2024 CVEs (page 200)
Page 200 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-38197 | Medium | 6.5 | 2024-08-13 | Microsoft Teams for iOS Spoofing Vulnerability |
CVE-2024-38196 | High | 7.8 | 2024-08-13 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-38195 | High | 7.8 | 2024-08-13 | Azure CycleCloud Remote Code Execution Vulnerability |
CVE-2024-38193 | High | 7.8 | 2024-08-13 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2024-38191 | High | 7.8 | 2024-08-13 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38189 | High | 8.8 | 2024-08-13 | Microsoft Project Remote Code Execution Vulnerability |
CVE-2024-38187 | High | 7.8 | 2024-08-13 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38186 | High | 7.8 | 2024-08-13 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38185 | High | 7.8 | 2024-08-13 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38184 | High | 7.8 | 2024-08-13 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38180 | High | 8.8 | 2024-08-13 | Windows SmartScreen Security Feature Bypass Vulnerability |
CVE-2024-38178 | High | 7.5 | 2024-08-13 | Scripting Engine Memory Corruption Vulnerability |
CVE-2024-38177 | High | 7.8 | 2024-08-13 | Windows App Installer Spoofing Vulnerability |
CVE-2024-38173 | Medium | 6.7 | 2024-08-13 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2024-38172 | High | 7.8 | 2024-08-13 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-38171 | High | 7.8 | 2024-08-13 | Microsoft PowerPoint Remote Code Execution Vulnerability |
CVE-2024-38170 | High | 7.1 | 2024-08-13 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-38169 | High | 7.8 | 2024-08-13 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2024-38168 | High | 7.5 | 2024-08-13 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2024-38167 | Medium | 6.5 | 2024-08-13 | .NET and Visual Studio Information Disclosure Vulnerability |
CVE-2024-38165 | Medium | 6.5 | 2024-08-13 | Windows Compressed Folder Tampering Vulnerability |
CVE-2024-38162 | High | 7.8 | 2024-08-13 | Azure Connected Machine Agent Elevation of Privilege Vulnerability |
CVE-2024-38161 | Medium | 6.8 | 2024-08-13 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-38160 | Critical | 9.1 | 2024-08-13 | Windows Network Virtualization Remote Code Execution Vulnerability |
CVE-2024-38159 | Critical | 9.1 | 2024-08-13 | Windows Network Virtualization Remote Code Execution Vulnerability |
CVE-2024-38158 | High | 7.0 | 2024-08-13 | Azure IoT SDK Remote Code Execution Vulnerability |
CVE-2024-38157 | High | 7.0 | 2024-08-13 | Azure IoT SDK Remote Code Execution Vulnerability |
CVE-2024-38155 | Medium | 5.5 | 2024-08-13 | Security Center Broker Information Disclosure Vulnerability |
CVE-2024-38154 | High | 8.8 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38153 | High | 7.8 | 2024-08-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-38152 | High | 7.8 | 2024-08-13 | Windows OLE Remote Code Execution Vulnerability |
CVE-2024-38151 | Medium | 5.5 | 2024-08-13 | Windows Kernel Information Disclosure Vulnerability |
CVE-2024-38150 | High | 7.8 | 2024-08-13 | Windows DWM Core Library Elevation of Privilege Vulnerability |
CVE-2024-38148 | High | 7.5 | 2024-08-13 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2024-38147 | High | 7.8 | 2024-08-13 | Microsoft DWM Core Library Elevation of Privilege Vulnerability |
CVE-2024-38146 | High | 7.5 | 2024-08-13 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38145 | High | 7.5 | 2024-08-13 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38144 | High | 8.8 | 2024-08-13 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38143 | Medium | 4.2 | 2024-08-13 | Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability |
CVE-2024-38142 | High | 7.8 | 2024-08-13 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
CVE-2024-38141 | High | 7.8 | 2024-08-13 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2024-38140 | Critical | 9.8 | 2024-08-13 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
CVE-2024-38138 | High | 7.5 | 2024-08-13 | Windows Deployment Services Remote Code Execution Vulnerability |
CVE-2024-38137 | High | 7.0 | 2024-08-13 | Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability |
CVE-2024-38136 | High | 7.0 | 2024-08-13 | Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability |
CVE-2024-38135 | High | 7.8 | 2024-08-13 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
CVE-2024-38134 | High | 7.8 | 2024-08-13 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38133 | High | 7.8 | 2024-08-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-38132 | High | 7.5 | 2024-08-13 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2024-38131 | High | 8.8 | 2024-08-13 | Clipboard Virtual Channel Extension Remote Code Execution Vulnerability |
CVE-2024-38130 | High | 8.8 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38128 | High | 8.8 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38127 | High | 7.8 | 2024-08-13 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2024-38126 | High | 7.5 | 2024-08-13 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2024-38125 | High | 7.8 | 2024-08-13 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38123 | Medium | 4.4 | 2024-08-13 | Windows Bluetooth Driver Information Disclosure Vulnerability |
CVE-2024-38122 | Medium | 5.5 | 2024-08-13 | Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability |
CVE-2024-38121 | High | 8.8 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38120 | High | 8.8 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38118 | Medium | 5.5 | 2024-08-13 | Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability |
