2024 CVEs (page 152)
Page 152 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-43549 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-43547 | Medium | 6.5 | 2024-10-08 | Windows Kerberos Information Disclosure Vulnerability |
CVE-2024-43546 | Medium | 5.6 | 2024-10-08 | Windows Cryptographic Information Disclosure Vulnerability |
CVE-2024-43545 | High | 7.5 | 2024-10-08 | Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability |
CVE-2024-43544 | High | 7.5 | 2024-10-08 | Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability |
CVE-2024-43543 | Medium | 6.8 | 2024-10-08 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-43542 | Medium | 6.5 | 2024-10-08 | Windows Mobile Broadband Driver Denial of Service Vulnerability |
CVE-2024-43541 | High | 7.5 | 2024-10-08 | Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability |
CVE-2024-43540 | Medium | 6.5 | 2024-10-08 | Windows Mobile Broadband Driver Denial of Service Vulnerability |
CVE-2024-43538 | Medium | 6.5 | 2024-10-08 | Windows Mobile Broadband Driver Denial of Service Vulnerability |
CVE-2024-43537 | Medium | 6.5 | 2024-10-08 | Windows Mobile Broadband Driver Denial of Service Vulnerability |
CVE-2024-43536 | Medium | 6.8 | 2024-10-08 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-43535 | High | 7.0 | 2024-10-08 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-43534 | Medium | 6.5 | 2024-10-08 | Windows Graphics Component Information Disclosure Vulnerability |
CVE-2024-43533 | High | 8.8 | 2024-10-08 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2024-43532 | High | 8.8 | 2024-10-08 | Remote Registry Service Elevation of Privilege Vulnerability |
CVE-2024-43529 | High | 7.3 | 2024-10-08 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2024-43528 | High | 7.8 | 2024-10-08 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
CVE-2024-43527 | High | 7.8 | 2024-10-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-43526 | Medium | 6.8 | 2024-10-08 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-43525 | Medium | 6.8 | 2024-10-08 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-43524 | Medium | 6.8 | 2024-10-08 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-43523 | Medium | 6.8 | 2024-10-08 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-43522 | High | 7.0 | 2024-10-08 | Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability |
CVE-2024-43521 | High | 7.5 | 2024-10-08 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-43520 | Medium | 5.0 | 2024-10-08 | Windows Kernel Denial of Service Vulnerability |
CVE-2024-43519 | High | 8.8 | 2024-10-08 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-43518 | High | 8.8 | 2024-10-08 | Windows Telephony Server Remote Code Execution Vulnerability |
CVE-2024-43517 | High | 8.8 | 2024-10-08 | Microsoft ActiveX Data Objects Remote Code Execution Vulnerability |
CVE-2024-43516 | High | 7.8 | 2024-10-08 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
CVE-2024-43515 | High | 7.5 | 2024-10-08 | Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability |
CVE-2024-43514 | High | 7.8 | 2024-10-08 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
CVE-2024-43513 | Medium | 6.4 | 2024-10-08 | BitLocker Security Feature Bypass Vulnerability |
CVE-2024-43512 | Medium | 6.5 | 2024-10-08 | Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
CVE-2024-43511 | High | 7.0 | 2024-10-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-43509 | High | 7.8 | 2024-10-08 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-43508 | Medium | 5.5 | 2024-10-08 | Windows Graphics Component Information Disclosure Vulnerability |
CVE-2024-43506 | High | 7.5 | 2024-10-08 | BranchCache Denial of Service Vulnerability |
CVE-2024-43505 | High | 7.8 | 2024-10-08 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2024-43504 | High | 7.8 | 2024-10-08 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-43503 | High | 7.8 | 2024-10-08 | Microsoft SharePoint Elevation of Privilege Vulnerability |
CVE-2024-43502 | High | 7.1 | 2024-10-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-43501 | High | 7.8 | 2024-10-08 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-43500 | Medium | 5.5 | 2024-10-08 | Windows Resilient File System (ReFS) Information Disclosure Vulnerability |
CVE-2024-43497 | High | 8.4 | 2024-10-08 | DeepSpeed Remote Code Execution Vulnerability |
CVE-2024-43488 | High | 8.8 | 2024-10-08 | Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution th… |
CVE-2024-43485 | High | 7.5 | 2024-10-08 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2024-43484 | High | 7.5 | 2024-10-08 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability |
CVE-2024-43483 | High | 7.5 | 2024-10-08 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability |
CVE-2024-43481 | Medium | 6.5 | 2024-10-08 | Power BI Report Server Spoofing Vulnerability |
CVE-2024-43480 | Medium | 6.6 | 2024-10-08 | Azure Service Fabric for Linux Remote Code Execution Vulnerability |
CVE-2024-43468 | Critical | 9.8 | 2024-10-08 | Microsoft Configuration Manager Remote Code Execution Vulnerability |
CVE-2024-43456 | Medium | 4.8 | 2024-10-08 | Windows Remote Desktop Services Tampering Vulnerability |
