2024 CVEs (page 199)
Page 199 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-39418 | Medium | 5.4 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Secur… |
CVE-2024-39417 | Medium | 4.3 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Secur… |
CVE-2024-39416 | Medium | 4.3 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Secur… |
CVE-2024-39415 | Medium | 4.3 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Secur… |
CVE-2024-39414 | Medium | 4.3 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Secur… |
CVE-2024-39413 | Medium | 4.3 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Secur… |
CVE-2024-39412 | Medium | 4.3 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Secur… |
CVE-2024-39411 | Medium | 4.3 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Secur… |
CVE-2024-39410 | Medium | 4.3 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could allow a… |
CVE-2024-39409 | Medium | 4.3 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could allow a… |
CVE-2024-39408 | Medium | 4.3 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could allow a… |
CVE-2024-39407 | Medium | 4.3 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Secur… |
CVE-2024-39406 | Medium | 6.8 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Pat… |
CVE-2024-39405 | Medium | 4.3 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Secur… |
CVE-2024-39404 | Medium | 4.3 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Secur… |
CVE-2024-39403 | High | 7.6 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abus… |
CVE-2024-39402 | High | 8.4 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command… |
CVE-2024-39401 | High | 8.4 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command… |
CVE-2024-39400 | High | 8.1 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerabi… |
CVE-2024-39399 | High | 7.7 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Pat… |
CVE-2024-39398 | High | 7.4 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Restriction of Excessive Authentication Attempts vulnera… |
CVE-2024-39397 | Critical | 9.0 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability tha… |
CVE-2024-6532 | Medium | 6.4 | 2024-08-14 | The Sheet to Table Live Sync for Google Sheet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's STWT_Sheet_Table shortcode in… |
CVE-2024-38483 | Medium | 5.8 | 2024-08-14 | Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentia… |
CVE-2024-4389 | High | 8.8 | 2024-08-14 | The Slider and Carousel slider by Depicter plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadFile f… |
CVE-2024-41864 | High | 7.8 | 2024-08-14 | Substance3D - Designer versions 13.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co… |
CVE-2024-41863 | Medium | 5.5 | 2024-08-14 | Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attack… |
CVE-2024-41862 | Medium | 5.5 | 2024-08-14 | Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attack… |
CVE-2024-41861 | Medium | 5.5 | 2024-08-14 | Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attack… |
CVE-2024-41860 | Medium | 5.5 | 2024-08-14 | Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attack… |
CVE-2024-41858 | High | 7.8 | 2024-08-14 | InCopy versions 18.5.2, 19.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the c… |
CVE-2024-7732 | Critical | 9.8 | 2024-08-14 | Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands t… |
CVE-2024-7731 | Critical | 9.8 | 2024-08-14 | Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands t… |
CVE-2024-7588 | Medium | 6.4 | 2024-08-14 | The Gutenberg Blocks, Page Builder – ComboBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Accordion block in all vers… |
CVE-2024-7729 | High | 7.5 | 2024-08-14 | The CAYIN Technology CMS lacks proper access control, allowing unauthenticated remote attackers to download arbitrary CGI files. |
CVE-2024-7728 | High | 7.2 | 2024-08-14 | The specific CGI of the CAYIN Technology CMS does not properly validate user input, allowing a remote attacker with administrator privileges to inject OS comma… |
CVE-2024-38653 | High | 7.5 | 2024-08-14 | XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server. |
CVE-2024-38652 | Critical | 9.1 | 2024-08-14 | Path traversal in the skin management component of Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to achieve denial of service via arbitrary f… |
CVE-2024-37399 | High | 7.5 | 2024-08-14 | A NULL pointer dereference in WLAvalancheService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting in a DoS. |
CVE-2024-37373 | High | 7.2 | 2024-08-14 | Improper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote authenticated attacker with admin rights to achieve RCE. |
CVE-2024-36136 | High | 7.5 | 2024-08-14 | An off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting in a DoS. |
CVE-2024-20083 | Critical | 9.8 | 2024-08-14 | In venc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2024-20082 | Critical | 9.8 | 2024-08-14 | In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote code execution with no additional execution privileges… |
CVE-2024-7754 | Medium | 6.3 | 2024-08-14 | A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. This issue affects some unknown processing of… |
CVE-2024-7753 | Medium | 5.3 | 2024-08-14 | A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code… |
CVE-2024-7752 | Low | 3.5 | 2024-08-14 | A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been classified as problematic. This affects an unknown part of the f… |
CVE-2024-38163 | High | 7.8 | 2024-08-14 | Windows Update Stack Elevation of Privilege Vulnerability |
CVE-2024-7751 | Medium | 6.3 | 2024-08-13 | A vulnerability was found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. Affected by this issue is some unknown functional… |
CVE-2024-7750 | Medium | 6.3 | 2024-08-13 | A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2024-28986 | Critical | 9.8 | 2024-08-13 | SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker… |
CVE-2024-7749 | Low | 3.5 | 2024-08-13 | A vulnerability, which was classified as problematic, was found in SourceCodester Accounts Manager App 1.0. Affected is an unknown function of the file /endpoi… |
