 in the shttpd file, the Uci_Set Str function is used without strict parameter

6.7
CVE-2024-51074

Incorrect access control in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to ar

6.7
CVE-2024-51073

An issue in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to control or disrupt

5.3
CVE-2024-51072

An issue in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to cause a Denial of

5.4
CVE-2024-50965

Cross Site Scripting vulnerability in Public Knowledge Project PKP Platform OJS/OMP/OPS- before v.3.3.0.16 allows an att

7.2
CVE-2024-50401

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver

7.2
CVE-2024-50400

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver

7.2
CVE-2024-50399

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver

7.2
CVE-2024-50398

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver

8.8
CVE-2024-50397

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver

8.8
CVE-2024-50396

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver

8.8
CVE-2024-50395

An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If

9.8
CVE-2024-48862

A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow rem

7.8
CVE-2024-48861

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerabil

9.8
CVE-2024-48860

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerabil

7.5
CVE-2024-38647

An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerabi

6.0
CVE-2024-38646

An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If e

6.5
CVE-2024-38645

A server-side request forgery (SSRF) vulnerability has been reported to affect Notes Station 3. If exploited, the vulner

8.8
CVE-2024-38644

An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could

9.8
CVE-2024-38643

A missing authentication for critical function vulnerability has been reported to affect Notes Station 3. If exploited,

6.5
CVE-2024-37050

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

6.5
CVE-2024-37049

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

4.9
CVE-2024-37048

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploite

6.5
CVE-2024-37047

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

4.9
CVE-2024-37046

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul

4.9
CVE-2024-37045

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploite

7.2
CVE-2024-37044

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

4.9
CVE-2024-37043

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul

4.9
CVE-2024-37042

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploite

7.2
CVE-2024-37041

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

6.3
CVE-2024-32770

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability co

6.3
CVE-2024-32769

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability co

6.3
CVE-2024-32768

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability co

6.3
CVE-2024-32767

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability co

N/A
CVE-2024-10863

: Insufficient Logging vulnerability in OpenText Secure Content Manager on Windows allows Audit Log Manipulation.This is

8.8
CVE-2023-24467

Possible Command Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000.

7.5
CVE-2023-24466

Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200

7.6
CVE-2022-26324

Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000.

8.6
CVE-2021-38135

Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000.

6.1
CVE-2021-38134

Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.5.0000.

6.1
CVE-2021-38119

Possible Reflected Cross-Site Scripting (XSS) Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4

5.5
CVE-2021-38118

Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

8.8
CVE-2021-38117

Possible Command injection Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.