2024 CVEs (page 151)
Page 151 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-45144 | High | 7.8 | 2024-10-09 | Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2024-45143 | High | 7.8 | 2024-10-09 | Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… |
CVE-2024-45142 | High | 7.8 | 2024-10-09 | Substance3D - Stager versions 3.0.3 and earlier are affected by a Write-what-where Condition vulnerability that could allow an attacker to execute arbitrary co… |
CVE-2024-45141 | High | 7.8 | 2024-10-09 | Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2024-45140 | High | 7.8 | 2024-10-09 | Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2024-45139 | High | 7.8 | 2024-10-09 | Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… |
CVE-2024-45138 | High | 7.8 | 2024-10-09 | Substance3D - Stager versions 3.0.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of… |
CVE-2024-9680 | Critical | 9.8 | 2024-10-09 | An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulner… |
CVE-2024-45720 | High | 8.2 | 2024-10-09 | On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables (e.g., svn.exe, etc.) may lead to unexpe… |
CVE-2024-28168 | High | 7.5 | 2024-10-09 | Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. User… |
CVE-2024-47334 | High | 7.6 | 2024-10-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zoho Flow Zoho Flow zoho-flow allows SQL Injection.This i… |
CVE-2024-9575 | | 2024-10-09 | Local File Inclusion vulnerability in pretix Widget WordPress plugin pretix-widget on Windows allows PHP Local File Inclusion. This issue affects pretix Widget… | |
CVE-2024-47420 | Medium | 5.5 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2024-47419 | Medium | 5.5 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2024-47418 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-47417 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the con… |
CVE-2024-47416 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in th… |
CVE-2024-47415 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-47414 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-47413 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-47412 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-47411 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in t… |
CVE-2024-47410 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the co… |
CVE-2024-45145 | Medium | 5.5 | 2024-10-09 | Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memor… |
CVE-2024-45150 | High | 7.8 | 2024-10-09 | Dimension versions 4.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the c… |
CVE-2024-45146 | High | 7.8 | 2024-10-09 | Dimension versions 4.0.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current… |
CVE-2024-20787 | Medium | 5.5 | 2024-10-09 | Substance3D - Painter versions 10.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2024-9451 | Medium | 6.4 | 2024-10-09 | The Embed PDF Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'height' and 'width' parameters in all versions up to, and inclu… |
CVE-2024-9449 | Medium | 6.4 | 2024-10-09 | The Auto iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' parameter in all versions up to, and including, 1.7 due to insu… |
CVE-2024-39586 | Low | 2.9 | 2024-10-09 | Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially e… |
CVE-2024-39440 | Medium | 6.2 | 2024-10-09 | In DRM service, there is a possible system crash due to null pointer dereference. This could lead to local denial of service with System execution privileges n… |
CVE-2024-39439 | Medium | 6.2 | 2024-10-09 | In DRM service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2024-39438 | Medium | 6.5 | 2024-10-09 | In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with Syste… |
CVE-2024-39437 | Medium | 6.5 | 2024-10-09 | In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with Syste… |
CVE-2024-39436 | Medium | 6.5 | 2024-10-09 | In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with Syste… |
CVE-2024-5968 | Medium | 4.8 | 2024-10-09 | The Photo Gallery by 10Web WordPress plugin before 1.8.28 does not properly sanitise and escape some of its Gallery settings, which could allow high privilege… |
CVE-2024-47191 | High | 7.1 | 2024-10-09 | pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishand… |
CVE-2024-45160 | Critical | 9.1 | 2024-10-09 | Incorrect credential validation in LemonLDAP::NG 2.18.x and 2.19.x before 2.19.2 allows attackers to bypass OAuth2 client authentication via an empty client_pa… |
CVE-2024-42934 | Medium | 5.0 | 2024-10-09 | OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low… |
CVE-2024-32608 | Critical | 9.8 | 2024-10-09 | HDF5 library through 1.14.3 has memory corruption in H5A__close resulting in the corruption of the instruction pointer and causing denial of service or potenti… |
CVE-2024-45179 | High | 7.2 | 2024-10-09 | An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to insufficient input validation, the C-MOR web interface is vulnerabl… |
CVE-2024-35288 | High | 7.8 | 2024-10-09 | Nitro PDF Pro before 13.70.8.82 and 14.x before 14.26.1.0 allows Local Privilege Escalation in the MSI Installer because custom actions occur unsafely in repai… |
CVE-2024-7963 | Medium | 6.4 | 2024-10-09 | The CMSMasters Content Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's multiple shortcodes in all versions up to, a… |
CVE-2024-9603 | High | 8.8 | 2024-10-08 | Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2024-9602 | High | 8.8 | 2024-10-08 | Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chro… |
CVE-2024-9412 | | 2024-10-08 | An improper authorization vulnerability exists in the Rockwell Automation affected products that could allow an unauthorized user to sign in. While removal of… | |