CVE-2024-43453 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38265 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38262 | High | 7.5 | 2024-10-08 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-38261 | High | 7.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38229 | High | 8.1 | 2024-10-08 | .NET and Visual Studio Remote Code Execution Vulnerability |
CVE-2024-38212 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38179 | High | 8.8 | 2024-10-08 | Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege Vulnerability |
CVE-2024-38149 | High | 7.5 | 2024-10-08 | BranchCache Denial of Service Vulnerability |
CVE-2024-38129 | High | 7.5 | 2024-10-08 | Windows Kerberos Elevation of Privilege Vulnerability |
CVE-2024-38124 | Critical | 9.0 | 2024-10-08 | Windows Netlogon Elevation of Privilege Vulnerability |
CVE-2024-38097 | High | 7.1 | 2024-10-08 | Azure Monitor Agent Elevation of Privilege Vulnerability |
CVE-2024-38029 | High | 7.5 | 2024-10-08 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability |
CVE-2024-37983 | Medium | 6.7 | 2024-10-08 | Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability |
CVE-2024-37982 | Medium | 6.7 | 2024-10-08 | Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability |
CVE-2024-37979 | Medium | 6.7 | 2024-10-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-37976 | Medium | 6.7 | 2024-10-08 | Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability |
CVE-2024-35215 | Medium | 6.2 | 2024-10-08 | NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow… |
CVE-2024-30092 | High | 8.0 | 2024-10-08 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2024-25885 | High | 7.5 | 2024-10-08 | An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service (ReDOS) via supplying a cra… |
CVE-2024-20659 | High | 7.1 | 2024-10-08 | Windows Hyper-V Security Feature Bypass Vulnerability |
CVE-2024-9622 | Medium | 5.3 | 2024-10-08 | A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling req… |
CVE-2024-9621 | Medium | 5.3 | 2024-10-08 | A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user configuring them to be hidden. Th… |
CVE-2024-9620 | Medium | 5.3 | 2024-10-08 | A flaw was found in Event-Driven Automation (EDA) in Ansible Automation Platform (AAP), which lacks encryption of sensitive information. An attacker with netwo… |
CVE-2024-9381 | High | 7.2 | 2024-10-08 | Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions. |
CVE-2024-9380 | High | 7.2 | 2024-10-08 | An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges… |
CVE-2024-9379 | Medium | 6.5 | 2024-10-08 | SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL sta… |
CVE-2024-9167 | High | 7.8 | 2024-10-08 | Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attacker to achieve local… |
CVE-2024-9124 | High | 7.5 | 2024-10-08 | A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 600T. If the device is overloaded with requests, it will become unavailable. The… |
CVE-2024-8626 | High | 7.5 | 2024-10-08 | Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability… |
CVE-2024-7612 | High | 8.8 | 2024-10-08 | Insecure permissions in Ivanti EPMM before 12.1.0.4 allow a local authenticated attacker to modify sensitive application components. |
CVE-2024-47011 | High | 7.5 | 2024-10-08 | Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information |
CVE-2024-47010 | High | 7.3 | 2024-10-08 | Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication. |
CVE-2024-47009 | High | 7.3 | 2024-10-08 | Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication. |
CVE-2024-47008 | High | 7.5 | 2024-10-08 | Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information. |
CVE-2024-47007 | High | 7.5 | 2024-10-08 | A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to cause a denial of ser… |
CVE-2024-45918 | Critical | 9.8 | 2024-10-08 | Fujian Kelixin Communication Command and Dispatch Platform <=7.6.6.4391 is vulnerable to SQL Injection via /client/get_gis_fence.php. |
CVE-2024-44349 | Critical | 9.8 | 2024-10-08 | A SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows unauthenticated attackers to execute arbitrary SQL commands via the username p… |
CVE-2024-3057 | Critical | 9.8 | 2024-10-08 | A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation. |
CVE-2024-8215 | High | 8.4 | 2024-10-08 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Payara Platform Payara Server (Admin Console modul… |
CVE-2024-47951 | Low | 3.5 | 2024-10-08 | In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings |
CVE-2024-47950 | Low | 3.5 | 2024-10-08 | In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings |
CVE-2024-47949 | Medium | 4.9 | 2024-10-08 | In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location |
CVE-2024-47948 | Medium | 4.9 | 2024-10-08 | In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups |
CVE-2024-47161 | Medium | 4.3 | 2024-10-08 | In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API |
CVE-2024-45231 | Medium | 5.3 | 2024-10-08 | An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password… |
CVE-2024-45230 | High | 7.5 | 2024-10-08 | An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a p… |
CVE-2024-45880 | High | 8.0 | 2024-10-08 | A command injection vulnerability exists in Motorola CX2L router v1.0.2 and below. The vulnerability is present in the SetStationSettings function. The system… |