2024 CVEs (page 231)
Page 231 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-40034 | High | 8.8 | 2024-07-09 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_deal.php?mudi=del |
CVE-2024-39899 | Medium | 5.3 | 2024-07-09 | PrivateBin is an online pastebin where the server has zero knowledge of pasted data. In v1.5, PrivateBin introduced the YOURLS server-side proxy. The idea was… |
CVE-2024-39897 | Medium | 4.3 | 2024-07-09 | zot is an OCI image registry. Prior to 2.1.0, the cache driver `GetBlob()` allows read access to any blob without access control check. If a Zot `accessControl… |
CVE-2024-39684 | High | 7.8 | 2024-07-09 | Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader… |
CVE-2024-38517 | High | 7.8 | 2024-07-09 | Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader… |
CVE-2024-37870 | Critical | 9.8 | 2024-07-09 | SQL injection vulnerability in processscore.php in Learning Management System Project In PHP With Source Code 1.0 allows attackers to execute arbitrary SQL com… |
CVE-2024-34123 | High | 7.0 | 2024-07-09 | Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacke… |
CVE-2024-6222 | High | 7.0 | 2024-07-09 | In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by pas… |
CVE-2024-40742 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the c… |
CVE-2024-40741 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the c… |
CVE-2024-40740 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40739 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40738 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40737 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40736 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40735 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40734 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40733 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40732 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40731 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40730 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40729 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40728 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40727 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40726 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-39698 | High | 7.5 | 2024-07-09 | electron-updater allows for automatic updates for Electron apps. The file `packages/electron-updater/src/windowsExecutableCodeSignatureVerifier.ts` implements… |
CVE-2024-38972 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-38971 | Medium | 5.4 | 2024-07-09 | vaeThink 1.0.2 is vulnerable to stored Cross Site Scripting (XSS) in the system backend. |
CVE-2024-38970 | Medium | 4.9 | 2024-07-09 | vaeThink 1.0.2 is vulnerable to Information Disclosure via the system backend,access management administrator function. |
CVE-2024-31957 | Medium | 6.2 | 2024-07-09 | A vulnerability was discovered in Samsung Mobile Processors Exynos 2200 and Exynos 2400 where they lack a check for the validation of native handles, which can… |
CVE-2024-28067 | Medium | 5.3 | 2024-07-09 | A vulnerability in Samsung Exynos Modem 5300 allows a Man-in-the-Middle (MITM) attacker to downgrade the security mode of packets going to the victim, enabling… |
CVE-2024-27362 | Medium | 4.4 | 2024-07-09 | A vulnerability was discovered in Samsung Mobile Processors Exynos 1280, Exynos 2200, Exynos 1330, Exynos 1380, and Exynos 2400 where they do not properly chec… |
CVE-2024-27360 | Medium | 6.0 | 2024-07-09 | A vulnerability was discovered in Samsung Mobile Processors Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, and Exyno… |
CVE-2024-27183 | Medium | 6.1 | 2024-07-09 | XSS vulnerability in DJ-HelpfulArticles component for Joomla. |
CVE-2024-6237 | Medium | 6.5 | 2024-07-09 | A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended sea… |
CVE-2024-5652 | Medium | 6.1 | 2024-07-09 | In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon co… |
CVE-2024-39171 | Critical | 9.8 | 2024-07-09 | Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statemen… |
CVE-2024-39118 | Medium | 5.5 | 2024-07-09 | Mommy Heather Advanced Backups up to v3.5.3 allows attackers to write arbitrary files via restoring a crafted back up. |
CVE-2024-38112 | High | 7.5 | 2024-07-09 | Windows MSHTML Platform Spoofing Vulnerability |
CVE-2024-38105 | Medium | 6.5 | 2024-07-09 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38104 | High | 8.8 | 2024-07-09 | Windows Fax Service Remote Code Execution Vulnerability |
CVE-2024-38102 | Medium | 6.5 | 2024-07-09 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38101 | Medium | 6.5 | 2024-07-09 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38100 | High | 7.8 | 2024-07-09 | Windows File Explorer Elevation of Privilege Vulnerability |
CVE-2024-38099 | Medium | 5.9 | 2024-07-09 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
CVE-2024-38095 | High | 7.5 | 2024-07-09 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2024-38094 | High | 7.2 | 2024-07-09 | Microsoft SharePoint Remote Code Execution Vulnerability |