CVE-2024-36814 | Medium | 4.9 | 2024-10-08 | An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operat… |
CVE-2024-27457 | Low | 2.5 | 2024-10-08 | Improper check for unusual or exceptional conditions in Intel(R) TDX Module firmware before version 1.5.06 may allow a privileged user to potentially enable in… |
CVE-2024-47823 | Critical | 9.8 | 2024-10-08 | Livewire is a full-stack framework for Laravel that allows for dynamic UI components without leaving PHP. In livewire/livewire prior to `2.12.7` and `v3.5.2`… |
CVE-2024-47822 | Medium | 4.2 | 2024-10-08 | Directus is a real-time API and App dashboard for managing SQL database content. Access tokens from query strings are not redacted and are potentially exposed… |
CVE-2024-47780 | Low | 3.1 | 2024-10-08 | TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree without having access if the mounts pointe… |
CVE-2024-47773 | High | 8.2 | 2024-10-08 | Discourse is an open source platform for community discussion. An attacker can make several XHR requests until the cache is poisoned with a response without an… |
CVE-2024-46539 | High | 8.2 | 2024-10-08 | Insecure permissions in the Bluetooth Low Energy (BLE) component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a Denial of Service (… |
CVE-2024-46410 | Medium | 4.8 | 2024-10-08 | PublicCMS V4.0.202406.d was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted script to the Category Managment feature |
CVE-2024-43616 | High | 7.8 | 2024-10-08 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-43615 | High | 7.1 | 2024-10-08 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability |
CVE-2024-43614 | Medium | 5.5 | 2024-10-08 | Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally. |
CVE-2024-43612 | Medium | 6.9 | 2024-10-08 | Power BI Report Server Spoofing Vulnerability |
CVE-2024-43611 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-43609 | Medium | 6.5 | 2024-10-08 | Microsoft Office Spoofing Vulnerability |
CVE-2024-43608 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-43607 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-43604 | Medium | 5.7 | 2024-10-08 | Outlook for Android Elevation of Privilege Vulnerability |
CVE-2024-43603 | Medium | 5.5 | 2024-10-08 | Visual Studio Collector Service Denial of Service Vulnerability |
CVE-2024-43601 | High | 7.8 | 2024-10-08 | Visual Studio Code for Linux Remote Code Execution Vulnerability |
CVE-2024-43599 | High | 8.8 | 2024-10-08 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2024-43593 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-43592 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-43591 | High | 8.7 | 2024-10-08 | Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability |
CVE-2024-43590 | High | 7.8 | 2024-10-08 | Visual C++ Redistributable Installer Elevation of Privilege Vulnerability |
CVE-2024-43589 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-43585 | Medium | 5.5 | 2024-10-08 | Code Integrity Guard Security Feature Bypass Vulnerability |
CVE-2024-43584 | High | 7.7 | 2024-10-08 | Windows Scripting Engine Security Feature Bypass Vulnerability |
CVE-2024-43583 | High | 7.8 | 2024-10-08 | Winlogon Elevation of Privilege Vulnerability |
CVE-2024-43582 | High | 8.1 | 2024-10-08 | Remote Desktop Protocol Server Remote Code Execution Vulnerability |
CVE-2024-43581 | High | 7.1 | 2024-10-08 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability |
CVE-2024-43576 | High | 7.8 | 2024-10-08 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-43575 | High | 7.5 | 2024-10-08 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-43574 | High | 8.3 | 2024-10-08 | Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability |
CVE-2024-43573 | Medium | 6.5 | 2024-10-08 | Windows MSHTML Platform Spoofing Vulnerability |
CVE-2024-43572 | High | 7.8 | 2024-10-08 | Microsoft Management Console Remote Code Execution Vulnerability |
CVE-2024-43571 | Medium | 5.6 | 2024-10-08 | Sudo for Windows Spoofing Vulnerability |
CVE-2024-43570 | Medium | 6.4 | 2024-10-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-43567 | High | 7.5 | 2024-10-08 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-43565 | High | 7.5 | 2024-10-08 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2024-43564 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-43563 | High | 7.8 | 2024-10-08 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2024-43562 | High | 7.5 | 2024-10-08 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2024-43561 | Medium | 6.5 | 2024-10-08 | Windows Mobile Broadband Driver Denial of Service Vulnerability |
CVE-2024-43560 | High | 7.8 | 2024-10-08 | Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability |
CVE-2024-43559 | Medium | 6.5 | 2024-10-08 | Windows Mobile Broadband Driver Denial of Service Vulnerability |
CVE-2024-43558 | Medium | 6.5 | 2024-10-08 | Windows Mobile Broadband Driver Denial of Service Vulnerability |
CVE-2024-43557 | Medium | 6.5 | 2024-10-08 | Windows Mobile Broadband Driver Denial of Service Vulnerability |
CVE-2024-43556 | High | 7.8 | 2024-10-08 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-43555 | Medium | 6.5 | 2024-10-08 | Windows Mobile Broadband Driver Denial of Service Vulnerability |
CVE-2024-43554 | Medium | 5.5 | 2024-10-08 | Windows Kernel-Mode Driver Information Disclosure Vulnerability |
CVE-2024-43553 | High | 7.4 | 2024-10-08 | NT OS Kernel Elevation of Privilege Vulnerability |
CVE-2024-43552 | High | 7.3 | 2024-10-08 | Windows Shell Remote Code Execution Vulnerability |
CVE-2024-43551 | High | 7.8 | 2024-10-08 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2024-43550 | High | 7.4 | 2024-10-08 | Windows Secure Channel Spoofing Vulnerability |