CVE-2024-7748 | Medium | 6.3 | 2024-08-13 | A vulnerability, which was classified as critical, has been found in SourceCodester Accounts Manager App 1.0. This issue affects some unknown processing of the… |
CVE-2024-7743 | High | 7.3 | 2024-08-13 | A vulnerability was found in wanglongcn ltcms 1.0.20. It has been declared as critical. Affected by this vulnerability is the function downloadUrl of the file… |
CVE-2024-7742 | High | 7.3 | 2024-08-13 | A vulnerability was found in wanglongcn ltcms 1.0.20. It has been classified as critical. Affected is the function multiDownload of the file /api/file/multiDow… |
CVE-2024-7741 | Medium | 5.3 | 2024-08-13 | A vulnerability was found in wanglongcn ltcms 1.0.20 and classified as critical. This issue affects the function downloadFile of the file /api/file/downloadfil… |
CVE-2024-7740 | High | 7.3 | 2024-08-13 | A vulnerability has been found in wanglongcn ltcms 1.0.20 and classified as critical. This vulnerability affects the function download of the file /api/test/do… |
CVE-2024-42368 | Medium | 6.5 | 2024-08-13 | OpenTelemetry, also known as OTel, is a vendor-neutral open source Observability framework for instrumenting, generating, collecting, and exporting telemetry d… |
CVE-2024-7739 | Medium | 4.3 | 2024-08-13 | A vulnerability, which was classified as problematic, was found in yzane vscode-markdown-pdf 1.5.0. This affects an unknown part. The manipulation leads to cro… |
CVE-2024-7738 | Low | 3.3 | 2024-08-13 | A vulnerability, which was classified as problematic, has been found in yzane vscode-markdown-pdf 1.5.0. Affected by this issue is some unknown functionality o… |
CVE-2024-7593 | Critical | 9.8 | 2024-08-13 | Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass a… |
CVE-2024-7570 | High | 8.3 | 2024-08-13 | Improper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM Versions 2023.4 and earlier allows a remote attacker in a MITM position to craft a… |
CVE-2024-7569 | Critical | 9.6 | 2024-08-13 | An information disclosure vulnerability in Ivanti ITSM on-prem and Neurons for ITSM versions 2023.4 and earlier allows an unauthenticated attacker to obtain th… |
CVE-2024-7733 | Low | 3.5 | 2024-08-13 | A vulnerability, which was classified as problematic, was found in FastCMS up to 0.1.5. Affected is an unknown function of the component New Article Category P… |
CVE-2024-7567 | | 2024-08-13 | A denial-of-service vulnerability exists via the CIP/Modbus port in the Rockwell Automation Micro850/870 (2080 -L50E/2080 -L70E). If exploited, the CIP/Modbus… | |
CVE-2024-6079 | | 2024-08-13 | A vulnerability exists in the Rockwell Automation Emulate3D™, which could be leveraged to execute a DLL Hijacking attack. The application loads shared librarie… | |
CVE-2024-38223 | Medium | 6.8 | 2024-08-13 | Windows Initial Machine Configuration Elevation of Privilege Vulnerability |
CVE-2024-38215 | High | 7.8 | 2024-08-13 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2024-38214 | Medium | 6.5 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
CVE-2024-38213 | Medium | 6.5 | 2024-08-13 | Windows Mark of the Web Security Feature Bypass Vulnerability |
CVE-2024-38211 | High | 8.2 | 2024-08-13 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2024-38201 | High | 7.0 | 2024-08-13 | Azure Stack Hub Elevation of Privilege Vulnerability |
CVE-2024-38199 | Critical | 9.8 | 2024-08-13 | Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability |
CVE-2024-38198 | High | 7.5 | 2024-08-13 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2024-38197 | Medium | 6.5 | 2024-08-13 | Microsoft Teams for iOS Spoofing Vulnerability |
CVE-2024-38196 | High | 7.8 | 2024-08-13 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-38195 | High | 7.8 | 2024-08-13 | Azure CycleCloud Remote Code Execution Vulnerability |
CVE-2024-38193 | High | 7.8 | 2024-08-13 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2024-38191 | High | 7.8 | 2024-08-13 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38189 | High | 8.8 | 2024-08-13 | Microsoft Project Remote Code Execution Vulnerability |
CVE-2024-38187 | High | 7.8 | 2024-08-13 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38186 | High | 7.8 | 2024-08-13 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38185 | High | 7.8 | 2024-08-13 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38184 | High | 7.8 | 2024-08-13 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38180 | High | 8.8 | 2024-08-13 | Windows SmartScreen Security Feature Bypass Vulnerability |
CVE-2024-38178 | High | 7.5 | 2024-08-13 | Scripting Engine Memory Corruption Vulnerability |
CVE-2024-38177 | High | 7.8 | 2024-08-13 | Windows App Installer Spoofing Vulnerability |
CVE-2024-38173 | Medium | 6.7 | 2024-08-13 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2024-38172 | High | 7.8 | 2024-08-13 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-38171 | High | 7.8 | 2024-08-13 | Microsoft PowerPoint Remote Code Execution Vulnerability |
CVE-2024-38170 | High | 7.1 | 2024-08-13 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-38169 | High | 7.8 | 2024-08-13 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2024-38168 | High | 7.5 | 2024-08-13 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2024-38167 | Medium | 6.5 | 2024-08-13 | .NET and Visual Studio Information Disclosure Vulnerability |
CVE-2024-38165 | Medium | 6.5 | 2024-08-13 | Windows Compressed Folder Tampering Vulnerability |
CVE-2024-38162 | High | 7.8 | 2024-08-13 | Azure Connected Machine Agent Elevation of Privilege Vulnerability |
CVE-2024-38161 | Medium | 6.8 | 2024-08-13 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-38160 | Critical | 9.1 | 2024-08-13 | Windows Network Virtualization Remote Code Execution Vulnerability |
CVE-2024-38159 | Critical | 9.1 | 2024-08-13 | Windows Network Virtualization Remote Code Execution Vulnerability |
CVE-2024-38158 | High | 7.0 | 2024-08-13 | Azure IoT SDK Remote Code Execution Vulnerability |
CVE-2024-38157 | High | 7.0 | 2024-08-13 | Azure IoT SDK Remote Code Execution Vulnerability |