CVE-2024-38092 | High | 8.8 | 2024-07-09 | Azure CycleCloud Elevation of Privilege Vulnerability |
CVE-2024-38091 | High | 7.5 | 2024-07-09 | Microsoft WS-Discovery Denial of Service Vulnerability |
CVE-2024-38089 | Critical | 9.1 | 2024-07-09 | Microsoft Defender for IoT Elevation of Privilege Vulnerability |
CVE-2024-38088 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-38087 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-38086 | Medium | 6.4 | 2024-07-09 | Azure Kinect SDK Remote Code Execution Vulnerability |
CVE-2024-38085 | High | 7.8 | 2024-07-09 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-38081 | High | 7.3 | 2024-07-09 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability |
CVE-2024-38080 | High | 7.8 | 2024-07-09 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2024-38079 | High | 7.8 | 2024-07-09 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-38078 | High | 7.5 | 2024-07-09 | Xbox Wireless Adapter Remote Code Execution Vulnerability |
CVE-2024-38077 | Critical | 9.8 | 2024-07-09 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-38076 | Critical | 9.8 | 2024-07-09 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-38074 | Critical | 9.8 | 2024-07-09 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-38073 | High | 7.5 | 2024-07-09 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
CVE-2024-38072 | High | 7.5 | 2024-07-09 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
CVE-2024-38071 | High | 7.5 | 2024-07-09 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
CVE-2024-38070 | High | 7.8 | 2024-07-09 | Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability |
CVE-2024-38069 | High | 7.0 | 2024-07-09 | Windows Enroll Engine Security Feature Bypass Vulnerability |
CVE-2024-38068 | High | 7.5 | 2024-07-09 | Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability |
CVE-2024-38067 | High | 7.5 | 2024-07-09 | Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability |
CVE-2024-38066 | High | 7.8 | 2024-07-09 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2024-38065 | Medium | 6.8 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-38064 | High | 7.5 | 2024-07-09 | Windows TCP/IP Information Disclosure Vulnerability |
CVE-2024-38062 | High | 7.8 | 2024-07-09 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38061 | High | 7.5 | 2024-07-09 | DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability |
CVE-2024-38060 | High | 8.8 | 2024-07-09 | Windows Imaging Component Remote Code Execution Vulnerability |
CVE-2024-38059 | High | 7.8 | 2024-07-09 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-38058 | Medium | 6.8 | 2024-07-09 | BitLocker Security Feature Bypass Vulnerability |
CVE-2024-38057 | High | 7.8 | 2024-07-09 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38056 | Medium | 5.5 | 2024-07-09 | Microsoft Windows Codecs Library Information Disclosure Vulnerability |
CVE-2024-38055 | Medium | 5.5 | 2024-07-09 | Microsoft Windows Codecs Library Information Disclosure Vulnerability |
CVE-2024-38054 | High | 7.8 | 2024-07-09 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38053 | High | 8.8 | 2024-07-09 | Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability |
CVE-2024-38052 | High | 7.8 | 2024-07-09 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38051 | High | 7.8 | 2024-07-09 | Windows Graphics Component Remote Code Execution Vulnerability |
CVE-2024-38050 | High | 7.8 | 2024-07-09 | Windows Workstation Service Elevation of Privilege Vulnerability |
CVE-2024-38049 | Medium | 6.6 | 2024-07-09 | Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability |
CVE-2024-38048 | Medium | 6.5 | 2024-07-09 | Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability |
CVE-2024-38047 | High | 7.8 | 2024-07-09 | PowerShell Elevation of Privilege Vulnerability |
CVE-2024-38044 | High | 7.2 | 2024-07-09 | DHCP Server Service Remote Code Execution Vulnerability |
CVE-2024-38043 | High | 7.8 | 2024-07-09 | PowerShell Elevation of Privilege Vulnerability |
CVE-2024-38041 | Medium | 5.5 | 2024-07-09 | Windows Kernel Information Disclosure Vulnerability |
CVE-2024-38034 | High | 7.8 | 2024-07-09 | Windows Filtering Platform Elevation of Privilege Vulnerability |
CVE-2024-38033 | High | 7.3 | 2024-07-09 | PowerShell Elevation of Privilege Vulnerability |
CVE-2024-38032 | High | 7.1 | 2024-07-09 | Microsoft Xbox Remote Code Execution Vulnerability |
CVE-2024-38031 | High | 7.5 | 2024-07-09 | Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability |
CVE-2024-38030 | Medium | 6.5 | 2024-07-09 | Windows Themes Spoofing Vulnerability |
CVE-2024-38028 | High | 7.2 | 2024-07-09 | Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability |
CVE-2024-38027 | Medium | 6.5 | 2024-07-09 | Windows Line Printer Daemon Service Denial of Service Vulnerability |
CVE-2024-38025 | High | 7.2 | 2024-07-09 | Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability |
CVE-2024-38024 | High | 7.2 | 2024-07-09 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2024-38023 | High | 7.2 | 2024-07-09 | Microsoft SharePoint Server Remote Code Execution Vulnerability |