CVE-2024-38117 | High | 7.8 | 2024-08-13 | NTFS Elevation of Privilege Vulnerability |
CVE-2024-38116 | High | 8.8 | 2024-08-13 | Windows IP Routing Management Snapin Remote Code Execution Vulnerability |
CVE-2024-38115 | High | 8.8 | 2024-08-13 | Windows IP Routing Management Snapin Remote Code Execution Vulnerability |
CVE-2024-38114 | High | 8.8 | 2024-08-13 | Windows IP Routing Management Snapin Remote Code Execution Vulnerability |
CVE-2024-38109 | Critical | 9.1 | 2024-08-13 | An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network. |
CVE-2024-38108 | Critical | 9.3 | 2024-08-13 | Azure Stack Hub Spoofing Vulnerability |
CVE-2024-38107 | High | 7.8 | 2024-08-13 | Windows Power Dependency Coordinator Elevation of Privilege Vulnerability |
CVE-2024-38106 | High | 7.0 | 2024-08-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-38098 | High | 7.8 | 2024-08-13 | Azure Connected Machine Agent Elevation of Privilege Vulnerability |
CVE-2024-38084 | High | 7.8 | 2024-08-13 | Microsoft OfficePlus Elevation of Privilege Vulnerability |
CVE-2024-38063 | Critical | 9.8 | 2024-08-13 | Windows TCP/IP Remote Code Execution Vulnerability |
CVE-2024-37968 | High | 7.5 | 2024-08-13 | Windows DNS Spoofing Vulnerability |
CVE-2024-29995 | High | 8.1 | 2024-08-13 | Windows Kerberos Elevation of Privilege Vulnerability |
CVE-2024-7113 | | 2024-08-13 | If exploited, this vulnerability could cause a SuiteLink server to consume excessive system resources and slow down processing of Data I/O for the duration of… | |
CVE-2024-6619 | | 2024-08-13 | In Ocean Data Systems Dream Report, an incorrect permission vulnerability could allow a local unprivileged attacker to escalate their privileges and could caus… | |
CVE-2024-6618 | | 2024-08-13 | In Ocean Data Systems Dream Report, a path traversal vulnerability could allow an attacker to perform remote code execution through the injection of a maliciou… | |
CVE-2024-41711 | Medium | 6.8 | 2024-08-13 | A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could a… |
CVE-2024-41614 | Medium | 4.8 | 2024-08-13 | symphonycms <=2.7.10 is vulnerable to Cross Site Scripting (XSS) in the Comment component for articles. |
CVE-2024-41613 | Medium | 5.4 | 2024-08-13 | A Cross Site Scripting (XSS) vulnerability in Symphony CMS 2.7.10 allows remote attackers to inject arbitrary web script or HTML by editing note. |
CVE-2024-37015 | High | 7.4 | 2024-08-13 | An issue was discovered in Ada Web Server 20.0. When configured to use SSL (which is not the default setting), the SSL/TLS used to establish connections to ext… |
CVE-2024-36446 | High | 8.8 | 2024-08-13 | The provisioning manager component of Mitel MiVoice MX-ONE through 7.6 SP1 could allow an authenticated attacker to conduct an authentication bypass attack due… |
CVE-2024-21981 | Medium | 5.7 | 2024-08-13 | Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution privilege in ASP to ex… |
CVE-2024-7746 | Critical | 9.8 | 2024-08-13 | Use of Default Credentials vulnerability in Tananaev Solutions Traccar Server on Administrator Panel modules allows Authentication Abuse.This issue affects the… |
CVE-2024-36505 | Medium | 5.1 | 2024-08-13 | An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker w… |
CVE-2024-21757 | Medium | 6.1 | 2024-08-13 | A unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.4.0 through 7.4.1, as well as… |
CVE-2024-6384 | Medium | 5.3 | 2024-08-13 | "Hot" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifier. This issue affects MongoDB Enterpri… |
CVE-2024-6788 | High | 8.6 | 2024-08-13 | A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileg… |
CVE-2024-42740 | Medium | 6.8 | 2024-08-13 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setLedCfg. Authenticated Attackers… |
CVE-2024-42739 | High | 8.8 | 2024-08-13 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setAccessDeviceCfg. Authenticated A… |
CVE-2024-42738 | High | 8.8 | 2024-08-13 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setDmzCfg. Authenticated Attackers… |
CVE-2024-42737 | High | 8.8 | 2024-08-13 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in delBlacklist. Authenticated Attacke… |
CVE-2024-42736 | High | 7.8 | 2024-08-13 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in addBlacklist. Authenticated Attacke… |
CVE-2024-41623 | Critical | 9.8 | 2024-08-13 | An issue in D3D Security D3D IP Camera (D8801) v.V9.1.17.1.4-20180428 allows a local attacker to execute arbitrary code via a crafted payload |
CVE-2024-5849 | High | 7.1 | 2024-08-13 | An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device once. |
CVE-2024-3913 | Medium | 5.9 | 2024-08-13 | An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable for short time after system startup. |
CVE-2024-38502 | High | 7.1 | 2024-08-13 | An unauthenticated remote attacker may use stored XSS vulnerability to obtain information from a user or reboot the affected device once. |
CVE-2024-38501 | Medium | 6.1 | 2024-08-13 | An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain low-privileged access on t… |
CVE-2024-43165 | Medium | 6.5 | 2024-08-13 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rashid87 WPSection allows PHP Local File Inclusion.This issue a… |
CVE-2024-43160 | Critical | 10.0 | 2024-08-13 | Unrestricted Upload of File with Dangerous Type vulnerability in BerqWP allows Code Injection.This issue affects BerqWP: from n/a through 1.7.6. |
CVE-2024-43153 | Critical | 9.8 | 2024-08-13 | Incorrect Privilege Assignment vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: from n/a through <= 5.4.10. |